Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32312e302f32342d3332203d3e20323634333038.roa
File:                     3133382e3132322e32312e302f32342d3332203d3e20323634333038.roa (raw, json)
Hash identifier:          VJw2IsiOqYbmaDTodEGLsZtUmbbvYFKRIolO5e7sliI=
Subject key identifier:   7E:AE:6E:3E:84:9A:E3:CE:11:C1:C6:DD:A5:DC:12:00:6A:22:A9:D3
Certificate issuer:       /CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
Certificate serial:       35FBC5B3C812A2F52FCD7DA2EA915858D34633B7
Authority key identifier: 5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32312e302f32342d3332203d3e20323634333038.roa
Signing time:             Wed 07 Dec 2022 12:47:22 +0000
ROA not before:           Wed 07 Dec 2022 12:42:22 +0000
ROA not after:            Wed 06 Dec 2023 12:47:22 +0000
asID:                     264308
IP address blocks:        138.122.21.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fb:c5:b3:c8:12:a2:f5:2f:cd:7d:a2:ea:91:58:58:d3:46:33:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236
        Validity
            Not Before: Dec  7 12:42:22 2022 GMT
            Not After : Dec  6 12:47:22 2023 GMT
        Subject: CN=7EAE6E3E849AE3CE11C1C6DDA5DC12006A22A9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:d5:f3:47:91:c4:59:03:34:af:14:e3:b9:
                    06:6d:0f:2a:74:eb:c2:6e:34:22:2c:a4:2b:a2:69:
                    49:9b:fb:98:74:71:1a:a0:11:a0:cd:3c:07:1a:4e:
                    1b:4f:a4:49:a0:06:b6:7e:67:b9:16:8a:3d:74:0d:
                    df:0e:15:23:7b:4a:1d:6d:1c:86:4d:58:c4:80:c9:
                    b6:2c:71:2b:7b:35:62:3c:dc:ea:ce:7e:0a:a6:cc:
                    12:ee:58:6c:43:24:95:ca:c3:cf:71:8c:96:52:4d:
                    d5:ee:4f:c0:e6:28:30:4e:19:cc:96:49:88:77:52:
                    ac:d9:c6:9c:a5:31:08:35:3e:eb:4a:de:2d:83:1e:
                    08:66:c7:89:02:e4:5c:bf:a1:a7:52:70:38:35:e1:
                    7b:cb:9d:35:2c:dd:ed:b0:00:53:03:34:38:d8:bc:
                    81:08:22:e0:75:ef:e2:b0:4b:1a:78:02:a4:77:97:
                    52:fd:72:dc:70:64:97:e3:35:6f:8d:b6:96:6c:67:
                    d8:0f:bc:89:38:19:51:75:bb:a2:90:b1:5a:43:83:
                    20:6a:ef:52:c2:31:8a:dd:4f:c5:fd:7b:d0:7d:af:
                    07:a3:5c:71:0c:69:2f:d3:c9:6f:b8:12:0e:23:73:
                    1d:ac:96:af:27:17:46:cc:15:7f:a1:9d:c8:f6:e7:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AE:6E:3E:84:9A:E3:CE:11:C1:C6:DD:A5:DC:12:00:6A:22:A9:D3
            X509v3 Authority Key Identifier:
                keyid:5D:1F:AF:B0:B2:A3:0D:0A:8D:C0:F6:EF:C1:05:F6:AE:A8:9E:D2:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D1FAFB0B2A30D0A8DC0F6EFC105F6AEA89ED236.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9ef7dUe8sk6dR7sozNNLotRkeE5N5xs9QdBL66Rfjpoy/0/3133382e3132322e32312e302f32342d3332203d3e20323634333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:4c:32:be:38:ed:17:da:fc:37:69:e0:4d:f0:1e:a1:3a:d7:
         29:13:b0:65:be:44:3f:5e:a2:6b:d5:a3:a9:73:2c:b6:6e:e9:
         ed:74:8f:d9:6b:f2:66:5f:c5:03:d0:b3:69:06:cc:11:7d:e9:
         ef:5d:58:61:01:87:72:9a:f7:af:3f:bf:00:2b:94:5a:df:72:
         04:a5:d9:42:20:ce:a5:41:da:e5:e3:59:25:6f:83:89:77:c3:
         c3:34:ba:f8:9b:01:10:c9:a4:b4:58:5e:f1:94:fb:7b:5a:7a:
         f6:af:0e:d2:bf:7c:7d:0e:94:4e:42:c0:01:06:a2:15:51:71:
         e9:4e:38:fb:ee:44:f4:6d:af:19:a6:c3:7c:0f:d3:c9:2c:32:
         05:33:92:51:da:e8:0a:a1:bd:b3:d3:95:38:dd:1a:83:83:24:
         df:52:9e:a2:bd:3a:7b:0a:f0:3c:36:b1:8c:66:ef:46:2d:53:
         23:4a:6d:bc:2a:bd:71:41:09:65:32:8d:27:c0:4a:a4:45:2b:
         8b:96:cb:7b:e4:2e:63:f1:2c:67:4e:7c:b2:32:56:63:96:c9:
         fb:bc:89:de:22:5e:08:27:47:92:4e:de:8a:0b:b5:6a:2d:09:
         fd:5d:95:17:6a:4f:a2:6e:75:75:c8:2a:6c:1c:93:ea:fd:b0:
         db:b8:aa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org