Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa
File:                     3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa (raw, json)
Hash identifier:          guhDyfYEtdhhiF+fX96EPm1+1yU+q2IScAPJLYAg5j8=
Subject key identifier:   FD:A3:CF:CD:B0:5A:67:A0:38:F1:5C:53:6A:58:B9:60:A3:95:AB:3A
Certificate issuer:       /CN=5578365AC7BA35472A6FC6D697540848F8A67D88
Certificate serial:       757A10080D5B56A3E662D1FAB6337892959D7281
Authority key identifier: 55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5578365AC7BA35472A6FC6D697540848F8A67D88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa
Signing time:             Thu 07 Nov 2024 14:33:59 +0000
ROA not before:           Thu 07 Nov 2024 14:28:59 +0000
ROA not after:            Thu 06 Nov 2025 14:33:59 +0000
asID:                     264257
IP address blocks:        138.118.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7a:10:08:0d:5b:56:a3:e6:62:d1:fa:b6:33:78:92:95:9d:72:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5578365AC7BA35472A6FC6D697540848F8A67D88
        Validity
            Not Before: Nov  7 14:28:59 2024 GMT
            Not After : Nov  6 14:33:59 2025 GMT
        Subject: CN=FDA3CFCDB05A67A038F15C536A58B960A395AB3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:b2:09:e3:c1:6f:95:44:a6:27:ce:04:7e:
                    ff:e0:30:fd:ac:0a:97:54:ad:c4:f9:a2:58:9e:30:
                    3e:9a:b5:17:40:67:59:c8:fa:d5:ff:f4:23:ea:9a:
                    ba:a6:bc:94:45:9c:81:fd:e4:f7:ea:a7:54:1c:da:
                    20:63:3c:1e:3a:43:37:29:23:1c:c0:59:58:71:77:
                    ed:e0:b7:f3:7a:f5:6a:66:7a:6a:c3:fa:58:ee:f0:
                    4c:3c:79:86:a4:50:90:cf:74:96:e8:65:c4:31:fa:
                    0d:4a:a6:18:32:6f:cc:61:1b:c5:0a:7d:4d:a1:1f:
                    0d:f3:f3:f1:b3:ce:5f:55:1c:2c:85:a5:e4:a9:d0:
                    f8:d9:c5:d8:7e:b9:54:a9:d7:9e:a6:0e:25:25:cb:
                    03:15:ae:62:92:28:a1:b2:a1:2f:24:a9:23:3e:c1:
                    17:25:22:5a:fa:7f:65:31:84:fd:9a:4f:ee:03:f4:
                    73:d1:93:c0:9f:74:d8:d5:fc:45:21:35:e5:13:0a:
                    e1:62:93:d2:73:6d:42:d1:21:72:ff:e3:f3:ee:15:
                    00:10:7b:8f:53:c9:5e:5e:83:d1:15:8c:6d:d8:01:
                    a2:b5:48:10:8e:8f:8c:c5:85:3b:7f:5c:c3:8d:8c:
                    de:4f:5b:a9:77:6c:82:cb:56:07:e3:6f:bb:d8:a4:
                    61:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A3:CF:CD:B0:5A:67:A0:38:F1:5C:53:6A:58:B9:60:A3:95:AB:3A
            X509v3 Authority Key Identifier:
                keyid:55:78:36:5A:C7:BA:35:47:2A:6F:C6:D6:97:54:08:48:F8:A6:7D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/5578365AC7BA35472A6FC6D697540848F8A67D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5578365AC7BA35472A6FC6D697540848F8A67D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDfRpQgSEJjwBg5pGK8Np4x779c7CZCZBAE24APNip8V/0/3133382e3131382e3130382e302f32322d3234203d3e20323634323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:f6:14:d1:94:9d:eb:75:3f:c1:15:11:75:7c:65:0c:7f:56:
         c7:d2:1c:85:38:d0:d6:0d:8d:d7:5f:88:5e:d3:1e:17:c8:f9:
         59:3a:78:f9:14:79:ab:14:db:08:ce:98:58:8a:78:d6:4f:86:
         f3:c7:11:e3:43:93:16:71:6f:a9:4a:9a:9d:99:39:4a:ef:50:
         54:17:95:d1:58:1a:b2:e7:a0:28:02:17:25:80:82:f4:16:60:
         94:2d:1f:c3:49:af:73:94:de:59:99:2a:4e:a2:9b:d9:37:38:
         1a:07:eb:4f:75:69:3f:ac:49:d7:08:d4:a9:99:5b:40:83:2d:
         66:87:f4:42:31:08:f8:33:7b:55:b4:c9:57:51:bb:11:47:d3:
         7c:c1:aa:6b:70:ba:2e:4b:a3:71:51:25:57:16:28:14:02:8b:
         ce:d7:f9:e8:17:fe:63:13:71:ca:66:a7:03:fa:ec:c2:53:ac:
         14:3c:c4:85:e4:53:7e:94:c5:c6:a0:84:be:79:15:93:a9:01:
         5c:63:ed:d6:d4:e6:87:f6:0f:81:9b:29:16:8e:b6:90:a8:22:
         57:82:c9:97:37:5b:fb:e0:4a:d2:52:92:67:df:fd:e5:73:7e:
         81:80:3c:6f:60:59:be:5c:6a:2c:bc:b6:6e:2b:fb:a2:9f:c6:
         02:f4:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 21:15:25 2024 by rpki-client on console-ams.rpki-client.org