Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa
File:                     3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier:          fkcmfDIhWsJwLRlKTLjAZbCXrXZFl86Q3xq1uhDUWiE=
Subject key identifier:   7D:17:00:45:A0:12:F8:12:28:22:82:76:BB:66:C9:4E:00:43:BE:32
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       7FA2DCBE5D37740D1FF3701E82FE26314EC7590F
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa
Signing time:             Thu 10 Nov 2022 18:35:39 +0000
ROA not before:           Thu 10 Nov 2022 18:30:39 +0000
ROA not after:            Thu 09 Nov 2023 18:35:39 +0000
asID:                     264215
IP address blocks:        138.99.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a2:dc:be:5d:37:74:0d:1f:f3:70:1e:82:fe:26:31:4e:c7:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Nov 10 18:30:39 2022 GMT
            Not After : Nov  9 18:35:39 2023 GMT
        Subject: CN=7D170045A012F81228228276BB66C94E0043BE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cf:d7:86:25:fc:58:37:2b:85:43:15:72:3f:
                    d6:36:ec:82:fc:32:fe:04:d4:89:eb:f1:92:66:7d:
                    17:ee:07:b8:aa:95:f0:93:8c:b4:54:c5:eb:8a:7b:
                    f9:9c:6d:09:a4:73:ff:13:c7:6a:b9:2f:fd:64:2d:
                    fe:c0:07:ca:f4:7c:45:b8:a4:c3:b5:bd:4e:a3:f4:
                    b9:5b:04:9a:da:87:a6:12:da:39:97:de:c9:e8:7c:
                    bf:5f:97:0a:c7:60:9d:37:b3:4e:d3:4b:08:08:c2:
                    06:ac:95:42:89:27:0a:dd:0d:4a:09:50:e5:10:14:
                    1c:24:e4:69:38:17:48:e2:0d:0e:ed:ff:4b:6d:13:
                    ed:ec:59:0e:94:36:3c:34:a8:7b:ca:16:4d:ee:5d:
                    1a:86:9a:ec:38:43:5a:91:84:3d:90:82:18:2b:2b:
                    1b:21:8f:08:5e:6b:f4:c0:42:81:af:ea:f9:ff:dc:
                    30:c8:de:11:16:83:a6:c4:ea:45:0e:6f:b4:a2:0c:
                    e0:d9:8d:cd:b9:de:e4:91:44:09:ee:c2:20:58:06:
                    9a:94:4d:e0:2d:17:c4:ba:39:3e:0e:73:b6:84:eb:
                    f7:e1:02:59:bb:7e:63:7f:b1:e6:ed:93:cd:fb:4a:
                    6b:af:c8:a0:83:7a:fe:c4:9f:48:5b:59:be:4d:0a:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:17:00:45:A0:12:F8:12:28:22:82:76:BB:66:C9:4E:00:43:BE:32
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:54:f5:de:aa:83:88:99:d8:51:0b:e7:d8:d5:b8:fe:d7:cf:
         31:55:c0:0a:90:8e:63:f6:b2:b3:20:42:22:f0:1e:bf:c4:6e:
         2f:65:b8:c3:87:e6:18:76:77:40:c1:d1:3e:9b:56:b7:02:28:
         3b:16:18:5e:fd:a0:d7:b1:2e:d5:3f:59:d4:47:ec:80:df:4b:
         b5:60:ce:ab:cc:19:ec:d9:98:06:e9:9a:64:9d:85:d7:fb:b8:
         b4:58:5f:70:bb:48:bd:c9:d2:54:32:02:53:47:9d:73:6a:68:
         8f:10:2f:ed:0c:9d:a7:06:8e:d1:a3:f5:ab:d4:06:82:e3:bb:
         b0:d9:25:25:28:fa:d3:06:f2:ac:f2:e1:0f:dd:0b:85:dc:1e:
         3b:72:7a:6c:ae:c2:6f:c2:c4:5f:b1:69:ec:47:c1:3a:06:07:
         a0:7f:13:91:64:51:2f:53:4c:e8:2f:f8:50:74:9a:10:28:45:
         0c:af:00:2c:58:17:3f:6f:55:91:9a:a1:b2:31:1d:4f:5b:1e:
         a2:bd:1a:67:7d:96:fa:e0:48:4e:8d:a3:35:17:a7:6d:ca:2a:
         5e:49:9a:a2:a7:fb:b9:c0:40:e1:60:2c:b3:78:8b:b9:ea:5a:
         01:d8:81:9a:e0:c9:01:02:ec:ee:fd:8a:7c:48:8d:88:c4:f9:
         de:58:7b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org