Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34312e302f32342d3234203d3e20323633333834.roa
File:                     3133382e3138352e34312e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          ayXoU8RWrZ5oX532vaOS54D9M4Sfg3TLDaR6QbBRmxE=
Subject key identifier:   46:10:ED:58:27:8A:E2:33:B3:D4:3A:6C:C9:11:2C:C8:F5:14:9D:F1
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       799CBD20F65B3BEC06BA750A2983F314CAC632A3
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34312e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:12 +0000
ROA not before:           Thu 23 Nov 2023 20:06:12 +0000
ROA not after:            Thu 21 Nov 2024 20:11:12 +0000
asID:                     263384
IP address blocks:        138.185.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9c:bd:20:f6:5b:3b:ec:06:ba:75:0a:29:83:f3:14:ca:c6:32:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:12 2023 GMT
            Not After : Nov 21 20:11:12 2024 GMT
        Subject: CN=4610ED58278AE233B3D43A6CC9112CC8F5149DF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:88:dc:0e:8f:1c:cb:85:b6:f1:99:72:36:
                    bc:24:fe:26:63:00:c0:7e:22:76:f4:83:44:07:cc:
                    1e:89:51:72:c1:10:91:5a:b1:5d:51:8c:55:45:b5:
                    45:39:75:42:90:a0:3e:36:6b:c2:36:c1:75:5f:29:
                    60:83:88:b4:3b:65:4d:ed:a8:61:08:45:6a:e7:16:
                    b7:69:b5:98:2a:cb:09:0e:09:7d:ba:c3:f7:7c:da:
                    3e:d3:05:1f:b0:9e:a3:87:74:81:84:f7:0a:c8:e4:
                    3f:27:7a:37:ac:03:4a:d9:ec:a1:6b:51:64:0e:6e:
                    15:f0:16:34:89:f6:9d:6e:0d:27:3f:21:72:23:37:
                    3d:01:c4:fa:31:eb:48:86:44:39:d8:e2:8d:55:95:
                    80:27:a4:9d:80:e2:bb:37:42:f6:66:b7:e8:c4:47:
                    d2:f7:bd:d8:f4:00:7b:cf:48:80:79:ac:3e:27:f2:
                    19:45:9e:f9:3c:28:a2:23:ad:7f:d7:58:c4:e2:cd:
                    c6:94:3a:9f:bf:93:2e:6c:63:51:a9:15:b9:35:f6:
                    40:06:f7:e7:31:cf:e2:77:80:8a:2b:9e:c8:24:d2:
                    02:13:57:36:7b:8b:ed:f7:44:c3:e5:29:4d:33:4e:
                    f2:5e:1b:e7:b9:33:8f:d2:73:09:a6:50:8a:65:df:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:10:ED:58:27:8A:E2:33:B3:D4:3A:6C:C9:11:2C:C8:F5:14:9D:F1
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34312e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:68:2f:4f:b7:ab:c3:91:e8:b6:d0:dd:ae:aa:d1:c4:b5:
         0f:87:02:8e:d1:63:d1:31:6a:f9:aa:ef:a1:33:2b:a0:31:8f:
         8d:05:74:be:c0:29:15:f4:81:09:0f:24:30:b4:75:68:ec:31:
         4e:84:b8:87:35:51:7c:e5:be:00:f1:82:14:7b:98:87:3d:db:
         45:e5:35:73:a5:b5:10:32:be:27:35:b3:5e:50:d3:76:c8:b6:
         cd:9c:70:92:c2:e1:33:eb:e7:8f:46:5b:88:82:13:25:cc:35:
         4f:26:c7:79:02:75:fe:3b:ce:3c:63:70:1e:e6:40:a4:8a:1c:
         7f:c1:8f:5d:7e:05:11:a9:84:ac:7d:36:3b:5f:5c:52:e4:71:
         df:f9:ef:91:22:ab:90:a4:9e:e5:29:15:17:53:b8:97:98:1c:
         db:db:f8:05:9f:c3:e6:ba:3c:92:c3:a9:cf:08:08:39:d4:8b:
         e9:aa:21:3e:c3:d0:74:b0:01:3a:56:4b:82:e2:f6:5b:55:1e:
         1f:e8:95:0a:d1:16:bb:c2:3d:2a:ad:e1:a3:d7:be:c0:83:b9:
         e8:cc:de:4b:f7:9c:07:b5:1b:ce:a4:4c:d5:8c:6d:0b:f0:30:
         f4:46:37:95:9e:8a:8c:a9:1b:20:22:36:3c:ec:3c:67:bf:76:
         82:61:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org