Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32332d3233203d3e20323633393033.roa
File:                     3133382e3230342e3134302e302f32332d3233203d3e20323633393033.roa (raw, json)
Hash identifier:          nm7RaO8kL02SgB6jd9sjbcEtFz43PCyynZhuxv5M+zg=
Subject key identifier:   D7:81:19:5E:7A:52:16:AF:CF:74:82:26:6C:B4:20:26:AD:1E:F4:3C
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       4D8D8880C3FA943D4B2F46B6B2840DD4DE637CF8
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32332d3233203d3e20323633393033.roa
Signing time:             Fri 23 Dec 2022 20:33:20 +0000
ROA not before:           Fri 23 Dec 2022 20:28:20 +0000
ROA not after:            Fri 22 Dec 2023 20:33:20 +0000
asID:                     263903
IP address blocks:        138.204.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8d:88:80:c3:fa:94:3d:4b:2f:46:b6:b2:84:0d:d4:de:63:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Dec 23 20:28:20 2022 GMT
            Not After : Dec 22 20:33:20 2023 GMT
        Subject: CN=D781195E7A5216AFCF7482266CB42026AD1EF43C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:7a:91:9e:f6:ae:ce:e6:b6:8b:e5:9f:21:
                    dc:cd:2c:c7:47:4c:9c:54:d0:ee:dd:ac:60:06:93:
                    ef:bd:8b:b8:ee:b7:89:45:9d:31:d6:51:34:47:1b:
                    41:59:74:d4:29:bf:3d:bd:b9:d2:3e:a1:4e:9e:da:
                    99:f4:27:d5:8b:3c:b0:9a:f7:bc:90:66:00:07:ec:
                    64:12:c3:0a:6f:65:29:fa:ae:06:7a:b8:6c:27:d0:
                    7c:c5:6c:53:ed:82:4b:d6:33:e2:19:f7:cf:f9:1c:
                    91:d5:7d:ff:65:9e:48:a1:5f:13:f0:ee:a9:62:9b:
                    9b:6a:87:6b:e3:5d:ea:6e:1b:71:5d:ca:cd:9e:99:
                    85:c0:85:40:5e:3d:50:67:46:21:92:0e:b8:d9:a9:
                    91:5d:ba:7a:dd:59:09:8e:8a:ff:f8:57:54:54:85:
                    61:34:93:0d:38:38:41:ba:f3:06:1a:5b:ac:5e:2f:
                    9c:14:54:4e:35:c9:e9:6a:cf:49:4d:13:53:b7:9a:
                    ec:4d:79:56:52:f9:33:3c:24:92:ba:e9:5b:ae:da:
                    c6:ed:f2:92:84:77:bb:9c:6f:10:1f:eb:e9:c2:02:
                    e9:f6:a3:ed:e5:8d:e5:c5:21:6f:b2:81:d4:6c:5e:
                    e4:63:17:da:35:06:b2:5c:cf:0e:67:72:d3:d2:f7:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:19:5E:7A:52:16:AF:CF:74:82:26:6C:B4:20:26:AD:1E:F4:3C
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32332d3233203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:f4:b2:23:63:a8:09:8b:e6:23:fa:c2:58:ef:32:27:57:85:
         e1:0d:9e:b3:fe:b9:39:51:18:4f:d1:33:82:f1:8a:00:a6:16:
         7c:8b:5b:54:56:00:a5:b6:77:12:ff:d2:f5:0c:87:9c:d2:76:
         80:41:e0:5e:98:cd:ed:74:a2:65:5a:11:18:b5:b6:26:8f:d7:
         a1:1b:6f:20:9c:30:f8:96:fe:85:98:97:ab:7e:0c:08:23:4a:
         61:fa:3d:68:6d:aa:5b:11:01:92:7a:72:85:39:dc:de:10:69:
         69:c2:29:68:af:e2:af:43:40:de:c4:8e:df:e0:30:46:92:c5:
         b4:52:cd:51:37:80:d6:a9:88:48:02:e4:6d:fd:c7:f2:0f:07:
         18:2b:78:a1:c3:8f:2f:97:07:93:f0:bf:b1:27:51:63:2f:c1:
         d0:d7:86:d7:4c:84:37:14:9e:2b:e6:60:f9:c0:e8:7f:12:77:
         f3:87:f5:ba:0a:e8:c4:da:68:c4:0d:9d:81:b8:e5:ff:7b:ed:
         7e:48:4b:62:99:4e:4d:8a:46:0b:fa:ee:41:df:86:a8:f0:43:
         e7:8c:4c:8d:69:bb:cf:ce:8e:57:cf:28:75:8c:b5:9b:ae:24:
         28:54:15:5f:c3:f1:e9:2e:90:4e:59:5a:3e:9a:0b:59:59:43:
         48:35:ae:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org