Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa
File:                     3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa (raw, json)
Hash identifier:          tGPx9u0rdf5G4jmnNO4N0E8xESr5ZJ/ChJY1tL021aQ=
Subject key identifier:   65:9E:00:D5:6B:5E:4A:1F:D4:38:86:DE:2C:67:D5:05:8A:57:D8:2C
Certificate issuer:       /CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
Certificate serial:       56CEB1DCBF10B6A816E261D6B47001E82F690565
Authority key identifier: 1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa
Signing time:             Mon 13 Nov 2023 14:12:16 +0000
ROA not before:           Mon 13 Nov 2023 14:07:16 +0000
ROA not after:            Mon 11 Nov 2024 14:12:16 +0000
asID:                     264272
IP address blocks:        138.118.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ce:b1:dc:bf:10:b6:a8:16:e2:61:d6:b4:70:01:e8:2f:69:05:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A270B8A633D18DEBC92B129559FE7F227397B2C
        Validity
            Not Before: Nov 13 14:07:16 2023 GMT
            Not After : Nov 11 14:12:16 2024 GMT
        Subject: CN=659E00D56B5E4A1FD43886DE2C67D5058A57D82C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:1f:7b:17:5b:4b:8e:62:9d:18:1c:4b:8b:
                    8d:b8:8d:e4:d1:01:c3:3d:f8:e5:64:10:1c:18:cc:
                    68:61:2d:35:af:16:a3:54:10:e8:40:3f:7d:b5:ed:
                    8e:f5:56:92:54:f7:ba:a2:b8:13:22:0d:7f:d3:f2:
                    9b:d8:22:59:2a:de:5a:50:1d:2a:b4:47:20:d7:28:
                    bb:40:ff:4c:25:fc:84:67:8c:19:0d:44:67:74:c4:
                    9a:8a:d0:ad:24:09:7c:9d:6b:c0:e4:b1:3e:96:6e:
                    c7:6a:f3:2f:fd:57:64:92:54:f6:9e:ae:ba:ff:92:
                    f7:2f:db:8b:47:dc:a0:fe:0b:f8:b1:83:23:bc:a5:
                    ba:8e:09:ae:82:fe:af:f0:0b:d5:00:0f:bd:bb:99:
                    14:c3:f3:37:d4:1b:4c:0a:dd:d8:33:f5:43:56:09:
                    10:f0:67:84:e3:91:3a:c0:ab:07:e6:49:0f:e7:bf:
                    6e:ce:af:c8:aa:55:cb:36:06:89:f8:e8:9e:82:1e:
                    0a:92:18:0b:73:14:33:34:fc:cc:be:10:39:3f:94:
                    e3:72:21:0e:e7:8f:e2:0e:54:c9:57:cd:36:ac:a3:
                    3b:f6:61:01:03:7d:45:a0:6b:78:db:40:48:65:ff:
                    11:c2:2e:79:19:41:17:b6:fd:f2:34:ac:5c:49:ff:
                    1f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9E:00:D5:6B:5E:4A:1F:D4:38:86:DE:2C:67:D5:05:8A:57:D8:2C
            X509v3 Authority Key Identifier:
                keyid:1A:27:0B:8A:63:3D:18:DE:BC:92:B1:29:55:9F:E7:F2:27:39:7B:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A270B8A633D18DEBC92B129559FE7F227397B2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EDDETkYHmD5n5LzxiMCnLz6gi8GpR86GsywbYCo7BmYc/0/3133382e3131382e3138392e302f32342d3234203d3e20323634323732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:20:dd:04:2f:1f:a7:05:de:da:26:80:5b:af:dd:80:17:
         ef:c3:4d:f0:0c:f2:99:dc:99:f1:f8:a9:55:69:fe:e4:fb:c9:
         14:d0:b7:e3:1c:89:f5:d4:76:db:66:17:9e:15:52:35:60:c8:
         8c:d4:c4:8e:bf:d0:0f:60:35:06:a9:9e:ec:38:91:96:26:6b:
         be:ac:bd:9a:01:a1:c6:40:f3:ca:4e:78:31:ad:f6:2f:9e:e2:
         3c:11:02:25:01:38:c9:48:79:c4:dd:79:d8:6a:a4:99:32:7e:
         50:5d:28:64:ab:27:b6:3c:55:07:19:92:ac:1b:87:d4:51:83:
         df:2d:44:12:7c:34:f9:01:32:5a:86:57:c3:19:84:5e:da:2f:
         64:53:88:2d:ab:99:6f:c9:0d:a4:7a:4c:10:4a:62:cc:4c:9c:
         df:21:b1:2f:ce:b5:9b:7c:25:97:31:90:5b:18:6e:41:be:75:
         0c:ab:a7:4b:b9:c7:ab:40:1c:87:f8:87:bc:2e:4f:c5:ff:90:
         74:50:95:f8:79:36:a3:6c:39:6d:2a:b1:c4:9a:58:9c:a0:60:
         e6:b2:ec:8f:6b:12:1a:07:c9:90:a4:9f:f4:70:42:4a:97:dd:
         e2:fc:bf:1f:33:f1:66:60:ca:40:9e:45:79:dd:3d:4c:1d:7c:
         7b:e8:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org