Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32332d3233203d3e20323634353636.roa
File:                     3133382e302e3134342e302f32332d3233203d3e20323634353636.roa (raw, json)
Hash identifier:          qCc5VUxZc5koD3o9QjPu1hBep9V+BQftemPjpVbFBQc=
Subject key identifier:   88:2B:92:A7:FB:A5:0D:2B:94:13:5A:A0:5B:C4:75:B0:9F:56:7F:B0
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       35E43551AE788CADD00C24DDCAD4FD60C98DEF8F
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32332d3233203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:11:03 +0000
ROA not before:           Wed 23 Feb 2022 19:06:03 +0000
ROA not after:            Wed 22 Feb 2023 19:11:03 +0000
asID:                     264566
IP address blocks:        138.0.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e4:35:51:ae:78:8c:ad:d0:0c:24:dd:ca:d4:fd:60:c9:8d:ef:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:06:03 2022 GMT
            Not After : Feb 22 19:11:03 2023 GMT
        Subject: CN=882B92A7FBA50D2B94135AA05BC475B09F567FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:ea:7f:c6:00:81:de:72:dc:63:7f:e7:0b:
                    0c:9b:9a:51:a5:66:a6:27:09:47:6f:c4:82:bf:06:
                    cc:91:ea:63:e8:75:c8:e9:06:76:7d:1d:9b:f5:55:
                    dd:2a:ad:cd:0d:25:49:9e:1e:c3:67:84:26:61:ce:
                    be:d0:ea:2b:15:6d:37:23:db:d3:0d:cf:35:5c:44:
                    13:eb:ab:8d:a5:19:ce:af:fb:4c:52:c8:2e:af:aa:
                    95:63:6a:1f:19:45:4b:02:06:ec:19:12:3a:19:fa:
                    71:47:71:5b:6c:66:96:2c:8f:e8:04:85:a0:4e:58:
                    9a:a3:67:cb:28:9b:0c:64:f2:05:6a:a0:a7:71:c2:
                    e9:fb:6b:17:78:81:c3:b3:58:80:41:a2:0a:e0:9f:
                    42:c8:ed:5c:dd:ad:11:d0:b6:a6:53:61:17:4a:70:
                    3a:3e:62:14:fb:d1:53:28:75:47:a5:ec:b7:3a:15:
                    0d:ee:72:e6:5a:64:cd:a4:af:07:ec:64:ff:7b:15:
                    0b:40:d2:a5:88:29:86:30:17:e5:3a:9d:ce:b3:bf:
                    26:8d:dc:61:78:07:42:b7:ad:a6:9e:d6:da:d2:b5:
                    b2:e4:50:31:b0:ce:9b:98:fc:91:15:a3:d6:1f:3e:
                    8e:44:a1:9f:e2:5a:b9:7b:8d:6d:1e:43:09:f2:31:
                    f9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2B:92:A7:FB:A5:0D:2B:94:13:5A:A0:5B:C4:75:B0:9F:56:7F:B0
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32332d3233203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:c9:95:e5:38:3b:e7:6b:54:26:f8:4c:ae:85:40:66:32:63:
         18:c3:da:1d:06:0b:42:b1:0e:89:cb:d3:88:59:8a:c4:92:78:
         c8:4f:b3:87:8b:b0:78:ee:ce:67:00:4e:9b:22:1e:62:ab:eb:
         58:73:e3:71:00:1c:54:29:e5:a3:e0:20:49:74:96:1e:08:9b:
         6d:17:03:f5:3e:d9:7b:99:a4:8c:9a:14:db:0b:f9:f4:2a:e4:
         27:de:d9:35:c7:08:6a:22:d8:29:7b:c6:7b:21:f0:00:de:4b:
         1f:96:8e:7b:65:2a:3a:e0:54:d9:e0:e8:e3:f2:be:82:0a:0f:
         d2:0f:5f:0f:d4:19:c7:da:b1:d9:cf:ba:89:5c:72:02:1c:d7:
         c7:f4:a9:0a:2e:32:90:53:64:dd:fa:2c:5a:29:df:21:6d:5a:
         01:4c:89:a6:37:0a:bb:8a:38:55:84:bc:35:61:df:e3:fe:9f:
         2c:fc:eb:23:2d:c6:5b:72:1f:23:74:79:1a:4b:07:e9:1b:a7:
         bc:bc:ee:ae:48:f7:a9:9b:22:60:dc:8f:a8:08:71:df:a8:82:
         b4:ae:f3:d6:47:20:d0:e1:ec:80:54:91:a2:60:ef:d0:3c:7c:
         11:0b:dc:cf:db:c1:83:ef:58:8c:1a:95:a8:96:2e:42:7c:f4:
         55:b2:0c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org