Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
File:                     3133382e3132312e37322e302f32322d3234203d3e203532363337.roa (raw, json)
Hash identifier:          nVWCSeKv9kwp89vxeODPIbeJYQrUtUeInZdu6+B5wCk=
Subject key identifier:   46:78:50:D1:69:A2:37:03:04:16:2C:1C:83:84:B3:2D:1E:F6:8E:E6
Certificate issuer:       /CN=65957368ED64EBC667C549743F4EF7F7D715D062
Certificate serial:       24B435857C1CFAECE5113D7A71BB425BBAFD22C3
Authority key identifier: 65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa
Signing time:             Wed 06 Dec 2023 05:00:00 +0000
ROA not before:           Wed 06 Dec 2023 04:55:00 +0000
ROA not after:            Wed 04 Dec 2024 05:00:00 +0000
asID:                     52637
IP address blocks:        138.121.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b4:35:85:7c:1c:fa:ec:e5:11:3d:7a:71:bb:42:5b:ba:fd:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65957368ED64EBC667C549743F4EF7F7D715D062
        Validity
            Not Before: Dec  6 04:55:00 2023 GMT
            Not After : Dec  4 05:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:c8:a4:03:9b:e5:4e:6b:ff:36:84:2c:7a:
                    9d:c0:e7:0d:85:a4:db:35:47:45:53:96:45:ac:51:
                    99:06:87:50:22:81:86:93:33:a6:c6:ac:62:58:26:
                    d3:5b:9b:3f:d0:ec:46:3f:18:02:97:d2:f4:98:7e:
                    5b:a9:c8:36:00:ca:53:99:e4:19:3c:23:7b:b6:18:
                    08:28:c9:27:a0:c5:c5:52:ec:a4:4f:c9:4d:b3:be:
                    1b:27:83:4a:3c:03:61:81:6f:aa:98:1f:08:9e:40:
                    8e:82:a1:84:af:58:72:54:78:92:07:82:e6:77:fa:
                    48:cc:26:1f:41:6e:2d:4e:8e:5a:a0:e3:14:13:ee:
                    9b:c0:44:61:7f:6d:43:03:97:3f:37:3d:41:1a:f8:
                    92:c7:f3:b9:36:a3:98:48:a8:1d:72:04:ec:f0:c0:
                    18:44:90:7d:00:c1:40:b4:0c:55:f8:7c:a7:50:8c:
                    5a:23:2d:89:a9:28:9e:2b:ee:0e:9f:03:69:f7:bd:
                    8b:44:3a:ae:63:de:11:f4:9e:99:55:6c:21:90:9e:
                    24:2e:59:8a:63:69:54:8c:9b:18:0d:e3:5d:3d:0a:
                    3d:ae:5f:25:f8:2f:dd:27:10:99:42:8e:95:a9:26:
                    71:60:84:9b:cf:09:16:71:c0:f4:d7:82:2f:1d:68:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:78:50:D1:69:A2:37:03:04:16:2C:1C:83:84:B3:2D:1E:F6:8E:E6
            X509v3 Authority Key Identifier:
                keyid:65:95:73:68:ED:64:EB:C6:67:C5:49:74:3F:4E:F7:F7:D7:15:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/65957368ED64EBC667C549743F4EF7F7D715D062.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65957368ED64EBC667C549743F4EF7F7D715D062.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/1/3133382e3132312e37322e302f32322d3234203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:21:d6:c6:b5:25:50:cd:bf:ba:35:c8:7f:6a:23:1d:59:
         11:42:3b:cf:22:df:8e:a5:23:d3:94:d0:94:30:88:e4:dd:d4:
         1a:59:87:dd:96:d9:39:c7:01:62:71:cf:5d:53:47:80:40:9b:
         28:81:f4:e9:a0:4b:31:4d:ec:e7:4a:03:76:8b:f1:52:0b:12:
         fc:4e:3e:b6:17:d3:f2:79:37:2d:4d:7d:9e:64:04:02:d0:64:
         38:d8:0e:78:5c:4f:87:ad:50:04:34:8c:05:b4:d8:66:2c:69:
         6e:d3:4d:66:df:49:c4:0a:3b:b3:29:f6:a8:87:e4:e9:96:22:
         6b:fb:77:9e:bd:e4:e8:1f:71:a6:68:ba:24:64:00:be:ba:0c:
         3c:ba:f0:68:9a:7e:93:3d:1b:98:88:6f:5e:f0:95:60:21:19:
         d3:7c:7b:6c:ba:95:a7:0b:08:11:81:5d:b7:79:0c:64:5d:b1:
         c2:1e:84:de:fd:ed:d2:42:b3:35:39:11:99:d4:87:24:9b:01:
         52:fc:c2:bf:dd:7e:a7:25:23:04:bf:9f:94:f9:1b:0f:b5:20:
         c0:8e:5a:04:2c:f2:d5:80:78:77:bb:44:12:1d:a6:16:3f:b8:
         d9:97:f4:39:a0:95:cb:21:79:fb:c5:8c:4e:cf:a3:33:69:c0:
         55:49:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org