Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233372e302f32342d3234203d3e20323634353237.roa
File:                     3133382e3138362e3233372e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          UXhXoFLwTP6WB7UJdLhDi8oMDM9hUp5TRvT+6b58fik=
Subject key identifier:   2F:58:F1:69:42:1E:2B:C7:44:BA:96:85:FA:97:C7:98:9B:B8:CC:09
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       275B434BF0BF9386EB3DB8A708277960C925A5EB
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233372e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:00 +0000
ROA not before:           Wed 29 Nov 2023 11:55:00 +0000
ROA not after:            Wed 27 Nov 2024 12:00:00 +0000
asID:                     264527
IP address blocks:        138.186.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:43:4b:f0:bf:93:86:eb:3d:b8:a7:08:27:79:60:c9:25:a5:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:00 2023 GMT
            Not After : Nov 27 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:9f:15:17:22:b5:54:25:f9:d0:64:9f:fb:
                    e9:5c:0c:01:9c:c3:9b:3d:ac:4f:12:70:ae:bd:62:
                    54:c1:9e:40:b9:ac:aa:15:ab:9c:ec:a7:16:c5:e5:
                    25:40:16:70:b0:bd:1a:c8:2b:71:5d:57:10:9b:93:
                    d3:a4:7f:3f:e5:d1:8c:4e:45:34:3e:f1:4c:32:96:
                    38:4b:11:86:d2:22:f5:84:36:30:a2:7f:08:9d:53:
                    67:53:6b:62:6b:eb:d6:c0:c9:c8:68:ef:2e:ea:31:
                    54:1b:d2:46:63:fc:37:d2:b5:0e:47:72:bc:c9:8b:
                    47:96:b0:7d:7d:5c:68:e3:24:cb:b4:57:6a:17:da:
                    9f:83:51:c7:f7:25:6c:6d:49:66:94:41:48:9c:fa:
                    85:4b:06:2e:17:6c:8d:3b:ca:3f:9a:18:82:84:b7:
                    ea:76:35:c5:c6:fc:44:d5:f4:19:a1:16:1b:28:87:
                    4c:26:93:af:15:e2:f8:dc:cd:d2:f7:31:53:4b:fe:
                    85:ad:d9:c2:0d:ff:de:ea:c5:aa:a5:96:d1:e0:a8:
                    c8:8e:d4:3e:0a:47:41:fb:31:ed:3a:4c:33:ba:48:
                    f5:19:0a:c6:07:4a:bd:84:ce:32:d6:f6:ce:9e:3a:
                    9d:1c:07:45:7a:9d:30:de:b4:4d:c0:7c:0f:1b:70:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:F1:69:42:1E:2B:C7:44:BA:96:85:FA:97:C7:98:9B:B8:CC:09
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233372e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:83:e0:18:e4:5d:c4:3d:02:a5:a9:f3:77:41:bf:22:73:
         dd:ec:6b:1a:85:27:ba:21:d8:22:f7:1d:46:20:3f:9a:81:85:
         01:37:9f:76:b4:2c:c3:4f:12:a5:d5:bd:e7:47:e3:aa:6e:8e:
         58:52:ca:1b:0d:63:07:5f:00:8b:50:6d:6a:77:4f:f6:39:ce:
         34:87:6a:53:49:fc:fe:d4:5c:ab:c4:80:54:fb:5d:b3:b8:18:
         8e:40:2a:67:33:4d:f4:82:bb:6c:26:f1:16:54:32:cc:79:a1:
         e5:91:bf:e3:5b:5c:c6:11:1d:d7:27:c1:81:a3:82:35:40:3b:
         c4:96:81:f7:03:41:78:6d:9d:f4:6d:0c:d3:2e:50:38:b1:90:
         32:45:86:2f:84:8b:85:ea:a5:f9:21:73:d0:37:04:31:7f:ad:
         01:7e:e8:d9:15:0a:53:10:d1:bc:74:5a:ad:e3:1f:af:8d:d8:
         72:0b:7d:ea:6a:98:ff:9b:4c:07:da:f2:7d:66:18:cb:58:d4:
         ce:2d:4e:4b:f8:09:6b:12:d6:2d:2c:f3:1d:2f:58:9c:b4:b7:
         d9:b8:69:1a:75:14:2a:24:b4:62:a8:af:d4:2f:fd:ea:d3:2c:
         8c:2e:a8:2f:48:5a:ac:84:c9:ed:42:20:e2:71:51:2e:45:1a:
         bd:1d:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org