Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
File:                     3133382e3230342e37322e302f32322d3234203d3e203238313436.roa (raw, json)
Hash identifier:          uyOQBK1IQ+fMdjDm9S/iAkPgfdhEREzcXjo2fpIEQL8=
Subject key identifier:   05:7A:D5:0A:1E:74:91:D7:7A:54:7D:1B:30:22:A2:11:E6:73:0A:68
Certificate issuer:       /CN=B8E841EAE5880F67873DB8847269969294507789
Certificate serial:       59DF62E6FDC96C6A456F0F595AE970EBF4D80CCF
Authority key identifier: B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa
Signing time:             Wed 21 Dec 2022 17:16:50 +0000
ROA not before:           Wed 21 Dec 2022 17:11:50 +0000
ROA not after:            Wed 20 Dec 2023 17:16:50 +0000
asID:                     28146
IP address blocks:        138.204.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:df:62:e6:fd:c9:6c:6a:45:6f:0f:59:5a:e9:70:eb:f4:d8:0c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E841EAE5880F67873DB8847269969294507789
        Validity
            Not Before: Dec 21 17:11:50 2022 GMT
            Not After : Dec 20 17:16:50 2023 GMT
        Subject: CN=057AD50A1E7491D77A547D1B3022A211E6730A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:9b:44:ed:eb:de:f2:7b:50:09:f4:0b:b2:
                    65:09:94:29:86:00:fc:69:28:8d:15:44:41:66:c2:
                    33:c8:43:ce:87:cb:be:b0:d2:3c:bc:ce:a0:db:02:
                    c8:26:db:bd:e3:16:77:9b:c0:0b:2f:01:fd:d8:62:
                    38:1d:0e:94:a4:58:f9:ac:ff:40:2c:f4:39:bc:d6:
                    7a:1e:c2:1e:35:ac:6c:72:62:63:ae:3f:b6:cd:96:
                    74:76:22:87:da:43:20:2e:03:3b:8b:bd:b2:c1:a3:
                    5e:3b:fe:88:b2:42:ef:93:6b:aa:79:22:bb:3a:08:
                    09:7e:67:2f:09:59:d6:ed:2c:e6:f4:cf:8b:36:68:
                    c8:51:44:0b:b4:28:84:aa:47:3f:5f:34:7c:dc:a3:
                    26:64:00:80:62:b8:39:40:00:f2:5a:7c:d8:4a:db:
                    e5:7e:ad:02:ec:97:eb:d0:57:ac:3b:a4:c1:87:6c:
                    60:c2:e6:b6:a4:36:1e:35:ec:63:98:f4:ad:1c:cb:
                    81:4c:76:68:0f:87:07:74:f7:e8:0f:93:21:a1:d8:
                    a1:9c:36:53:e6:c4:7d:f5:b3:3b:81:f1:83:3a:be:
                    8a:82:07:6b:57:3d:1e:cf:b3:6e:79:ce:dc:26:93:
                    6f:da:33:c3:05:b7:b4:3f:26:13:dd:ae:fb:ad:1c:
                    29:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:D5:0A:1E:74:91:D7:7A:54:7D:1B:30:22:A2:11:E6:73:0A:68
            X509v3 Authority Key Identifier:
                keyid:B8:E8:41:EA:E5:88:0F:67:87:3D:B8:84:72:69:96:92:94:50:77:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/B8E841EAE5880F67873DB8847269969294507789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8E841EAE5880F67873DB8847269969294507789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FDCh6X5yrKd7CYYvZpDL9SqSzMABjPaa6ds1KRK6qK6/1/3133382e3230342e37322e302f32322d3234203d3e203238313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:8e:6f:f1:8a:96:25:32:1e:df:6a:ae:ce:ad:71:0c:d5:76:
         f8:f6:ea:51:28:83:a0:a6:54:16:ec:e6:2c:43:1b:9d:48:be:
         2c:39:f4:77:a6:72:e2:5b:f8:ab:bb:61:b4:ad:43:cd:83:59:
         6e:be:a7:e0:d5:fe:0d:1c:86:c9:46:1a:b4:35:87:76:26:0b:
         6b:9c:d7:45:ab:3a:17:71:9a:dc:eb:87:ee:dc:14:7d:e1:22:
         31:a7:72:bc:4f:b1:ed:11:a3:a9:7a:1d:64:c1:14:09:8b:75:
         27:78:0b:62:57:b2:5e:59:73:ca:9c:8b:7e:c7:9c:1d:b6:64:
         fc:b0:af:24:21:8b:4b:e5:87:82:f9:f4:81:c5:d8:f7:19:2e:
         05:40:32:58:70:a3:59:e3:4e:77:55:f7:a1:f8:ab:aa:bb:97:
         80:c3:c6:df:8a:18:3f:c0:74:c6:0f:85:00:86:3a:0e:f1:59:
         9b:68:e0:56:0b:be:7e:ba:de:4e:0a:60:95:c1:8d:56:c0:74:
         f4:a4:1d:ec:f7:f4:56:51:d1:65:12:2c:de:e7:a5:44:94:d4:
         18:39:91:29:9f:15:32:ff:23:4d:4d:de:47:90:6e:8c:ca:4f:
         3b:69:6b:12:33:4f:66:38:60:72:a2:fb:0b:dd:a5:55:5d:84:
         cb:30:17:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org