Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32322d3232203d3e20323634353830.roa
File:                     3133382e33362e3133322e302f32322d3232203d3e20323634353830.roa (raw, json)
Hash identifier:          Dno4O9lMHn2mT5KWDdPCqvZXHNl8sUsZ8/Wv47vFuTE=
Subject key identifier:   BF:FE:6D:DD:FC:7C:7D:3E:6A:C4:EE:C1:8E:3B:41:EF:37:EB:29:CB
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       2A4606E0A240D0C19AD1F37C7DB01D922CE34ECC
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32322d3232203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:37 +0000
ROA not before:           Tue 05 Dec 2023 17:32:37 +0000
ROA not after:            Tue 03 Dec 2024 17:37:37 +0000
asID:                     264580
IP address blocks:        138.36.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:46:06:e0:a2:40:d0:c1:9a:d1:f3:7c:7d:b0:1d:92:2c:e3:4e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:37 2023 GMT
            Not After : Dec  3 17:37:37 2024 GMT
        Subject: CN=BFFE6DDDFC7C7D3E6AC4EEC18E3B41EF37EB29CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bf:a2:c0:6e:64:e6:74:27:30:26:59:55:7b:
                    23:40:24:26:18:e0:24:f1:e5:4c:be:e6:1c:05:be:
                    08:e5:15:f3:ae:57:ed:9f:c9:bf:7c:93:e2:ae:42:
                    df:a1:c7:a8:86:ec:f9:b3:95:78:29:a6:f7:0e:08:
                    09:aa:a8:86:39:72:6f:41:aa:6a:7c:8c:44:c5:32:
                    13:c0:0c:0f:97:ac:2b:d8:5d:40:34:54:70:b3:ed:
                    be:b9:bf:f8:63:d2:5c:74:28:15:6d:77:4e:27:27:
                    80:cf:44:fd:29:76:b1:c5:33:fd:7a:14:4f:f9:de:
                    f7:fc:4c:4c:5c:0c:00:ed:41:6f:86:e5:84:c1:43:
                    66:23:36:dd:e7:25:c9:b4:72:0f:39:98:9d:ae:c4:
                    5e:8d:5f:97:82:48:eb:44:78:06:26:07:c0:66:04:
                    66:65:2f:f9:6d:f4:13:40:ed:1b:50:99:52:ea:cd:
                    01:f5:de:55:e1:a7:64:3f:9f:0b:69:64:0a:6b:b3:
                    4e:36:3a:d6:72:02:3f:b0:a8:5d:27:2c:a7:18:7a:
                    89:22:3c:fc:82:d0:24:23:56:34:e6:c1:2c:05:8d:
                    ce:ca:10:b3:5d:57:07:67:53:8b:bd:9b:de:a8:df:
                    02:04:cc:fa:97:0e:11:e4:bd:98:3b:f7:b6:68:14:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FE:6D:DD:FC:7C:7D:3E:6A:C4:EE:C1:8E:3B:41:EF:37:EB:29:CB
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32322d3232203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:07:4e:88:4b:6c:f3:2c:0f:a8:d1:d7:56:29:cb:9f:32:c1:
         f6:79:f2:8d:e5:77:48:c4:41:51:00:03:08:bf:e1:c1:5f:10:
         1c:e4:1e:fe:53:cc:ca:45:e9:89:1e:65:e9:8f:6e:8e:2e:71:
         e0:47:97:e5:f1:ac:d5:c8:5c:d6:f1:43:63:e6:1c:db:fd:ef:
         c2:62:f9:34:18:a5:66:00:08:6f:d3:0f:94:98:55:1c:d3:0e:
         ce:89:6e:29:e5:96:8d:ed:e9:ea:1f:d8:ce:c8:b9:bd:df:7b:
         5e:b4:2f:2f:f2:e3:25:bc:bf:5a:60:9a:3b:4b:10:82:a6:42:
         a0:71:a3:6f:82:06:cc:c6:ac:35:e8:59:29:e6:35:8e:c7:70:
         3e:74:4d:91:69:4d:85:4e:d6:ae:99:ad:82:6c:97:2e:59:e7:
         64:3b:f0:76:79:35:8d:6c:85:62:cb:ef:4d:3f:86:56:6b:51:
         b3:31:89:59:e6:af:8f:1c:5c:78:1a:db:25:f8:81:10:63:34:
         1b:bc:9e:4d:e1:4c:67:fa:47:2f:f3:35:4e:67:5b:b8:0c:f6:
         57:45:14:e5:4e:04:a1:db:1a:c0:a4:1a:f6:09:0b:e7:df:04:
         62:2e:91:3b:81:ba:c4:6e:69:7e:7e:71:91:ef:34:b6:57:6b:
         a6:13:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org