Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa
File:                     3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa (raw, json)
Hash identifier:          vsus4OQU8eDWsOCCwGurTQHmIIYwYUlGujlrqKTXAUk=
Subject key identifier:   AC:56:C1:AB:61:8A:71:B6:0F:72:8A:B1:BF:59:F6:4F:19:5B:92:B7
Certificate issuer:       /CN=449F0959CA2E6BDCBC1B721B60810876C153408D
Certificate serial:       5A8437AD1CD16E102DB706F3925F149281B8725D
Authority key identifier: 44:9F:09:59:CA:2E:6B:DC:BC:1B:72:1B:60:81:08:76:C1:53:40:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449F0959CA2E6BDCBC1B721B60810876C153408D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa
Signing time:             Tue 15 Aug 2023 16:43:18 +0000
ROA not before:           Tue 15 Aug 2023 16:38:18 +0000
ROA not after:            Tue 13 Aug 2024 16:43:18 +0000
asID:                     270919
IP address blocks:        138.185.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:37:ad:1c:d1:6e:10:2d:b7:06:f3:92:5f:14:92:81:b8:72:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449F0959CA2E6BDCBC1B721B60810876C153408D
        Validity
            Not Before: Aug 15 16:38:18 2023 GMT
            Not After : Aug 13 16:43:18 2024 GMT
        Subject: CN=AC56C1AB618A71B60F728AB1BF59F64F195B92B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:93:cc:b8:b9:1b:e9:7e:b9:eb:2b:36:5e:
                    f0:c4:c2:56:a2:d3:ec:c2:d9:95:de:f3:ab:2b:5a:
                    17:3b:d1:2f:b9:4e:46:42:64:08:76:6a:34:fe:d9:
                    ce:23:94:ac:9e:63:de:85:b2:cf:93:33:60:ae:69:
                    06:54:b5:11:14:ff:96:8d:3f:43:fe:f3:2b:5d:46:
                    31:2d:9a:f9:23:1b:f0:ae:c4:6b:84:d5:c2:7d:08:
                    97:1d:c1:e2:62:8f:1a:2e:5d:e6:83:9b:a3:c2:af:
                    8e:1f:5e:cd:ce:3b:4e:37:42:9e:d4:7c:3e:d8:c3:
                    91:e2:5c:a0:ba:73:61:de:66:13:89:76:0f:96:f9:
                    63:28:d9:e2:08:93:73:6f:4b:c1:00:04:38:aa:f1:
                    ea:40:da:c7:8f:8f:d4:0d:d5:57:c8:01:d1:91:8c:
                    3b:d2:ae:e0:d6:3d:92:23:f4:b4:ce:a4:6f:41:a6:
                    23:a4:8e:bb:b6:04:13:a1:be:c1:49:69:b4:86:0a:
                    19:f4:ce:70:0f:76:54:08:fb:c5:6a:9d:6a:38:d7:
                    11:5f:8b:da:07:3d:b1:5c:13:1b:78:d1:a1:00:70:
                    47:68:c8:b9:c7:88:ab:8a:20:96:05:27:e8:77:34:
                    f5:10:7b:01:d7:ab:5d:04:83:da:80:e5:59:54:e4:
                    0b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:56:C1:AB:61:8A:71:B6:0F:72:8A:B1:BF:59:F6:4F:19:5B:92:B7
            X509v3 Authority Key Identifier:
                keyid:44:9F:09:59:CA:2E:6B:DC:BC:1B:72:1B:60:81:08:76:C1:53:40:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/449F0959CA2E6BDCBC1B721B60810876C153408D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449F0959CA2E6BDCBC1B721B60810876C153408D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e37312e302f32342d3234203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:57:a6:13:0c:72:7f:c3:03:9e:a2:b7:a6:d5:53:88:27:18:
         5f:aa:77:1e:ce:85:2a:41:83:16:43:65:ca:69:6f:08:84:62:
         f1:9a:13:fe:ca:b4:ff:08:4c:d2:51:58:53:d0:72:1c:8e:89:
         72:9b:d4:b0:b2:c3:ab:ab:60:d1:b0:62:b8:56:04:7a:1c:01:
         c6:36:6f:45:0f:12:e3:83:3e:e2:a6:a0:94:51:59:c3:c7:f0:
         46:8b:12:17:42:1e:46:59:e2:24:5a:10:98:d7:25:01:0b:2f:
         68:8c:fa:68:c4:4b:e3:d8:d2:d8:05:8d:76:a2:f9:f9:be:82:
         f7:a8:06:f5:f6:76:c7:27:ec:f1:32:f1:f7:5d:ed:73:f1:5a:
         44:4a:b2:ae:26:b5:fa:75:be:22:df:54:00:71:5f:d2:65:e2:
         c1:95:93:1d:86:7f:b5:de:9e:eb:60:e3:2e:b9:7d:6f:c2:ab:
         74:a5:92:d7:24:ca:c2:bd:f3:02:d2:5a:fe:6c:48:0a:31:d1:
         23:44:97:5a:01:5c:fd:43:fa:88:0e:58:08:d3:26:45:b0:1a:
         5d:bd:9d:26:f0:ac:92:c5:a0:62:9a:95:4c:7f:8d:9a:4a:0b:
         3c:90:4c:f0:80:11:fb:44:c8:fe:28:89:33:68:55:82:50:95:
         b4:31:dc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org