Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File:                     3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier:          n/0vZDftn/S9v2P8PIrIIErFawnn/NW8GZyY3bsXNS4=
Subject key identifier:   E5:A2:7F:E9:E6:03:22:E3:15:1C:B4:93:40:04:AA:CB:4E:48:A2:7C
Certificate issuer:       /CN=2B2415E1247C183B58ED4B0E1E2FC58317A8936C
Certificate serial:       7A2E31FA6CCA710C6615AB124A4A74C6DF8BFE45
Authority key identifier: 2B:24:15:E1:24:7C:18:3B:58:ED:4B:0E:1E:2F:C5:83:17:A8:93:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time:             Wed 03 Jan 2024 21:16:33 +0000
ROA not before:           Wed 03 Jan 2024 21:11:33 +0000
ROA not after:            Wed 01 Jan 2025 21:16:33 +0000
asID:                     264561
IP address blocks:        138.0.252.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:2e:31:fa:6c:ca:71:0c:66:15:ab:12:4a:4a:74:c6:df:8b:fe:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B2415E1247C183B58ED4B0E1E2FC58317A8936C
        Validity
            Not Before: Jan  3 21:11:33 2024 GMT
            Not After : Jan  1 21:16:33 2025 GMT
        Subject: CN=E5A27FE9E60322E3151CB4934004AACB4E48A27C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:33:9a:48:0a:33:18:49:b0:e3:f8:22:6d:
                    2d:97:dd:74:ff:da:d5:8b:b0:51:29:d7:ab:7f:06:
                    84:84:02:20:e8:42:e0:c8:17:44:d3:09:d1:31:11:
                    42:de:13:76:22:a0:d7:0c:6b:1f:59:c2:13:03:1f:
                    2a:e1:82:44:48:3b:e5:b9:e3:19:55:b4:1d:f1:5d:
                    a8:d9:24:19:2f:6c:9d:db:47:4d:f9:03:72:b6:09:
                    17:70:8e:60:69:cb:1b:0e:34:d6:d2:a1:ae:86:6d:
                    7a:8a:9b:e9:1c:62:6c:64:1c:76:03:2c:19:7a:64:
                    41:7f:aa:8e:22:21:85:1c:0d:bb:b8:9f:5a:cf:9b:
                    dd:88:07:47:3d:84:77:ea:bc:f0:eb:f9:de:eb:62:
                    c5:21:18:e7:7b:9f:6f:99:10:51:d6:3b:90:a2:b7:
                    ab:23:5b:38:50:ee:9f:93:4a:ac:04:6a:7c:6e:04:
                    6b:6b:44:c9:65:6b:95:5a:7e:50:c7:f1:1f:0a:27:
                    4c:aa:c1:a9:5a:fd:9f:10:a2:fb:ea:c4:ca:0e:b7:
                    fb:b4:a4:70:25:d4:4c:ac:93:cd:10:5a:3f:14:71:
                    3d:1b:a8:4d:79:c2:6d:a6:e4:ba:f7:41:d1:94:41:
                    bd:bb:63:ec:13:ee:b1:24:83:77:0f:f8:c3:7a:ae:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A2:7F:E9:E6:03:22:E3:15:1C:B4:93:40:04:AA:CB:4E:48:A2:7C
            X509v3 Authority Key Identifier:
                keyid:2B:24:15:E1:24:7C:18:3B:58:ED:4B:0E:1E:2F:C5:83:17:A8:93:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B2415E1247C183B58ED4B0E1E2FC58317A8936C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:58:3a:a1:a4:cd:f1:98:2d:db:53:7c:d4:9a:40:2e:99:
         cc:f5:36:b6:ea:71:08:e3:0d:51:80:8f:aa:4a:04:6e:de:08:
         1d:95:83:17:44:35:01:56:65:86:29:56:7d:1d:ff:66:79:2a:
         cb:86:d9:24:47:35:d5:25:09:5b:8c:39:6f:a6:12:61:aa:ed:
         ed:5c:8f:8a:6b:2f:cf:e0:25:1e:c5:48:dc:9d:c6:70:43:2e:
         fa:b8:c1:b6:e5:f8:71:5d:56:cc:c9:7a:dc:df:8c:60:23:23:
         5a:fa:fb:92:b9:c5:f7:86:b6:f3:68:ab:4c:10:6f:dd:7d:24:
         b3:71:4f:0a:b3:6d:6d:8e:47:5b:e7:d8:52:5c:fd:b9:a2:8b:
         a5:2b:46:de:fe:e1:57:a2:97:33:c8:a4:ae:d2:d4:4c:51:df:
         e0:e5:68:fa:28:85:03:ca:68:bc:65:18:c3:03:93:41:1c:3b:
         6e:7f:09:ea:7b:4d:26:a6:7d:a2:06:7e:53:c9:f0:78:61:76:
         70:b8:76:1a:43:40:0a:80:0d:00:0f:96:38:48:ac:d5:52:de:
         9f:b9:71:7d:fe:4c:d9:7e:97:3f:6b:de:eb:a3:6e:31:ec:ef:
         9a:d1:72:10:15:23:de:c3:e4:79:e5:f5:07:5d:ae:e4:7c:58:
         cf:3c:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org