Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa
File:                     3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa (raw, json)
Hash identifier:          w4SsKcdqjWvfZ8vQYoBycBwiaE6/WknTc9TiXqyWgTw=
Subject key identifier:   A1:5C:4B:A0:1F:33:34:B9:EE:6E:40:D3:25:54:59:37:73:EE:CE:57
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       4AC9386BB82145873925235D4ED100C63545E501
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa
Signing time:             Sun 23 Jul 2023 00:07:56 +0000
ROA not before:           Sun 23 Jul 2023 00:02:56 +0000
ROA not after:            Sun 21 Jul 2024 00:07:56 +0000
asID:                     264242
IP address blocks:        138.117.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c9:38:6b:b8:21:45:87:39:25:23:5d:4e:d1:00:c6:35:45:e5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 23 00:02:56 2023 GMT
            Not After : Jul 21 00:07:56 2024 GMT
        Subject: CN=A15C4BA01F3334B9EE6E40D32554593773EECE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0d:35:34:8e:97:f1:f3:2b:91:d0:ad:eb:d0:
                    31:3b:54:dc:b3:25:6a:06:a9:71:a5:58:7a:75:d0:
                    5a:37:25:43:4c:9d:b0:a8:66:c8:98:05:9c:ec:e8:
                    de:3d:f0:0c:62:80:65:ed:8a:6b:88:a5:0b:b5:7f:
                    f8:48:70:ed:66:57:87:a4:20:1a:60:fd:f2:8a:3e:
                    ed:ae:5f:d9:b3:79:9f:ad:b7:0c:37:25:3c:bc:31:
                    c9:06:5e:57:f7:81:8f:c3:99:00:30:a7:d6:a6:7a:
                    74:c5:57:9c:9c:1b:8e:86:a1:f3:85:e1:66:89:dc:
                    eb:02:62:66:2f:a9:9f:a1:6c:89:02:9b:a7:18:56:
                    98:ac:c1:d8:13:2c:1b:03:e3:3a:26:70:5f:f8:be:
                    84:f0:79:7a:e3:c9:56:57:e3:bf:ba:76:e1:06:0b:
                    b3:43:a5:d2:c6:75:65:b0:a6:b9:d7:57:1e:19:c9:
                    c2:89:a1:9b:19:13:47:8c:68:e7:e0:ae:61:88:79:
                    59:a4:12:a4:af:89:18:3e:d4:27:d5:cd:73:12:66:
                    de:22:d2:11:c0:45:15:b1:ac:2e:73:b9:d9:30:a3:
                    8f:d2:7a:9e:d1:69:f8:7e:d2:97:df:a6:c0:c6:d8:
                    12:6c:b6:16:be:13:8a:8f:2d:be:42:46:a4:ab:05:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5C:4B:A0:1F:33:34:B9:EE:6E:40:D3:25:54:59:37:73:EE:CE:57
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134352e302f32342d3234203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:74:fa:b2:13:87:b2:c5:84:63:0e:a7:3e:c8:f3:18:87:
         2c:1c:5d:92:c5:bf:ac:d2:32:d0:e5:de:db:f3:22:4b:72:18:
         02:5e:ef:49:8b:93:18:38:15:2b:b1:59:d1:27:80:15:16:ad:
         f2:4d:c3:df:6d:01:f0:64:b4:1d:db:3b:05:80:18:ac:0f:e8:
         ca:38:ac:4c:b4:ff:ec:d2:a5:f0:ed:37:dd:93:98:c8:e1:9e:
         27:6b:85:e2:49:07:f8:6d:8a:14:e6:24:20:e7:49:21:81:61:
         58:61:69:e7:42:25:61:6b:23:5f:08:19:37:a3:57:7d:82:df:
         56:2b:ed:f3:06:ce:ab:7f:78:24:e3:ed:87:40:a5:42:bd:b7:
         42:5d:5c:d8:30:2d:9c:4b:79:cd:6d:1b:2a:23:a8:b1:d7:94:
         1a:c1:ad:1a:69:02:40:a9:67:77:a0:ab:9a:f6:ce:cb:3b:d3:
         48:c7:15:37:f8:ed:3e:2a:72:fb:d8:95:5e:3b:14:b7:bc:d9:
         65:04:38:a3:ea:25:6c:8b:f0:7d:65:0d:1a:5c:ed:34:57:85:
         46:27:af:87:2e:9a:e0:12:bd:81:83:01:95:c2:6f:ac:d2:12:
         b1:ab:e7:0c:ab:80:ba:f2:3b:c2:0f:95:4d:5a:6f:7a:08:41:
         a4:75:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org