Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa
File:                     3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa (raw, json)
Hash identifier:          V5I5ioBzbNqmC3V8kgJymfIop+FmFDrno0gOzLpApOU=
Subject key identifier:   2E:3F:AF:4F:6F:C1:CB:E6:E6:ED:2E:5B:20:A2:4C:BD:4E:B8:5D:2D
Certificate issuer:       /CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
Certificate serial:       4A6B7144D92C00684BB471E17E909813798FB01B
Authority key identifier: 7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa
Signing time:             Tue 06 Feb 2024 17:08:03 +0000
ROA not before:           Tue 06 Feb 2024 17:03:03 +0000
ROA not after:            Tue 04 Feb 2025 17:08:03 +0000
asID:                     264133
IP address blocks:        138.59.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:6b:71:44:d9:2c:00:68:4b:b4:71:e1:7e:90:98:13:79:8f:b0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD81394911919A4CBA9E9939030CFB3F3B9D90
        Validity
            Not Before: Feb  6 17:03:03 2024 GMT
            Not After : Feb  4 17:08:03 2025 GMT
        Subject: CN=2E3FAF4F6FC1CBE6E6ED2E5B20A24CBD4EB85D2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:d8:42:b2:f1:d7:0f:44:02:b0:9d:1c:e4:
                    81:b5:c8:cf:9b:0f:7a:5e:09:5e:06:fa:04:d6:c3:
                    ed:49:0b:89:0a:5a:70:d1:c2:fb:5f:5d:bb:07:3e:
                    9b:1e:4c:e2:f4:cf:bb:35:ee:94:1a:5e:23:b6:27:
                    c1:65:d4:a9:3a:26:ef:a4:ee:5d:ef:fe:2b:14:ca:
                    84:45:c3:32:b1:3e:fa:17:88:51:18:86:41:94:51:
                    df:b2:fa:0d:ce:29:c2:da:66:fb:50:72:f6:3d:02:
                    e4:5e:3d:17:4c:da:37:af:34:03:67:30:04:fd:99:
                    1d:39:cf:74:39:00:96:7b:1d:63:00:37:99:15:c4:
                    93:06:78:24:77:00:6c:f4:7b:74:91:1e:a3:da:b7:
                    6a:9d:2c:83:80:a5:dd:b7:2f:7d:f1:5d:d3:bf:1e:
                    e7:1b:06:89:dc:18:2c:32:6f:d0:65:40:95:5d:85:
                    b3:52:d0:fd:11:cd:37:f3:f5:f9:d4:20:34:b4:b5:
                    77:96:a3:bd:90:61:79:8f:06:b4:b6:bb:f4:01:d6:
                    37:4b:1d:c9:ad:c8:bd:d0:60:18:52:61:f8:75:4e:
                    df:69:79:2b:46:69:b0:db:f0:e3:25:99:a0:c7:39:
                    c2:1e:f1:28:9d:17:ed:a4:cc:05:e9:a8:73:8f:02:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3F:AF:4F:6F:C1:CB:E6:E6:ED:2E:5B:20:A2:4C:BD:4E:B8:5D:2D
            X509v3 Authority Key Identifier:
                keyid:7C:AD:81:39:49:11:91:9A:4C:BA:9E:99:39:03:0C:FB:3F:3B:9D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CAD81394911919A4CBA9E9939030CFB3F3B9D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wtiZocXLjczVn1159gW8RDXXMiNh5CKwzYu4eoKWBb4/0/3133382e35392e3139352e302f32342d3234203d3e20323634313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:11:ba:10:04:f3:0e:a5:0f:b2:ab:02:dd:83:b5:b1:76:fb:
         f2:9f:38:ef:d2:58:c0:c3:78:e3:9f:4f:11:69:fd:fb:41:1e:
         dd:37:f6:a6:1a:d6:af:c2:4a:b0:b8:be:d8:77:55:77:23:8e:
         7e:cc:73:64:50:cd:d4:0a:5d:b3:bb:03:49:37:4b:aa:5d:5d:
         d6:41:0e:14:59:47:a8:e1:50:d2:9a:22:ad:f1:4e:ff:79:df:
         c8:22:e6:61:d4:da:8e:a2:0a:f6:48:71:33:f3:f7:f1:a8:19:
         aa:35:90:d4:10:55:c4:57:04:4f:a9:7a:fa:ac:7e:b4:6a:95:
         f9:80:5b:f1:17:83:8d:8c:07:e5:52:db:a5:22:7f:25:af:4e:
         de:ae:1a:b7:e8:e3:be:e1:47:db:b0:f7:8a:64:89:de:c6:4b:
         67:08:6f:d2:1f:65:ca:aa:a7:61:7b:f6:df:ae:6b:d5:ee:bf:
         bc:ae:3d:6d:82:bd:0d:65:21:eb:74:44:9a:c4:2a:78:d5:9a:
         a4:2d:87:a6:7f:6c:e9:e4:ae:77:d3:48:ff:d2:79:2f:19:0f:
         c4:68:3c:09:bc:f5:ab:e9:1f:78:dc:40:51:66:3f:1f:c6:6a:
         39:28:f7:ff:24:96:7c:8b:72:28:ae:20:5b:47:e3:af:da:45:
         1f:f1:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org