Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138372e302f32342d3234203d3e203631373834.roa
File:                     3133382e3138362e3138372e302f32342d3234203d3e203631373834.roa (raw, json)
Hash identifier:          xAS5JzUARSHmqxQuJXXlMaQg1gg1khcuKOIkNUDPhcE=
Subject key identifier:   5E:9B:6C:6E:CF:70:51:BE:66:D2:29:5D:77:4B:FB:8C:4D:B4:AA:8B
Certificate issuer:       /CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
Certificate serial:       37B3AD60AE4545CB34D9062DCBB91A8C5F9A8429
Authority key identifier: 32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138372e302f32342d3234203d3e203631373834.roa
Signing time:             Wed 03 Apr 2024 23:53:49 +0000
ROA not before:           Wed 03 Apr 2024 23:48:49 +0000
ROA not after:            Wed 02 Apr 2025 23:53:49 +0000
asID:                     61784
IP address blocks:        138.186.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b3:ad:60:ae:45:45:cb:34:d9:06:2d:cb:b9:1a:8c:5f:9a:84:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354
        Validity
            Not Before: Apr  3 23:48:49 2024 GMT
            Not After : Apr  2 23:53:49 2025 GMT
        Subject: CN=5E9B6C6ECF7051BE66D2295D774BFB8C4DB4AA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ee:c4:6b:ad:99:e5:95:46:c0:71:37:86:8a:
                    8f:ed:3e:61:be:e0:af:c5:2d:44:75:30:74:9f:c7:
                    9c:8c:07:d0:f9:59:87:70:ae:8d:36:71:fc:7a:04:
                    78:f6:58:d8:46:cd:65:0c:b7:c8:3c:31:4a:93:c4:
                    53:9f:bc:11:44:36:46:31:20:75:45:e0:f8:cc:f5:
                    33:ce:2f:1d:cc:7b:e2:82:d2:d7:68:a3:b8:f0:d3:
                    e7:ff:42:1d:a2:6a:ec:89:49:e0:23:16:7e:f1:bf:
                    e1:03:50:ab:a0:91:3d:2d:58:ce:15:9e:88:0f:bd:
                    bd:9b:5b:33:f5:c7:30:f8:74:4f:70:b7:b5:a3:4a:
                    5f:96:b9:7b:d4:ad:91:75:64:87:28:a9:76:e0:5e:
                    cf:cd:9d:d8:6d:e8:37:00:44:52:ca:84:f5:21:fa:
                    20:65:60:69:30:4d:b3:3d:b9:f2:fe:28:49:95:6c:
                    5a:ce:e7:81:05:a9:22:22:fe:12:45:64:06:d3:29:
                    5e:4d:1b:b1:ad:a7:a7:3e:49:f3:65:48:76:d9:c0:
                    7f:63:d7:f1:ee:83:6b:b1:a4:fa:ab:51:98:7d:b3:
                    a4:4a:c9:5e:13:9a:da:97:05:de:a7:38:99:ae:a1:
                    21:b7:9f:3a:72:02:34:cd:d8:10:20:ba:ba:86:e2:
                    81:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:6C:6E:CF:70:51:BE:66:D2:29:5D:77:4B:FB:8C:4D:B4:AA:8B
            X509v3 Authority Key Identifier:
                keyid:32:88:CF:53:D1:AB:3A:AF:60:EE:40:EC:3D:B9:2E:EA:8D:58:E3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3288CF53D1AB3AAF60EE40EC3DB92EEA8D58E354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/1/3133382e3138362e3138372e302f32342d3234203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:10:5e:e0:79:7c:6c:05:e0:35:df:e0:49:71:f9:cf:b4:14:
         5a:68:0d:40:70:11:13:de:28:d2:3f:3c:3f:5a:18:03:2b:14:
         63:c5:1d:e6:aa:0b:d8:c7:9f:30:a9:59:18:69:0b:a2:61:0a:
         9a:67:91:b8:51:2f:28:a5:71:50:79:b4:7e:eb:40:6b:49:6e:
         de:b7:ef:a3:1a:53:d4:06:cf:a0:0e:07:37:b3:6b:6b:7a:15:
         86:3a:37:a1:af:11:93:44:4e:98:50:c9:dc:17:17:36:c9:78:
         0a:9c:63:6c:aa:07:ee:27:be:bd:e6:be:81:f7:69:20:70:21:
         53:04:67:b4:71:df:5d:da:db:9d:a5:5a:10:e0:7d:03:5b:1d:
         62:81:dd:ee:18:ae:97:2d:dc:69:c9:1b:b1:b5:75:2b:dd:4a:
         25:1a:54:82:36:a6:b3:4b:9a:37:c1:7a:4e:d3:dd:84:0b:75:
         a7:91:85:6c:e0:a4:c6:04:9b:31:06:ef:2c:38:cf:04:60:30:
         f2:bc:94:f6:fd:54:4d:b8:b9:c9:87:b7:bd:86:a9:5f:ac:ce:
         d0:da:ff:e4:4d:d3:89:2a:19:9e:14:19:cf:0b:6e:af:43:ed:
         7b:43:d9:cb:3d:1a:bf:70:e2:d8:66:9e:81:52:22:ca:41:5a:
         cb:36:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org