Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32332d3233203d3e20323634353830.roa
File:                     3133382e33362e3133322e302f32332d3233203d3e20323634353830.roa (raw, json)
Hash identifier:          yQOiu12FcWe7wQHDoKX17d0uwcP6Lo/N28XWDgrOZoc=
Subject key identifier:   E9:CB:AE:3A:3E:AF:7D:13:29:ED:A8:66:4A:BC:87:77:F3:CA:3F:9E
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       56E2A71DF89BE8C7ECC5863D7A11BA396F23307A
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32332d3233203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:37 +0000
ROA not before:           Tue 05 Dec 2023 17:32:37 +0000
ROA not after:            Tue 03 Dec 2024 17:37:37 +0000
asID:                     264580
IP address blocks:        138.36.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:a7:1d:f8:9b:e8:c7:ec:c5:86:3d:7a:11:ba:39:6f:23:30:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:37 2023 GMT
            Not After : Dec  3 17:37:37 2024 GMT
        Subject: CN=E9CBAE3A3EAF7D1329EDA8664ABC8777F3CA3F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:11:65:3c:fd:d2:51:a7:8f:4a:d2:68:9c:
                    b8:34:e6:ff:79:37:b3:a6:a8:0e:9b:9a:0a:14:f2:
                    8b:ce:37:6d:4f:e1:2b:0c:4d:df:e3:da:03:e1:0e:
                    6f:77:bc:51:96:76:05:2e:7d:ec:0f:30:1e:af:38:
                    92:11:c9:c6:ea:3b:c1:37:92:7d:dd:c8:aa:00:0c:
                    c1:9e:52:f4:3f:0d:ff:04:a5:1f:25:23:e4:2c:cb:
                    d8:9b:06:ba:dd:76:ac:f1:20:91:ed:b2:13:2f:5b:
                    c9:a9:55:4e:23:57:5e:b8:23:bd:31:29:bd:ba:5c:
                    a8:fa:69:94:17:9d:48:80:84:a7:e5:69:a5:6f:56:
                    06:ff:42:16:b4:50:2f:c7:9a:ca:69:1e:6e:f1:1f:
                    ef:55:59:50:3a:54:62:53:5c:11:6c:98:17:6f:15:
                    69:bd:a6:8c:71:7e:39:d3:fe:68:d1:a2:19:f4:7c:
                    78:a6:59:21:6f:80:ba:5a:47:ab:6d:fb:5f:7f:53:
                    51:f0:8d:cb:e0:0a:ba:5f:88:25:10:fc:3a:a8:be:
                    64:df:65:4e:83:60:06:41:af:4f:d4:f7:36:40:8e:
                    b2:98:6b:aa:64:c1:fb:b4:9e:69:15:a0:ea:11:73:
                    ee:fa:9b:c4:20:5f:69:75:96:f5:59:b7:3b:be:47:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CB:AE:3A:3E:AF:7D:13:29:ED:A8:66:4A:BC:87:77:F3:CA:3F:9E
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32332d3233203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:e0:e0:99:79:54:f4:8e:e1:c8:94:f1:24:67:a4:44:81:78:
         cd:25:5d:38:25:9f:e4:f5:26:e9:5b:7a:a5:62:e2:7e:7d:42:
         93:15:96:e3:91:4f:2d:60:2e:81:3e:56:07:fa:0a:bb:72:19:
         37:f2:5d:72:05:bc:e0:42:28:ad:49:20:6a:36:e6:75:8b:c2:
         58:cf:15:46:5c:51:26:d1:2e:fc:37:38:27:2a:40:6e:fa:c5:
         1b:3e:2a:d0:8f:f4:05:12:17:cb:6f:93:5a:2b:67:5c:39:0c:
         c8:b7:e4:55:db:a0:2a:92:72:1d:29:db:02:b9:bd:3b:d4:39:
         33:f0:38:bc:c7:20:1d:8b:6c:59:9d:b6:31:4a:47:52:7e:d0:
         66:e7:59:43:e4:a8:4f:91:28:2a:92:92:e7:e5:52:d0:9b:14:
         2a:d8:92:60:d3:31:d0:e0:34:90:48:07:20:72:e5:f5:97:d9:
         2f:57:86:c2:ff:4a:92:de:24:0b:7a:da:85:b1:4e:d1:c8:9f:
         11:7c:48:c6:3c:3c:99:99:be:cb:be:9f:50:ee:86:87:ad:dc:
         9f:4e:f0:cb:a7:bc:8f:97:4b:bc:16:e1:ab:cc:62:7e:65:f0:
         fa:05:21:9d:f7:a1:56:f0:c4:6e:a2:54:81:4a:4a:6b:2c:5f:
         18:ca:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org