Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa
File:                     3133382e302e3233362e302f32322d3234203d3e20323634353733.roa (raw, json)
Hash identifier:          BC4/YRP/X0t+cwusMOaew2l8+ZDTdw7JIyZ96FYtwQk=
Subject key identifier:   D6:3F:5C:A6:57:18:41:FD:93:DA:EB:68:8F:F7:30:5A:56:6E:24:B2
Certificate issuer:       /CN=B18FEFC21128E1128D2A6C7E0081978BC8850FDC
Certificate serial:       5D3D88276F9213C79BEAA827443A0F3E80E8111C
Authority key identifier: B1:8F:EF:C2:11:28:E1:12:8D:2A:6C:7E:00:81:97:8B:C8:85:0F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa
Signing time:             Thu 21 Mar 2024 19:22:29 +0000
ROA not before:           Thu 21 Mar 2024 19:17:29 +0000
ROA not after:            Thu 20 Mar 2025 19:22:29 +0000
asID:                     264573
IP address blocks:        138.0.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:3d:88:27:6f:92:13:c7:9b:ea:a8:27:44:3a:0f:3e:80:e8:11:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B18FEFC21128E1128D2A6C7E0081978BC8850FDC
        Validity
            Not Before: Mar 21 19:17:29 2024 GMT
            Not After : Mar 20 19:22:29 2025 GMT
        Subject: CN=D63F5CA6571841FD93DAEB688FF7305A566E24B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:b4:73:98:12:4c:37:ed:b7:81:0c:97:df:
                    36:31:21:a0:93:be:17:d4:10:58:8b:74:c6:66:a9:
                    3f:2d:5a:12:57:35:3c:b5:85:9b:17:31:d0:06:8c:
                    4f:1b:7d:4d:6a:0c:bd:b0:82:eb:de:2c:eb:ba:28:
                    36:1e:81:82:85:7a:7e:5e:5a:c8:51:a2:4b:cd:0e:
                    b3:8c:4b:09:e0:d6:c1:5d:5a:64:23:3d:c8:d6:28:
                    02:a1:7e:84:30:82:67:3c:64:ad:0f:7a:1f:cf:f3:
                    94:3b:1c:82:dc:26:82:3d:83:49:2f:21:4b:94:79:
                    5d:8e:62:73:3b:50:e6:3f:43:66:aa:83:98:e6:33:
                    14:c7:8b:fa:be:09:ba:80:16:64:22:67:a9:7e:39:
                    b1:67:5d:d5:13:17:64:c7:af:30:2f:59:67:0d:4a:
                    97:dd:2f:cb:3b:2d:58:e6:f6:7c:7c:58:3b:ac:49:
                    81:ac:b5:97:87:1b:32:cb:eb:e7:91:43:8c:52:5f:
                    87:4b:c7:df:40:c9:54:47:3e:7c:48:6d:b9:8d:e4:
                    4f:e2:f1:d0:f2:25:1a:aa:04:53:4a:a7:a5:75:f0:
                    0b:f8:5f:b8:3a:1c:90:85:8c:72:b6:93:5d:1f:4f:
                    a4:5d:05:c8:ce:45:4c:6f:19:fb:cd:64:5b:fb:4c:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3F:5C:A6:57:18:41:FD:93:DA:EB:68:8F:F7:30:5A:56:6E:24:B2
            X509v3 Authority Key Identifier:
                keyid:B1:8F:EF:C2:11:28:E1:12:8D:2A:6C:7E:00:81:97:8B:C8:85:0F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B18FEFC21128E1128D2A6C7E0081978BC8850FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZ31i2iVzQPCDjYu89Bx78mVaLL9b6jZtySUS3t4vGkE/0/3133382e302e3233362e302f32322d3234203d3e20323634353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:8a:02:75:b6:5d:09:ad:d4:0a:51:d8:1d:9d:10:e5:61:
         ac:e2:74:c7:51:c8:f6:f5:c1:28:d0:18:a1:ef:f2:6a:e9:f4:
         c7:19:77:df:ff:b6:c9:68:10:b9:bc:f4:ee:9f:58:28:8c:b6:
         94:f6:11:5a:65:0f:6e:c4:17:5b:9c:a6:77:f1:fd:37:ee:12:
         67:42:7b:3e:75:b1:91:0e:5c:68:23:38:8b:dd:8b:27:bd:8b:
         70:a0:5c:7a:17:cc:0c:7f:0a:bf:af:61:86:b7:50:89:8b:5a:
         2c:14:16:01:96:bc:29:d3:77:cd:53:26:37:3c:c2:4a:17:58:
         e3:af:4b:6c:bf:c4:87:7b:a3:32:c8:d8:97:aa:d1:eb:09:ae:
         5a:2c:2e:d0:a7:c3:f9:0f:1e:66:e3:69:df:54:21:2d:b6:30:
         6e:ef:81:4b:8e:b3:a4:0b:ed:dc:53:4b:86:ac:00:a8:cc:9c:
         90:81:82:ae:ad:d3:dc:e3:77:5d:87:bb:37:8f:55:f9:89:0b:
         cd:42:7d:88:ef:46:d0:44:cd:6b:1a:3d:6d:07:48:e1:30:17:
         1f:06:2e:6d:19:1a:ef:fc:12:de:53:94:e9:3f:2d:a4:01:1d:
         54:9f:37:4d:68:8c:07:ee:24:50:ca:86:91:4f:83:6e:6a:32:
         7a:58:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org