Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
File:                     3138372e33332e39362e302f32302d3234203d3e203238363538.roa (raw, json)
Hash identifier:          glqfeaROiUi6ubnsektdSxmVKuMBspzMcbe1nF6rhJo=
Subject key identifier:   27:40:F0:A7:BB:8F:CA:E9:E1:8F:58:6F:39:15:E3:85:0F:F3:AD:8A
Certificate issuer:       /CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
Certificate serial:       2B937381199D131AED7E237B5FD5B70A08DF4CE8
Authority key identifier: E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa
Signing time:             Tue 28 Nov 2023 02:56:27 +0000
ROA not before:           Tue 28 Nov 2023 02:51:27 +0000
ROA not after:            Tue 26 Nov 2024 02:56:27 +0000
asID:                     28658
IP address blocks:        187.33.96.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:93:73:81:19:9d:13:1a:ed:7e:23:7b:5f:d5:b7:0a:08:df:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CE82B2BA2C582F2DCE8981741A7720228EEC6B
        Validity
            Not Before: Nov 28 02:51:27 2023 GMT
            Not After : Nov 26 02:56:27 2024 GMT
        Subject: CN=2740F0A7BB8FCAE9E18F586F3915E3850FF3AD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:97:b9:82:dc:17:6a:1c:b0:8b:75:ff:b9:55:
                    8e:59:9e:b8:8d:fb:ca:64:6c:8f:c3:75:32:5b:28:
                    79:2e:2a:dc:e2:40:66:08:d9:40:d9:b6:dd:a9:ee:
                    06:de:84:e8:7a:4c:f8:90:c2:cc:82:1c:11:0b:9c:
                    2f:56:72:bc:66:7f:a9:bc:d0:33:2e:5d:f5:56:12:
                    bd:8d:05:6a:45:96:5d:4e:ab:aa:c1:66:1b:6d:0a:
                    55:23:4b:97:60:71:06:d9:74:63:7f:78:a5:5f:87:
                    63:2c:3b:3c:d1:5d:e5:f9:71:55:38:96:bc:58:dd:
                    64:9a:9f:65:f6:4a:b7:10:6b:ad:d8:bf:5c:3e:61:
                    b9:46:3b:84:8a:f3:2b:bd:9e:55:56:b3:3c:08:22:
                    40:5a:43:b7:13:03:61:a1:a4:35:8b:5b:75:15:10:
                    28:bd:44:ee:3e:51:28:ca:27:69:e4:84:cb:87:c0:
                    d8:d6:15:70:4e:76:68:6a:d0:7e:0e:1c:d1:ba:8a:
                    00:26:98:b7:99:e8:6d:d0:84:63:01:0e:e7:fa:5d:
                    7b:ee:56:8a:3a:f4:3c:dd:bb:f2:89:b4:26:6b:a1:
                    80:e3:ff:00:ed:03:8e:d5:bb:df:09:de:d3:6a:b1:
                    09:49:9c:6e:8e:cf:e5:2d:51:77:01:e8:da:10:68:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:40:F0:A7:BB:8F:CA:E9:E1:8F:58:6F:39:15:E3:85:0F:F3:AD:8A
            X509v3 Authority Key Identifier:
                keyid:E2:CE:82:B2:BA:2C:58:2F:2D:CE:89:81:74:1A:77:20:22:8E:EC:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2CE82B2BA2C582F2DCE8981741A7720228EEC6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cxrx99nahfp5hCoFk88C6p4xFNZvirp7rbjp3KARGjwS/0/3138372e33332e39362e302f32302d3234203d3e203238363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.33.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:1b:18:00:6c:ae:cb:e8:1e:19:8f:40:a1:ac:9f:59:0a:28:
         fb:71:d2:80:7b:92:77:65:4c:4e:a2:7a:af:38:86:fe:35:b4:
         bb:ea:c7:68:13:3b:8a:13:88:c1:62:ec:ff:52:a2:dc:cf:47:
         07:fa:02:08:15:fe:2b:24:3b:54:38:ba:ca:66:fb:ef:99:fc:
         82:14:f8:c2:1e:e4:11:81:e2:68:f0:6a:f8:cb:ef:ab:fc:fb:
         39:78:f1:27:e8:a2:25:06:7f:a6:43:49:e5:20:de:1a:49:97:
         52:76:d4:35:29:2d:8b:34:37:33:ae:c3:ae:59:dd:d4:39:ce:
         c5:1e:36:9f:7b:2f:e5:fc:aa:19:75:b3:4d:12:ab:e6:dc:8d:
         91:48:13:c4:29:80:98:ca:53:e3:9b:a1:4b:8c:e2:1c:50:82:
         b3:e2:eb:63:29:e4:8a:af:02:57:7e:d7:46:4c:f6:fd:13:82:
         dc:50:43:6d:5e:14:e2:3f:6f:3d:8f:b7:d2:94:dd:89:8b:04:
         eb:2a:96:4d:85:bd:e8:61:f3:f7:75:aa:26:b4:2c:f0:94:c0:
         6b:38:a8:56:96:7c:28:5a:ad:03:2d:6b:b4:84:b9:ad:e5:e7:
         d4:ee:7b:d1:be:6a:98:d9:bf:87:3a:0b:24:21:c8:de:0b:6f:
         36:2d:33:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org