Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3232203d3e203631353834.roa
File:                     3133382e39342e3132382e302f32322d3232203d3e203631353834.roa (raw, json)
Hash identifier:          FSfKVAbxdpsZS/2wxdLNT+Hy44eVgSpZ5zXh9/Wv4Hc=
Subject key identifier:   B9:BD:A3:9A:19:ED:B4:45:9B:CD:6E:F3:D7:AA:C3:EF:18:DE:5A:A0
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       0D9C26DA1C779EDBFAE4760824B1569EA3A9EDC2
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3232203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:32 +0000
ROA not before:           Mon 10 Jul 2023 19:01:32 +0000
ROA not after:            Mon 08 Jul 2024 19:06:32 +0000
asID:                     61584
IP address blocks:        138.94.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:9c:26:da:1c:77:9e:db:fa:e4:76:08:24:b1:56:9e:a3:a9:ed:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:32 2023 GMT
            Not After : Jul  8 19:06:32 2024 GMT
        Subject: CN=B9BDA39A19EDB4459BCD6EF3D7AAC3EF18DE5AA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:0e:63:e4:c8:17:6f:73:b8:db:bb:14:bb:
                    12:58:17:49:48:72:fe:54:ed:14:e0:1a:4b:d5:cf:
                    e8:fe:90:29:22:8d:c0:1b:2d:1c:56:52:cf:0a:97:
                    36:23:4a:83:38:31:8e:f0:53:bb:70:3a:f7:ee:aa:
                    77:7c:2a:50:01:ef:47:36:05:bf:8b:50:e7:cc:9d:
                    31:63:89:b1:e7:a5:9f:db:4c:1b:b8:46:c0:c2:75:
                    4b:2f:0f:12:a9:19:59:86:78:7c:df:76:f0:73:69:
                    37:a4:4b:60:31:62:f7:53:94:97:82:36:41:20:8f:
                    34:c8:00:6f:86:92:9c:bb:55:df:2e:0a:9f:f3:79:
                    59:9f:80:36:fa:ad:23:3e:c3:ce:ab:63:f5:c7:12:
                    7b:1e:54:f8:c6:f3:c4:a6:0a:ec:eb:4e:ac:c3:ff:
                    73:30:77:2d:0d:80:56:cb:b1:d7:bb:75:8f:e5:1c:
                    4c:fc:cd:14:05:9f:92:4e:a5:f7:b4:58:de:03:0b:
                    8b:da:91:aa:71:33:41:ea:42:a2:5a:61:34:1f:58:
                    44:7c:58:1f:fb:cc:6d:d1:a1:17:c0:f0:6f:ba:07:
                    70:de:38:7b:80:da:5a:4a:f2:4f:f1:2e:cd:6f:5d:
                    57:35:11:44:c9:e1:2b:16:c0:49:16:b2:98:22:17:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:A3:9A:19:ED:B4:45:9B:CD:6E:F3:D7:AA:C3:EF:18:DE:5A:A0
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3132382e302f32322d3232203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e0:c9:2f:1a:79:9a:d9:97:56:a0:1b:52:85:55:04:dc:10:4a:
         f2:c5:6e:e2:e6:14:12:d8:5f:77:56:f4:60:12:a2:99:52:2d:
         6e:92:49:6e:37:66:50:1e:07:6b:6e:71:34:5b:d5:34:8b:bd:
         2b:a1:17:50:ea:9b:81:7f:da:bd:6b:c4:60:6d:d0:31:96:68:
         8c:3c:d9:af:c4:0d:31:7d:c6:e1:6d:10:00:e8:48:0c:e0:9a:
         9c:48:8e:70:cf:32:45:08:f6:f6:a3:73:46:9b:e6:c2:18:03:
         a1:dd:4a:12:4b:f1:f8:1c:2e:d6:d8:c0:0c:b0:a3:79:46:bc:
         f0:e4:e2:34:20:67:66:c1:13:d4:28:0a:41:76:9c:1a:2a:3c:
         1d:bd:9d:50:90:93:95:c4:16:4d:de:fe:00:53:99:d0:23:6f:
         48:f4:7a:c4:81:1e:a5:4e:ff:58:0a:74:41:d6:b2:97:f4:77:
         39:fc:5d:a3:4c:5e:f5:bd:ec:49:66:d4:79:44:ea:62:de:c0:
         27:1d:f6:56:1b:a8:cc:9b:30:fd:d9:90:2a:81:35:56:96:69:
         cf:7e:f1:cf:fa:6d:b4:e3:09:37:ed:82:98:fc:16:8c:26:06:
         ae:e4:1e:08:b5:fc:76:e8:0c:f2:57:ab:c0:de:11:2f:cf:26:
         61:b0:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:01 2024 by rpki-client on console-ams.rpki-client.org