Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3332203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32322d3332203d3e20323633393030.roa (raw, json)
Hash identifier:          ec24oUWCQzQg0NKkOPfjqplfHDHYTkeb1TjRn/Q++JM=
Subject key identifier:   A9:C5:CA:5B:1E:0F:4C:9F:2D:DD:91:45:C4:88:D2:51:9F:DC:A4:EB
Certificate issuer:       /CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
Certificate serial:       12EFB441C7AA47D97408F990C5418F16208DB037
Authority key identifier: 5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3332203d3e20323633393030.roa
Signing time:             Fri 18 Aug 2023 13:34:01 +0000
ROA not before:           Fri 18 Aug 2023 13:29:01 +0000
ROA not after:            Fri 16 Aug 2024 13:34:01 +0000
asID:                     263900
IP address blocks:        138.204.148.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ef:b4:41:c7:aa:47:d9:74:08:f9:90:c5:41:8f:16:20:8d:b0:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B
        Validity
            Not Before: Aug 18 13:29:01 2023 GMT
            Not After : Aug 16 13:34:01 2024 GMT
        Subject: CN=A9C5CA5B1E0F4C9F2DDD9145C488D2519FDCA4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4b:7d:d8:60:f2:95:30:5d:88:66:d4:78:42:
                    ea:e4:9a:50:6d:f5:2e:0e:c3:6f:0a:54:98:e7:63:
                    6e:0b:0b:a2:e8:90:1f:f4:7e:47:0e:a5:11:28:28:
                    e6:86:78:2c:dc:f1:39:81:b5:5f:bc:0f:02:48:0a:
                    97:7a:9e:2e:f3:47:e5:41:60:a9:c3:e7:04:73:66:
                    98:97:90:fd:d3:00:8b:02:7d:66:7b:99:99:a2:10:
                    25:2e:89:2a:58:68:da:d3:79:84:c2:92:9a:a3:da:
                    d1:3d:f8:08:37:00:d8:ef:d7:c3:ab:f6:b8:7e:e1:
                    e4:23:f4:6a:4b:18:93:75:3c:54:73:97:b1:60:4c:
                    48:28:7d:fe:6b:a2:88:78:09:67:91:82:85:20:f0:
                    5d:c4:36:c7:93:d0:e1:24:f2:71:44:f5:79:97:ef:
                    be:dd:f1:7f:a8:dc:67:92:62:81:ed:12:be:f6:1c:
                    98:0f:f0:a9:4b:26:ac:8b:b0:56:6a:71:84:df:0e:
                    18:7e:43:16:de:bf:e9:20:29:37:6f:fe:fa:17:e6:
                    3f:e8:be:f1:4a:56:17:5c:e6:d3:a1:a4:f1:1c:f5:
                    41:3c:2a:91:97:6e:39:ae:b0:67:cd:97:8f:ef:9b:
                    40:89:9c:1f:54:e2:3d:05:da:0a:cc:2b:26:63:50:
                    17:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:CA:5B:1E:0F:4C:9F:2D:DD:91:45:C4:88:D2:51:9F:DC:A4:EB
            X509v3 Authority Key Identifier:
                keyid:5D:18:FA:4A:88:E7:A1:9A:02:E0:6C:D3:48:D6:BD:F2:63:B8:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D18FA4A88E7A19A02E06CD348D6BDF263B88E3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3332203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:6b:3e:7b:28:be:57:5a:7e:ad:35:8b:b9:99:d7:af:ac:
         41:fa:dd:4b:4f:1f:56:d7:74:3e:81:e0:dd:45:c6:7c:8f:bc:
         f0:52:e7:ee:e6:fe:5b:12:10:2c:90:ed:b0:9d:ed:36:7c:dd:
         52:38:3f:a6:89:ab:d1:9e:7d:6a:f8:b7:bd:89:ef:8b:4d:28:
         da:25:01:33:30:e7:fb:f3:66:44:51:00:42:be:e0:92:16:d6:
         7c:51:2d:15:ab:3b:e7:0b:46:44:1c:ed:d9:89:a8:51:38:3d:
         e6:9d:9d:58:43:33:77:b3:9d:8d:86:40:ad:70:09:a7:dc:89:
         fd:41:3b:c6:ea:9a:16:0f:28:3e:27:ce:bc:48:da:8a:47:d0:
         c5:30:42:b5:a4:93:99:a0:1c:7d:19:7c:fc:d6:79:19:d3:de:
         73:77:d7:53:01:99:e0:f6:b7:21:9f:eb:c1:a9:30:bd:29:47:
         8e:cf:2b:ce:bc:a0:81:76:e8:49:ba:89:25:65:9a:bb:c4:cd:
         6d:53:e7:55:58:6f:6f:93:26:15:76:06:f8:dc:6d:d4:d4:9f:
         a1:75:5c:cc:da:08:27:52:68:97:02:e7:67:cb:57:09:76:b9:
         d2:33:f9:c5:76:74:00:d8:18:2a:d3:77:cd:9e:24:d7:dc:d6:
         45:07:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org