Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          uMudJdJTcYkgOAuMAFnORYSREsmLtDrxlOvvKb3lBLo=
Subject key identifier:   F1:F6:4E:44:6A:48:1D:FB:6D:79:EA:09:8B:C2:DC:9D:F1:B7:A8:BA
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       0CF67AA7F52906FE15C7067AA2B4CDD969BBBC42
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:00 +0000
ROA not before:           Tue 05 Dec 2023 22:55:00 +0000
ROA not after:            Tue 03 Dec 2024 23:00:00 +0000
asID:                     263994
IP address blocks:        138.255.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f6:7a:a7:f5:29:06:fe:15:c7:06:7a:a2:b4:cd:d9:69:bb:bc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:00 2023 GMT
            Not After : Dec  3 23:00:00 2024 GMT
        Subject: CN=F1F64E446A481DFB6D79EA098BC2DC9DF1B7A8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:80:35:d7:e9:df:9f:6b:4b:2e:fa:03:98:
                    f7:cd:a6:9e:75:77:16:bb:86:38:bd:33:d5:28:46:
                    4c:17:b7:91:9c:cf:86:6e:c0:c5:ba:11:a3:ea:3f:
                    99:01:5a:68:e5:9b:09:59:95:26:94:1a:bf:c4:97:
                    cd:84:21:be:a4:d5:e7:f5:0b:70:8f:a2:cc:25:21:
                    dd:be:4a:c5:0a:cc:7c:b9:68:b8:0c:5c:b2:f6:76:
                    93:8e:bf:06:7b:94:36:a1:2b:e0:73:a2:e6:0b:5b:
                    ff:f0:e9:6e:78:fb:e3:c2:b9:53:a9:be:09:ee:53:
                    96:00:4a:89:04:72:3e:f1:e1:59:c0:f3:14:f7:09:
                    64:b7:3e:8e:0f:a1:3e:39:07:6b:b2:bd:2b:f7:92:
                    cd:35:a7:6c:21:1b:ad:0b:50:ea:68:30:29:8a:8d:
                    b9:92:7d:c4:d2:0e:d3:f4:93:69:af:b0:8b:dc:3a:
                    91:8b:1f:a0:cf:5f:07:8c:6e:0f:65:f0:97:6b:2e:
                    fb:a8:c7:2e:af:b0:31:4c:89:b8:0f:0f:31:90:41:
                    98:76:74:d0:27:98:52:49:8b:33:60:7c:4b:0b:ea:
                    ef:c9:1e:b7:47:ef:5d:dc:76:bd:9e:bb:6b:76:cc:
                    ac:4f:ce:14:dd:ff:37:bd:5c:35:a9:a2:eb:f4:a4:
                    72:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F6:4E:44:6A:48:1D:FB:6D:79:EA:09:8B:C2:DC:9D:F1:B7:A8:BA
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232332e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:19:00:3d:0e:9b:20:6e:8c:c4:9c:4f:cc:7e:1c:07:86:83:
         7f:ac:3f:1a:18:42:49:10:1f:d4:d5:61:95:4c:51:30:01:93:
         22:19:1e:79:f1:b4:31:3e:06:46:8a:44:28:00:03:d1:66:04:
         7a:1c:78:5d:68:df:41:fd:1f:99:40:96:1d:b8:44:1d:8a:0b:
         a1:03:af:0d:f7:92:f4:fa:48:d3:89:1a:09:74:bb:c8:d2:5f:
         f9:12:a0:16:57:f1:9f:07:07:59:93:54:3d:66:f0:d1:ae:4c:
         b3:58:f1:94:c1:6c:c9:cc:6e:3d:25:e1:d8:e4:e5:f8:5a:ca:
         bb:f7:2e:67:4a:4c:51:d4:f9:b3:b8:e7:19:3f:c9:05:8e:c4:
         ad:bc:c9:b1:a5:7c:44:40:b7:d6:f3:ed:38:34:47:77:34:bb:
         dd:1a:15:fd:7b:70:b9:85:2a:f6:dc:c7:dc:31:e1:9b:97:52:
         38:e6:00:dc:e8:87:17:bc:00:08:28:d1:3a:94:41:13:d9:92:
         2f:9d:5b:75:9d:90:49:a1:a1:5a:25:3f:a6:48:b8:3f:01:ef:
         e0:0f:aa:98:d0:e4:0e:da:b3:a7:ba:ca:d7:47:ad:c3:ec:96:
         77:e6:1c:50:9b:7a:7d:10:87:30:2e:cc:0b:7d:ba:bc:9d:ff:
         97:b5:ad:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org