Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa
File:                     3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa (raw, json)
Hash identifier:          RT8r9K0vf2XzMkFoRkyaXdyIV2pvpmWGDpt6x0rDMaw=
Subject key identifier:   F0:48:F6:43:91:E5:99:C6:45:31:A2:C2:F0:35:9C:54:36:F8:8B:D3
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       0835995A437737BD982C97460982421C6AFE5FB0
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        138.121.164.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:35:99:5a:43:77:37:bd:98:2c:97:46:09:82:42:1c:6a:fe:5f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=F048F64391E599C64531A2C2F0359C5436F88BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:00:c8:f3:33:cb:fd:bc:1c:b2:a6:6d:a9:fb:
                    a8:2f:7c:c0:4b:10:25:00:f4:a0:c0:99:fb:cf:54:
                    11:06:24:27:a1:13:16:38:04:38:48:ce:06:68:ac:
                    4a:4c:b6:f7:29:61:be:4e:b3:fd:bc:da:7e:fb:a2:
                    de:d9:8c:7f:c8:2d:cf:c6:89:7b:85:27:e6:09:36:
                    a1:d5:6e:54:a9:16:97:46:60:b4:78:6f:56:c8:2f:
                    3f:6d:cc:f8:b5:bb:48:26:b3:5c:35:42:84:97:36:
                    15:2b:1e:8f:38:3b:8d:a7:41:b8:99:d0:78:85:89:
                    3f:ea:78:6b:3a:77:a6:fb:cf:d3:50:fa:f5:05:90:
                    3a:2d:cc:5c:00:f4:d8:89:1c:00:58:92:6f:39:22:
                    3f:cb:17:ab:c3:2f:48:5f:26:65:28:77:7b:ee:5c:
                    69:ba:a1:b3:51:dd:f4:ce:78:dd:f7:50:26:65:93:
                    d0:43:e1:64:ab:f3:74:5b:a0:c3:29:42:0d:a1:30:
                    7e:c4:c9:09:dc:a3:fa:92:49:56:39:aa:c7:cc:4f:
                    42:14:73:6c:22:d5:be:55:91:ea:60:21:4b:e4:40:
                    d9:84:fb:dd:32:dd:f5:f7:e4:89:19:7a:78:3e:a6:
                    53:3b:fc:cd:bb:5c:86:f0:06:71:b6:24:73:2b:18:
                    41:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:48:F6:43:91:E5:99:C6:45:31:A2:C2:F0:35:9C:54:36:F8:8B:D3
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32322d3232203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:d7:cf:cc:ec:07:23:7a:fb:11:24:e1:99:1d:be:24:24:51:
         08:9c:fd:44:63:57:a2:d2:b5:de:66:46:60:03:12:86:15:d9:
         6d:b3:4d:c2:70:e7:56:e5:19:0b:6d:63:e8:3a:50:e2:aa:0d:
         47:0a:1a:9c:55:c5:5d:f3:dd:3c:42:0f:15:b9:c8:dd:d1:75:
         2f:0b:00:4e:f4:ce:43:96:59:9d:29:3c:89:1f:08:8e:02:37:
         80:d2:63:92:39:ee:6b:11:27:48:98:8c:a5:fa:e0:af:c6:57:
         27:b7:1a:2f:ba:cf:00:20:5c:8b:00:ab:67:d1:b2:3e:06:f4:
         0e:a8:62:bf:88:2e:ac:55:9d:da:d2:59:3e:ab:b8:4d:53:af:
         58:1a:33:7c:6e:34:27:36:91:1b:e2:e8:25:85:cd:72:b5:3e:
         3f:d3:51:57:a9:58:e0:26:c7:d9:43:3c:8e:2c:92:0b:72:ed:
         00:a8:e6:7a:e0:c0:ed:d6:12:05:73:d5:25:ac:08:71:b6:7e:
         e4:d8:04:8b:d9:7c:ca:5b:da:d3:cb:d4:04:1b:89:45:4c:d3:
         e6:0b:8e:5a:37:bb:77:ea:79:0b:d6:c6:6e:fb:90:2d:43:6c:
         98:b9:68:ac:df:cb:67:cc:40:2c:9d:aa:1c:a1:6c:8a:86:a1:
         0b:e7:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org