Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa
File:                     3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa (raw, json)
Hash identifier:          U3OMkH33hD15TvzByWdoyygbUkV1eghP0QOL03iCFPY=
Subject key identifier:   4E:FE:03:44:B7:CE:3A:68:CF:0D:12:2E:0B:25:2E:37:50:79:B2:89
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       4C45CA4C1ECE2EE36051A493D92A417338E78535
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa
Signing time:             Thu 10 Nov 2022 18:35:18 +0000
ROA not before:           Thu 10 Nov 2022 18:30:18 +0000
ROA not after:            Thu 09 Nov 2023 18:35:18 +0000
asID:                     264215
IP address blocks:        138.99.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:45:ca:4c:1e:ce:2e:e3:60:51:a4:93:d9:2a:41:73:38:e7:85:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Nov 10 18:30:18 2022 GMT
            Not After : Nov  9 18:35:18 2023 GMT
        Subject: CN=4EFE0344B7CE3A68CF0D122E0B252E375079B289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:06:bd:db:a6:fc:6f:6f:ae:59:bd:de:3c:
                    1f:7c:39:6e:a8:ba:80:9a:aa:bc:b6:05:35:cc:a2:
                    8a:6b:33:03:eb:0d:c5:35:d1:8b:3c:5a:ee:0d:45:
                    89:f1:23:68:1c:29:27:c1:83:ff:6e:51:f6:fc:95:
                    f1:3d:f0:9e:ff:ca:65:55:02:44:06:d8:da:df:21:
                    fa:6e:a0:73:11:d4:cb:1b:38:14:e0:f8:94:f1:6d:
                    49:b7:ce:62:cb:21:7b:c0:8f:ab:98:90:9b:4b:98:
                    da:8a:1e:49:6f:0f:d5:b4:b9:63:46:fc:9b:22:09:
                    ec:6e:a8:b4:20:2f:08:02:fe:d2:81:25:38:71:31:
                    61:56:9d:3a:d3:40:ad:b7:7a:49:29:a7:19:3c:79:
                    be:22:83:95:d8:6a:55:76:8a:9a:d3:31:af:4f:58:
                    a5:3f:87:df:82:ee:33:74:48:78:cb:04:48:b3:19:
                    ff:d5:73:0c:d0:a5:b6:10:5f:3b:22:ce:75:d7:84:
                    57:8e:b9:9c:e3:95:ea:f8:a0:f3:9f:d1:80:1c:88:
                    c1:a5:79:5e:82:ad:c0:26:4a:8f:6a:70:f0:6d:92:
                    28:9d:1f:7a:ed:bc:46:f0:7f:6c:9a:73:67:da:3f:
                    af:7f:df:d6:08:18:7d:b2:f1:61:dd:18:2c:8d:01:
                    79:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:03:44:B7:CE:3A:68:CF:0D:12:2E:0B:25:2E:37:50:79:B2:89
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133322e302f32332d3233203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:3b:a9:08:cf:f2:2a:be:4f:63:c8:89:12:96:69:bd:91:
         90:08:fe:61:cc:9b:8f:97:f5:a1:93:f9:ef:3c:a5:a3:1e:dc:
         09:a1:f2:b6:cb:2d:b8:41:4a:96:6e:0e:10:9e:a8:ed:2b:4f:
         77:86:45:6a:fb:4f:26:d2:f1:ce:95:2b:3f:ba:08:66:58:3d:
         4a:e3:bf:aa:00:c0:78:6b:07:cf:a3:ed:35:37:4d:8e:a5:78:
         7b:fc:ab:69:f0:e3:f5:39:62:21:da:31:54:6b:6e:d6:f5:76:
         58:53:65:a6:1d:68:ac:9c:8f:aa:1a:08:61:6a:6d:11:db:ff:
         e7:b7:9d:c8:d8:21:a8:ce:8d:a1:07:67:5f:e4:a8:84:a5:1a:
         df:04:e8:aa:17:5a:c3:0f:d3:38:1a:10:7a:6e:ab:47:ef:f6:
         c2:33:d4:1f:eb:e9:bc:90:bb:1b:b9:66:17:eb:ec:a0:8c:f7:
         54:fa:74:23:5d:3a:23:0a:17:ea:5a:be:b0:ab:cf:df:65:d9:
         c0:ad:05:31:f5:8c:c9:51:ad:24:d1:f3:78:47:56:db:0b:7c:
         92:e6:6c:8f:bc:c4:43:86:31:3b:89:8a:da:16:f3:ce:07:5a:
         97:c5:2e:62:09:86:77:6e:45:d2:0b:b6:87:a8:72:08:44:26:
         1f:62:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org