Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa
File:                     3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa (raw, json)
Hash identifier:          qhaZBoseBpr0qNGbNSJ/HFYfsItAOlJR7Us5jOrzfJA=
Subject key identifier:   FC:5C:A6:42:FC:9B:EC:45:42:43:A7:7B:BC:21:71:4D:54:B1:B2:73
Certificate issuer:       /CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
Certificate serial:       609AB9E20DB2C5D93FEDFF76663FAC1F32A8370F
Authority key identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa
Signing time:             Wed 03 Apr 2024 18:32:57 +0000
ROA not before:           Wed 03 Apr 2024 18:27:57 +0000
ROA not after:            Wed 02 Apr 2025 18:32:57 +0000
asID:                     263902
IP address blocks:        138.204.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:9a:b9:e2:0d:b2:c5:d9:3f:ed:ff:76:66:3f:ac:1f:32:a8:37:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
        Validity
            Not Before: Apr  3 18:27:57 2024 GMT
            Not After : Apr  2 18:32:57 2025 GMT
        Subject: CN=FC5CA642FC9BEC454243A77BBC21714D54B1B273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:87:7e:c2:e7:3f:05:b9:f8:18:55:fa:10:ca:
                    7d:5c:dd:0a:98:bb:b3:99:1c:a5:c3:78:60:22:07:
                    6c:98:65:53:44:b6:19:2d:ed:96:26:00:f4:cf:03:
                    62:0f:5c:11:e4:02:27:7c:ed:e4:0e:5d:f5:3d:c1:
                    7a:ac:55:bf:c1:12:3c:9a:8e:52:f4:24:a3:c6:a1:
                    42:39:6b:a8:36:ac:f7:43:b0:34:8c:9e:6f:7c:ec:
                    52:8d:1d:e2:68:1f:67:45:68:f8:b0:25:49:0c:b7:
                    0c:5b:6c:c4:bb:51:54:fc:3c:43:f7:c0:63:6f:8c:
                    ef:df:20:61:6b:00:fc:f1:7a:a4:e6:e0:9a:ca:8a:
                    0c:75:c3:a3:a0:95:ae:7b:ee:9d:5f:41:f6:79:68:
                    e3:b6:eb:9c:18:c4:44:fe:73:79:5a:23:5d:2e:c3:
                    96:37:09:6c:a9:90:f5:1f:04:8e:3e:9a:aa:52:56:
                    c0:39:03:69:b8:07:4e:38:3b:9d:13:46:cf:47:26:
                    64:70:39:8d:69:0f:76:ad:9a:3a:61:4a:d8:d6:0f:
                    77:5e:c6:2d:00:7d:4a:88:9f:1e:0c:fa:1e:e8:ee:
                    ac:9b:1d:fd:4d:27:3c:35:7c:91:b9:47:fd:1d:bd:
                    f6:bb:84:ad:fd:55:c7:36:8b:94:63:00:c2:90:09:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:A6:42:FC:9B:EC:45:42:43:A7:7B:BC:21:71:4D:54:B1:B2:73
            X509v3 Authority Key Identifier:
                keyid:AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:88:65:7e:f2:86:2d:32:b7:df:60:c0:47:80:5e:54:ac:3e:
         ee:4b:a6:a7:df:cd:6e:d1:f6:33:9c:6c:81:7a:ad:65:83:e4:
         74:0a:15:0c:fb:46:0f:d4:6d:1e:30:d3:88:45:a3:44:af:83:
         37:e6:93:d5:22:ae:7a:c6:38:b5:9d:3b:25:54:2e:8e:f5:d1:
         5c:67:41:76:49:1b:25:4d:7d:f2:2e:5a:db:88:03:7a:a4:84:
         8b:46:1d:82:2e:59:b9:6b:ed:7c:02:a2:23:5f:15:5a:cb:ff:
         06:40:1e:33:2c:06:51:83:68:c2:ec:97:05:58:2f:b8:59:c1:
         a3:08:3f:3a:75:13:52:19:40:bc:06:a7:74:96:cc:a2:cd:8f:
         63:bb:1c:b7:53:63:8b:52:bc:a7:90:69:49:f8:d7:c1:47:dc:
         de:31:28:71:05:33:ef:e5:00:7e:f8:3f:ca:90:16:9a:5f:1c:
         f4:74:ff:a9:07:56:2e:b8:cf:25:08:ed:87:b6:57:b3:1f:2c:
         b5:58:9d:ed:76:76:2f:e4:2b:58:5d:db:d1:b5:e0:21:8c:67:
         71:9d:5f:7f:21:c2:13:25:9b:9d:d4:70:28:68:5d:66:d5:0a:
         d4:83:8e:b1:75:2d:67:1c:a6:01:0b:f0:cb:f6:95:69:7e:43:
         1e:98:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 02:53:42 2024 by rpki-client on console-fra.rpki-client.org