Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32332d3233203d3e20323634353434.roa (raw, json)
Hash identifier:          Oiu5WKK0B0Fjrlp31qpUVRgBrQ2AjO7EaHxR9FtzyYw=
Subject key identifier:   DE:77:3D:3C:51:E0:EB:9D:3A:18:F9:28:89:67:FD:E1:B3:78:C6:E5
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       53BEF2EF6DCEC6AF7DDD0B0C0D06E906F20DC73B
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa
Signing time:             Tue 18 Apr 2023 23:42:03 +0000
ROA not before:           Tue 18 Apr 2023 23:37:03 +0000
ROA not after:            Tue 16 Apr 2024 23:42:03 +0000
asID:                     264544
IP address blocks:        138.0.112.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:be:f2:ef:6d:ce:c6:af:7d:dd:0b:0c:0d:06:e9:06:f2:0d:c7:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 18 23:37:03 2023 GMT
            Not After : Apr 16 23:42:03 2024 GMT
        Subject: CN=DE773D3C51E0EB9D3A18F9288967FDE1B378C6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:ea:10:8d:2f:80:18:0f:b9:8f:2e:f0:82:
                    e0:b1:a0:c7:3d:25:f9:70:44:02:2e:b4:d5:42:c0:
                    d4:0f:2d:3e:f5:4b:5b:54:1e:fe:0a:ba:f0:0c:93:
                    3c:69:4d:11:0a:2f:80:8b:7d:d7:96:92:25:89:43:
                    0a:7f:3b:c3:e6:15:54:f2:77:1a:8c:83:d5:25:0d:
                    9d:16:de:dc:cc:5f:71:70:11:bf:c4:56:7d:5f:c1:
                    f0:c3:63:c4:d3:82:2f:b1:97:08:dc:4c:d5:07:f8:
                    4c:63:6e:5f:a1:63:3a:37:4b:50:52:08:04:ae:76:
                    d4:85:82:ce:bd:10:20:99:4c:f6:2e:21:11:e2:16:
                    df:e3:20:a6:56:61:a4:09:8c:7b:03:b2:7c:93:18:
                    6e:3c:b4:e8:65:a7:cd:91:d2:d5:4f:d5:86:94:00:
                    6e:b6:24:94:a4:62:74:fd:97:5f:aa:7e:38:89:0a:
                    5f:de:b7:28:80:8a:06:95:0d:d8:94:f4:b9:75:78:
                    c4:7b:54:2e:53:c5:32:54:ea:d1:74:fb:9f:5c:08:
                    8a:a6:7a:5e:a8:14:86:50:53:27:9c:29:2c:95:2a:
                    d2:cd:62:08:e5:12:0e:7e:e3:e7:ca:c3:eb:74:5a:
                    5c:ae:4a:49:ff:d9:4c:4a:7d:50:e3:e2:ba:a9:d5:
                    cc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:77:3D:3C:51:E0:EB:9D:3A:18:F9:28:89:67:FD:E1:B3:78:C6:E5
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32332d3233203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:3a:2c:34:38:a9:87:45:fb:9f:c4:b9:ea:6d:84:ca:f1:ea:
         2e:2f:11:ca:7a:60:56:da:dd:77:c4:b3:c2:87:de:d5:71:ae:
         d5:2e:68:06:7d:28:47:11:55:44:46:d5:a0:8f:18:15:7c:a4:
         be:8b:5a:53:52:8b:4d:13:38:7a:60:58:a4:5d:2f:38:c8:fd:
         7e:f3:d0:18:4a:45:90:be:57:b3:f5:e8:7f:9b:2f:ff:d3:6b:
         8e:89:64:32:92:f0:e2:d2:7f:c3:7c:bb:05:d7:1f:a8:48:65:
         1c:f8:db:ff:66:3b:af:18:53:8c:94:3e:76:18:07:02:20:2d:
         b7:e0:a9:d6:71:e1:af:e0:58:d2:c3:b7:e1:72:51:4b:fa:84:
         4a:df:76:8b:a4:2d:10:18:a7:d0:49:0c:18:b7:26:67:f4:e8:
         f8:38:2c:06:52:af:36:8a:c8:30:56:ed:d6:61:d0:8b:d1:56:
         1a:81:37:f6:cb:27:44:5e:1d:0f:b6:b6:a7:46:c9:4f:07:c8:
         e7:88:1b:47:20:99:98:0a:84:dd:dc:f4:36:d1:5d:14:c0:06:
         0f:27:37:80:0f:a8:29:9e:8a:a0:76:38:a5:63:f6:18:68:63:
         3f:ad:cc:5b:32:69:b4:0c:db:b0:dc:3e:47:6a:9b:7d:ac:ad:
         c5:b6:76:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org