Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa
File:                     3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa (raw, json)
Hash identifier:          c4HghzPcNxRBiKgClqhOC40wFfy3Kt9J6NurmC6yXCs=
Subject key identifier:   DD:E0:FB:B4:DF:44:9D:BE:F5:CD:61:7C:72:C1:1F:CF:1E:DC:38:7D
Certificate issuer:       /CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
Certificate serial:       426113E1A718261C13350042F2C772BCED83F188
Authority key identifier: D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa
Signing time:             Thu 16 Nov 2023 13:15:59 +0000
ROA not before:           Thu 16 Nov 2023 13:10:59 +0000
ROA not after:            Thu 14 Nov 2024 13:15:59 +0000
asID:                     263902
IP address blocks:        138.204.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:61:13:e1:a7:18:26:1c:13:35:00:42:f2:c7:72:bc:ed:83:f1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
        Validity
            Not Before: Nov 16 13:10:59 2023 GMT
            Not After : Nov 14 13:15:59 2024 GMT
        Subject: CN=DDE0FBB4DF449DBEF5CD617C72C11FCF1EDC387D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:9c:4c:d4:72:8e:90:da:7e:b4:b4:42:18:
                    c9:05:4d:64:b8:63:cc:d1:e3:ac:cd:d1:e5:ed:a1:
                    e1:05:eb:4b:12:93:48:9a:f3:d7:69:b2:29:a3:42:
                    93:b7:9c:cc:96:8d:0f:a7:ea:a0:11:67:3a:a0:d2:
                    87:bd:93:fb:47:2a:fc:c1:46:2a:ff:d4:ad:89:11:
                    c9:a5:86:a6:b0:bc:a9:77:8f:3e:9c:86:58:c7:d8:
                    59:e3:8b:c5:30:48:96:f4:9b:76:e4:aa:63:f6:82:
                    de:38:7c:2d:83:61:db:4b:6b:9d:11:46:b7:66:80:
                    88:e6:f6:1f:c3:f5:09:66:7b:13:93:17:4e:da:7f:
                    f3:bc:4a:2f:bf:d7:d1:5a:6b:9f:bb:24:af:32:f8:
                    7f:26:2d:c0:8f:57:12:86:d2:1a:2b:74:2c:84:b1:
                    4c:c5:58:27:9c:88:8f:bd:8a:e4:53:61:7c:e4:e6:
                    cc:6a:98:53:bc:82:ec:64:6b:31:fe:ec:fd:8c:51:
                    27:b0:d7:c6:66:0f:dd:b2:66:89:be:9f:4c:8c:b3:
                    78:6f:61:ae:2b:6e:01:99:04:eb:43:78:73:dd:93:
                    70:2e:3a:7f:0c:80:99:d2:e8:a6:a7:82:eb:02:8b:
                    1f:7d:38:38:65:c9:31:cb:90:1f:20:53:54:5c:7e:
                    70:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E0:FB:B4:DF:44:9D:BE:F5:CD:61:7C:72:C1:1F:CF:1E:DC:38:7D
            X509v3 Authority Key Identifier:
                keyid:D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35342e302f32342d3234203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4f:f1:b0:97:ea:ea:fe:cd:43:19:4f:c9:f1:27:47:49:4a:
         4d:40:be:44:df:ae:8d:f3:cf:6d:56:75:32:29:ac:0d:1c:fe:
         be:3b:c6:a7:18:41:0b:7c:e2:9b:d5:00:50:ca:31:fd:22:57:
         50:b8:b5:ef:ee:e3:f1:a9:ed:81:dd:a4:af:97:11:95:fc:64:
         fb:a6:cf:e6:f4:d0:26:a7:a2:51:66:1f:3b:0b:4f:b4:0b:f8:
         3e:f9:d8:5c:9a:50:b9:3d:54:b3:b2:ca:6a:58:cf:13:f9:c5:
         ac:14:4c:06:af:1f:a1:e7:f9:4d:be:40:e8:d7:f9:f4:84:03:
         d1:8f:fb:b4:ce:0c:ca:53:3a:db:df:41:7c:93:17:b7:7b:36:
         7f:31:8e:82:11:18:c1:f8:1c:56:5c:f6:f5:de:ac:53:5f:ec:
         45:5d:28:48:1c:c2:01:b1:c5:4e:46:01:dc:6b:ca:a3:e8:01:
         7e:5c:08:60:21:9c:2d:4a:15:06:98:e6:ff:7e:62:73:ee:67:
         c3:e3:41:7b:c5:8e:70:67:f5:13:1b:80:20:3f:9f:22:45:6a:
         c8:9e:1b:6c:36:a7:03:3f:15:62:09:75:05:3e:a8:06:e7:02:
         61:43:ae:27:5d:33:79:61:0a:dd:45:fd:80:5f:ee:67:bf:08:
         42:92:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org