Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          DrWPlA3gWQ+yq4sSoX1hAc5j1xv3xet18PCz21L5LyM=
Subject key identifier:   58:34:72:DE:C0:D6:12:BB:58:57:69:AD:55:07:4D:6B:A3:4F:D5:83
Certificate issuer:       /CN=55268646F33053B8CA50C07462C0B20DA7420218
Certificate serial:       3A4746D872579F1B250FA16C5C278D2D7C65E6C6
Authority key identifier: 55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
Signing time:             Fri 26 Jan 2024 19:30:06 +0000
ROA not before:           Fri 26 Jan 2024 19:25:06 +0000
ROA not after:            Fri 24 Jan 2025 19:30:06 +0000
asID:                     263900
IP address blocks:        138.204.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:47:46:d8:72:57:9f:1b:25:0f:a1:6c:5c:27:8d:2d:7c:65:e6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55268646F33053B8CA50C07462C0B20DA7420218
        Validity
            Not Before: Jan 26 19:25:06 2024 GMT
            Not After : Jan 24 19:30:06 2025 GMT
        Subject: CN=583472DEC0D612BB585769AD55074D6BA34FD583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7f:31:73:ad:c2:06:3e:ec:53:5c:6c:73:fd:
                    11:d6:a9:e5:e2:4d:13:f2:4e:84:14:6f:8b:b8:c8:
                    62:2b:13:4d:5d:a7:7e:32:a0:94:ef:39:f9:82:0a:
                    7e:41:02:9f:b3:a6:68:31:95:3f:29:4c:61:42:12:
                    ca:5f:05:2f:52:6e:bf:dc:78:b6:f7:73:6c:17:f1:
                    32:4d:82:46:75:c6:dc:12:e1:79:69:89:f4:52:d6:
                    b8:e7:43:0f:b3:33:60:97:58:40:c5:cb:cc:55:6d:
                    c2:f9:28:75:30:b2:47:5a:40:4b:ef:33:87:34:c1:
                    fb:63:6d:c6:d2:2e:3a:7c:3f:94:2a:b7:0c:5c:f7:
                    1c:3f:e6:b2:b0:27:da:9f:dc:cf:df:b8:4a:e6:19:
                    55:8b:f9:90:85:66:67:fe:57:30:cc:34:54:a1:87:
                    fa:f5:3c:14:4d:fd:fe:21:9a:cd:ee:3d:3d:3f:ef:
                    47:4d:6b:f9:4c:6b:09:d2:8a:f0:e9:f1:d9:d8:15:
                    49:41:20:08:4e:b5:3e:6f:8a:d8:49:fa:2e:eb:bc:
                    bc:d6:c3:ff:cd:b4:41:63:8a:03:b7:0a:23:20:63:
                    8f:8e:49:46:a2:e0:d9:9a:82:ea:1b:75:5f:9a:f9:
                    91:0b:2f:07:15:28:58:0c:bc:2a:23:c5:97:81:35:
                    67:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:72:DE:C0:D6:12:BB:58:57:69:AD:55:07:4D:6B:A3:4F:D5:83
            X509v3 Authority Key Identifier:
                keyid:55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/55268646F33053B8CA50C07462C0B20DA7420218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:a8:9c:95:78:66:dc:d0:66:e6:cb:79:20:af:fe:5e:e3:
         81:ad:d4:a8:21:a1:25:38:aa:7b:60:da:b7:ca:b1:ca:37:61:
         14:4d:89:49:e3:c8:e3:20:2e:5e:27:c6:a9:be:da:b0:2f:f4:
         e8:b5:e2:79:1f:d1:5d:d6:1d:91:fb:19:2b:45:28:b8:f7:6b:
         43:3a:8f:22:a6:0c:55:08:dc:10:de:27:1a:36:6c:a0:6c:20:
         c9:35:ad:c4:af:f6:85:04:05:6d:83:4d:28:ca:cd:13:ce:6f:
         68:67:d5:a4:13:3e:b6:e3:d5:30:77:6f:88:8a:22:0f:99:0c:
         01:09:51:94:ec:a0:b4:a5:eb:d2:d1:1b:22:9f:a8:20:0f:f9:
         0e:53:da:f0:be:f8:bc:4d:23:68:11:ca:b5:29:2c:d8:ed:50:
         b5:5d:b6:6f:a6:90:14:ed:0c:84:19:0d:26:fe:ac:42:10:93:
         d8:e6:19:b1:ff:c1:4d:9b:f0:c2:43:b3:9c:40:20:ba:e5:5f:
         a7:39:5c:f2:fe:11:43:f9:d9:6e:42:a1:82:51:61:2d:4c:d1:
         b0:9a:5a:dc:15:38:14:0b:e7:ab:44:bd:7a:1e:2e:6d:0e:ac:
         2f:e5:da:d3:5d:23:a7:9a:c6:86:ee:23:12:23:28:73:a0:1b:
         7e:92:d0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org