Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133382e3138352e342e302f32332d3233203d3e203631363934.roa
File:                     3133382e3138352e342e302f32332d3233203d3e203631363934.roa (raw, json)
Hash identifier:          YQOWTSz7VKhFuSmoqa8RWMU7+7dFVw13zVWHlKqLUmQ=
Subject key identifier:   23:29:DF:18:BD:A3:86:AD:48:1E:B0:2F:FA:43:6B:E0:C4:EA:58:E2
Certificate issuer:       /CN=4954164C92FA51462EBE84A75D28E2891F0752CF
Certificate serial:       3578002F1661D940ADCCCECB9D6FF958411CC70F
Authority key identifier: 49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133382e3138352e342e302f32332d3233203d3e203631363934.roa
Signing time:             Wed 23 Aug 2023 16:24:33 +0000
ROA not before:           Wed 23 Aug 2023 16:19:33 +0000
ROA not after:            Wed 21 Aug 2024 16:24:33 +0000
asID:                     61694
IP address blocks:        138.185.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:78:00:2f:16:61:d9:40:ad:cc:ce:cb:9d:6f:f9:58:41:1c:c7:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4954164C92FA51462EBE84A75D28E2891F0752CF
        Validity
            Not Before: Aug 23 16:19:33 2023 GMT
            Not After : Aug 21 16:24:33 2024 GMT
        Subject: CN=2329DF18BDA386AD481EB02FFA436BE0C4EA58E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:80:4b:a5:c4:70:1b:9f:9a:e3:c5:24:ed:c3:
                    4a:c5:77:cb:d3:e9:16:02:46:67:d8:81:ea:fe:93:
                    8b:12:bc:3b:bc:57:0b:49:dc:ba:c1:09:c4:d0:88:
                    0f:ed:56:54:c8:78:b9:83:d5:34:44:09:3d:5c:42:
                    35:bf:b2:ec:f2:31:89:a7:c0:3c:16:a2:9b:3c:fa:
                    d1:3a:31:05:1d:03:d4:e1:56:72:2b:6a:59:58:33:
                    27:58:b3:22:c9:a6:12:62:ed:37:a4:1e:9a:8b:35:
                    ad:f4:ae:d1:1d:1f:d2:34:f3:a8:5d:3b:09:b6:d1:
                    41:14:03:2a:dd:eb:f7:ad:c1:f0:8f:6f:cf:13:e8:
                    5d:c7:91:07:2e:ae:fa:73:7f:47:8a:6b:40:c2:c4:
                    ed:ea:8e:bc:25:ea:ae:f7:5b:01:be:3e:2b:b5:9a:
                    94:07:59:ca:a2:59:0b:58:a9:4a:ef:95:65:fe:61:
                    10:b6:21:38:d2:d2:5f:d6:68:58:8b:7d:bb:ac:9a:
                    d0:71:be:be:81:59:f5:9b:13:68:34:ea:a0:ec:c4:
                    75:97:6b:e0:a5:9b:7f:d7:76:f7:c3:aa:8b:57:51:
                    81:b6:47:00:03:50:db:1d:03:e1:d0:14:08:0d:27:
                    52:bf:52:35:f8:76:d8:0a:bf:f8:5f:e2:d7:63:e5:
                    bc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:29:DF:18:BD:A3:86:AD:48:1E:B0:2F:FA:43:6B:E0:C4:EA:58:E2
            X509v3 Authority Key Identifier:
                keyid:49:54:16:4C:92:FA:51:46:2E:BE:84:A7:5D:28:E2:89:1F:07:52:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/4954164C92FA51462EBE84A75D28E2891F0752CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4954164C92FA51462EBE84A75D28E2891F0752CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6keLdTDEBRs3bUNbq9EQdSUpBQHCGbxoj5pG7wXjgKak/0/3133382e3138352e342e302f32332d3233203d3e203631363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:d2:2b:84:d2:32:0d:44:c5:eb:f7:22:98:5a:1a:45:12:
         44:a3:4a:f5:e5:5b:3b:68:bf:42:4c:48:31:02:74:13:a7:86:
         c1:5a:b8:70:6a:c1:23:62:d7:fb:d1:57:5f:2d:b5:73:f9:2c:
         41:a3:10:3f:99:82:ed:c8:3e:54:1b:3a:54:38:f5:01:8f:67:
         4a:64:ab:ac:14:ec:f2:7b:2d:73:35:84:4d:af:9c:b1:4a:50:
         71:39:eb:c1:3e:9b:d7:d9:75:6d:6a:a9:68:48:9a:e0:5d:03:
         9b:b0:19:81:f0:08:eb:f2:46:c2:55:aa:90:a9:db:de:8d:21:
         52:e5:24:94:6d:92:61:e1:75:61:25:73:6f:d4:93:7a:f7:79:
         d4:f5:be:79:29:af:32:3e:13:0b:39:bd:56:c3:97:26:a9:e4:
         3b:47:7b:c1:ff:64:2b:b3:27:03:c9:ec:7c:06:74:f9:c7:0e:
         84:e4:9b:ea:17:af:0d:0c:e6:0c:56:28:71:45:4a:c4:37:5f:
         21:89:4b:55:e9:53:67:78:82:5d:a6:8c:63:9f:a9:8f:4c:e7:
         bf:44:58:72:a8:79:63:ca:48:2a:3a:2b:7e:b8:fa:45:5f:db:
         2d:41:39:eb:49:f8:36:ce:83:33:df:11:57:95:0c:50:ee:02:
         53:0f:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org