Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32332d3233203d3e20323632363439.roa
File:                     3133382e3231392e3230342e302f32332d3233203d3e20323632363439.roa (raw, json)
Hash identifier:          v9TG2flivUbnrMT3vUWJMo+Us4YM+RaVhsp6qH3e84o=
Subject key identifier:   87:18:4A:64:F8:30:78:2B:45:08:D1:C0:ED:BF:76:A3:59:C5:90:DD
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       08FC4BFCABFF265396676C807D921018DBC44DFA
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32332d3233203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:29 +0000
ROA not before:           Wed 16 Nov 2022 22:22:29 +0000
ROA not after:            Wed 15 Nov 2023 22:27:29 +0000
asID:                     262649
IP address blocks:        138.219.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:fc:4b:fc:ab:ff:26:53:96:67:6c:80:7d:92:10:18:db:c4:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:29 2022 GMT
            Not After : Nov 15 22:27:29 2023 GMT
        Subject: CN=87184A64F830782B4508D1C0EDBF76A359C590DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:6c:4e:8a:23:e1:dd:b4:eb:a6:c1:06:11:
                    e8:b4:65:ab:fe:d5:e6:07:2c:25:55:02:bd:22:e2:
                    3d:27:10:16:f1:a2:80:55:46:2f:57:81:82:f2:f5:
                    5e:59:93:e6:a1:88:75:98:b9:e1:b8:dd:20:30:97:
                    83:81:ab:98:38:d2:d2:c3:20:59:c6:ed:46:e6:d2:
                    cb:e6:bf:92:60:ef:53:98:68:bd:a4:19:67:9f:2c:
                    5a:ee:77:e7:ae:16:8d:b3:17:f3:a9:f4:45:ff:63:
                    f3:01:57:9f:7b:db:7a:40:37:8c:ec:57:e2:cb:2e:
                    91:53:0a:7f:d9:18:03:f3:9d:30:a9:27:d7:b6:fa:
                    7f:0c:74:b7:8b:f1:71:86:f7:e7:9f:88:12:cc:67:
                    0a:7d:14:ab:7d:82:01:86:57:2c:d0:3e:f2:ef:f6:
                    29:90:5c:af:6d:24:a5:25:d1:57:cf:ca:08:d9:fd:
                    f0:cb:f8:79:b2:ab:aa:e8:ae:a2:fd:18:61:5b:0c:
                    04:85:70:03:a4:a3:7c:37:08:df:61:f8:1b:e6:76:
                    07:a5:18:01:2f:14:11:fe:cb:62:37:90:1b:2d:51:
                    8c:57:fa:b4:f4:08:f3:e1:19:35:2a:f9:7c:a1:6a:
                    a2:04:71:32:7b:98:21:f5:60:74:1e:59:a0:60:fc:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:4A:64:F8:30:78:2B:45:08:D1:C0:ED:BF:76:A3:59:C5:90:DD
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230342e302f32332d3233203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:ec:45:57:1d:ef:c8:8d:a0:6e:c6:a1:de:a5:0f:5d:19:64:
         a9:85:c7:40:93:81:dc:ed:92:6e:9a:dd:19:2f:5c:ef:d6:ec:
         1e:74:8e:86:ae:44:0f:c0:0f:7c:4b:c4:45:83:a6:f6:15:f2:
         85:54:a5:84:30:17:11:f0:ab:31:78:59:57:db:6f:e5:e8:d7:
         cd:99:37:f5:59:6c:4e:ea:60:51:bf:74:3e:ed:b6:ab:8c:3c:
         28:8b:f6:6f:b2:cc:dc:36:bb:a4:36:31:1a:90:bb:c5:31:97:
         54:b0:d3:b1:e7:8d:2a:88:60:13:ad:d7:17:9f:29:f2:26:6f:
         ab:22:08:23:b9:61:19:81:a7:61:17:ae:48:d0:39:22:76:3b:
         e1:c7:86:c3:d9:84:41:ea:11:d3:c6:db:88:40:d7:c2:47:82:
         d8:8e:8c:3f:cb:b7:7e:b0:10:36:66:2c:f5:70:e9:10:38:48:
         6a:23:2a:e3:5e:36:dc:c0:ed:92:f0:78:58:3d:c9:95:7d:35:
         6d:31:9f:85:89:a0:f0:c7:c6:fc:2b:2f:2c:d3:8b:0e:fa:c8:
         59:71:42:a2:a7:c4:ea:89:11:a4:99:d4:e9:ec:54:db:91:e0:
         d2:b0:35:ff:ce:c0:57:15:61:ee:28:c6:6f:86:7b:30:af:e1:
         72:51:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org