Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134362e302f32342d3234203d3e203532353634.roa
File:                     3133382e3231392e3134362e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          3xGtpKC9jk9+QrCRXDkjT6MPfK+PcVbVdcGg/JUjzq8=
Subject key identifier:   C3:68:A4:88:8C:4D:81:A6:9F:FF:41:FC:0B:F7:37:3F:D1:77:12:06
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       71559B42CD8CE53F4A1043A741FDC247BE94BB0D
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134362e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:41 +0000
ROA not before:           Tue 31 Oct 2023 20:27:41 +0000
ROA not after:            Tue 29 Oct 2024 20:32:41 +0000
asID:                     52564
IP address blocks:        138.219.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:55:9b:42:cd:8c:e5:3f:4a:10:43:a7:41:fd:c2:47:be:94:bb:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:41 2023 GMT
            Not After : Oct 29 20:32:41 2024 GMT
        Subject: CN=C368A4888C4D81A69FFF41FC0BF7373FD1771206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:7f:ab:2a:17:a6:aa:6b:0d:b7:1a:20:70:
                    40:7a:64:ee:79:89:ad:d6:70:9a:91:9e:b3:d6:81:
                    4d:7a:37:33:da:89:e2:1f:2b:d1:51:81:ff:ac:c9:
                    f2:90:be:00:b3:7d:81:85:8f:76:a7:fe:20:50:c8:
                    a2:09:66:75:e9:ff:94:b0:b0:24:4e:11:81:73:2f:
                    0d:f3:17:42:4c:d7:42:f3:e0:2a:01:e3:d7:73:58:
                    2d:f6:44:d7:c0:67:cf:70:87:b3:c3:67:59:36:93:
                    b2:41:df:8e:fb:4a:23:5f:6d:3e:db:2d:1e:67:7a:
                    61:b2:ff:bd:a7:0e:91:3e:ae:a4:1c:c2:e8:20:aa:
                    05:ef:94:b2:fe:c8:7a:f0:24:b4:be:7b:e3:79:4b:
                    42:90:d1:e2:2f:16:33:9a:21:f5:e5:17:30:94:bf:
                    7b:c7:56:c4:3e:5a:d6:a5:d8:b6:14:e0:38:9c:e8:
                    d1:1b:94:1f:75:1a:20:84:57:a0:6b:7e:a8:89:df:
                    cd:92:bc:0c:a5:54:ce:46:2e:09:0a:f1:ed:01:d4:
                    72:7a:f8:8c:26:6d:93:90:2e:03:87:ed:db:b4:86:
                    34:69:33:c3:81:85:4e:fb:80:dc:37:12:34:4b:77:
                    25:8c:45:30:ff:2e:6c:29:b0:85:40:be:92:d1:96:
                    50:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:A4:88:8C:4D:81:A6:9F:FF:41:FC:0B:F7:37:3F:D1:77:12:06
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134362e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:61:b2:ac:c8:15:56:ac:ba:d2:99:30:b0:15:11:2b:20:8f:
         b4:ef:7e:b4:9e:01:86:c6:6e:66:10:db:0b:f7:61:b5:10:dd:
         dd:9f:39:0c:85:a1:d6:b9:77:c2:13:d2:d9:ec:d4:01:cb:30:
         1d:95:34:b7:8d:f4:17:d4:aa:1f:45:3f:ab:9b:ce:e6:6d:43:
         e2:14:f2:93:1a:e5:72:46:c1:2a:9c:b1:1e:09:d5:a2:dc:9b:
         dd:90:54:8f:28:79:f1:bb:11:d7:25:94:c8:8b:17:f0:09:cd:
         e2:d9:be:c6:d0:aa:27:c9:c2:e8:dc:2e:07:89:05:16:e9:12:
         c9:94:40:8c:68:24:11:7b:b0:f0:2b:2c:5f:6f:c2:2b:90:e7:
         a0:11:02:f9:41:4f:e7:12:c3:e3:ae:ad:b3:c1:9c:1a:c0:6a:
         e9:02:10:17:75:d1:fb:ba:1c:04:df:f3:de:a9:e1:c5:df:e7:
         20:c5:56:f9:7b:ca:86:9a:10:ba:d2:6d:b2:0a:da:2c:35:c6:
         92:aa:da:01:5f:d2:f3:d7:ad:59:be:42:4b:c3:be:c7:ce:11:
         09:36:57:7c:64:80:e3:96:26:0f:ca:69:1a:83:49:db:4a:97:
         b1:ac:70:e1:60:83:23:fd:ea:9d:f4:3f:4e:b9:f9:57:d3:d8:
         2a:75:9a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org