Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa
File:                     3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa (raw, json)
Hash identifier:          WAO0V/qP3vsmzVyoN7ByH7pUL393zib3gk86Pnyjvic=
Subject key identifier:   A4:D2:2B:F2:19:44:90:4A:6F:6A:F7:E0:2A:8D:7D:1E:C5:5B:B0:63
Certificate issuer:       /CN=D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E
Certificate serial:       262F6DDDE574D78C3387CD61767759A01F03EA56
Authority key identifier: D9:68:4E:9F:8F:6D:EC:46:D8:CF:D3:16:D7:11:BE:02:54:1C:7B:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa
Signing time:             Fri 15 Sep 2023 17:36:27 +0000
ROA not before:           Fri 15 Sep 2023 17:31:27 +0000
ROA not after:            Fri 13 Sep 2024 17:36:27 +0000
asID:                     263868
IP address blocks:        138.186.156.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2f:6d:dd:e5:74:d7:8c:33:87:cd:61:76:77:59:a0:1f:03:ea:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E
        Validity
            Not Before: Sep 15 17:31:27 2023 GMT
            Not After : Sep 13 17:36:27 2024 GMT
        Subject: CN=A4D22BF21944904A6F6AF7E02A8D7D1EC55BB063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:0c:5d:86:30:ff:49:80:98:7b:6f:71:90:
                    10:ef:fd:e5:bf:e7:f6:9f:ef:46:50:b7:d4:f4:0a:
                    e9:3d:d8:f9:2f:81:66:66:7b:d4:69:14:1f:d7:d6:
                    dd:a2:26:c9:52:c9:f8:fb:c8:c4:1c:d5:f2:46:5d:
                    43:6b:c1:30:41:36:7a:88:a4:09:c2:ba:c4:44:4d:
                    00:40:c5:f7:56:e3:37:81:6a:60:9e:08:a3:d6:9a:
                    5c:5b:f2:bc:12:18:79:dd:af:02:26:34:90:96:0c:
                    de:d4:bd:38:3a:42:90:11:0f:97:3b:bd:8a:2c:1f:
                    53:cb:d7:55:cc:cd:df:6e:38:ae:59:d9:54:f3:d8:
                    de:42:75:85:de:03:c6:2c:ad:3d:0c:15:c0:9e:48:
                    69:b1:0a:3f:ad:65:c9:61:1f:fb:e3:d3:1b:18:74:
                    0a:71:4c:86:c4:10:c7:87:a8:2d:cc:44:2a:14:e1:
                    65:0c:03:e9:d9:20:dc:61:de:b4:d5:71:aa:ee:10:
                    bb:6e:ef:29:e8:dd:8f:d4:b5:56:84:f5:45:bb:04:
                    d8:fc:57:8a:f8:1d:5b:2a:d6:f2:7e:22:92:db:a3:
                    6f:23:31:78:2a:80:24:c0:52:88:da:aa:b0:3b:82:
                    2d:39:ac:be:31:7e:8f:c4:68:41:0d:e9:94:d0:fe:
                    f7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D2:2B:F2:19:44:90:4A:6F:6A:F7:E0:2A:8D:7D:1E:C5:5B:B0:63
            X509v3 Authority Key Identifier:
                keyid:D9:68:4E:9F:8F:6D:EC:46:D8:CF:D3:16:D7:11:BE:02:54:1C:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9684E9F8F6DEC46D8CFD316D711BE02541C7B2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFfUyifCgAi3vwqrUy6HHhYB4SsDjgCNcy8PAfyhhbaR/0/3133382e3138362e3135362e302f32322d3234203d3e20323633383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:6c:45:44:5d:47:88:09:2f:41:5f:98:30:40:66:64:2b:9f:
         9d:9b:89:62:8b:a3:b9:c0:fd:3e:54:dc:e3:7c:b3:cd:0e:14:
         73:fd:71:4c:72:39:c9:7d:3f:9d:fd:3b:35:81:d1:6f:34:b6:
         34:18:90:1d:f5:31:30:b4:66:be:ea:48:f8:f4:33:cd:ab:5c:
         70:19:c7:6e:74:ed:e6:19:be:4d:bf:e3:98:22:eb:6b:af:8c:
         63:d5:a8:22:f7:7f:01:c3:31:0f:ce:2a:ea:3e:1d:f3:61:38:
         f9:dd:63:93:c0:81:e6:ac:1e:7f:c8:f5:47:4e:2e:05:51:8a:
         e5:3a:10:9c:33:cf:6c:0f:8d:93:3f:c3:f5:1c:ea:3d:ba:cc:
         9b:1e:1f:b7:58:38:b8:5a:05:c8:af:fd:49:88:12:4c:06:f8:
         d6:54:ba:24:3e:cd:20:1d:a7:ac:c0:76:2f:b6:b2:77:a0:5b:
         1f:4b:82:ba:4a:a3:4f:88:3f:76:d2:91:c9:30:38:27:28:e1:
         43:7f:6b:34:ee:d9:f4:ee:8c:89:28:d6:29:da:92:ad:f6:d6:
         b6:84:9a:7e:88:a4:54:47:92:a3:ec:9c:e7:75:87:e0:63:62:
         75:f6:2a:fb:73:1e:94:ce:67:b4:39:e9:0f:bb:6a:18:c3:8f:
         52:3d:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org