Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa
File:                     3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa (raw, json)
Hash identifier:          PQUagAbq++J+xQV4eCfz2gbhnXfaU+oad8YKnu+8OVY=
Subject key identifier:   1E:EA:D6:5E:B8:08:D9:1B:EB:47:58:D9:29:AA:62:DC:71:42:8B:43
Certificate issuer:       /CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
Certificate serial:       1A1E056D1811A8331C0FEF8D2E36B73A4FE3DEA5
Authority key identifier: 1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa
Signing time:             Thu 04 Jan 2024 12:33:09 +0000
ROA not before:           Thu 04 Jan 2024 12:28:09 +0000
ROA not after:            Thu 02 Jan 2025 12:33:09 +0000
asID:                     264272
IP address blocks:        138.118.188.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:05:6d:18:11:a8:33:1c:0f:ef:8d:2e:36:b7:3a:4f:e3:de:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
        Validity
            Not Before: Jan  4 12:28:09 2024 GMT
            Not After : Jan  2 12:33:09 2025 GMT
        Subject: CN=1EEAD65EB808D91BEB4758D929AA62DC71428B43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:a1:d3:5e:49:83:80:d3:a9:5d:fa:43:74:
                    3d:67:8b:1e:2b:33:39:4e:b0:18:0d:5a:c0:37:c0:
                    02:92:62:f8:17:be:6b:54:7e:14:e1:06:30:34:77:
                    fe:62:ce:4f:d6:13:ed:a2:e7:7c:7e:23:fc:2a:51:
                    6a:6d:6b:73:41:f0:17:67:23:96:96:0c:3d:1b:a3:
                    c0:65:50:37:e5:ea:bf:10:39:80:36:a2:96:4f:94:
                    28:e7:66:a0:f6:d7:c8:53:3c:8a:d2:78:9c:6b:de:
                    aa:6e:a2:2e:5b:dc:5f:1d:6e:0c:71:8b:8f:b2:11:
                    85:0f:d7:30:e2:a1:57:24:c4:26:66:32:22:35:28:
                    6b:3a:75:b7:3b:c5:46:3a:fe:ae:b4:89:00:35:be:
                    e1:f7:56:b5:ef:1b:d6:86:1c:1a:62:92:79:a2:d1:
                    11:b5:50:c0:f0:84:08:a7:49:d6:e8:72:e6:66:ad:
                    e1:62:cd:f9:0d:53:5b:06:77:f5:10:74:f2:29:c4:
                    8e:03:d0:57:39:e6:55:dc:20:5c:02:5d:df:8b:06:
                    13:65:c5:b5:a7:c9:db:2f:a0:d7:6d:27:ac:81:70:
                    af:d7:ca:8b:b0:98:d1:a2:3b:36:40:33:96:c3:e0:
                    35:bd:5b:22:22:7f:9a:be:3a:d9:de:ef:c1:75:92:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:D6:5E:B8:08:D9:1B:EB:47:58:D9:29:AA:62:DC:71:42:8B:43
            X509v3 Authority Key Identifier:
                keyid:1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138382e302f32332d3233203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:27:36:3c:6e:f8:41:2d:91:b5:fb:cc:c0:0c:42:9c:db:a4:
         d3:15:44:6b:3a:10:4e:43:a3:d7:56:20:84:a5:6d:ba:06:21:
         40:c5:26:ab:47:c2:b8:07:c2:6e:65:00:7a:0e:bf:e3:94:0e:
         47:4c:fa:18:4c:6f:fc:c6:9c:2a:73:0a:59:0e:df:28:5c:31:
         7e:90:c5:01:8c:d0:48:e6:52:92:d6:ef:e0:ba:fe:b7:ff:a9:
         ee:d0:d9:25:b5:6c:0b:4f:17:92:b2:b5:61:cf:b2:77:41:b7:
         a9:db:b6:17:81:ef:02:fa:50:84:d8:e2:59:41:28:93:50:69:
         94:a8:8e:55:9f:c1:96:1a:dc:37:b6:88:33:b6:c5:34:46:83:
         00:2e:f5:64:b4:bd:c2:06:bf:c3:98:34:06:b9:44:0f:8d:53:
         88:18:c7:38:e9:9c:b4:90:0f:0c:76:2d:4d:13:26:8a:d8:72:
         ab:c1:43:3d:fe:d2:75:8d:1d:a3:39:f3:0f:ac:4a:5d:78:f6:
         9f:36:c1:6a:92:00:98:ed:fc:9c:fa:49:9f:29:68:53:aa:bd:
         2a:70:10:9e:c0:ac:a8:65:c7:a0:ef:91:9f:af:fb:29:a5:22:
         f0:66:e7:7d:03:8a:c3:31:71:40:b0:aa:97:a1:26:76:39:33:
         37:06:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org