Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
File:                     3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa (raw, json)
Hash identifier:          Hz4ORIaWv0LWI/lFj2iyb7TBlLX5OIlaktmPehkH/MQ=
Subject key identifier:   BD:F8:34:9C:84:5F:46:8B:20:33:58:13:D4:63:E0:11:0A:17:9B:54
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       3AF1785333B691621D5C51B9D683B06E5F0D3807
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        138.204.150.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:f1:78:53:33:b6:91:62:1d:5c:51:b9:d6:83:b0:6e:5f:0d:38:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=BDF8349C845F468B20335813D463E0110A179B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:89:21:28:9b:34:d0:f9:ba:0c:bd:d2:7a:
                    3a:0c:30:63:b6:a6:d1:9a:e1:eb:5b:22:00:2d:de:
                    b7:0d:74:5d:8b:f6:71:57:38:88:85:e9:e4:e6:df:
                    aa:40:53:23:da:94:e8:37:37:a2:24:05:43:8c:3d:
                    46:84:f2:b0:6b:1d:7e:2b:aa:46:93:e7:85:8b:91:
                    11:b6:d7:2d:2e:44:b7:ea:fb:c2:da:a5:7f:88:3b:
                    d8:9d:94:2b:63:8e:2b:a8:6e:03:74:2b:88:00:99:
                    ef:40:a6:b5:ac:ea:18:a0:b5:8c:59:fc:a9:02:48:
                    17:6e:19:58:83:8f:08:cb:ad:a2:79:d7:13:eb:15:
                    24:87:d6:ba:f8:e4:56:9f:26:93:49:23:3f:55:ff:
                    45:7b:03:75:d0:69:0c:b1:ef:b6:7d:98:d7:51:aa:
                    17:7b:f1:e9:93:e3:ea:1d:5d:7f:4c:ba:fe:84:d1:
                    3d:11:3e:8b:b8:e9:a7:8c:7b:d0:1b:2b:34:bc:02:
                    62:17:c2:f9:32:55:93:b0:be:da:82:ca:b0:17:c1:
                    e2:b5:62:85:00:97:a8:1c:ed:4b:72:da:29:b9:7c:
                    0a:3f:c2:f8:4e:c7:57:7b:81:91:fd:2e:bc:11:52:
                    18:a6:41:b7:d8:2d:1f:4b:d1:28:d2:9f:62:ab:3c:
                    df:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F8:34:9C:84:5F:46:8B:20:33:58:13:D4:63:E0:11:0A:17:9B:54
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32332d3233203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:40:60:81:24:dc:4d:a0:27:bc:3d:10:88:7e:c3:f6:6c:68:
         04:87:bc:b4:6e:f8:51:da:79:39:9a:55:81:4f:3e:b3:40:12:
         29:5a:1c:b0:33:ae:06:c6:da:20:97:77:04:00:4c:c9:33:a1:
         e1:2a:21:15:32:e5:0d:87:f6:78:66:cc:0b:a9:8a:79:ce:ea:
         b9:4d:cb:f0:da:98:8b:c0:e7:83:71:ec:30:f3:da:75:45:1d:
         7d:70:d6:5b:51:6a:ff:15:56:79:f9:a4:3b:2d:30:42:10:08:
         bb:f0:4f:54:72:45:2d:95:98:ec:e2:0f:4e:b6:85:d1:1e:cf:
         b6:31:39:83:c3:06:1a:6e:47:d5:27:ab:11:1b:eb:27:66:f0:
         d1:ac:93:7a:71:14:60:f1:6c:26:84:0e:9d:bb:be:d1:5d:fb:
         ae:49:3f:18:c1:e2:e0:08:7e:2c:f3:ea:a9:74:46:c7:12:0f:
         b8:8f:fa:47:4a:ec:d8:08:55:b8:cf:2e:a6:2c:4f:b4:b8:70:
         92:44:5c:28:98:14:28:ac:a0:af:23:27:ec:89:6d:b6:f8:d2:
         b4:32:88:5b:d3:78:bc:bb:f3:5e:40:de:2e:f8:7a:4f:78:d9:
         bf:17:3d:82:5a:bc:f6:2c:47:4e:9b:fc:38:66:da:46:70:ef:
         74:08:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org