Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34392e302f32342d3234203d3e20323633393333.roa
File:                     3133382e3231392e34392e302f32342d3234203d3e20323633393333.roa (raw, json)
Hash identifier:          BSNXTvd1cDrGIL24sQR/eFiJGl41L0HcB7ObvQyg1oQ=
Subject key identifier:   E4:EF:61:02:9F:D0:63:36:5C:42:90:FB:A7:CF:E7:E4:52:E5:7B:85
Certificate issuer:       /CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
Certificate serial:       24E54FD0E1807F11F3DE800A196F258E90F66A7C
Authority key identifier: F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34392e302f32342d3234203d3e20323633393333.roa
Signing time:             Thu 06 Apr 2023 16:05:31 +0000
ROA not before:           Thu 06 Apr 2023 16:00:31 +0000
ROA not after:            Thu 04 Apr 2024 16:05:31 +0000
asID:                     263933
IP address blocks:        138.219.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e5:4f:d0:e1:80:7f:11:f3:de:80:0a:19:6f:25:8e:90:f6:6a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
        Validity
            Not Before: Apr  6 16:00:31 2023 GMT
            Not After : Apr  4 16:05:31 2024 GMT
        Subject: CN=E4EF61029FD063365C4290FBA7CFE7E452E57B85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:41:d2:d3:0c:31:d0:9e:c1:ed:5e:56:6a:a0:
                    1e:4b:47:47:71:c5:ad:11:d4:c8:ba:76:aa:f2:85:
                    b8:15:10:dd:35:70:f0:fa:43:67:f6:3a:0c:20:59:
                    7c:e7:ed:92:3d:d2:f8:a5:5f:05:90:f2:d6:37:46:
                    9b:d9:fb:5b:ec:f0:a9:9c:51:60:16:d3:21:c5:fa:
                    85:89:4b:d5:e5:eb:ef:30:6e:d6:aa:66:6f:74:07:
                    71:29:38:fa:cb:e7:50:ab:0b:11:65:6f:a4:70:54:
                    2c:23:1e:fd:57:b6:93:74:30:18:67:35:7e:aa:ec:
                    34:12:bd:1a:db:46:f5:4c:5c:61:07:9f:dc:9e:88:
                    d7:1b:1b:70:95:89:09:f9:b9:7a:c4:de:c3:9c:d3:
                    11:38:d7:49:94:da:ad:3b:4c:30:d2:54:f1:95:12:
                    4b:66:c1:e6:c1:3e:6e:4b:74:5c:14:0a:ab:f8:ad:
                    0f:87:48:8d:00:21:b1:1e:8d:25:2a:27:6a:3e:a5:
                    9c:ef:e4:78:54:e5:86:cd:2a:a0:78:e7:5b:52:76:
                    da:86:8a:59:17:29:24:b5:32:c9:4b:41:48:9d:be:
                    af:f4:de:21:9f:9c:10:a7:63:82:85:1a:5e:2a:b3:
                    0c:c4:ce:b2:b3:46:4a:58:cd:93:8b:9b:b6:ad:1b:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:61:02:9F:D0:63:36:5C:42:90:FB:A7:CF:E7:E4:52:E5:7B:85
            X509v3 Authority Key Identifier:
                keyid:F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34392e302f32342d3234203d3e20323633393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:56:e7:47:d7:8d:36:e6:40:2c:31:94:00:e8:a6:0f:3e:
         4a:42:1a:6c:2a:78:f6:f9:d9:f3:2c:0c:83:c9:6b:9c:09:66:
         66:e3:17:a6:12:f4:c3:ac:8f:ff:64:29:5f:8e:b7:4f:d4:98:
         8f:74:cc:f1:92:c0:06:dc:dd:50:65:ec:ad:7f:38:b2:22:7b:
         c0:c8:f6:15:88:05:8e:3b:bd:c9:da:c1:de:80:25:d2:ab:66:
         fa:a3:cb:e3:65:ee:1e:8b:8a:0a:62:1e:97:e5:f9:f6:8f:4f:
         30:65:cc:02:b8:ac:95:75:1c:95:fc:8f:55:ee:be:c1:35:03:
         40:3a:9d:30:81:a9:66:fb:de:0f:ed:e9:63:48:47:95:21:ae:
         a6:75:2f:99:8a:0a:2f:0c:ae:ac:1d:9a:a6:7a:ec:ac:05:07:
         c2:c7:47:7d:ea:93:b7:74:9b:2a:dc:4e:33:d5:f0:48:2f:40:
         d4:8a:ad:11:b8:de:73:1d:03:02:54:78:61:00:c3:f2:2f:18:
         f7:91:f7:4b:f8:2e:2f:3b:a4:92:42:17:0a:aa:76:cf:08:02:
         24:47:d7:a0:8a:13:06:e0:6a:a5:81:1a:a5:62:e8:4b:f1:fb:
         ce:26:07:30:2b:a3:0a:99:19:af:5a:0d:f6:b1:e5:f9:4b:e7:
         e7:b7:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org