Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32332d3233203d3e20323634323431.roa
File:                     3133382e3131382e342e302f32332d3233203d3e20323634323431.roa (raw, json)
Hash identifier:          HD7ojpaU7Wo/KR1cK4OP0w1dFGTY8/jL85Ml0GEn+CM=
Subject key identifier:   05:7B:A8:68:44:A4:F2:00:27:C7:0C:07:79:0A:78:70:76:CC:59:B9
Certificate issuer:       /CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
Certificate serial:       4EFFC0E95EB2E1E1507A9A7E951E0AC35422F494
Authority key identifier: 5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32332d3233203d3e20323634323431.roa
Signing time:             Tue 28 Mar 2023 12:04:01 +0000
ROA not before:           Tue 28 Mar 2023 11:59:01 +0000
ROA not after:            Tue 26 Mar 2024 12:04:01 +0000
asID:                     264241
IP address blocks:        138.118.4.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ff:c0:e9:5e:b2:e1:e1:50:7a:9a:7e:95:1e:0a:c3:54:22:f4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F8FFB1FA6A12CA394255F5031399D9A137B3EC7
        Validity
            Not Before: Mar 28 11:59:01 2023 GMT
            Not After : Mar 26 12:04:01 2024 GMT
        Subject: CN=057BA86844A4F20027C70C07790A787076CC59B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:39:7e:37:b0:73:88:29:b2:ea:83:a0:f2:
                    d5:95:42:62:13:1e:82:70:d7:cb:92:e5:33:42:94:
                    85:19:3c:68:22:e8:f4:3b:70:0d:fa:3a:33:72:af:
                    43:f7:34:b5:f8:44:da:b1:fc:d4:dc:0b:5d:82:28:
                    3f:a5:6c:ab:73:ac:74:a6:7b:20:90:cf:7a:7f:d8:
                    ef:61:71:a6:60:96:1d:b6:29:f0:fb:65:3e:d3:1b:
                    5b:42:78:f9:e9:0a:80:4d:f0:dd:7c:fc:9e:29:10:
                    39:6f:dd:d5:c4:f1:a4:5b:a9:79:f7:4b:50:7b:a3:
                    9c:bf:ee:fb:7c:1a:75:b8:68:a7:25:4d:a2:3f:fb:
                    86:77:ef:9e:ae:5f:69:20:87:dc:6c:c8:e3:58:76:
                    3c:5b:d2:25:6f:de:b4:17:ed:89:e4:db:7a:ba:41:
                    b9:4a:2e:ff:ee:d4:4c:e7:81:26:dc:6b:09:1c:5f:
                    f4:5c:c8:e3:22:e3:ce:1c:b4:f8:05:fb:4c:d0:c9:
                    d3:5a:7b:98:58:c4:4f:5f:c7:e7:d2:cd:f7:3f:e8:
                    6c:26:5b:e0:8d:c8:26:77:5d:48:f2:4b:ca:f8:6d:
                    f3:2d:12:43:e3:54:8b:10:75:44:e0:44:2f:5f:1a:
                    9c:cc:a4:15:fa:d2:9b:a8:3b:76:c0:5a:1c:f9:0e:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7B:A8:68:44:A4:F2:00:27:C7:0C:07:79:0A:78:70:76:CC:59:B9
            X509v3 Authority Key Identifier:
                keyid:5F:8F:FB:1F:A6:A1:2C:A3:94:25:5F:50:31:39:9D:9A:13:7B:3E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F8FFB1FA6A12CA394255F5031399D9A137B3EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32332d3233203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:df:d2:9d:36:04:68:98:c0:d1:8b:b4:74:93:e6:77:1d:71:
         a5:35:6d:1a:b1:29:85:81:9c:f1:21:c4:d3:4c:e3:b7:9d:8c:
         80:9c:32:01:eb:d1:1d:1f:fd:9d:85:58:28:99:e9:c2:6b:fa:
         5a:5f:e4:5a:b7:76:70:17:b1:b1:47:8e:8f:cc:5d:44:6f:d0:
         ec:65:fb:ec:b0:62:2c:ea:4a:b4:3c:94:98:ef:33:1c:4a:32:
         75:12:e1:18:01:14:b8:64:cb:4b:6b:a4:ce:8a:1d:0a:62:aa:
         20:a8:91:de:a5:82:56:49:c6:a5:83:98:54:2b:30:fb:03:5e:
         66:7e:87:af:a8:90:e7:7c:4f:e1:87:c1:51:d7:26:60:71:2e:
         f1:40:ce:7d:02:f4:b0:37:a8:58:e2:72:08:a2:cb:be:b0:e4:
         8a:85:a3:d4:8f:1e:68:81:82:14:e0:8b:49:b5:dc:32:73:6e:
         07:4e:8d:59:a4:78:5b:c6:84:ca:6f:57:0f:78:af:43:f0:59:
         b8:e9:2a:2a:2e:3e:fe:48:96:ff:aa:8b:b8:93:0c:04:5d:62:
         9e:86:b2:6a:82:b1:d3:b3:39:39:1c:83:ea:51:d4:e7:5b:65:
         c8:1c:84:2e:dc:0d:8e:65:72:85:ee:fd:2b:0e:01:e7:0a:18:
         2a:76:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org