Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233322e302f32332d3233203d3e20323635393833.roa
File:                     3136342e3136332e3233322e302f32332d3233203d3e20323635393833.roa (raw, json)
Hash identifier:          MmjwKdUM2Mw1FCLkMq6eUL8qw5oDtIMCGhostg2Hsv4=
Subject key identifier:   E7:B2:ED:E4:DA:43:C2:D4:80:E2:81:98:E5:81:A3:16:57:1F:54:7E
Certificate issuer:       /CN=738CBA481120F0E8AD17BA80BE09F7F252570D31
Certificate serial:       41CE0B6B7609AA80A1DDA813885946848A7CA51D
Authority key identifier: 73:8C:BA:48:11:20:F0:E8:AD:17:BA:80:BE:09:F7:F2:52:57:0D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/738CBA481120F0E8AD17BA80BE09F7F252570D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233322e302f32332d3233203d3e20323635393833.roa
Signing time:             Wed 10 Apr 2024 20:16:18 +0000
ROA not before:           Wed 10 Apr 2024 20:11:18 +0000
ROA not after:            Wed 09 Apr 2025 20:16:18 +0000
asID:                     265983
IP address blocks:        164.163.232.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ce:0b:6b:76:09:aa:80:a1:dd:a8:13:88:59:46:84:8a:7c:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738CBA481120F0E8AD17BA80BE09F7F252570D31
        Validity
            Not Before: Apr 10 20:11:18 2024 GMT
            Not After : Apr  9 20:16:18 2025 GMT
        Subject: CN=E7B2EDE4DA43C2D480E28198E581A316571F547E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f2:29:7c:29:85:a9:9b:82:cb:86:3a:a9:60:
                    39:d2:37:89:5a:0c:50:32:74:8f:a0:33:dd:e4:82:
                    56:fc:3a:0a:4a:73:27:24:48:c7:e2:9d:e8:8a:1f:
                    f0:47:d8:87:e7:05:31:6c:2f:06:23:af:6d:01:1d:
                    44:ab:9c:c4:27:68:bb:15:44:e6:72:3e:82:1d:65:
                    30:10:2a:bc:72:dd:9e:cf:a3:b4:1b:82:2a:0e:74:
                    0d:a5:aa:d4:01:66:e4:ff:cb:53:8e:51:21:94:5a:
                    14:fa:c0:8e:0f:d1:55:32:e3:f9:6d:02:b5:94:4e:
                    f3:d9:ba:85:11:34:0c:96:20:f2:c1:9f:5f:00:b5:
                    80:83:7b:27:b4:24:c6:2c:16:f9:e3:20:48:11:07:
                    6d:e5:f6:ef:9c:64:22:f2:4d:c4:34:7e:c0:83:57:
                    9a:d0:48:b2:fd:2e:dd:4f:8d:c7:ad:90:42:f2:12:
                    31:9a:23:d5:26:1c:da:7e:56:76:e6:a6:2a:fa:4a:
                    14:37:03:aa:00:18:c6:37:89:40:f4:21:c6:91:df:
                    05:73:e2:23:ad:b3:bb:b2:2e:80:ee:66:3a:9c:d6:
                    3a:da:f9:d2:d0:98:bd:0f:bc:d3:f2:3a:18:95:76:
                    50:3e:81:87:7b:77:56:d0:d5:62:12:de:a8:44:c4:
                    95:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B2:ED:E4:DA:43:C2:D4:80:E2:81:98:E5:81:A3:16:57:1F:54:7E
            X509v3 Authority Key Identifier:
                keyid:73:8C:BA:48:11:20:F0:E8:AD:17:BA:80:BE:09:F7:F2:52:57:0D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/738CBA481120F0E8AD17BA80BE09F7F252570D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/738CBA481120F0E8AD17BA80BE09F7F252570D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ahmpsQfnRn1iFyCyod8a8PXichWgwJaj3eSNVrUq4m/1/3136342e3136332e3233322e302f32332d3233203d3e20323635393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:4c:27:5d:e9:d6:6f:77:2c:00:fa:62:ec:a2:8d:21:9c:ab:
         7e:11:0c:26:fc:f8:6a:42:68:0a:dd:10:f6:2c:e6:8a:da:cf:
         46:e2:0c:09:b7:05:65:73:43:3a:14:f3:47:07:77:53:3e:2e:
         3e:c5:34:a6:31:45:cd:c9:cf:97:83:2c:56:7c:37:20:0d:36:
         ac:f9:2f:8c:00:5b:63:89:be:64:95:a9:f6:c9:6b:d2:2a:98:
         20:c1:5b:5e:90:d3:50:af:5d:4a:9c:40:14:e2:60:b6:42:ea:
         f6:92:8d:4d:62:44:ee:77:60:2d:de:f0:ec:6e:9a:ff:8b:2d:
         86:54:48:61:2b:bf:65:08:d7:bf:44:5e:02:55:5f:f7:de:a9:
         af:94:f7:d0:2c:74:cb:a3:d6:9e:db:8f:dc:2b:44:b3:f4:fe:
         ad:17:f7:c5:b7:f0:28:e5:10:b6:bc:12:b3:f3:37:fd:8c:98:
         81:e6:6c:47:39:87:d8:05:e0:25:25:5a:fb:7e:a9:09:b6:32:
         ec:0a:5a:ba:aa:d6:e3:d3:80:11:76:7b:2a:e6:c6:c2:9e:92:
         eb:40:d9:54:bb:fd:95:f0:7e:2e:df:5b:49:45:0a:cd:63:50:
         06:cc:00:d9:38:7d:ca:f4:a2:22:26:5a:dd:c4:e4:98:ea:44:
         7c:89:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org