Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
File:                     3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa (raw, json)
Hash identifier:          Kz/U1P8lvTPvlZn4a4cLuE8lAkbcRqpjHuHxmoYVToY=
Subject key identifier:   45:93:EB:72:9E:52:DB:27:3A:89:D4:E9:D9:85:7B:F4:B0:5F:E8:0A
Certificate issuer:       /CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
Certificate serial:       19632CF561DA2C80DE0694814F49943617D02FBB
Authority key identifier: D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa
Signing time:             Fri 15 Mar 2024 19:32:43 +0000
ROA not before:           Fri 15 Mar 2024 19:27:43 +0000
ROA not after:            Fri 14 Mar 2025 19:32:43 +0000
asID:                     263650
IP address blocks:        138.255.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:63:2c:f5:61:da:2c:80:de:06:94:81:4f:49:94:36:17:d0:2f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E118C26CD1A6C958406265B147D4287D85F5CD
        Validity
            Not Before: Mar 15 19:27:43 2024 GMT
            Not After : Mar 14 19:32:43 2025 GMT
        Subject: CN=4593EB729E52DB273A89D4E9D9857BF4B05FE80A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f0:77:50:f9:ec:7d:b4:4f:35:b3:5f:9a:ae:
                    03:c3:e1:5b:54:25:36:a3:28:36:6e:7e:0b:3d:3f:
                    2d:b7:c6:28:cf:6c:67:11:84:16:ef:ab:3f:39:44:
                    e8:73:1c:73:0f:eb:fc:b3:f2:fa:e0:73:83:3a:97:
                    15:57:79:ed:52:b6:61:24:ef:64:ed:78:a5:da:79:
                    5d:9d:90:85:18:c4:e3:32:85:8b:7d:ec:1a:2d:9c:
                    d6:5c:0f:bb:af:83:fc:52:2b:13:de:90:a9:4e:27:
                    14:03:07:fc:79:db:81:b2:e6:9b:97:3c:4e:6a:72:
                    fa:b2:19:c6:02:00:db:0d:5f:34:29:e2:56:c8:92:
                    ae:da:8a:4f:16:28:65:6b:af:71:7f:92:95:42:c3:
                    f3:8f:9d:e6:45:c0:42:37:3b:97:62:b7:49:00:dc:
                    84:1a:71:98:91:4f:71:96:ee:d5:e0:b8:48:63:ca:
                    23:3a:72:14:c7:0a:55:60:5b:aa:91:2c:51:2d:4a:
                    6b:49:75:c1:75:44:2d:5d:be:46:01:16:44:16:bc:
                    77:be:35:77:8b:da:7a:dc:76:86:68:e5:14:9b:e3:
                    08:a2:2c:95:60:cf:86:33:40:bb:75:64:be:c1:75:
                    5a:c8:20:2f:cf:b7:cf:a6:46:83:63:13:bd:12:32:
                    ea:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:93:EB:72:9E:52:DB:27:3A:89:D4:E9:D9:85:7B:F4:B0:5F:E8:0A
            X509v3 Authority Key Identifier:
                keyid:D5:E1:18:C2:6C:D1:A6:C9:58:40:62:65:B1:47:D4:28:7D:85:F5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E118C26CD1A6C958406265B147D4287D85F5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/3133382e3235352e3135312e302f32342d3234203d3e20323633363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:96:eb:29:9d:f8:0e:45:22:b1:05:cc:0b:79:37:87:81:8b:
         28:8a:1c:8c:3f:8c:f4:b0:fe:3c:4b:df:f1:a1:0d:7c:45:51:
         0f:ca:36:3a:51:04:dd:8d:6c:b4:4e:9a:d1:67:a4:81:79:75:
         94:5d:26:ff:7b:34:f2:c7:75:0c:25:fc:5c:0f:8a:64:a4:89:
         f5:be:ad:f1:df:5c:0e:27:aa:13:16:8b:c8:24:70:f3:2a:d5:
         47:21:a5:78:ba:cf:f8:80:9c:09:3e:27:2f:17:c4:0c:ce:03:
         1c:8d:eb:b5:8a:a7:c1:e0:12:cc:aa:37:00:5d:f6:75:c8:08:
         e1:02:ca:ef:9f:cc:32:58:fd:da:b1:41:9e:b4:c2:0d:e5:55:
         90:75:bd:9e:cd:be:e2:1b:85:d7:30:38:28:05:5c:8f:87:84:
         8c:ea:a4:93:91:af:87:ef:38:6b:9e:fa:ce:7b:59:98:44:f5:
         d5:d5:75:d6:c2:97:a3:e6:d4:02:5b:d7:9a:32:bc:11:a1:ca:
         08:58:90:e2:57:82:bd:85:da:21:e8:53:3e:59:3d:77:9f:22:
         0b:67:49:b1:ac:3e:67:ef:48:23:5d:29:88:57:83:07:82:a6:
         b9:1a:ea:b9:8d:41:8a:d1:52:16:bd:b7:1b:7a:3b:fc:8f:18:
         1a:c8:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org