Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32332d3233203d3e20323634353830.roa
File:                     3133382e33362e3133342e302f32332d3233203d3e20323634353830.roa (raw, json)
Hash identifier:          rE3/CmrVjgP2/CLOUsgO7uM2yjCfH52gchLXyvmKy8s=
Subject key identifier:   0B:9F:A1:96:52:98:45:15:32:F1:79:7D:D7:67:8F:B1:4B:6E:A0:B6
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       50445343A409009A9930767FF6002DA240CF99E7
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32332d3233203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:40 +0000
ROA not before:           Tue 05 Dec 2023 17:32:40 +0000
ROA not after:            Tue 03 Dec 2024 17:37:40 +0000
asID:                     264580
IP address blocks:        138.36.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:44:53:43:a4:09:00:9a:99:30:76:7f:f6:00:2d:a2:40:cf:99:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:40 2023 GMT
            Not After : Dec  3 17:37:40 2024 GMT
        Subject: CN=0B9FA1965298451532F1797DD7678FB14B6EA0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:21:ba:0c:2c:42:d6:82:7c:58:a9:5f:b6:
                    d9:e6:d5:1f:5d:47:35:1f:00:b1:8a:83:18:36:16:
                    56:9f:80:67:6b:26:ca:25:4e:34:66:13:96:af:8d:
                    e3:ab:4e:0b:7b:b6:c7:ad:25:2d:af:08:5d:f7:a2:
                    96:07:0c:a1:dd:c8:92:9e:21:9a:b5:8d:62:b6:59:
                    de:db:7b:74:5c:44:c1:fe:0a:56:2e:b8:60:cd:6a:
                    c3:f3:e9:ff:1f:b7:53:54:53:80:96:92:0e:74:90:
                    d4:db:8b:34:b7:5e:11:35:b8:f5:0d:bf:46:ad:ec:
                    b4:cc:65:8b:52:ab:1f:e3:66:6c:b9:8f:15:ad:0f:
                    a9:23:38:7f:e9:ff:0d:45:5c:10:0f:d3:5d:ed:c4:
                    e8:b4:ec:76:c7:f2:08:88:53:77:f6:fd:b5:49:f9:
                    32:93:6b:46:a2:ff:ca:c1:ad:2e:30:96:49:0b:d8:
                    8b:43:30:bb:f6:d7:d2:f2:84:fe:70:c2:a6:96:22:
                    42:42:b1:b2:db:a2:43:6d:38:a4:06:11:d7:f0:10:
                    27:14:ea:1c:68:d6:27:65:c4:8c:30:63:8e:75:62:
                    2b:5b:36:07:fe:90:6c:f1:33:a0:83:6e:2f:de:6a:
                    35:1c:3b:4d:ed:a0:e5:f6:67:96:77:0f:34:88:03:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:9F:A1:96:52:98:45:15:32:F1:79:7D:D7:67:8F:B1:4B:6E:A0:B6
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32332d3233203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:81:ee:eb:f6:99:41:28:a0:fe:a0:9d:84:ff:49:c2:9f:
         13:60:57:41:c9:99:bb:38:62:4f:50:1b:a1:27:20:e7:73:aa:
         9a:65:27:0a:72:00:8b:e3:12:da:37:8f:b5:7d:53:76:f8:88:
         29:b4:71:5a:b6:4d:a4:33:43:68:76:a7:75:98:dc:91:b5:fe:
         d9:34:f6:9c:05:3d:d0:4c:26:1b:1b:93:36:b5:51:ef:20:a7:
         3b:96:64:e7:28:d2:22:19:06:bb:9a:d7:91:75:c7:ad:2f:e7:
         31:cf:04:9e:0f:42:94:1c:2f:33:86:42:3c:ce:b2:81:77:db:
         3f:90:97:ce:48:93:d2:f5:cc:7c:1e:c4:15:20:61:a9:c4:d6:
         af:74:a4:ac:1b:47:5b:7e:e3:e9:f2:d9:80:d1:74:9b:b5:7b:
         40:d1:26:99:bd:39:9b:f9:1d:5d:6e:f7:42:c0:17:89:1d:87:
         f2:8e:ce:63:8a:a0:6a:54:de:ba:69:19:1c:46:8c:07:00:26:
         8f:49:da:2e:0d:61:5c:48:78:80:fb:b4:9a:5f:69:58:a8:98:
         ab:ce:38:c0:ba:d0:37:11:5b:d7:89:3f:2c:ce:b6:c8:0d:a5:
         68:a2:89:ec:62:20:43:ed:87:5c:96:dd:2c:ba:c7:47:79:ea:
         66:03:1c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org