Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          LE1BoMV7Bncqso9Xrjo2ca6EdfcQReS7aG0CIIIFqPc=
Subject key identifier:   4D:8D:3C:16:AE:35:52:FA:1E:20:5B:91:BC:2A:26:4E:AB:3C:EC:FD
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       45115AE7CAB7EC37CA90EE1B2F8FB722F67EC30B
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     264590
IP address blocks:        138.36.213.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:11:5a:e7:ca:b7:ec:37:ca:90:ee:1b:2f:8f:b7:22:f6:7e:c3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=4D8D3C16AE3552FA1E205B91BC2A264EAB3CECFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:06:f6:58:ac:78:52:59:53:2e:d0:a9:78:d3:
                    3b:4e:d5:e3:a4:cd:3e:8d:c2:ba:0a:43:06:f1:7d:
                    51:d4:8a:42:86:f2:74:1e:f6:a3:f8:d0:ff:e5:27:
                    62:cf:18:a8:b5:97:2a:71:e4:28:f3:f9:8f:8c:1b:
                    fd:35:ea:a4:48:ff:a4:56:e8:a1:4f:20:d0:66:50:
                    40:d8:d4:35:6c:5b:26:98:0b:99:0a:03:e6:d2:85:
                    25:d6:0e:25:fa:d5:36:76:d8:6f:24:db:7b:52:20:
                    38:07:f9:dd:ce:67:fa:36:0a:cb:8c:f2:f6:5b:8d:
                    90:d3:9d:c7:63:a3:98:9d:1b:46:de:2d:7c:a8:3a:
                    8b:d7:8d:13:3d:88:32:50:11:3e:20:3e:c9:62:1c:
                    ee:32:bf:97:60:67:2d:9f:5e:f3:e5:50:bc:ae:a6:
                    e8:71:8c:e4:cb:f2:75:78:1a:5c:4b:d3:7f:36:24:
                    6e:6d:27:f4:56:60:0c:6c:66:29:e6:7b:10:ac:9a:
                    24:00:40:53:ca:d1:73:eb:25:cb:bc:80:27:85:38:
                    db:d2:ae:17:a9:10:a8:8a:ad:0a:54:3d:db:9c:11:
                    33:87:b3:82:9e:7a:f4:35:db:c5:1b:99:0d:ca:a7:
                    1e:c2:57:51:08:4c:dc:00:61:d3:ab:c2:2f:d7:f9:
                    f4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8D:3C:16:AE:35:52:FA:1E:20:5B:91:BC:2A:26:4E:AB:3C:EC:FD
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231332e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:56:26:f9:61:c0:64:02:0d:2d:04:c9:83:7b:b8:5e:82:33:
         20:6e:bf:20:96:1f:7b:9c:2a:60:b1:5e:ef:5c:85:c7:dc:9a:
         00:2a:4f:32:0b:5a:6a:9d:b1:23:d6:e5:f4:63:91:d3:70:7e:
         b0:ce:d4:c0:b6:2c:e2:80:03:58:4d:73:99:1c:c1:b3:ed:8f:
         88:c7:7e:c3:02:74:61:9f:e3:3b:6b:c4:c7:a3:cb:7c:80:e3:
         64:89:e7:6a:71:e7:b3:65:bf:af:3d:36:03:55:4f:9c:26:eb:
         6a:57:bd:e3:4a:6e:bc:1b:d1:aa:8f:7c:ef:d7:ce:8f:7d:78:
         44:a8:83:6b:ea:99:1f:b6:ce:d7:dc:54:77:33:6c:ab:c3:a3:
         dc:4c:62:22:02:2d:f1:63:30:6c:04:c0:78:1e:2f:f4:b7:ec:
         4a:f0:00:b9:d7:d7:dd:34:a2:54:82:03:b2:65:24:5e:a4:55:
         26:26:50:14:7e:09:cc:fc:ac:dd:73:84:43:c5:81:72:ee:71:
         22:8f:82:6c:5f:be:76:d4:41:29:8b:d1:01:82:2a:82:95:f8:
         af:7d:f7:99:9d:05:d4:a9:03:f0:8f:4c:d2:1f:d2:c1:29:7a:
         71:4d:d4:96:60:2c:8f:23:c9:58:94:da:58:6d:d4:76:a1:5b:
         97:67:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org