Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
File:                     3133382e39372e3130342e302f32322d3232203d3e203533313037.roa (raw, json)
Hash identifier:          wtNVMKx65mBX+1VlXJIuBFCHHSydXhMJeIZjizxEHmw=
Subject key identifier:   47:37:FA:3E:87:28:F9:35:96:B8:83:6F:4E:D9:D9:CB:35:B2:05:BA
Certificate issuer:       /CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
Certificate serial:       0506146B96F5552BFBB2ECA98E6217C5852E387D
Authority key identifier: B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa
Signing time:             Wed 03 Jan 2024 16:50:18 +0000
ROA not before:           Wed 03 Jan 2024 16:45:18 +0000
ROA not after:            Wed 01 Jan 2025 16:50:18 +0000
asID:                     53107
IP address blocks:        138.97.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:06:14:6b:96:f5:55:2b:fb:b2:ec:a9:8e:62:17:c5:85:2e:38:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
        Validity
            Not Before: Jan  3 16:45:18 2024 GMT
            Not After : Jan  1 16:50:18 2025 GMT
        Subject: CN=4737FA3E8728F93596B8836F4ED9D9CB35B205BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:62:14:ab:a1:5f:a6:a9:f6:af:1c:45:17:59:
                    c8:76:3b:cb:27:30:53:aa:a4:b6:5d:92:c4:ca:9b:
                    da:96:e1:10:14:41:41:d0:73:a4:9c:f9:4f:5d:cf:
                    b9:92:de:e1:a3:c4:24:88:5f:16:b1:dd:6d:fa:96:
                    39:84:79:6e:2f:88:89:ee:62:77:fd:ef:5e:94:b4:
                    23:f8:71:80:ce:01:b2:b2:6f:c0:5d:ad:af:91:91:
                    ea:1a:b7:4f:4f:cb:70:45:b5:88:71:ca:b5:37:29:
                    f9:cb:04:ef:2f:d8:5f:d9:05:6e:66:24:b2:75:e5:
                    2e:bc:f0:4a:1e:7d:e9:10:44:ba:1c:28:54:e2:c7:
                    62:59:57:88:c5:17:87:aa:b3:30:96:29:4a:50:17:
                    fd:bd:37:69:99:a1:16:7e:ec:96:8a:49:1b:d6:4d:
                    5f:9e:14:67:a9:23:a1:6e:7e:07:1e:89:2b:62:fd:
                    76:53:6c:b1:91:2c:77:76:9e:10:c6:e5:cf:89:43:
                    09:89:00:d6:67:7e:de:5e:d5:f8:2b:1b:72:fe:ff:
                    34:31:2e:74:14:ff:8d:88:c6:03:2c:5a:66:92:cf:
                    c8:c1:23:3c:29:71:1c:da:55:84:84:82:a1:a0:78:
                    b5:b2:96:b2:eb:8f:cc:e8:4c:23:4e:da:5a:cf:36:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:37:FA:3E:87:28:F9:35:96:B8:83:6F:4E:D9:D9:CB:35:B2:05:BA
            X509v3 Authority Key Identifier:
                keyid:B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130342e302f32322d3232203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:21:f9:09:b4:bb:2f:fc:f0:e7:b5:ae:3b:11:5c:8e:66:53:
         b4:89:17:cd:d1:07:94:a7:ee:fe:7f:49:fa:a4:a6:e2:09:bf:
         85:3b:be:d5:22:89:dd:ec:3c:9a:ea:73:df:96:dd:3b:e0:73:
         39:d9:3a:a0:b9:9d:9d:4a:de:83:63:5c:6c:aa:5a:c2:d5:b8:
         cf:01:78:35:0e:91:96:f3:a5:fc:4b:14:e9:d9:a3:aa:bc:55:
         f9:37:b7:d3:31:53:20:08:8a:d6:b7:f5:f9:9e:13:b8:ea:b9:
         9b:4f:dd:7d:c8:ba:14:03:af:72:49:77:c0:b2:5b:30:7c:4a:
         0d:f8:91:94:db:ec:70:78:4f:97:3d:9c:ec:15:95:72:73:bd:
         51:24:9f:10:16:d6:d0:a0:93:01:43:06:5a:74:6c:e8:cb:16:
         5a:97:a6:de:79:34:68:39:30:4a:92:f2:f8:b2:4c:11:d9:d0:
         c6:20:0c:d4:fa:bb:27:9d:2a:db:de:fb:88:f9:a1:31:8a:0f:
         6f:e0:5b:24:18:13:8c:e2:82:e3:a4:25:60:6a:dd:74:b1:81:
         dd:1d:fc:37:33:3f:28:78:bd:5e:09:9f:de:56:ef:af:65:5b:
         ae:41:e2:b6:24:5d:66:fd:59:25:de:61:4e:77:60:b4:fe:35:
         57:ea:fc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org