Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
File:                     3133382e33362e3138342e302f32322d3234203d3e203532393638.roa (raw, json)
Hash identifier:          V7H1o9NSb2J+6Glr4Aqgbza/4n1rOzkEqA405PrESDY=
Subject key identifier:   B2:F7:46:C2:C4:E6:4D:F7:44:0B:F1:D7:55:20:9F:84:C7:F8:A8:46
Certificate issuer:       /CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
Certificate serial:       1D0129A0FC652C3755D692B9DC169D3D60ABA62C
Authority key identifier: 2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa
Signing time:             Mon 04 Mar 2024 14:19:31 +0000
ROA not before:           Mon 04 Mar 2024 14:14:31 +0000
ROA not after:            Mon 03 Mar 2025 14:19:31 +0000
asID:                     52968
IP address blocks:        138.36.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:01:29:a0:fc:65:2c:37:55:d6:92:b9:dc:16:9d:3d:60:ab:a6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA
        Validity
            Not Before: Mar  4 14:14:31 2024 GMT
            Not After : Mar  3 14:19:31 2025 GMT
        Subject: CN=B2F746C2C4E64DF7440BF1D755209F84C7F8A846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:0f:45:e4:35:1d:17:f2:13:f3:a1:4f:1b:
                    ad:08:75:bd:1b:ca:15:0b:d7:de:5f:22:3d:ca:99:
                    9a:3b:d7:f0:f4:ab:57:a9:1a:b6:49:c6:4d:f3:49:
                    b5:0d:a0:4c:fe:68:c6:43:b1:13:71:1b:89:b6:de:
                    c5:7c:82:83:90:33:a9:b3:e5:26:f1:d3:76:81:4d:
                    58:41:b1:66:ff:d9:2e:41:36:c2:31:e0:9d:b9:65:
                    f9:70:b1:e1:98:96:02:38:f8:2d:ae:1d:d1:4a:bb:
                    8a:25:e1:17:9a:c9:33:12:fc:1d:46:6f:76:66:b9:
                    1f:6d:d7:32:96:60:e4:dd:94:34:ef:21:05:a2:bb:
                    ea:47:d4:05:35:8d:76:9c:85:eb:84:fd:cf:4d:65:
                    8f:27:ed:05:b4:d5:85:56:fd:50:6d:4a:26:f5:61:
                    59:52:b1:b3:33:70:f1:40:5f:11:57:a1:89:d0:55:
                    f4:b9:a7:03:cb:8a:7b:51:2b:17:05:74:a6:e7:0b:
                    7e:89:d3:dc:70:ca:ee:12:37:1f:c2:b6:26:0b:3a:
                    80:33:28:97:d0:2b:09:3c:8d:30:28:70:08:de:48:
                    7a:98:5d:94:3e:87:c6:5e:ca:38:9d:ce:f7:4b:af:
                    c0:1e:d8:18:85:98:ac:17:d2:ea:af:06:ea:96:00:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:46:C2:C4:E6:4D:F7:44:0B:F1:D7:55:20:9F:84:C7:F8:A8:46
            X509v3 Authority Key Identifier:
                keyid:2E:B5:E6:72:D7:99:5D:9D:AE:16:E5:A6:38:1C:94:BB:3F:21:28:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EB5E672D7995D9DAE16E5A6381C94BB3F2128EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5sk15ZyLWV7MQZ1kuWZJwPpoa21Ra27RWNBnbd3BDrGb/0/3133382e33362e3138342e302f32322d3234203d3e203532393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:8b:ba:cc:ba:f5:b4:17:93:43:84:aa:ba:35:5f:b3:61:
         59:1d:2a:fd:15:8b:44:76:14:0f:02:2b:d9:08:e8:62:2a:30:
         e5:db:fe:31:9d:ee:78:85:98:48:73:c6:45:fd:e2:eb:78:28:
         34:e1:8c:2a:01:8a:6d:f0:c6:da:a0:42:7b:c0:3a:db:c1:17:
         d7:c8:1f:54:b8:ca:ad:e2:dd:a6:85:70:61:25:cb:7b:31:af:
         b6:98:58:de:24:44:11:e9:4a:1e:ab:ad:c2:50:e6:3d:27:a2:
         23:29:0f:b7:45:df:7c:54:b8:56:81:0b:6c:76:b9:b8:c9:85:
         83:be:9a:4e:44:49:05:3f:86:bb:6e:53:ff:4f:68:ae:9d:e4:
         61:6c:ef:53:66:3e:81:0d:ab:25:38:01:68:58:34:a2:e0:4a:
         61:9d:df:1f:f6:34:c6:3a:3b:ea:39:b8:16:68:2f:64:ad:26:
         46:60:55:25:67:4c:9e:63:6f:5b:db:e6:c8:20:04:f9:b9:4d:
         a6:1f:11:4c:17:f5:93:a0:d4:96:7f:cf:e2:bf:13:bf:4f:81:
         0f:8e:82:83:fa:57:04:1d:3c:a1:87:af:0f:0a:b0:5f:ae:f0:
         83:4e:f6:8e:d0:ed:72:42:5d:4c:04:94:f0:e4:25:73:16:d0:
         15:e2:ff:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:03 2024 by rpki-client on console-ams.rpki-client.org