Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          UlY5r0TPZxViGriQs8iBZicafY1Lauxz2Z9C6cMz0ZU=
Subject key identifier:   34:8B:EE:CF:DD:12:DD:91:13:F6:66:BB:C3:82:6F:B4:71:24:DF:9D
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       0B6DCC5949CCC61DE95E6F1F3224C3DE69AF9FB0
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        138.204.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6d:cc:59:49:cc:c6:1d:e9:5e:6f:1f:32:24:c3:de:69:af:9f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=348BEECFDD12DD9113F666BBC3826FB47124DF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:0c:84:17:c7:1c:b1:ab:ee:4d:f3:02:47:
                    8e:3e:33:5d:76:67:1f:d4:d8:f1:32:b4:96:84:96:
                    d8:ba:44:a0:f7:8b:f5:85:5b:cb:23:3c:44:b3:5f:
                    dd:81:81:e8:d8:bd:ad:a5:34:93:c3:1f:4c:5b:5a:
                    7b:b4:f6:22:c5:f9:69:13:87:fa:61:7c:b6:3d:0a:
                    39:fa:48:4d:10:f4:fb:6b:0a:ab:e3:34:1b:f4:9c:
                    55:d9:5c:d5:25:b6:ac:09:d3:25:00:38:38:e8:17:
                    a6:ae:92:cc:01:3e:4e:28:0c:96:91:35:15:c2:a1:
                    eb:b1:1b:ce:1a:c0:9c:66:63:66:8d:5c:b7:59:22:
                    5b:63:9a:18:88:f1:c0:e3:19:92:3d:7c:a0:5c:6a:
                    3f:4e:ea:35:e4:bc:e4:39:98:5c:57:46:c3:ac:07:
                    e5:ec:78:b5:62:d8:68:a6:9a:81:3e:d8:ca:37:af:
                    a4:53:5b:55:6f:06:81:99:4c:11:3f:0d:dc:19:5e:
                    b9:d3:06:c1:1e:e5:a6:e9:60:b5:40:33:c6:fd:ce:
                    92:0f:da:d1:51:28:12:ad:71:0e:3f:b6:74:ce:28:
                    14:b4:38:b5:d9:25:ed:9e:5a:9c:dc:f6:16:95:9e:
                    05:ad:fd:8a:8c:be:5e:a0:69:c8:65:29:75:d1:59:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8B:EE:CF:DD:12:DD:91:13:F6:66:BB:C3:82:6F:B4:71:24:DF:9D
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134392e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:da:f7:ea:ea:7f:8c:b6:77:a3:3e:bc:a1:75:b3:d5:0a:
         98:27:17:15:d6:4a:d9:ce:28:50:63:ae:b6:ba:a1:c2:5b:04:
         61:42:47:d7:e4:68:6e:00:f2:1b:ff:85:eb:67:69:21:d0:32:
         58:3b:81:c2:75:a4:1e:98:7a:f5:3a:20:c5:bd:4f:c1:15:b0:
         36:12:cd:ca:d7:2f:07:9b:8e:a2:e4:c8:2f:eb:89:12:1b:34:
         6d:cd:84:42:41:5f:bf:40:6a:08:de:70:c3:f6:22:e2:46:a4:
         fa:c9:a7:98:1a:4c:50:9a:a1:a6:ff:7e:66:e5:5d:c2:59:fb:
         04:b4:7a:0a:6f:00:20:b8:41:3c:55:f6:f3:86:14:a6:dd:00:
         38:54:fe:f9:58:3a:f8:b6:43:14:f2:8e:de:f3:a4:9b:e9:80:
         92:36:2c:80:f8:2d:d4:71:83:e3:28:64:3d:a5:ca:78:93:78:
         4e:78:7b:1d:f2:8e:26:7d:16:1d:43:09:ac:08:1c:29:b2:3f:
         a9:6d:79:1a:64:c7:98:5e:d2:fd:0c:ad:44:c7:09:63:f1:f4:
         af:02:c4:3d:ff:bf:79:ce:ba:c5:4d:a7:6c:be:63:53:5f:18:
         db:a7:31:d5:39:8e:52:1e:bd:e0:c6:66:69:b0:67:42:70:42:
         c9:2f:d9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org