Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e3132322e36382e302f32322d3234203d3e203238353830.roa
File:                     3133382e3132322e36382e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          oVI32LoZ1i4AwNa1buF1Nt0MBULKhG65YJNHhICxkQM=
Subject key identifier:   D0:94:A7:06:DF:78:6F:B0:81:0D:79:26:A6:E4:66:68:7E:AD:35:8F
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       670561D6DE5FDADC9F4FB69440C0EC89161FAC00
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e3132322e36382e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:06 +0000
ROA not before:           Thu 19 Oct 2023 19:10:06 +0000
ROA not after:            Thu 17 Oct 2024 19:15:06 +0000
asID:                     28580
IP address blocks:        138.122.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:05:61:d6:de:5f:da:dc:9f:4f:b6:94:40:c0:ec:89:16:1f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:06 2023 GMT
            Not After : Oct 17 19:15:06 2024 GMT
        Subject: CN=D094A706DF786FB0810D7926A6E466687EAD358F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d8:dc:60:53:2e:8c:c6:0c:6a:0c:6e:1c:46:
                    05:3a:2d:32:b1:53:43:8d:f6:6b:57:0e:f2:04:11:
                    1c:39:47:bf:3a:23:f3:ea:72:8e:a6:c9:50:5b:59:
                    d0:ed:ca:c7:82:34:a0:4c:dc:59:e3:b3:4e:6a:0e:
                    12:7d:71:d1:60:7e:62:5f:89:d1:bd:66:6f:0f:f2:
                    e2:91:d0:e0:38:f7:d5:31:43:5d:d5:5a:f6:94:c6:
                    47:51:61:8e:2f:78:c9:99:39:c2:40:4b:38:8b:70:
                    96:c0:94:2c:24:92:0b:b3:de:81:1a:9e:78:56:60:
                    83:11:1a:bd:23:e3:22:7b:b1:a0:2e:76:65:7b:d9:
                    dd:bc:f2:d2:be:03:2f:13:55:01:e9:5b:df:51:3a:
                    c0:b5:94:53:9e:3f:26:b0:3d:01:1d:00:43:79:13:
                    a2:d2:4a:41:b6:e5:60:9e:10:f7:e0:7e:bd:11:ae:
                    9d:6e:22:dc:dd:20:9f:03:e5:9c:03:25:f6:76:74:
                    d7:62:79:c4:10:94:b2:a1:58:d0:ad:25:e6:b2:33:
                    79:05:ff:d6:1b:b7:e3:16:52:fa:a6:c1:82:c6:7b:
                    1d:83:89:e8:9d:00:29:b4:09:b0:43:4f:01:35:fe:
                    69:7e:2e:ab:c5:48:0b:8d:9d:c6:dd:24:73:ca:39:
                    cc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:94:A7:06:DF:78:6F:B0:81:0D:79:26:A6:E4:66:68:7E:AD:35:8F
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e3132322e36382e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:a7:57:6b:ae:8c:ee:7e:cc:58:19:4f:50:f6:32:da:9e:5e:
         47:9b:aa:8a:72:fd:b3:b8:40:a8:df:12:fb:d7:cd:76:3e:30:
         95:c7:ee:57:15:4f:a3:99:06:49:6c:f1:b6:4f:16:f1:83:74:
         7b:eb:52:ad:92:ef:5b:2b:74:c3:9d:83:c8:0d:74:fd:a5:59:
         65:15:d2:63:6a:29:a3:3d:1d:39:03:ae:b0:b8:c8:2c:4d:11:
         c1:b7:b8:63:27:9e:d6:d6:69:cb:e9:46:fc:c3:ed:e0:ac:10:
         c6:9b:d8:b0:5e:d5:05:41:26:36:ed:85:e0:69:1c:04:a4:43:
         ff:85:ee:42:4f:40:51:c8:b3:db:b4:5d:52:e7:7a:5f:3a:25:
         93:0f:ce:4a:20:d8:b9:65:d7:1e:a9:bf:f2:4e:c1:a7:e7:59:
         6b:d0:5c:37:0f:44:e1:bf:2c:8d:37:24:90:2d:bf:29:59:16:
         7b:54:1d:5c:a3:c6:c1:3a:b2:85:67:9b:6f:e6:e5:0c:7a:7a:
         4c:6f:a6:af:c9:48:6e:0b:19:2e:06:f1:f7:bc:fe:cb:63:9a:
         d3:d2:4d:7d:02:bf:27:28:e0:1c:71:0f:1c:62:b3:cd:bd:7b:
         61:74:59:92:c9:97:87:d6:d4:78:10:ac:76:df:c8:53:da:ab:
         d3:4a:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org