Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
File:                     3133382e39392e37322e302f32322d3234203d3e20323634313738.roa (raw, json)
Hash identifier:          SfimaFInsElWZkBxjG4Y+GnkoPqj3YOoODdMQK2U7Wc=
Subject key identifier:   D1:AE:14:03:50:F3:9D:EA:AF:4F:50:7B:65:1F:1D:C6:D4:D6:B1:40
Certificate issuer:       /CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
Certificate serial:       6627DF0D93BF7848CD3F10D7EEB5F464CE1C00DD
Authority key identifier: 9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa
Signing time:             Thu 15 Feb 2024 21:28:07 +0000
ROA not before:           Thu 15 Feb 2024 21:23:07 +0000
ROA not after:            Thu 13 Feb 2025 21:28:07 +0000
asID:                     264178
IP address blocks:        138.99.72.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:27:df:0d:93:bf:78:48:cd:3f:10:d7:ee:b5:f4:64:ce:1c:00:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Validity
            Not Before: Feb 15 21:23:07 2024 GMT
            Not After : Feb 13 21:28:07 2025 GMT
        Subject: CN=D1AE140350F39DEAAF4F507B651F1DC6D4D6B140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:17:c6:77:5d:d8:f8:c6:d5:eb:76:d6:56:fa:
                    21:65:48:4f:e1:93:43:49:55:c4:93:30:94:45:cc:
                    86:1c:8e:2a:6a:5d:ba:8e:55:42:d3:a1:b4:32:0e:
                    90:7a:60:0d:46:ef:45:99:60:f5:c0:9c:14:f7:02:
                    3d:56:8a:76:d8:8f:8b:55:78:28:6c:93:44:87:a9:
                    21:94:b8:0d:e8:01:09:d0:de:e7:6f:97:23:42:7a:
                    d9:42:60:57:03:a5:6b:f9:7c:46:33:61:0b:a4:5c:
                    1b:20:ce:79:3f:59:8a:77:a2:11:03:1f:22:de:7a:
                    25:f0:11:e3:56:c4:f4:fc:e1:ed:49:16:59:c2:5d:
                    32:95:b8:4a:30:55:f8:38:d2:6e:a9:d2:88:eb:30:
                    5d:2f:33:af:41:c8:7c:62:73:12:3f:80:71:70:5d:
                    fe:b5:7e:02:d1:51:ea:6e:cb:de:66:2d:5a:21:0e:
                    ad:61:01:90:b3:57:8f:1d:96:a6:fc:67:d5:85:43:
                    67:fb:14:9c:94:fc:24:1c:68:cb:8e:aa:82:87:46:
                    5d:7b:bd:6e:56:a5:34:5a:a3:ec:59:51:7c:5c:86:
                    75:54:dc:20:7a:a8:00:3d:0b:4a:57:ca:ff:28:25:
                    e5:15:a4:5b:1d:bb:96:78:55:46:d0:d2:29:12:5e:
                    ea:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AE:14:03:50:F3:9D:EA:AF:4F:50:7B:65:1F:1D:C6:D4:D6:B1:40
            X509v3 Authority Key Identifier:
                keyid:9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32322d3234203d3e20323634313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:fa:16:b4:61:da:c7:32:10:75:67:25:d7:88:47:ac:93:
         0d:bc:ef:77:b8:2a:55:6d:11:bb:4e:5c:ca:d9:4c:db:67:89:
         12:82:99:50:53:05:18:d5:fc:47:60:25:60:36:76:53:0e:5a:
         5a:b1:c4:81:a9:29:3a:a5:74:20:6f:f9:61:c9:c2:81:68:74:
         9d:8c:d6:ec:ba:1a:dd:66:41:1f:48:b3:49:7d:6b:69:2a:60:
         26:e6:0a:ba:2c:ed:87:24:09:bb:ba:2e:96:57:d5:02:cc:bf:
         55:9e:17:49:db:e5:97:d5:46:ee:c9:27:7d:e9:19:f9:ed:d2:
         c7:18:75:26:7b:15:40:ac:ad:b5:35:6b:a0:ec:e3:a9:17:e9:
         10:22:f2:90:52:50:ba:e4:f5:93:bd:7c:37:3c:ff:0f:fa:1c:
         27:4d:86:ed:ee:e6:02:70:54:81:ad:7c:52:64:1f:4e:f4:8e:
         5b:69:0f:8e:47:3a:f3:fa:0a:dc:01:a2:2a:f8:b3:43:0d:2e:
         53:1c:c1:a2:06:c0:e7:0f:1b:80:36:05:6f:33:e8:91:ba:9e:
         1a:e2:57:fd:2f:f8:ae:69:b9:4a:90:79:51:d3:35:ae:fe:9a:
         98:1c:f7:c5:f5:2c:05:91:12:0c:a1:25:9f:71:bc:72:a1:b2:
         40:24:0c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org