Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134322e302f32332d3233203d3e203631363738.roa
File:                     3133382e3132322e3134322e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          V1c9D0CCm0PP33PUcdhDdLkJ36dfwf9Neo/ukfxedIA=
Subject key identifier:   39:5A:19:78:5E:E3:C9:3A:A1:52:8F:B7:BE:44:71:FC:1B:16:D3:42
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       640DE98CB57176E71150ECFB0A65A985FFB0E824
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134322e302f32332d3233203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        138.122.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0d:e9:8c:b5:71:76:e7:11:50:ec:fb:0a:65:a9:85:ff:b0:e8:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=395A19785EE3C93AA1528FB7BE4471FC1B16D342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:79:af:e7:e0:e2:70:28:bb:29:91:e5:d4:
                    e8:ac:41:01:25:c2:2c:0f:b4:b7:13:22:a9:63:75:
                    d6:d6:4f:53:fb:66:a7:51:e8:63:64:30:3e:47:76:
                    ee:d0:b6:f2:45:8b:d9:ef:94:bc:4c:8a:13:84:fb:
                    0d:ed:a8:bc:d8:12:d7:02:73:52:a8:49:b7:5a:12:
                    d9:76:68:43:89:04:cb:ac:15:04:6b:b3:a0:92:01:
                    ed:b5:b7:fb:0c:2f:f5:09:e3:35:3d:b8:02:15:77:
                    b0:61:e7:26:49:29:8f:85:f7:3b:5c:73:fd:a8:0b:
                    5e:ea:c8:2b:78:0b:dd:e2:98:1e:ec:08:0f:86:4f:
                    16:a6:fa:34:fd:81:25:fb:80:ad:8d:02:5b:f3:3b:
                    8c:27:cb:f6:5d:9d:fc:08:1a:9b:46:13:b5:4f:8c:
                    64:f3:12:fe:25:a6:6b:32:0a:44:13:98:30:23:dc:
                    5c:45:24:b9:65:f2:66:ac:a6:f0:13:fc:06:28:e5:
                    63:a6:fa:0e:e1:a2:a6:8f:11:05:da:f0:d7:41:c0:
                    06:19:55:d1:e1:76:8e:b4:b4:78:e9:ad:c9:f8:c0:
                    df:c5:85:12:51:40:e7:c2:79:77:85:2d:fa:ad:44:
                    31:71:0b:7e:64:a4:15:40:15:55:3c:f8:ca:b6:47:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5A:19:78:5E:E3:C9:3A:A1:52:8F:B7:BE:44:71:FC:1B:16:D3:42
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/3133382e3132322e3134322e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d7:fc:70:54:fa:00:1f:20:4a:2d:2c:92:1e:58:2f:09:a1:14:
         94:fe:e3:a9:cf:9f:71:5a:72:83:31:3c:44:0b:04:67:5a:11:
         ec:fd:ac:f1:ce:11:8a:89:c6:31:63:12:5f:c3:b1:1f:90:73:
         9b:fb:aa:01:d9:4f:9e:cd:ab:c2:c0:ab:d3:0b:a0:b0:4d:5a:
         70:79:79:5f:8c:08:9e:6b:6a:04:56:e3:4e:87:d0:90:a7:81:
         71:88:be:de:db:ea:e3:79:c8:c3:e9:65:33:18:88:56:22:87:
         31:3d:b4:51:36:44:51:cb:a7:f6:f7:56:09:84:fc:0c:2c:71:
         72:4c:ce:1b:eb:08:4c:0c:72:06:a6:27:ca:0c:b8:14:06:85:
         f1:7b:42:0f:b4:10:65:ef:c9:f2:50:2f:b0:eb:44:0e:f9:5a:
         73:01:5f:31:8d:f3:12:11:01:45:33:3e:e8:1a:26:40:ad:f1:
         16:ef:05:d5:61:46:5a:13:89:39:31:37:c6:f2:50:b2:d8:0b:
         22:02:43:7a:f3:4f:be:ad:db:9d:30:69:d4:74:a5:c1:3a:e4:
         17:06:cf:30:de:e6:76:74:fb:54:26:91:c3:55:e5:8d:fe:d4:
         d9:31:65:72:f0:36:c4:4d:c8:0b:ae:2f:1c:e4:4d:2b:64:17:
         7c:81:8c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org