Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa
File:                     3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa (raw, json)
Hash identifier:          cf4+oEqtnTaRlFfGoz9pQipLXINtHTkHYPjn+o4w0X0=
Subject key identifier:   52:2F:EF:24:A9:61:B3:8C:82:A4:BD:B0:1A:00:39:CF:24:6F:90:44
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       38400E61C0CE5CF4A508BA0E5C1BE6D09D5E8238
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 19:00:00 +0000
ROA not before:           Tue 10 Oct 2023 18:55:00 +0000
ROA not after:            Tue 08 Oct 2024 19:00:00 +0000
asID:                     264590
IP address blocks:        138.36.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:40:0e:61:c0:ce:5c:f4:a5:08:ba:0e:5c:1b:e6:d0:9d:5e:82:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 18:55:00 2023 GMT
            Not After : Oct  8 19:00:00 2024 GMT
        Subject: CN=522FEF24A961B38C82A4BDB01A0039CF246F9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1f:67:45:19:26:38:d3:e7:a5:fe:34:e1:91:
                    0a:04:e1:ef:a2:f6:dc:f3:c0:b7:40:4d:2d:61:7e:
                    9e:66:51:a6:4f:81:da:ea:c7:6f:97:b5:2f:7e:d4:
                    23:09:70:d3:12:f2:1d:e7:e6:77:39:84:90:9f:b7:
                    70:c0:49:ad:d2:5c:32:f9:27:de:c1:28:38:d8:0a:
                    07:98:44:7f:c0:f3:b6:02:4d:04:d3:ad:ed:ba:df:
                    e4:6a:ea:e2:84:9b:3b:15:3a:54:35:1f:9f:95:19:
                    24:6e:b0:27:20:59:2f:c2:51:b3:97:72:fe:d0:8e:
                    51:8c:bf:e4:fd:f0:35:b6:ad:b7:45:52:61:09:87:
                    35:55:ef:2c:62:1d:02:24:aa:b8:76:c4:cd:5f:ee:
                    55:75:6d:f5:b9:d8:2f:1b:7d:8f:40:72:ba:75:aa:
                    30:63:9f:33:ed:d5:e9:76:0d:e5:9b:e9:62:76:67:
                    ea:47:ca:ae:58:00:ef:11:6f:af:2c:b4:1e:12:0b:
                    6b:86:f1:71:12:19:02:c3:bb:d3:e4:29:47:08:87:
                    a2:11:da:00:95:67:c4:d7:45:d3:d5:37:b8:c4:30:
                    69:a2:de:37:ba:35:09:5a:a2:58:48:8d:77:1e:97:
                    10:e2:c5:11:ec:61:1e:49:4b:87:80:57:0e:1e:97:
                    c9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2F:EF:24:A9:61:B3:8C:82:A4:BD:B0:1A:00:39:CF:24:6F:90:44
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:47:fd:e0:db:e3:8b:03:9d:6f:44:32:32:95:cd:d0:50:3a:
         50:1c:52:db:f8:6d:90:a7:b7:6a:15:ac:0c:a3:8b:ec:2a:e6:
         21:71:41:cf:99:0c:60:79:2d:af:f3:9b:b8:91:33:45:a1:61:
         92:a3:27:69:93:35:8a:c7:dd:92:34:66:ec:05:d1:cd:55:ee:
         f4:ea:3d:f0:3f:66:4d:1a:3c:93:8e:eb:7f:9f:e5:a3:11:0f:
         db:92:b5:aa:52:5d:18:08:c9:0d:24:b4:e1:71:94:a6:52:65:
         59:bd:21:e3:ef:68:84:df:9b:aa:9e:70:68:b8:bc:78:b2:b2:
         15:f5:3d:ef:d0:c6:d1:bd:00:ff:73:01:70:23:02:c1:d7:9b:
         60:7d:fc:b7:29:6e:8e:cd:60:ed:7c:da:1f:21:9d:f2:5e:44:
         9c:06:bf:51:b9:9b:1c:c3:99:48:a4:b9:d4:88:2f:59:61:23:
         cc:99:05:af:78:4c:25:9c:85:54:68:f2:ab:11:3e:c7:87:13:
         9a:39:de:67:77:15:c2:7e:1a:b9:cc:01:8e:76:17:21:25:b9:
         ed:fb:30:45:8c:f3:90:ed:b8:a1:3b:a7:41:69:57:31:45:91:
         c1:e0:90:2f:27:55:37:93:c3:1a:88:7e:88:9a:0d:56:ca:79:
         6d:69:fa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org