Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          vEAPdN/7n5QH5m3JsMfONDyaQlITueb0MvB4Ox7rgTI=
Subject key identifier:   5E:D1:84:A3:39:88:77:B5:7D:9D:70:B7:C7:04:37:7C:0F:9E:4D:03
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       2F8F70A2E135930A6D19ED275EDF2ACE16A3DB53
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:46 +0000
ROA not before:           Thu 04 Apr 2024 12:30:46 +0000
ROA not after:            Thu 03 Apr 2025 12:35:46 +0000
asID:                     262485
IP address blocks:        138.118.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8f:70:a2:e1:35:93:0a:6d:19:ed:27:5e:df:2a:ce:16:a3:db:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:46 2024 GMT
            Not After : Apr  3 12:35:46 2025 GMT
        Subject: CN=5ED184A3398877B57D9D70B7C704377C0F9E4D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:6a:6f:67:88:57:52:c1:a5:9f:fd:0d:5d:
                    a3:09:cb:4a:c8:78:7c:5c:af:60:12:d6:07:ef:52:
                    63:de:dd:99:a4:c9:87:95:b7:a0:57:70:da:ab:a1:
                    9b:9f:5a:cb:6d:32:a3:94:06:02:e5:65:8b:8a:91:
                    73:22:b3:78:84:7f:f0:f6:78:89:1b:fd:b4:a9:77:
                    85:aa:4e:30:bb:87:2c:99:9e:7d:0d:bc:e4:1b:0e:
                    48:3b:a6:1a:33:31:b1:8f:a7:1a:05:df:86:44:9d:
                    4f:a0:45:a0:8d:fd:53:54:c6:83:26:81:93:23:87:
                    c0:eb:b6:aa:ae:24:25:bf:cf:0a:50:58:7f:9f:5a:
                    7e:f5:e5:c9:40:44:dc:ae:b8:be:c9:2d:c4:e2:7c:
                    8f:61:7c:1a:f8:45:d0:30:54:1d:b7:5d:90:35:a6:
                    54:a0:16:a5:61:8a:ee:a5:81:15:ec:78:33:20:52:
                    19:17:4c:a7:64:10:91:86:d8:19:13:55:a2:e7:01:
                    eb:ca:63:33:35:bf:ba:2c:78:65:b5:c8:ae:af:73:
                    a4:9e:b3:75:07:8c:33:f8:28:07:7e:52:ae:7b:3e:
                    a7:64:e5:f1:24:33:83:13:88:e3:dd:42:8f:5b:6f:
                    8f:e7:98:3f:37:3a:de:7b:50:4f:f4:6c:81:10:1d:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D1:84:A3:39:88:77:B5:7D:9D:70:B7:C7:04:37:7C:0F:9E:4D:03
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39302e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:2a:4d:c9:db:1d:96:ba:d1:c9:49:78:e0:aa:0b:bd:7d:04:
         e9:f9:fc:74:1b:d2:1e:7b:69:65:9f:fb:ac:fb:31:d4:77:4f:
         ba:bc:34:3b:df:97:f8:5b:32:b2:a5:b0:17:11:d5:de:0a:a3:
         29:28:6f:d9:24:39:c8:3e:3f:2b:45:6e:b3:7f:07:d3:30:d4:
         11:15:a6:d6:ad:88:40:61:bf:d0:a7:60:ab:fb:4b:25:ab:72:
         b8:c2:fa:b3:3b:ad:48:a8:be:f3:96:7e:08:29:f2:d9:15:92:
         16:2d:c6:1a:1a:80:97:95:1d:14:ff:c3:c7:a5:6c:eb:72:05:
         47:93:9f:07:b3:85:6f:d6:84:eb:0f:d5:ad:e3:d9:5e:12:0a:
         33:0e:bc:20:57:49:43:e8:38:56:e8:cf:af:54:44:cc:84:7e:
         93:26:b4:dc:d5:fd:cf:73:f8:a3:92:a1:fe:c4:0d:3e:86:0c:
         fd:66:b5:b1:68:db:6f:34:48:68:ff:99:6f:9c:c8:7f:3c:5a:
         c4:63:d3:f7:3b:28:c4:71:04:ac:b2:05:c7:9d:c1:5f:a8:d7:
         71:ed:a7:ef:a0:1b:40:31:72:a3:06:60:cc:e7:8d:de:55:8a:
         aa:01:05:96:c7:07:8e:8c:4e:e9:45:14:22:3f:b9:ee:67:5c:
         80:92:a1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org