Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32342d3234203d3e20323634353830.roa
File:                     3133382e33362e3133322e302f32342d3234203d3e20323634353830.roa (raw, json)
Hash identifier:          CeW0ap/vlNj6AdeHsyhCwIAue1S/91TabXqQXPs1OtI=
Subject key identifier:   64:CE:C8:88:75:57:F7:A7:10:CE:FC:67:C4:D3:DD:7E:13:18:C8:4D
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       61647ADE7FC11DFEA7A86514AC4F7F3E05BDDCC2
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32342d3234203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:38 +0000
ROA not before:           Tue 05 Dec 2023 17:32:38 +0000
ROA not after:            Tue 03 Dec 2024 17:37:38 +0000
asID:                     264580
IP address blocks:        138.36.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:7a:de:7f:c1:1d:fe:a7:a8:65:14:ac:4f:7f:3e:05:bd:dc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:38 2023 GMT
            Not After : Dec  3 17:37:38 2024 GMT
        Subject: CN=64CEC8887557F7A710CEFC67C4D3DD7E1318C84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:74:57:11:30:56:dd:f3:81:c6:cd:b3:12:
                    47:3c:e1:c4:3e:90:23:d7:61:69:80:24:72:85:17:
                    78:99:e8:02:6e:66:70:37:5a:51:ab:8c:ef:df:fb:
                    20:7d:53:ac:d6:6b:e9:ce:88:d9:21:4d:78:12:d9:
                    e2:0d:c7:e9:3e:e6:a9:d0:f4:49:a6:a6:b7:17:50:
                    c1:fb:c2:ff:dc:f3:66:92:51:b0:5b:a7:db:8b:a4:
                    ae:d5:1f:5c:fd:b6:87:50:36:fe:74:73:c2:0f:78:
                    d5:90:db:6b:65:42:25:e5:42:8e:8c:35:9d:ff:97:
                    3c:47:5d:5d:4e:9f:32:ba:55:b6:33:e3:c9:68:49:
                    30:16:f1:36:69:1c:fc:dd:c3:08:56:c9:2b:a4:72:
                    aa:37:33:cc:09:08:e8:65:12:89:27:a9:43:4e:9e:
                    bf:b6:bd:cd:5d:8e:db:5e:6e:7a:99:80:1e:11:4b:
                    86:0e:97:33:f4:96:53:40:17:03:f4:8c:4a:61:cc:
                    a2:78:8f:d2:34:c8:46:57:f2:44:96:da:47:ac:48:
                    49:3d:37:76:25:bd:e3:a1:b5:07:44:30:e9:30:4d:
                    14:c5:bb:db:c2:b0:a3:90:47:01:f1:a2:f2:46:d6:
                    9b:81:85:f6:94:eb:f1:60:c2:fe:cf:a1:03:b9:9d:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CE:C8:88:75:57:F7:A7:10:CE:FC:67:C4:D3:DD:7E:13:18:C8:4D
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133322e302f32342d3234203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:ef:9e:71:47:c9:5f:a0:82:02:1c:81:e1:1f:60:31:62:47:
         20:41:64:8e:fb:59:5e:0b:6d:58:e1:c3:22:bb:d5:55:47:88:
         e4:97:fa:85:aa:31:7d:19:bd:86:b1:4c:fb:2d:c1:91:38:20:
         7e:c7:75:56:19:ec:5b:9c:aa:34:88:3c:aa:22:70:89:bc:a3:
         1d:02:94:f5:97:5e:bd:8c:80:75:0d:55:7c:e5:45:ee:ca:d7:
         55:ec:34:76:e5:9d:66:23:64:5f:88:6e:be:1a:aa:bd:73:26:
         a9:c4:24:71:d7:dd:cc:ce:8b:ed:71:9d:c3:49:c5:ca:80:e1:
         f9:c5:4f:5e:61:a6:4a:55:39:1e:ff:a6:38:cc:7d:d1:3f:8d:
         2c:c0:e2:f3:9d:ad:98:73:ec:b3:8a:3a:82:44:23:d2:1c:18:
         97:47:ab:c9:e5:d3:a4:1c:cf:08:cc:8e:26:7c:64:0d:83:a9:
         39:4c:b7:be:74:ca:16:a8:3e:d0:e4:1e:ae:e3:d0:73:a1:2f:
         42:07:6a:ca:e0:a7:2b:59:4e:13:b3:f0:f2:18:db:e9:01:ac:
         71:eb:bb:46:36:07:4a:8e:3d:88:33:54:38:16:d3:b9:09:4f:
         7a:bf:c8:2d:2b:38:63:b1:d2:13:11:20:43:31:5c:56:f6:84:
         b8:8b:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org