Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa
File:                     3133382e39342e3137362e302f32322d3234203d3e203532363535.roa (raw, json)
Hash identifier:          EaYTftn9NCdEcY9cVVKdVA3k5vWGliasVMgyolgqnuM=
Subject key identifier:   E6:C1:13:F2:3E:84:EC:4D:E0:62:4A:5E:31:83:4D:84:5A:B9:8D:6C
Certificate issuer:       /CN=2DD79814894469B25F238E6DE3A66C520D4B68C1
Certificate serial:       1928351D27E3A19EDD93F0407E232F46397A7A9D
Authority key identifier: 2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa
Signing time:             Wed 10 Apr 2024 13:27:28 +0000
ROA not before:           Wed 10 Apr 2024 13:22:28 +0000
ROA not after:            Wed 09 Apr 2025 13:27:28 +0000
asID:                     52655
IP address blocks:        138.94.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:28:35:1d:27:e3:a1:9e:dd:93:f0:40:7e:23:2f:46:39:7a:7a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD79814894469B25F238E6DE3A66C520D4B68C1
        Validity
            Not Before: Apr 10 13:22:28 2024 GMT
            Not After : Apr  9 13:27:28 2025 GMT
        Subject: CN=E6C113F23E84EC4DE0624A5E31834D845AB98D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:e1:40:24:d0:b0:5f:c6:85:1e:d2:a4:47:
                    90:5f:72:c3:23:c2:c8:58:4e:20:29:3f:fe:74:9d:
                    cf:fd:e7:e5:bc:43:91:cf:d3:50:e2:4d:05:f2:ce:
                    43:85:35:19:17:bc:a2:a8:e2:41:a9:ca:cb:5c:49:
                    cf:35:db:f8:15:c3:01:0d:f6:16:9f:16:d8:fb:15:
                    cf:99:e4:dd:4e:d5:c5:bc:bc:a2:d0:e3:f6:07:38:
                    2b:0e:35:80:97:f8:dc:a0:a6:8f:85:45:0f:a6:a9:
                    cc:06:2e:d2:95:ff:78:e7:61:61:fc:5b:ea:59:22:
                    79:83:a3:88:d1:a4:70:12:88:e2:97:9e:ac:78:51:
                    2b:a3:b6:b4:2c:94:00:e6:96:1e:a5:69:c8:d8:5a:
                    d3:fa:9d:41:91:b4:28:5d:be:98:73:c3:9b:57:ce:
                    25:85:ea:46:2e:93:9d:40:cc:01:d1:9a:4c:28:98:
                    d2:6d:b7:6b:37:50:58:1c:17:67:17:b0:c7:e7:40:
                    5c:8b:1d:e7:5a:82:09:23:1f:fd:0d:8f:51:99:ee:
                    bc:41:f4:7a:63:36:7a:1e:ce:ed:e3:11:97:3c:b4:
                    cc:d0:15:7f:ba:d0:5b:3c:94:cf:33:84:ba:40:1c:
                    5f:8a:30:ac:7a:37:33:71:ca:2c:fe:da:61:79:12:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C1:13:F2:3E:84:EC:4D:E0:62:4A:5E:31:83:4D:84:5A:B9:8D:6C
            X509v3 Authority Key Identifier:
                keyid:2D:D7:98:14:89:44:69:B2:5F:23:8E:6D:E3:A6:6C:52:0D:4B:68:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DD79814894469B25F238E6DE3A66C520D4B68C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32322d3234203d3e203532363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:c2:d2:c0:96:1d:9c:ad:e3:69:65:30:64:b5:21:e0:0b:
         26:b8:04:46:e8:4c:73:5c:3f:78:67:0c:3b:b3:53:a1:a1:bb:
         f9:32:12:f1:4f:8b:c3:de:97:54:42:39:f6:11:56:1b:40:fe:
         6c:10:f8:28:01:f4:64:64:6c:d5:eb:b6:32:5b:7b:f7:3d:ec:
         48:34:5c:ce:28:3b:32:6e:d6:ff:99:d7:e4:fd:b1:69:4c:35:
         6f:5a:6f:2f:4c:bd:d9:be:25:6f:9a:05:47:93:88:12:b3:27:
         b5:24:b4:f1:44:32:82:0f:92:24:5c:bd:cb:7e:d1:3e:fd:7b:
         89:34:5c:0d:29:af:cd:fd:71:99:34:7b:f7:85:f6:4b:c2:0a:
         66:08:02:82:77:da:a0:93:d1:35:a8:bc:eb:31:34:ea:71:b9:
         2b:68:e4:0a:e8:ce:5a:65:46:4e:ea:56:16:38:76:c1:fb:b7:
         1d:86:b2:18:3c:32:f3:b7:46:d2:bd:8f:f3:94:de:74:58:8f:
         0e:40:f4:58:41:32:a0:6d:15:a7:97:61:e1:6d:59:26:39:8d:
         2d:4d:3f:91:b2:68:09:f7:e6:cb:9a:66:b7:94:7c:51:66:02:
         6b:c9:82:c4:a6:bd:b8:45:ef:3f:2c:58:57:f1:51:d9:8d:75:
         51:58:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org