Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32332d3233203d3e203631353834.roa
File:                     3133382e39342e3133302e302f32332d3233203d3e203631353834.roa (raw, json)
Hash identifier:          p+4bEDZQqg+WOpQr/OnpyCB+mWxWKfUsFHYEYNTPs58=
Subject key identifier:   70:41:3B:F3:1A:E3:79:15:C4:CB:7A:91:24:CF:D0:F8:B9:01:B4:97
Certificate issuer:       /CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
Certificate serial:       2CA79E8DD35FD6C001C2146D7D3B785C20A43923
Authority key identifier: 67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32332d3233203d3e203631353834.roa
Signing time:             Mon 10 Jul 2023 19:06:32 +0000
ROA not before:           Mon 10 Jul 2023 19:01:32 +0000
ROA not after:            Mon 08 Jul 2024 19:06:32 +0000
asID:                     61584
IP address blocks:        138.94.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a7:9e:8d:d3:5f:d6:c0:01:c2:14:6d:7d:3b:78:5c:20:a4:39:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1
        Validity
            Not Before: Jul 10 19:01:32 2023 GMT
            Not After : Jul  8 19:06:32 2024 GMT
        Subject: CN=70413BF31AE37915C4CB7A9124CFD0F8B901B497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:94:9a:15:7f:ce:86:b6:d9:80:9d:db:85:
                    a9:47:72:98:2e:86:e8:67:07:7a:b0:98:3f:af:e5:
                    e2:14:90:e3:42:a2:e2:07:83:1c:7e:62:20:c6:bd:
                    58:b1:03:df:94:8a:d1:68:63:6c:9e:89:ae:c7:4a:
                    c7:e9:99:d1:34:75:4a:2f:6c:88:b1:44:7c:ee:34:
                    d4:60:03:f1:bd:ed:ae:29:1c:92:19:40:af:6d:8b:
                    68:16:40:cb:6b:6d:b2:a5:41:a9:f7:27:48:74:48:
                    93:d1:99:d0:61:c2:ec:e9:41:02:8e:29:39:10:62:
                    68:3b:7d:b5:6a:5a:57:f3:bf:c9:46:73:d3:e2:c4:
                    05:cc:3c:1f:61:78:a1:a6:6c:77:c4:f8:1d:b1:e5:
                    a7:0f:b6:78:87:18:86:c7:fd:6b:d4:c5:0a:15:49:
                    5f:c4:fc:cd:95:a8:dc:c8:42:a0:4e:81:c4:ea:e1:
                    0c:e5:0e:29:a2:6b:13:a4:aa:3e:bd:16:05:03:08:
                    c5:a2:aa:87:4d:44:48:43:73:78:cd:32:9f:7e:55:
                    4e:7e:cf:8a:77:6b:8e:53:de:0a:e3:c0:c0:7d:74:
                    e8:7b:b7:f4:de:a0:88:28:17:2d:20:0b:ae:a8:5d:
                    71:97:07:dd:f5:0b:28:67:61:13:51:71:7c:a9:e3:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:41:3B:F3:1A:E3:79:15:C4:CB:7A:91:24:CF:D0:F8:B9:01:B4:97
            X509v3 Authority Key Identifier:
                keyid:67:4F:4A:07:DE:25:50:DA:0A:39:FE:F5:5B:D2:A8:B2:D2:54:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/674F4A07DE2550DA0A39FEF55BD2A8B2D25494E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/0/3133382e39342e3133302e302f32332d3233203d3e203631353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:df:f8:be:79:1c:cc:45:b7:21:e0:36:93:e8:cc:36:58:ae:
         b3:81:ae:e5:99:3d:e9:29:66:91:71:b2:c4:c2:de:01:d1:eb:
         4a:f9:97:8b:41:5f:2c:29:25:8c:01:85:26:b6:f6:dd:b7:e1:
         10:3e:53:ec:2b:04:ba:5c:1c:5a:a1:1c:b6:1a:90:f4:94:37:
         a4:8c:90:f8:40:47:ce:96:1b:41:40:d7:33:49:ee:36:ce:bd:
         47:4b:fb:03:da:43:d9:e4:ed:f9:dd:0d:cb:18:59:66:16:46:
         3c:51:cd:d8:cc:8d:e1:b4:29:56:74:50:08:e4:4c:f6:ae:3d:
         3f:46:8e:ce:61:d0:c9:50:c1:7d:09:4f:75:3b:5e:7b:f1:75:
         cb:ce:fe:a8:29:ea:9b:c3:c8:56:3b:85:16:a8:2e:c4:bb:eb:
         ae:de:9d:74:8e:95:38:09:0a:27:4c:f7:45:f9:df:2c:30:85:
         9f:b0:ed:40:a9:43:c8:39:de:b3:8e:35:0b:d6:4f:8a:c4:b2:
         75:e5:8e:e3:36:44:0b:6e:10:05:9a:79:d4:a5:48:b9:f9:1c:
         88:16:86:dd:80:2b:e8:a8:6b:95:9a:fc:70:61:26:c9:1a:74:
         66:5f:f0:f3:cf:68:39:b4:a3:c3:8f:97:3e:9f:fd:08:5d:ff:
         7c:b8:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org