Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133302e302f32342d3234203d3e20323633393334.roa
File:                     3133382e3231392e3133302e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier:          V3yIikHDSZVsEUhvK4g7aGX6d7YeuN9zUfUymCmlHtc=
Subject key identifier:   9A:61:E1:7C:ED:70:B2:F4:EA:56:72:EA:BE:E4:1E:2D:AB:6C:41:84
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       3FC55ED15B82463A9A5EF7F970E2AFAFCB3D76F0
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133302e302f32342d3234203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:22:01 +0000
ROA not before:           Fri 27 Jan 2023 20:17:01 +0000
ROA not after:            Fri 26 Jan 2024 20:22:01 +0000
asID:                     263934
IP address blocks:        138.219.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c5:5e:d1:5b:82:46:3a:9a:5e:f7:f9:70:e2:af:af:cb:3d:76:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:17:01 2023 GMT
            Not After : Jan 26 20:22:01 2024 GMT
        Subject: CN=9A61E17CED70B2F4EA5672EABEE41E2DAB6C4184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c6:df:05:89:7d:38:74:da:2a:30:8d:6c:8d:
                    c3:da:3a:4e:3d:a6:27:f7:bd:db:46:9b:70:46:fc:
                    b8:d9:0c:7f:59:8b:7e:ac:d4:cb:1a:84:41:10:4d:
                    c1:9d:6f:44:07:a6:1c:c7:1c:bc:84:11:ea:17:a1:
                    15:c1:a9:e9:82:41:f0:4f:46:e0:60:57:df:42:75:
                    c1:fe:08:0b:06:fa:da:7d:2d:45:3a:e1:3e:f4:47:
                    e9:69:6f:8a:52:92:e4:a5:cd:7d:a9:14:73:75:5f:
                    f7:7b:d5:99:28:a4:ab:6c:e5:97:78:0b:f3:26:6c:
                    81:69:ec:c5:0c:f8:74:b2:11:40:85:8e:a3:d3:1e:
                    37:43:fb:68:c8:45:6c:26:be:5e:3b:fe:3c:67:e3:
                    87:29:51:69:24:f9:67:99:c2:98:23:aa:3f:13:45:
                    b5:99:8c:9e:99:dd:7d:8a:a5:4f:1c:82:e2:d1:dc:
                    23:1d:ab:cb:fc:c3:4b:8f:3a:97:03:00:2b:0e:b1:
                    40:d9:b3:cd:e2:ee:b7:1d:a8:6a:cb:88:e5:59:3b:
                    64:e9:6b:15:67:2d:b3:2c:2b:77:12:60:37:c1:e7:
                    80:d5:aa:f5:cc:7e:b1:84:3c:7c:49:29:ba:f0:eb:
                    1e:f2:69:0a:d5:44:ca:d1:03:34:e0:f0:1d:3e:81:
                    ea:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:61:E1:7C:ED:70:B2:F4:EA:56:72:EA:BE:E4:1E:2D:AB:6C:41:84
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133302e302f32342d3234203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:95:2e:04:36:40:ec:76:37:d0:f9:8b:ea:9d:67:85:3a:2f:
         17:2c:b6:89:dd:ed:04:8e:db:5c:29:b1:a0:d5:6e:c6:1c:1a:
         39:8f:e0:32:03:7e:a8:27:9c:e0:3b:4c:07:f3:45:27:62:19:
         7f:e6:1f:d9:8b:d1:4a:cc:49:37:55:5b:65:c9:a2:98:18:f1:
         70:e8:b4:0c:49:05:d2:e9:11:48:b5:62:b8:63:35:e6:6b:a8:
         eb:d3:9d:1e:a9:8b:eb:3e:4f:b3:4d:2b:2a:26:64:f7:7a:96:
         a9:1e:23:86:bd:1a:3c:a8:aa:4e:a7:7b:d2:c9:27:6b:a6:cc:
         7c:a6:95:47:7e:53:89:a2:b2:c9:5f:ab:fd:8c:81:d3:e1:68:
         fd:ea:34:e3:f6:e9:f1:6c:b9:5f:fe:db:57:6b:04:be:85:84:
         52:d8:cd:ce:26:74:5b:a1:bb:d0:f5:6b:4e:1e:1a:de:b6:cc:
         ad:ac:34:02:2c:c7:45:20:d5:b3:9f:34:61:93:cf:c2:a6:f0:
         91:fc:7d:3d:26:40:cd:21:96:ae:65:39:6f:fc:2b:d4:5c:4f:
         7a:d7:a4:fe:70:c9:2e:39:22:f8:3c:a0:6f:90:6a:45:f3:46:
         ed:77:b2:c8:91:e3:8d:35:78:29:6d:4e:87:14:66:6b:8d:91:
         4d:55:ad:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org