Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3133382e39372e31362e302f32322d3234203d3e203532363034.roa
File:                     3133382e39372e31362e302f32322d3234203d3e203532363034.roa (raw, json)
Hash identifier:          BY3Pc0WQtYk5KfgIi89HcNAjjuVRrC4adwRVWmmeyj8=
Subject key identifier:   48:EF:06:EA:CB:97:0A:CF:F0:80:46:6E:B4:F9:94:AA:45:E6:79:DE
Certificate issuer:       /CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
Certificate serial:       3A074DE16F05B862C57E0212E4ADFC0C706FB14F
Authority key identifier: 68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3133382e39372e31362e302f32322d3234203d3e203532363034.roa
Signing time:             Wed 22 Nov 2023 22:00:00 +0000
ROA not before:           Wed 22 Nov 2023 21:55:00 +0000
ROA not after:            Wed 20 Nov 2024 22:00:00 +0000
asID:                     52604
IP address blocks:        138.97.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:4d:e1:6f:05:b8:62:c5:7e:02:12:e4:ad:fc:0c:70:6f:b1:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68D6EC8CA8D8819E8BEE6350916861CAC9A539F7
        Validity
            Not Before: Nov 22 21:55:00 2023 GMT
            Not After : Nov 20 22:00:00 2024 GMT
        Subject: CN=48EF06EACB970ACFF080466EB4F994AA45E679DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1b:8c:c8:02:3b:d8:d2:ae:48:6c:b5:3e:5c:
                    00:9a:05:2f:e3:56:80:3e:d2:3a:e1:75:8d:28:04:
                    6d:8a:b7:6f:52:4a:d2:4b:4a:f7:62:5c:27:c9:ee:
                    f8:6d:0b:cf:e7:b4:92:d7:0d:69:d7:be:cd:63:ea:
                    cf:a2:33:b8:ba:6b:e0:ba:bf:d3:85:e7:97:59:de:
                    d2:24:1f:11:84:4d:b4:a9:db:8f:64:b3:a6:80:a6:
                    1d:4c:56:3b:aa:62:3b:6c:d3:99:ac:79:dd:7a:c3:
                    ed:2c:ae:40:1b:8f:1c:8d:a8:e6:2f:65:72:b9:52:
                    d1:7e:5f:c1:1e:19:50:12:a4:29:0c:81:ae:0d:77:
                    79:fd:22:ff:b9:da:b1:09:86:14:1b:0b:9e:ad:e3:
                    83:9f:ac:28:7a:66:ff:b1:c4:b8:bc:cf:ea:ed:10:
                    3a:c5:d2:a5:94:ad:85:49:59:5b:5e:b4:78:87:ff:
                    08:db:99:49:46:9d:1e:e1:bc:19:ff:b6:a3:a9:51:
                    be:3d:fd:57:79:56:19:18:3c:e8:92:1a:e3:51:b4:
                    c3:45:c2:bd:b4:49:b4:b3:7a:83:23:e3:82:77:ca:
                    78:bf:b9:c0:2c:02:dc:52:11:f0:45:9e:7f:97:02:
                    95:c1:4c:c8:8c:dd:aa:79:f8:74:c9:f2:5d:0d:06:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:EF:06:EA:CB:97:0A:CF:F0:80:46:6E:B4:F9:94:AA:45:E6:79:DE
            X509v3 Authority Key Identifier:
                keyid:68:D6:EC:8C:A8:D8:81:9E:8B:EE:63:50:91:68:61:CA:C9:A5:39:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68D6EC8CA8D8819E8BEE6350916861CAC9A539F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKDYTE6NTZqJTXEXedivLsFffuQkh83Yn5dtbxymKhJ8/0/3133382e39372e31362e302f32322d3234203d3e203532363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:e2:d3:e8:fe:4a:a9:5e:aa:1b:8d:0a:b1:d5:89:47:2b:2b:
         1c:6c:6c:e6:b5:0a:5d:94:79:04:30:b0:fd:de:7a:d6:28:6d:
         f3:cd:75:16:86:a8:73:5c:b2:9d:07:04:33:74:73:9c:dd:b4:
         43:72:35:51:43:30:91:09:12:47:e5:ca:41:ac:43:a8:05:15:
         4a:49:44:be:5a:9e:8b:7f:13:67:51:69:3d:2d:f7:4b:a8:e7:
         4f:ae:72:a2:74:c6:ce:8f:81:3f:73:92:32:0f:db:4b:7e:b8:
         5b:ac:13:35:ab:f6:bb:9b:bf:53:2e:43:18:98:10:e1:0d:90:
         08:e6:28:8d:73:b7:7d:64:63:d9:a3:e8:14:98:ec:f4:e6:6f:
         49:71:f7:7a:fc:33:09:4b:0a:93:52:08:f5:38:7e:11:97:60:
         cc:8e:91:ff:83:35:1a:34:87:e7:69:49:7f:4b:a6:6e:9d:91:
         f7:ba:01:08:bd:e1:c0:5e:78:22:4f:c7:d7:96:66:02:e3:83:
         1a:fd:25:6b:02:8f:0f:65:e4:68:61:12:84:8c:20:92:e5:0e:
         3a:f8:6b:00:c6:b6:51:d7:09:b6:aa:cb:ff:6e:43:9e:3e:d1:
         48:93:49:31:c2:16:85:bb:bc:d0:9f:8f:33:b9:02:4d:06:48:
         85:e0:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org