Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32332d3233203d3e20323633393234.roa
File:                     3133382e3231392e35322e302f32332d3233203d3e20323633393234.roa (raw, json)
Hash identifier:          dRLI7J7S2ocWOr+cjAXk/hrvycshESHDrTNcZZvtGKE=
Subject key identifier:   A8:ED:A6:1F:6A:2F:80:A5:34:F4:9F:62:34:09:46:55:0D:26:94:F8
Certificate issuer:       /CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
Certificate serial:       68970CC73AB8580CB3C50629C9F43E21E1383A8B
Authority key identifier: 40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32332d3233203d3e20323633393234.roa
Signing time:             Tue 10 Oct 2023 03:11:26 +0000
ROA not before:           Tue 10 Oct 2023 03:06:26 +0000
ROA not after:            Tue 08 Oct 2024 03:11:26 +0000
asID:                     263924
IP address blocks:        138.219.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:97:0c:c7:3a:b8:58:0c:b3:c5:06:29:c9:f4:3e:21:e1:38:3a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1
        Validity
            Not Before: Oct 10 03:06:26 2023 GMT
            Not After : Oct  8 03:11:26 2024 GMT
        Subject: CN=A8EDA61F6A2F80A534F49F62340946550D2694F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e6:c0:50:10:36:16:f0:24:b9:d2:32:ae:cc:
                    c6:d2:16:18:99:5e:4e:ae:17:67:e0:e8:bd:b5:26:
                    3b:ba:a9:be:e5:f7:8c:4f:3d:92:a1:64:96:b1:d3:
                    06:78:a8:e0:90:61:87:d0:95:11:ae:4d:a8:7a:0f:
                    d2:6a:b1:9a:2e:7c:f8:71:e6:ab:85:2e:90:14:78:
                    58:1c:2e:1e:85:fa:52:dc:85:f4:c2:c8:e7:d7:92:
                    ee:2a:39:b6:d0:7a:93:df:c8:14:d5:a3:8c:70:b2:
                    6b:64:07:34:7d:b8:bd:ec:75:54:af:f9:4e:41:53:
                    80:9d:9a:0c:7a:be:20:df:2d:99:2a:db:c6:e4:4a:
                    ad:8c:f0:d2:58:ef:f8:47:60:80:9c:b4:6f:4c:37:
                    27:d5:35:88:3f:4d:7e:ce:6a:f5:7a:07:3b:0b:be:
                    32:a0:c3:b4:78:f2:49:a5:7f:03:c2:58:a7:c1:98:
                    fd:7b:4f:a9:db:50:f1:b1:c4:ce:5e:15:f4:a3:24:
                    93:e7:01:50:f9:b9:50:6b:e9:b4:0c:03:7c:3e:bd:
                    7d:7c:c8:d5:fa:0f:e4:ab:ab:24:c2:a0:e4:86:aa:
                    a5:6b:43:c3:b0:e8:e7:3b:89:3a:f6:5d:f7:cf:d1:
                    15:83:66:60:c1:91:05:6e:98:a9:7e:26:ae:76:1b:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:A6:1F:6A:2F:80:A5:34:F4:9F:62:34:09:46:55:0D:26:94:F8
            X509v3 Authority Key Identifier:
                keyid:40:CE:3F:C6:00:6F:D8:F4:72:E8:09:12:F8:C5:A9:13:A5:BB:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40CE3FC6006FD8F472E80912F8C5A913A5BBA7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/3133382e3231392e35322e302f32332d3233203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:d0:fb:4c:8b:84:19:29:55:3d:0b:80:a5:59:bf:1f:b5:6e:
         35:87:af:5a:1b:bd:93:b5:eb:6e:70:28:2c:71:5a:e9:7b:25:
         e9:5e:14:aa:91:09:af:37:b3:31:58:9e:39:ff:7b:ac:93:f1:
         94:cf:60:b4:ff:11:da:99:df:74:e9:e2:a3:04:43:a1:0f:03:
         1d:81:e5:13:46:f5:1a:d2:74:8c:ed:44:64:a6:1e:66:b3:5b:
         31:a2:ef:42:bb:f2:36:56:e5:ed:b8:55:dc:b5:f6:63:24:6f:
         a9:7c:bc:7e:7f:3e:ff:83:0c:69:de:2a:cc:c4:08:3a:3e:df:
         1b:2a:ae:c0:66:18:4e:51:10:ac:c8:0e:78:37:64:23:22:24:
         61:79:03:69:82:ae:75:df:96:9a:b5:12:7d:eb:a9:55:06:93:
         96:49:f9:8f:e7:97:31:fc:3f:3e:7b:cb:bc:2a:c7:f6:cd:b6:
         87:76:e4:a8:ab:f5:13:7e:ea:db:e7:25:fb:57:45:5d:86:93:
         46:8b:eb:12:7a:1f:b9:c4:01:29:a3:4f:b8:62:30:53:47:ec:
         4c:13:a2:cb:f8:0b:0e:75:68:62:b9:ee:9c:e4:e2:67:26:78:
         94:7c:c2:f0:88:72:70:ec:fd:91:0b:60:8c:62:bd:bc:db:0e:
         2b:e0:c2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org