Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134372e302f32342d3234203d3e203532353634.roa
File:                     3133382e3231392e3134372e302f32342d3234203d3e203532353634.roa (raw, json)
Hash identifier:          j0wLF0S5sGhPbIik62oAmyTXTIRYPcfHpywMnTwq95s=
Subject key identifier:   3F:54:20:D8:9B:42:70:36:AC:B7:E6:9B:5A:D5:27:52:A4:72:38:E5
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       4B46E08B20CCB89D94D7EC4042DE033F467A8016
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134372e302f32342d3234203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:32:42 +0000
ROA not before:           Tue 31 Oct 2023 20:27:42 +0000
ROA not after:            Tue 29 Oct 2024 20:32:42 +0000
asID:                     52564
IP address blocks:        138.219.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:46:e0:8b:20:cc:b8:9d:94:d7:ec:40:42:de:03:3f:46:7a:80:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:27:42 2023 GMT
            Not After : Oct 29 20:32:42 2024 GMT
        Subject: CN=3F5420D89B427036ACB7E69B5AD52752A47238E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:84:41:13:ff:30:a7:34:43:3b:b6:63:0d:
                    99:d9:fd:b3:f7:77:5f:f0:b6:84:76:e1:2f:b0:4c:
                    4e:5d:dd:fa:11:15:ae:33:4b:b7:65:5d:aa:de:4d:
                    17:27:aa:24:73:dc:5e:67:b9:ed:3a:3e:4e:58:ad:
                    c6:c6:43:3c:fd:26:02:d8:0c:f8:5a:18:97:f6:53:
                    5c:fe:3d:7d:f3:c2:8c:fa:2f:02:60:fe:f9:76:be:
                    05:f0:ae:4e:55:d9:20:50:6b:0e:1c:da:9b:fc:e7:
                    49:b3:9f:ac:31:6d:5b:c9:fa:f9:91:d0:d2:a9:56:
                    01:a6:13:2d:fb:be:4c:4a:d3:e0:92:a0:7b:41:f4:
                    62:25:0c:3a:7e:40:a8:93:7e:16:ff:2f:3b:ed:76:
                    a6:e4:94:b2:73:86:50:4c:01:43:3b:d3:0c:d1:68:
                    66:54:58:19:b7:c0:c2:6a:7f:2f:64:b5:15:fe:dc:
                    93:71:a8:69:b6:32:d3:99:b1:35:fc:81:0a:98:53:
                    9d:01:7e:4a:cc:be:b1:60:bf:f0:9f:5a:f9:00:98:
                    15:5e:33:c6:de:0e:cf:7d:32:83:47:ed:61:00:1f:
                    8e:fd:82:82:cb:84:53:f8:66:76:be:ff:24:5f:e7:
                    15:ea:9c:68:08:2c:bd:72:d6:67:d4:de:fe:f8:0f:
                    ca:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:54:20:D8:9B:42:70:36:AC:B7:E6:9B:5A:D5:27:52:A4:72:38:E5
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/3133382e3231392e3134372e302f32342d3234203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:62:a3:81:0b:61:8a:13:ef:7b:3c:e3:fc:5f:9a:de:26:ff:
         e5:c8:3f:4c:52:e6:6b:cc:2f:7f:8d:20:7d:89:fa:59:70:75:
         7c:97:33:d8:0b:3d:8a:94:21:ae:3e:76:cc:cd:2a:cf:0e:62:
         32:81:f6:44:9d:76:24:28:e6:60:b2:f7:a1:15:a3:0d:f0:cd:
         f6:a8:9a:88:fc:7a:e6:2c:82:8c:12:35:ec:96:43:7c:0e:fa:
         33:ba:06:d2:b9:81:ed:5e:9d:5e:97:52:2a:e4:09:0c:64:d3:
         6b:52:4b:32:b2:d0:b2:e7:fa:61:2b:29:36:e3:f7:93:3f:3e:
         10:a4:75:c3:f6:cf:a5:33:a3:2e:48:54:95:c9:82:1c:96:ee:
         84:2f:8a:2b:09:47:66:4e:b7:4d:ea:ae:86:6c:7c:42:17:29:
         90:d3:41:c8:aa:ba:4c:7f:98:d9:01:c1:06:ac:09:0d:b9:5e:
         56:88:56:4a:7a:23:1a:eb:ac:37:a5:cb:48:fb:0e:23:99:0a:
         03:7e:27:ab:05:0e:d5:ef:92:9c:e2:b3:1e:47:5a:a9:2f:10:
         87:ac:6f:63:75:e6:f0:2c:09:9f:30:3a:7f:3a:5c:aa:b9:ba:
         0b:14:3e:80:7a:e4:f7:55:57:44:1f:4e:93:d9:42:95:2e:60:
         a4:97:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org