Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
File:                     3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa (raw, json)
Hash identifier:          kCMNsS5VLiSEXaEizep2vwWF9z/swgosqZoxJgAe+bM=
Subject key identifier:   7B:91:FC:99:59:B7:31:67:39:22:FE:79:BB:2C:98:89:C5:5D:E7:8D
Certificate issuer:       /CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
Certificate serial:       14287F64CDF8925368601272598865C45F1B2742
Authority key identifier: 0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa
Signing time:             Thu 07 Sep 2023 15:00:00 +0000
ROA not before:           Thu 07 Sep 2023 14:55:00 +0000
ROA not after:            Thu 05 Sep 2024 15:00:00 +0000
asID:                     264440
IP address blocks:        138.121.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:7f:64:cd:f8:92:53:68:60:12:72:59:88:65:c4:5f:1b:27:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA
        Validity
            Not Before: Sep  7 14:55:00 2023 GMT
            Not After : Sep  5 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:79:dc:36:3a:80:90:a4:11:83:89:78:50:55:
                    22:d4:d8:ab:3b:2d:db:8d:d9:ab:5c:6c:18:5b:af:
                    12:b6:2e:dc:bd:26:9f:cd:a9:94:35:2b:80:b7:c9:
                    e8:99:d7:eb:34:c7:29:b5:b1:f5:e7:c4:95:98:db:
                    9d:3e:bb:85:9c:6c:bf:d4:49:c7:5d:99:16:34:25:
                    52:94:36:38:13:db:96:07:66:66:ca:89:e2:06:94:
                    5a:e2:44:c0:8e:7c:93:5e:17:74:80:2a:dc:61:28:
                    56:40:a2:65:f4:fc:6e:28:e2:65:e8:3f:b2:14:2d:
                    d0:e3:57:a6:47:73:a5:fc:fc:31:62:9f:47:98:f6:
                    a2:e1:7d:2a:e9:54:32:5c:27:71:8e:65:66:18:38:
                    a4:ea:03:7c:e1:45:da:57:e0:21:29:93:91:3d:a5:
                    d9:59:32:8d:b3:91:1d:29:58:5d:20:8b:fb:03:db:
                    62:07:a4:05:87:af:8f:e6:45:71:86:38:0f:2a:d8:
                    8e:c3:d7:f5:2f:43:2b:7c:10:ae:e6:63:6b:86:1f:
                    ba:ee:64:e1:23:2a:ca:12:c1:4f:90:aa:cb:fe:cb:
                    8c:59:59:fd:49:8a:7f:e5:71:04:9d:9a:0c:23:cf:
                    b8:ba:5a:f0:97:1d:11:c0:4d:94:4d:10:46:42:37:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:FC:99:59:B7:31:67:39:22:FE:79:BB:2C:98:89:C5:5D:E7:8D
            X509v3 Authority Key Identifier:
                keyid:0C:7E:5B:A9:0F:8E:96:FE:EE:12:54:FC:BA:3A:12:3C:A1:C7:40:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C7E5BA90F8E96FEEE1254FCBA3A123CA1C740DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3PwkW9SeBsqpeRwcfoVkepxobc3MnPD7LDj3ce12XPZ/0/3133382e3132312e3232342e302f32322d3234203d3e20323634343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:75:f9:64:e7:af:8b:66:ee:c6:ae:f4:26:3f:2f:46:17:c7:
         6a:f2:62:af:e0:6e:3a:71:88:da:48:33:9a:2f:51:c7:67:81:
         0a:74:4a:3f:2d:bf:0b:67:ad:82:d6:e6:4a:4b:57:73:73:fd:
         ff:13:3c:67:1e:23:cd:89:84:3e:b1:74:2c:c9:9a:35:f0:0c:
         ae:45:a2:30:0f:ca:99:d8:19:83:34:45:f7:74:9d:9f:7d:9c:
         3c:fe:6f:83:f5:bf:35:50:95:28:8f:3a:0c:ed:ef:e4:4e:a0:
         9a:3a:54:e5:bd:0a:42:b6:65:3e:53:0b:c0:3e:55:f9:bf:53:
         47:1b:65:5c:c5:4d:b7:d5:e3:14:92:9e:8b:53:36:32:16:c0:
         44:d1:0b:37:b1:18:11:01:15:84:ab:b8:33:ad:72:46:00:85:
         93:f9:e3:91:74:60:52:f7:5c:79:3f:cf:fd:fe:17:95:6c:b4:
         93:60:24:18:98:c7:47:d1:12:fe:fd:8d:66:47:73:7c:6c:9a:
         52:b0:0b:f6:3c:5a:ff:d4:d2:50:84:12:58:76:7b:74:06:a3:
         8c:85:ad:f7:f4:fa:94:f3:42:f7:06:bc:91:bc:6a:58:15:76:
         00:c8:ee:cd:0e:0b:05:f0:5c:c4:3d:5b:73:7e:e5:50:a5:9b:
         5d:02:d3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org