Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32332d3233203d3e20323632363536.roa
File:                     3133382e3132312e3230382e302f32332d3233203d3e20323632363536.roa (raw, json)
Hash identifier:          3DdCZ9hNeLuQDsYzC+oLo3/x8QiLSd7jkzne1LPYak4=
Subject key identifier:   FE:05:14:0A:70:89:A9:21:A7:18:A1:1F:B8:9F:A1:84:82:F6:C4:6E
Certificate issuer:       /CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
Certificate serial:       07707E83FFF10E6C65BE6D91FA56A926E8AF8A9E
Authority key identifier: FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32332d3233203d3e20323632363536.roa
Signing time:             Thu 11 Apr 2024 23:08:46 +0000
ROA not before:           Thu 11 Apr 2024 23:03:46 +0000
ROA not after:            Thu 10 Apr 2025 23:08:46 +0000
asID:                     262656
IP address blocks:        138.121.208.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:70:7e:83:ff:f1:0e:6c:65:be:6d:91:fa:56:a9:26:e8:af:8a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Validity
            Not Before: Apr 11 23:03:46 2024 GMT
            Not After : Apr 10 23:08:46 2025 GMT
        Subject: CN=FE05140A7089A921A718A11FB89FA18482F6C46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:f5:54:8c:c6:01:c9:b1:a1:93:a9:bb:8d:
                    e9:df:cc:52:08:ed:9f:b2:90:9f:70:9e:f5:51:e7:
                    8e:a1:1b:6f:71:25:b2:49:07:b6:c7:8f:74:04:5d:
                    a3:c3:25:28:b3:b7:ff:d0:50:66:5b:d2:fd:da:fd:
                    02:87:ed:d7:ce:10:f5:d1:e1:2d:c2:30:48:50:7d:
                    bf:af:38:fb:45:90:a2:f2:a0:fc:97:5f:b1:f6:76:
                    89:38:d4:30:0a:ff:20:23:73:9a:68:a2:82:f6:3f:
                    61:8d:da:60:87:c2:7e:45:ab:8a:26:4f:ed:b8:ab:
                    9e:60:d0:7f:ca:77:eb:eb:fb:7e:07:b8:a9:07:37:
                    34:97:37:3e:54:5b:6d:48:0f:3c:74:41:f4:be:0e:
                    92:b2:8e:ab:4b:e3:96:31:8f:7d:22:a3:15:b3:8e:
                    a5:d7:d6:1b:d1:f8:33:f8:38:0d:60:8d:a2:b9:f5:
                    7b:31:ca:98:07:a5:9e:b8:c0:8f:d7:af:cc:bb:c4:
                    82:12:8b:a1:4a:5e:2c:c6:d1:29:19:a6:e4:30:6b:
                    1f:03:7f:d8:87:bc:17:a9:82:c1:cf:99:78:41:48:
                    37:41:5b:f7:89:da:90:9e:99:9e:58:3b:98:c7:b9:
                    2c:e0:e8:d1:fe:5e:d0:ab:60:21:27:5e:9d:83:0e:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:05:14:0A:70:89:A9:21:A7:18:A1:1F:B8:9F:A1:84:82:F6:C4:6E
            X509v3 Authority Key Identifier:
                keyid:FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32332d3233203d3e20323632363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:de:19:da:c6:cf:1f:95:6c:a6:93:3e:83:af:bc:7c:f3:82:
         12:79:77:06:66:a6:31:c6:f1:0f:17:b1:b4:ba:66:f7:eb:64:
         30:af:dc:e1:9c:f3:af:10:48:1c:1f:06:87:f8:23:05:65:31:
         9b:ba:d9:0a:1d:f0:6a:6b:84:b7:11:46:2a:c2:91:ea:fd:98:
         c3:5a:0b:f4:c1:b8:22:32:22:dd:4f:0a:ba:94:4d:7d:87:4c:
         9e:5c:75:aa:9a:ff:66:ce:82:87:d4:6c:27:f6:f1:ef:42:09:
         ea:15:fb:5f:36:78:4b:d1:b4:cb:e2:56:f2:cd:41:43:3c:0d:
         9b:00:c5:47:14:ba:65:15:5b:1d:bd:57:d9:96:9e:59:9e:92:
         33:68:5e:95:0c:a6:17:cd:4b:1e:fe:51:38:78:3d:84:4f:83:
         f5:f5:39:35:7c:a7:7e:7e:3f:5a:ae:44:0f:8e:68:c0:2b:5b:
         64:85:f2:83:e3:81:41:75:d1:d8:43:54:8f:ff:95:8e:f3:cc:
         88:77:41:1c:b5:ce:61:b9:01:08:d9:bd:7f:8b:b2:b2:6e:2a:
         71:10:1c:ca:fe:4c:fb:f0:11:db:71:5a:73:09:c4:e2:f5:17:
         e1:22:9a:8b:43:18:25:ef:52:51:36:84:44:34:bd:cb:f6:56:
         63:1e:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org