Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa
File:                     3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa (raw, json)
Hash identifier:          oKxa6tf7k5v0CcE5855boTqlrZ0wNjHpnFJ7ripY79s=
Subject key identifier:   8B:6F:05:FD:90:79:A0:3F:88:11:A6:3B:94:7B:43:15:ED:80:E3:F3
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       1CA02985E03D49A4DD3222229469C5124D574620
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:a0:29:85:e0:3d:49:a4:dd:32:22:22:94:69:c5:12:4d:57:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=8B6F05FD9079A03F8811A63B947B4315ED80E3F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b3:f5:d7:8b:84:db:d2:dd:25:5c:2b:17:5a:
                    54:05:e2:09:e5:ed:b1:49:f3:14:ff:1c:b4:c4:e4:
                    01:07:21:10:97:5b:82:a6:f7:1f:a9:eb:86:41:af:
                    68:67:f9:b4:19:96:1f:7a:34:75:d0:5a:49:73:0b:
                    6a:2a:8b:f7:f6:f2:f3:1f:c8:d4:4d:3d:07:2f:0e:
                    2d:1b:7f:86:f8:e0:28:05:88:d2:be:7c:a8:68:00:
                    40:28:e6:42:0a:c0:c1:21:a0:f2:e9:83:ba:51:2c:
                    0d:74:e6:d1:63:63:31:37:c5:34:1b:12:f8:8c:ed:
                    e9:9a:2c:67:d3:2a:0d:5e:16:94:e9:e7:7b:85:77:
                    f0:04:e1:8a:05:20:63:2a:e8:da:dd:02:4b:16:3a:
                    65:1f:87:c9:ad:9c:6a:83:bf:38:10:6a:06:d7:5c:
                    51:07:f8:e9:31:17:ae:16:02:e4:aa:26:2d:7b:09:
                    ff:e7:e4:74:d9:af:d4:b3:cf:e1:02:2b:18:f0:3b:
                    c8:64:ed:b0:9a:72:65:be:ac:ca:a8:9f:46:a2:01:
                    0d:ba:92:92:97:8e:9b:11:1c:a6:18:30:2a:f2:8b:
                    76:27:e2:a4:55:f1:2d:e4:e2:94:18:d6:1c:d7:bb:
                    2c:b9:d9:7d:4d:0f:27:e1:03:81:67:01:70:41:90:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6F:05:FD:90:79:A0:3F:88:11:A6:3B:94:7B:43:15:ED:80:E3:F3
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32322d3232203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:5c:12:56:e6:fc:79:19:f3:10:8e:c8:5d:ab:fa:60:22:32:
         50:52:58:c8:52:2f:6e:bd:35:db:e2:33:ac:d3:79:d2:2f:1c:
         e2:a5:73:cd:9e:f3:fe:c1:9a:ba:0c:13:97:b6:e1:04:e3:c0:
         36:11:97:10:29:64:61:1f:80:95:e5:c8:49:49:d7:97:a6:af:
         25:39:16:2a:a8:2c:43:ec:54:63:a6:9f:71:0e:f9:18:85:2b:
         11:fa:86:d5:00:8e:8d:0d:ad:8a:7f:72:1d:b8:87:68:80:e8:
         af:3f:53:62:0f:80:28:be:89:ad:4b:34:0d:31:04:cb:5a:71:
         63:40:51:51:32:04:5f:80:77:24:4c:6e:c7:db:a4:5f:75:8f:
         88:20:17:65:b2:c3:b5:15:d2:cf:d5:83:27:e1:5e:d5:37:94:
         e3:52:fc:03:7a:fb:d5:60:85:b4:4f:0e:32:97:5a:23:54:8c:
         e5:c2:12:a7:26:19:11:91:3c:cc:17:57:5b:5f:5d:6b:40:69:
         1b:9c:3b:e1:bf:99:2a:14:11:85:97:09:b6:d8:26:8f:78:43:
         5d:cc:79:38:34:a0:74:2a:48:d3:45:8b:f0:dd:4c:ec:61:6c:
         16:a0:1e:47:b6:a3:3c:5f:90:b3:0a:61:7a:76:8c:7b:22:fd:
         a6:14:c0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org