Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32342d3234203d3e203532363535.roa
File:                     3133382e39342e3137362e302f32342d3234203d3e203532363535.roa (raw, json)
Hash identifier:          l6LR8K8Cp5Mmmxesk5Y47KaFjN31vck6tj7d4r4k25k=
Subject key identifier:   5A:03:42:F9:A7:A0:89:9E:83:17:BB:E8:0C:6F:FD:4A:7F:4C:84:8B
Certificate issuer:       /CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Certificate serial:       1BA84BC04A85F0769F5709EEBB0AF3B0AF52F3C2
Authority key identifier: 55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32342d3234203d3e203532363535.roa
Signing time:             Fri 23 Aug 2024 20:11:12 +0000
ROA not before:           Fri 23 Aug 2024 20:06:12 +0000
ROA not after:            Fri 22 Aug 2025 20:11:12 +0000
asID:                     52655
IP address blocks:        138.94.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:a8:4b:c0:4a:85:f0:76:9f:57:09:ee:bb:0a:f3:b0:af:52:f3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
        Validity
            Not Before: Aug 23 20:06:12 2024 GMT
            Not After : Aug 22 20:11:12 2025 GMT
        Subject: CN=5A0342F9A7A0899E8317BBE80C6FFD4A7F4C848B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:99:27:32:d4:13:34:27:0b:a2:26:3e:f9:87:
                    cd:6f:1a:8e:6a:fb:d2:aa:c0:34:30:c9:c9:9e:d0:
                    e9:7d:2f:ac:9a:30:e6:07:e3:12:6f:93:44:7e:71:
                    24:d8:b6:9e:02:bc:d8:29:65:3e:a7:46:20:b1:77:
                    e3:f3:1a:26:98:93:d1:e9:04:55:c0:a3:0b:cc:68:
                    95:a3:e7:9d:86:4e:fa:0e:b6:7b:c4:9e:31:5f:84:
                    67:2f:f3:67:8c:79:c9:97:b7:b3:25:a4:eb:c0:fe:
                    cd:fd:17:5b:78:31:c0:44:6d:ae:e3:76:3e:e5:a6:
                    ac:52:c6:29:f1:1c:df:34:f4:03:37:77:3a:06:bb:
                    f8:7f:65:f3:8f:fe:6b:9a:86:cf:5b:7f:fe:cb:9e:
                    cd:4f:95:40:53:b2:2f:4b:43:9a:0c:75:65:63:7d:
                    c3:a5:7d:a5:2d:bf:12:75:4a:fb:db:c9:e0:da:b5:
                    a9:8d:25:a7:9a:d7:63:2b:c0:04:d3:89:1a:90:ea:
                    c6:fd:ce:15:b4:6a:cb:9e:5d:0e:a8:d0:83:14:0a:
                    2f:4c:ed:d7:a3:b6:64:eb:ba:cd:77:58:27:7c:8b:
                    0f:7e:3d:69:02:6a:fa:bb:31:fb:30:02:6e:1d:4b:
                    e5:e9:f8:38:f2:bc:be:1a:a1:9c:61:a0:72:f0:00:
                    3f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:03:42:F9:A7:A0:89:9E:83:17:BB:E8:0C:6F:FD:4A:7F:4C:84:8B
            X509v3 Authority Key Identifier:
                keyid:55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/3133382e39342e3137362e302f32342d3234203d3e203532363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7c:93:96:ef:26:7a:c0:ff:3e:88:c8:e9:f2:1d:c0:4c:ee:
         03:fa:20:22:4b:ed:1e:a5:07:eb:b6:ac:e7:45:ee:6b:99:59:
         d9:d9:f6:8a:35:4f:ed:66:59:08:51:ec:21:45:29:57:67:0b:
         9b:04:02:72:14:a2:46:e3:2c:4e:b4:d8:cd:72:be:36:5e:fb:
         3e:4c:68:a4:f6:bf:9f:19:61:fd:0a:b9:3f:e7:dc:01:9d:c7:
         32:9d:7a:4d:37:a4:c6:b1:06:66:fb:c7:34:21:44:47:74:85:
         49:32:6b:08:2b:e1:c9:55:4b:d5:84:c3:da:10:a9:04:3d:c4:
         a4:da:90:ec:f4:7a:0f:d9:9d:0c:79:9d:a9:9b:74:ad:7d:66:
         63:c9:2b:f0:c5:a1:7c:69:4a:b0:f6:dd:46:6d:cf:26:d4:af:
         cc:dc:56:54:1e:d4:e0:db:14:08:47:6f:93:4e:12:f3:63:20:
         9b:a3:a1:e9:3d:75:8c:6c:da:eb:1d:8e:e9:f3:86:0f:8a:88:
         9f:97:c8:01:26:f6:35:83:29:b4:3d:0b:55:f2:06:03:08:a6:
         98:50:5a:87:e5:04:4a:0d:39:7a:c9:85:21:23:31:66:9a:b4:
         40:45:08:6d:0a:dd:7c:6c:49:d1:d8:e8:62:76:1b:3e:cf:66:
         d3:26:3b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:03 2024 by rpki-client on console-ams.rpki-client.org