Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
File:                     3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          8vJGRQbyzdmwOMcQnH9sRSCFhiwbCtqlJVk2Mr7svM8=
Subject key identifier:   4C:5B:2B:1E:EF:C9:78:22:BA:30:2E:5B:E1:AD:04:45:8F:CD:51:12
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       0EDB44539C930D793BC8926EB1022B7A8BEE1875
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:50 +0000
ROA not before:           Thu 04 Apr 2024 12:30:50 +0000
ROA not after:            Thu 03 Apr 2025 12:35:50 +0000
asID:                     262485
IP address blocks:        138.118.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:db:44:53:9c:93:0d:79:3b:c8:92:6e:b1:02:2b:7a:8b:ee:18:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:50 2024 GMT
            Not After : Apr  3 12:35:50 2025 GMT
        Subject: CN=4C5B2B1EEFC97822BA302E5BE1AD04458FCD5112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:17:3d:34:2d:68:12:05:55:6d:33:fb:ca:
                    6f:d3:37:e7:56:ea:bb:6a:23:72:52:c1:f1:27:6f:
                    61:85:c2:b6:15:ee:bb:3d:04:7f:34:64:70:dc:4f:
                    10:a8:75:df:14:75:91:41:61:58:ab:74:f1:bb:0a:
                    9e:68:2d:ce:39:d2:08:6e:47:a8:f1:95:00:55:21:
                    c5:b9:de:e3:45:92:a0:fb:66:99:c0:6c:d7:f8:1e:
                    f8:88:3d:06:e3:5f:ac:6c:f1:a2:31:f6:de:00:93:
                    58:b6:6f:60:39:97:a9:c1:2f:c0:0b:d9:f8:9b:1c:
                    ec:ed:48:fa:58:94:d2:09:7c:0b:55:2b:21:2e:54:
                    d2:7e:42:ed:5d:fe:a0:9b:88:7a:2e:50:16:42:2f:
                    29:78:b5:fb:a0:3c:3b:48:6f:07:36:ab:7f:de:d1:
                    1f:8c:6e:18:3c:32:12:da:03:f0:64:6a:93:19:e1:
                    c0:e8:ae:11:fa:d0:36:d4:7a:4d:4e:79:7b:97:56:
                    04:ec:25:a0:b2:6b:1a:fa:56:05:57:d6:df:62:99:
                    31:ed:79:70:91:2d:9a:d6:35:e0:ea:4a:65:a2:23:
                    38:47:6b:1d:fe:39:fe:e2:07:e0:b7:e5:f4:83:86:
                    98:be:b3:cb:0f:d1:07:f8:bd:50:16:2e:bf:46:2d:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:5B:2B:1E:EF:C9:78:22:BA:30:2E:5B:E1:AD:04:45:8F:CD:51:12
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:58:0f:f9:ac:7c:e0:7a:8f:34:3e:e6:b0:c6:8a:e2:8a:
         64:44:ac:5e:7b:83:c7:8c:05:c1:81:41:cd:22:97:05:5f:0c:
         a8:8c:ac:8e:6e:3c:73:d0:44:f4:e2:5e:81:ca:43:e8:bb:af:
         37:6b:86:1c:e1:8a:d2:14:d4:46:a4:01:ee:9d:ad:9d:53:10:
         e5:5d:da:79:2f:62:0a:00:07:8c:a6:4b:54:60:a6:87:49:d4:
         2a:8f:0b:52:bf:5d:8a:c5:4b:f1:21:50:19:06:f1:8f:8d:7b:
         5e:68:52:d6:38:71:40:9a:0c:f4:17:b1:74:67:4d:03:77:38:
         78:43:7f:d8:66:71:11:f6:e1:87:ae:57:ea:1d:a4:f0:2b:db:
         56:f3:5a:76:ba:9a:0c:a3:05:ca:68:c7:e7:74:ff:9d:89:4c:
         3a:3d:1e:9e:a0:d2:1e:df:a8:10:20:eb:6e:64:39:04:d0:66:
         9c:2d:19:d9:9c:b5:77:e5:f8:aa:5e:bd:4b:4b:e5:18:51:87:
         e0:83:35:4f:fd:d2:47:f4:32:d8:6d:35:ce:d8:d7:3c:9d:24:
         0a:31:93:c6:79:3d:46:b6:0d:db:05:70:fa:f2:33:ff:e2:a9:
         f1:46:c7:b7:91:66:80:ee:4e:f6:86:be:ef:0e:53:63:69:64:
         6f:ce:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org