Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
File:                     3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          lF9uWp6o8P1y8tbDRzzUBslbiqyhYSlvyYyKPBFB31M=
Subject key identifier:   6C:BA:85:30:1D:89:0A:84:D7:B0:76:BE:E1:C7:29:B0:76:45:40:B2
Certificate issuer:       /CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
Certificate serial:       2319D2398421C0EBD2F43DC68F33C6514F2B5DFA
Authority key identifier: 35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
Signing time:             Mon 29 May 2023 16:14:05 +0000
ROA not before:           Mon 29 May 2023 16:09:05 +0000
ROA not after:            Mon 27 May 2024 16:14:05 +0000
asID:                     52573
IP address blocks:        138.118.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:19:d2:39:84:21:c0:eb:d2:f4:3d:c6:8f:33:c6:51:4f:2b:5d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3574A58A568C8AE1ADC3EE503BF56A5366499355
        Validity
            Not Before: May 29 16:09:05 2023 GMT
            Not After : May 27 16:14:05 2024 GMT
        Subject: CN=6CBA85301D890A84D7B076BEE1C729B0764540B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:cd:b8:79:c2:d4:88:9e:76:ea:1b:63:da:
                    58:81:eb:95:ae:fc:c9:a0:b0:ac:12:b4:e9:a9:8b:
                    31:83:7b:14:6e:b1:db:a9:2f:08:03:4b:bf:7d:46:
                    3d:2b:70:ba:e9:87:73:f1:cb:6f:b0:7b:4a:7e:90:
                    db:95:8c:89:ff:43:2f:db:03:53:ea:9b:8b:91:7e:
                    12:09:7c:0f:f0:76:9d:1c:19:2d:8b:fe:13:f2:43:
                    08:85:71:30:e7:f3:56:37:b7:dc:7b:1c:d0:0f:03:
                    2f:7e:7f:d4:62:2a:74:30:f1:60:ed:c1:a3:49:b0:
                    26:1d:b8:b8:01:41:23:8a:b4:26:65:eb:07:86:51:
                    b1:96:2c:69:3f:a2:49:d0:0c:b3:2b:ca:80:eb:79:
                    b8:65:c1:41:7c:8b:59:3f:9d:7e:5a:b3:5c:25:8e:
                    0c:fb:93:d1:80:6d:e8:29:af:d5:75:2b:01:65:db:
                    23:d1:01:3a:14:f5:fa:dd:a5:34:9f:da:e0:9e:1c:
                    2e:b6:f8:6c:bd:47:3b:72:19:f5:9a:15:d3:dd:33:
                    eb:c1:ce:a8:eb:32:13:1e:b0:2f:8b:83:ae:a1:d1:
                    cb:cf:67:80:5d:2c:2a:d0:2a:22:b5:fe:9a:ed:37:
                    9f:82:99:18:4d:a9:01:59:70:a9:d1:1c:e6:d6:59:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:85:30:1D:89:0A:84:D7:B0:76:BE:E1:C7:29:B0:76:45:40:B2
            X509v3 Authority Key Identifier:
                keyid:35:74:A5:8A:56:8C:8A:E1:AD:C3:EE:50:3B:F5:6A:53:66:49:93:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3574A58A568C8AE1ADC3EE503BF56A5366499355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/0/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:a4:24:e0:26:f9:f7:99:fd:5a:3d:d4:ef:68:59:b6:b7:
         b3:1e:7b:a8:0c:d5:57:68:4e:e9:06:ca:2c:5f:b3:23:b5:31:
         f5:1a:56:ac:13:ad:d7:b0:6f:87:17:e9:29:7c:c4:0d:7e:df:
         7e:ea:f4:4d:07:6e:e3:e9:2f:d7:78:ce:be:3f:b6:27:d0:2c:
         6c:7d:c5:6c:1f:05:ce:77:dc:5b:b0:a5:6f:04:53:e1:26:68:
         42:f2:21:a7:1b:68:71:28:24:f7:b1:c7:5f:b7:b4:d2:51:eb:
         b9:9c:e3:e7:61:71:32:f0:ce:ac:68:ba:32:26:e3:70:2e:a9:
         76:31:11:25:2e:08:49:f6:7c:65:54:de:62:78:f9:37:ef:1a:
         0a:ef:42:09:fc:33:9d:c3:11:b6:61:cb:54:52:de:38:05:cf:
         34:3b:d9:c1:0b:11:be:17:d0:f9:9f:76:df:4d:11:29:f3:f6:
         20:b7:f7:e1:92:43:8d:0c:06:fc:95:b9:dd:8a:6e:37:25:6b:
         2f:73:8f:6b:fa:f0:ef:bc:6f:a7:ba:94:6f:9c:d1:ea:8b:d4:
         4b:34:32:45:18:5f:1e:2b:bb:47:d4:ff:af:70:bd:1c:16:81:
         9a:ad:0f:fd:19:e7:91:60:59:94:c8:31:63:90:9b:ec:b1:b1:
         ba:d8:24:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org