Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230372e302f32342d3234203d3e20323632363439.roa
File:                     3133382e3231392e3230372e302f32342d3234203d3e20323632363439.roa (raw, json)
Hash identifier:          1G08J4PwOIQZjhTOtPlC8WfOmRSCev3bUcW8GuDdxYQ=
Subject key identifier:   1F:D7:8D:6B:74:3A:DA:9F:E1:0A:8D:67:FC:6B:A8:A9:78:39:98:5B
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       3EE67C44FC7A876FD721FB74482BAB9CF71D7EC0
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230372e302f32342d3234203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:30 +0000
ROA not before:           Wed 16 Nov 2022 22:22:30 +0000
ROA not after:            Wed 15 Nov 2023 22:27:30 +0000
asID:                     262649
IP address blocks:        138.219.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e6:7c:44:fc:7a:87:6f:d7:21:fb:74:48:2b:ab:9c:f7:1d:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:30 2022 GMT
            Not After : Nov 15 22:27:30 2023 GMT
        Subject: CN=1FD78D6B743ADA9FE10A8D67FC6BA8A97839985B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:75:2d:a1:c4:35:49:dc:9c:15:4d:60:72:
                    13:fc:29:81:8a:a5:5e:26:c2:f2:06:77:43:cb:97:
                    86:d6:68:4a:2d:cc:7e:fb:89:90:d9:b9:18:04:93:
                    24:88:4f:d0:35:9e:58:6d:a8:26:28:23:85:a7:55:
                    ae:fa:6d:15:b5:47:8b:3f:e8:56:58:64:4c:aa:60:
                    b1:3a:18:17:3b:0d:1a:a8:58:c8:72:3d:df:15:1f:
                    6c:da:00:50:3d:fb:b1:d4:0b:ab:fd:d9:d0:12:f5:
                    19:04:41:75:d0:8e:82:09:0e:98:cb:68:d0:b6:62:
                    c7:88:6b:99:f1:67:81:6a:f5:09:29:a4:9d:99:a9:
                    bb:d7:75:2a:72:29:4c:6d:c1:c1:22:74:c9:87:7c:
                    8a:e3:7b:c0:85:36:c8:8a:33:90:81:fd:04:f4:30:
                    21:41:35:62:b1:d6:1b:01:d4:16:8b:59:6e:86:db:
                    d1:3f:b4:54:cd:43:de:12:76:50:3f:bc:aa:1d:10:
                    fb:07:84:1a:c6:e4:5a:84:82:85:c9:22:c6:ee:5f:
                    a2:2f:0e:00:f7:e5:54:17:ba:ba:60:16:a5:4e:bd:
                    2a:1f:b9:31:bd:6f:5d:04:dc:ec:cb:11:79:49:d9:
                    cb:a0:e8:a0:59:e6:1f:e8:4e:04:38:0c:c0:89:18:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D7:8D:6B:74:3A:DA:9F:E1:0A:8D:67:FC:6B:A8:A9:78:39:98:5B
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230372e302f32342d3234203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:c5:bc:23:fa:90:d5:a9:57:c0:df:63:7e:07:ea:57:a1:
         3d:7d:b9:8c:b5:d9:ed:39:4c:1d:39:fc:d1:ed:6d:08:66:8b:
         d2:8d:b6:57:9c:57:51:b4:48:82:2b:02:37:b8:d8:e5:fe:43:
         8a:8b:96:fb:fa:5b:5e:a8:79:b8:01:ee:b8:d4:24:bd:60:31:
         d6:b8:9e:30:59:61:09:4f:09:ce:2f:e0:4c:4f:e4:85:ac:0f:
         2a:4f:9c:df:bb:95:0e:1a:f7:3b:af:23:80:01:db:a6:20:30:
         5b:6b:16:ce:ef:19:85:86:fc:59:4c:88:ff:70:b4:cf:66:72:
         50:83:8d:03:ac:1e:fe:02:fd:61:e5:5e:c7:5e:7a:82:e8:44:
         61:79:36:81:0f:90:a9:ec:22:6e:54:11:38:23:51:74:71:40:
         39:52:9f:c4:9c:17:2c:60:f0:c7:31:3d:0c:c6:9e:83:ef:5e:
         05:45:f8:c1:8a:d8:fd:94:fd:04:7f:f7:b9:1c:1d:38:2b:b0:
         84:92:75:0e:de:83:6d:1b:de:f2:80:da:d7:ca:31:6c:8a:10:
         b9:03:79:d6:7f:63:de:5e:cf:63:e1:83:58:6d:da:68:b7:eb:
         15:37:df:30:d1:3d:d2:75:12:84:fb:8e:17:84:ac:40:32:09:
         16:4e:eb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org