Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
File:                     3133382e3132312e37322e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          cdF8Dei+ac3Cuk7ZrwljAbTFzfsclkWgDDEffR/oilY=
Subject key identifier:   50:5E:BB:0C:1D:99:14:71:B0:A8:9C:4A:F9:12:30:F4:1D:31:B2:39
Certificate issuer:       /CN=9F1CCE2DC16FB55A7D239106CA91634E67D98178
Certificate serial:       240C6D8E88C21BF4611887FA092D5F64ADEF1CFA
Authority key identifier: 9F:1C:CE:2D:C1:6F:B5:5A:7D:23:91:06:CA:91:63:4E:67:D9:81:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
Signing time:             Sun 07 Nov 2021 18:43:34 +0000
ROA not before:           Sun 07 Nov 2021 18:38:34 +0000
ROA not after:            Sun 06 Nov 2022 18:43:34 +0000
asID:                     52637
IP address blocks:        138.121.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0c:6d:8e:88:c2:1b:f4:61:18:87:fa:09:2d:5f:64:ad:ef:1c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1CCE2DC16FB55A7D239106CA91634E67D98178
        Validity
            Not Before: Nov  7 18:38:34 2021 GMT
            Not After : Nov  6 18:43:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:18:e7:a1:af:a6:e1:d7:0f:74:97:c7:84:
                    6d:0a:8f:06:ec:71:63:95:3c:86:d0:11:ad:06:68:
                    01:3d:cb:35:73:8a:e3:35:4e:ee:6a:12:0d:aa:ac:
                    35:85:e2:8e:dd:36:fd:9c:42:83:35:8e:03:e8:b6:
                    c1:5f:d0:62:3b:51:87:d0:32:54:5d:ea:4d:05:3d:
                    ee:2b:36:67:3c:0d:96:5b:cf:66:11:f7:1f:ec:4a:
                    06:c8:dc:0f:c2:79:47:a7:d8:e6:0f:a4:55:c6:1b:
                    a9:c4:3d:96:2b:7c:3d:ff:35:5f:0b:36:49:0b:2d:
                    13:ce:2b:18:86:d1:91:dd:27:38:3a:0c:e3:52:c8:
                    7f:61:f8:c6:49:ca:62:62:14:46:de:f9:65:26:50:
                    19:a6:8a:7e:14:35:c2:be:6c:3b:07:c0:c9:4c:c9:
                    f8:13:e1:db:56:54:77:21:6b:64:d1:31:b4:b2:a3:
                    7a:40:e3:08:78:e9:f8:0e:45:c5:0d:53:19:91:89:
                    07:20:bf:54:83:64:e3:ef:ce:32:0c:7f:c9:80:a6:
                    27:29:f5:27:eb:4b:f0:ee:50:4c:3b:95:ad:23:84:
                    8a:13:df:f9:fd:f4:ca:d5:d5:c3:6c:fc:80:e9:df:
                    b9:6c:ed:0a:b8:2a:49:37:34:79:7f:49:22:ff:d1:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:5E:BB:0C:1D:99:14:71:B0:A8:9C:4A:F9:12:30:F4:1D:31:B2:39
            X509v3 Authority Key Identifier:
                keyid:9F:1C:CE:2D:C1:6F:B5:5A:7D:23:91:06:CA:91:63:4E:67:D9:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:07:d9:91:1f:72:78:68:64:51:a0:8a:d3:b9:6c:72:f4:
         d0:cf:be:6b:bb:a8:28:ec:80:4a:df:6f:3e:43:67:fe:a9:bc:
         5c:40:70:dd:e9:80:a6:f7:fe:07:43:5e:87:c9:5e:1f:b6:f8:
         8c:b0:b5:01:cd:68:f4:37:f1:c6:98:66:9f:95:fe:a8:46:9f:
         10:7c:1f:2d:95:70:21:7a:61:52:82:ed:df:f2:6a:85:59:67:
         a5:c7:dd:e6:56:f9:a7:9a:55:51:f2:86:eb:01:4f:c2:fb:3f:
         2c:29:fa:71:3a:b0:6d:89:6f:47:d0:7b:ab:83:7e:53:7c:b4:
         0e:87:8b:a0:e2:98:04:75:80:cc:24:ed:e8:39:d5:ac:54:c8:
         d4:34:bf:33:2e:21:73:92:7f:c2:44:24:e0:5f:2e:d8:63:9d:
         da:8a:26:36:74:7a:75:3f:e3:f7:1b:6d:c6:2a:cf:02:9e:40:
         24:34:85:af:b4:e9:a8:83:77:42:30:11:5f:ac:6d:05:dd:39:
         d8:63:ed:25:d8:78:f2:e1:54:b3:57:cc:2d:af:44:99:ed:27:
         6e:fd:d2:70:53:86:e4:10:02:3e:e2:d1:5b:ec:3c:9d:0c:59:
         1e:4c:c4:c2:8b:c8:00:6e:6e:f2:e3:3b:f2:fe:d3:4b:f8:07:
         a8:68:bc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org