Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
File:                     3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa (raw, json)
Hash identifier:          /Ag2CiwZYyTsNL1u9dqSHjMvKJLScjyZDNJjyXWFjio=
Subject key identifier:   89:13:14:62:DA:51:6B:89:9C:98:7A:84:49:89:BF:C0:DE:CB:B0:70
Certificate issuer:       /CN=0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE
Certificate serial:       56F87F6B79699D9CED5CF005C5D856C88C2A100C
Authority key identifier: 04:92:D2:BD:AB:3E:63:EC:45:1E:47:28:A9:F1:CB:4F:01:03:5A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa
Signing time:             Fri 15 Sep 2023 17:36:28 +0000
ROA not before:           Fri 15 Sep 2023 17:31:28 +0000
ROA not after:            Fri 13 Sep 2024 17:36:28 +0000
asID:                     263972
IP address blocks:        138.255.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f8:7f:6b:79:69:9d:9c:ed:5c:f0:05:c5:d8:56:c8:8c:2a:10:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE
        Validity
            Not Before: Sep 15 17:31:28 2023 GMT
            Not After : Sep 13 17:36:28 2024 GMT
        Subject: CN=89131462DA516B899C987A844989BFC0DECBB070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f8:24:55:0c:7e:c1:9f:f3:50:10:f5:cd:cd:
                    45:ef:41:b7:b2:4f:2d:00:07:89:06:2e:81:4b:35:
                    46:cc:d9:cb:ad:fc:bc:71:3a:27:a0:9c:b4:d0:e8:
                    16:d4:79:80:19:bc:29:5e:f4:51:0c:a4:e9:6a:d5:
                    0a:2e:66:06:df:50:01:55:30:7a:fa:f3:48:bf:2f:
                    d1:49:00:09:51:a7:91:d8:a6:63:7e:70:25:09:ec:
                    fb:51:ad:2f:d0:e7:37:7b:85:86:df:58:5f:8d:06:
                    0e:a8:35:72:1f:61:d9:a3:f3:56:66:22:48:55:8e:
                    4a:ea:06:ab:80:1f:67:b9:c9:aa:87:f0:00:6a:ec:
                    dc:74:04:02:4c:01:9e:e6:5f:b3:cb:2c:e6:51:24:
                    50:91:e7:1a:46:ec:05:8e:7b:e8:c8:8e:a4:a4:8b:
                    d5:a3:db:06:a4:e5:4f:7b:80:e6:36:29:1e:40:a1:
                    82:c6:50:bd:0a:a5:5f:6b:f5:c6:66:60:36:8b:78:
                    b5:a0:94:43:54:70:51:4f:36:a7:d0:5e:e4:8f:a1:
                    6b:5a:65:2d:2e:4a:c4:ba:55:15:2f:14:33:6e:5a:
                    22:6b:d3:e1:d0:f1:71:50:b1:90:ed:36:fb:3a:f0:
                    3e:5a:fb:04:58:c4:b9:f6:14:2a:ce:c1:44:b8:28:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:13:14:62:DA:51:6B:89:9C:98:7A:84:49:89:BF:C0:DE:CB:B0:70
            X509v3 Authority Key Identifier:
                keyid:04:92:D2:BD:AB:3E:63:EC:45:1E:47:28:A9:F1:CB:4F:01:03:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/3133382e3235352e3132382e302f32322d3234203d3e20323633393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:70:32:c9:16:5a:59:da:db:79:3b:d5:e3:96:94:71:f7:d9:
         7f:dc:35:64:1b:6a:e9:c0:f5:48:aa:fe:b1:3a:b1:68:a4:eb:
         92:b8:b7:40:91:52:2c:b6:b6:f3:10:7f:12:5a:56:3e:1f:85:
         4f:3f:a3:53:29:53:94:61:c7:e4:14:a4:3b:b9:10:08:ef:fb:
         18:fe:7a:10:33:39:58:aa:56:e0:9b:af:33:a0:9f:68:15:f6:
         20:ba:9c:c9:f0:1b:c0:91:5d:b8:18:dc:fc:df:99:1b:76:df:
         e5:7a:45:60:a1:e6:04:66:dc:a2:2c:46:9f:5d:de:08:d7:6f:
         d2:22:e7:1f:79:dd:53:9a:3f:25:d6:96:ea:22:c9:0d:85:17:
         eb:fc:82:65:29:4d:33:c4:5c:00:c4:e3:f9:02:f5:cf:a3:e9:
         a7:03:41:af:35:c1:1a:9a:31:a0:ea:fc:9b:f3:33:a1:f7:b7:
         fc:20:6f:a5:5b:fb:85:e9:41:a9:ae:8c:72:14:09:00:03:1f:
         fa:6c:b0:36:e4:d6:e2:db:0e:e8:6e:2a:aa:7e:46:90:9a:a7:
         ba:0a:bb:fd:21:96:28:12:37:97:29:e7:a8:cd:ad:ac:40:45:
         ca:92:12:48:09:ba:6a:35:bd:ff:d0:dd:58:71:2c:b1:71:e2:
         0f:00:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org