Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File:                     3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier:          BnUxZLTOv2JWKD1LQ56UV8KQ8we4twcyzaf25HHX+k0=
Subject key identifier:   4B:E6:43:5F:2A:BB:B1:62:84:72:48:7B:B4:B1:CA:CC:C4:95:5A:7D
Certificate issuer:       /CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
Certificate serial:       7FEED67E8123A8FBAEE61E59FC1200D20CB04ABB
Authority key identifier: 1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time:             Mon 20 May 2024 13:16:59 +0000
ROA not before:           Mon 20 May 2024 13:11:59 +0000
ROA not after:            Mon 19 May 2025 13:16:59 +0000
asID:                     28287
IP address blocks:        138.118.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ee:d6:7e:81:23:a8:fb:ae:e6:1e:59:fc:12:00:d2:0c:b0:4a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0959701E057D7CCAB39A76C2B6AF6E5134811E
        Validity
            Not Before: May 20 13:11:59 2024 GMT
            Not After : May 19 13:16:59 2025 GMT
        Subject: CN=4BE6435F2ABBB1628472487BB4B1CACCC4955A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:e9:9b:e0:bf:d2:45:5b:13:b1:51:d3:c8:
                    c4:bd:62:09:b3:76:8f:94:36:7c:8a:1c:70:18:bd:
                    fb:ee:9d:21:06:6c:ad:ce:24:ee:9f:97:fa:54:ee:
                    0a:6a:68:f4:33:1b:96:01:5d:41:fb:25:11:8b:85:
                    1f:3f:8b:f4:41:2e:5c:41:f8:00:68:28:e5:85:24:
                    38:80:27:eb:66:6e:ec:30:9d:c0:2c:84:b6:64:ae:
                    3b:29:1a:cb:e3:a6:e6:59:1c:45:31:b6:b5:40:70:
                    0b:a1:8b:8d:47:30:49:3d:ae:6f:38:cb:da:d8:b5:
                    94:6d:00:84:24:b6:79:0d:d8:78:a8:4f:f5:02:53:
                    73:b0:1b:a7:17:86:a1:47:ea:2e:89:52:55:d7:05:
                    cf:98:00:0d:04:d9:86:30:84:07:56:da:79:56:a7:
                    e0:f4:2b:32:df:7d:5b:16:4f:60:72:5a:0e:42:a5:
                    58:e2:fa:aa:b5:b5:ea:0a:5c:b8:6c:02:1c:d4:01:
                    54:a2:95:c2:96:88:13:9b:02:21:2b:e1:c0:33:9d:
                    37:61:30:2e:39:c6:fc:d5:ce:d7:b4:91:d5:0e:df:
                    7e:16:e7:4c:0c:4d:0a:45:4f:7f:96:34:ed:58:12:
                    0a:9a:f3:16:91:92:75:a1:f5:7f:e4:0a:c4:05:48:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:43:5F:2A:BB:B1:62:84:72:48:7B:B4:B1:CA:CC:C4:95:5A:7D
            X509v3 Authority Key Identifier:
                keyid:1E:09:59:70:1E:05:7D:7C:CA:B3:9A:76:C2:B6:AF:6E:51:34:81:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E0959701E057D7CCAB39A76C2B6AF6E5134811E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/0/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:af:87:c0:f3:9c:e7:e4:b5:88:64:9f:4a:0d:8b:18:7d:81:
         d2:d1:36:63:c8:d4:d6:37:fd:de:ad:52:36:3a:53:56:f8:33:
         b6:2c:59:d9:39:32:eb:c3:79:f2:37:df:9d:42:17:c2:48:a8:
         58:36:e4:27:a9:eb:2c:4d:04:6d:26:62:2f:d1:ef:d7:7d:d0:
         9a:c6:36:14:50:8d:1a:fc:f2:72:4b:77:31:27:19:da:35:b7:
         0c:ba:8b:6c:01:f8:88:b0:4a:7a:4b:49:49:61:0e:d7:a2:55:
         61:06:d7:7b:30:08:e6:d7:db:ae:e8:3f:fe:68:3e:bb:e9:ed:
         3b:1a:35:f4:44:70:f1:69:92:6b:d1:38:14:4a:ca:3d:61:a7:
         72:37:84:3d:cf:33:ef:af:5d:35:22:30:87:24:1c:57:14:b0:
         b3:2b:39:e7:e8:f8:c2:cb:5e:0f:0f:1e:a3:0a:aa:41:8e:5c:
         ab:5d:6e:93:e5:0e:00:9d:19:d2:7a:a9:78:33:f7:f2:c1:3c:
         11:c7:23:bc:19:c4:78:38:8b:b8:0e:a1:b5:d5:9e:b9:07:c1:
         09:a9:4c:8f:56:af:a3:d9:c5:fe:0d:d9:e2:23:b6:1a:b5:30:
         5d:cf:09:58:92:00:29:c8:38:1c:92:e5:8e:98:1a:49:f5:79:
         34:b8:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org