Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          eG5ie2P1VdnD9auNixIBrh8xkWl7RBu660ULZNBIN1s=
Subject key identifier:   1D:A8:3F:8C:41:E5:91:3C:20:59:A5:94:EE:3A:BA:66:90:22:FE:E7
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       28255FAA5822EADB455F1AFD2D441BB74E74F428
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:15 +0000
ROA not before:           Wed 20 Dec 2023 14:01:15 +0000
ROA not after:            Wed 18 Dec 2024 14:06:15 +0000
asID:                     263900
IP address blocks:        138.204.148.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:25:5f:aa:58:22:ea:db:45:5f:1a:fd:2d:44:1b:b7:4e:74:f4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:15 2023 GMT
            Not After : Dec 18 14:06:15 2024 GMT
        Subject: CN=1DA83F8C41E5913C2059A594EE3ABA669022FEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6c:63:ba:e7:cb:73:8b:f7:fa:45:38:8c:7e:
                    a0:6e:f2:2d:3c:8f:f1:6d:3b:de:44:eb:ef:7e:27:
                    08:d9:00:8f:ac:a3:c2:54:11:1f:ab:81:d9:f4:e5:
                    0b:5d:98:30:f8:3a:6b:bb:b4:9e:10:42:ea:dc:53:
                    c8:f0:61:04:35:d0:34:81:66:6a:23:db:c5:4b:30:
                    c6:6d:1b:d0:56:24:eb:6b:78:24:4c:e8:89:4d:03:
                    cc:b6:72:50:22:26:4e:16:3d:51:e2:d9:6c:9b:0e:
                    9a:2e:63:5c:72:86:ad:4a:1e:23:14:2d:10:0e:b8:
                    ee:d9:55:28:2f:c9:f6:ac:71:8d:df:a3:c4:1d:42:
                    3d:c8:d4:83:72:6f:eb:2a:4c:9f:18:07:df:12:4c:
                    61:ac:c0:31:1e:6d:c0:12:2a:f0:56:5a:8a:49:4d:
                    d4:92:16:b9:66:c2:de:c9:f2:79:71:b2:13:2a:40:
                    a5:cd:b7:17:57:21:16:c8:26:8a:ad:af:74:f9:4f:
                    50:2f:79:83:25:b2:ee:7e:0b:37:1d:9e:70:a2:4e:
                    92:cf:b0:79:95:50:59:4d:22:30:f4:f0:aa:0a:1d:
                    b1:7e:35:de:82:0c:ad:36:48:f7:86:ac:24:c3:3f:
                    18:70:4f:9f:91:7d:0f:ee:08:39:8c:38:6f:b3:5f:
                    af:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A8:3F:8C:41:E5:91:3C:20:59:A5:94:EE:3A:BA:66:90:22:FE:E7
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a4:fd:5f:c4:7b:84:55:09:f1:65:65:aa:2e:61:23:4c:e7:
         80:85:97:3e:63:75:19:a1:d6:b2:fb:87:0a:a1:91:d3:55:fd:
         67:2a:15:d1:5d:41:b5:ec:e8:24:de:f4:a2:00:e0:8c:2b:f2:
         66:b2:ad:d4:9d:33:74:45:d4:dd:5e:eb:2a:a4:c9:09:29:c0:
         05:cc:43:23:23:20:e0:71:65:4a:89:54:61:c7:da:c5:c0:a3:
         fb:f7:15:38:cc:26:47:78:9e:60:04:54:2f:69:b8:07:a4:bf:
         0f:14:ce:c6:c0:50:92:ee:17:4e:c1:6f:42:15:c4:fa:e1:a6:
         10:3d:f8:f0:e3:97:61:20:8d:65:a6:56:8d:f9:5a:b9:0b:4d:
         f0:b6:3f:1f:d4:da:93:93:f2:14:18:10:60:3c:4b:53:b8:d9:
         52:ca:0d:fc:22:f5:c1:80:14:57:67:cd:0e:15:37:a3:6d:b9:
         46:41:b1:52:a8:07:27:1f:0b:f9:04:c9:51:4f:f7:c3:b5:76:
         fa:5e:3a:fa:22:18:c2:1d:43:35:1d:c1:20:0d:84:57:b3:48:
         cb:b0:60:5d:24:78:25:11:17:26:5f:25:7b:30:a4:7d:d4:aa:
         dd:86:9b:01:09:4e:24:a1:2a:c8:62:93:b6:bf:68:c4:57:9c:
         18:0a:50:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org