Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
File:                     3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa (raw, json)
Hash identifier:          xPxQgS8AloyArtFPYthvepddwOMVfp4miaXSjT+Xoxk=
Subject key identifier:   92:35:00:9B:FC:78:36:7F:7A:B0:25:FF:A7:8E:E3:8E:6F:E1:65:B0
Certificate issuer:       /CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
Certificate serial:       673F5E1E6FF6D822C499F56115C8CF7C2B6AAFA6
Authority key identifier: 7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa
Signing time:             Fri 09 Feb 2024 10:59:28 +0000
ROA not before:           Fri 09 Feb 2024 10:54:28 +0000
ROA not after:            Fri 07 Feb 2025 10:59:28 +0000
asID:                     262485
IP address blocks:        138.118.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3f:5e:1e:6f:f6:d8:22:c4:99:f5:61:15:c8:cf:7c:2b:6a:af:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F8163A857457D0C511E761F3AF9EBFAAEB15371
        Validity
            Not Before: Feb  9 10:54:28 2024 GMT
            Not After : Feb  7 10:59:28 2025 GMT
        Subject: CN=9235009BFC78367F7AB025FFA78EE38E6FE165B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:8e:c6:6d:9a:cd:46:58:c8:57:84:3e:5f:
                    64:53:08:7c:a6:6c:8b:97:52:63:f5:9a:6d:8a:3c:
                    92:4e:40:77:86:91:09:02:6f:89:a9:86:93:b2:3b:
                    d1:24:8f:02:73:2d:c4:a1:d5:56:20:92:5f:da:8b:
                    ef:1b:4d:08:7a:c3:0a:49:d6:b0:f3:c4:f7:ce:2d:
                    db:50:fd:91:74:b1:67:22:5a:c6:68:6f:ab:9e:a2:
                    4a:d2:94:18:22:0e:42:61:d5:62:0e:56:b6:b0:e5:
                    2c:a8:4a:29:a6:2e:68:c9:b0:10:c0:2e:a4:ae:d9:
                    b6:8e:06:bb:eb:8a:01:da:8a:5f:58:d2:3e:fb:35:
                    08:22:84:f2:d1:1e:38:1d:2c:52:c5:af:10:ce:9b:
                    55:5e:4e:8f:7b:ee:81:bf:62:6b:2e:54:1a:2f:9e:
                    d1:33:1b:2e:99:95:ef:f4:98:cc:9d:e5:53:a5:f3:
                    fc:46:a6:71:3c:bb:16:17:22:53:69:bb:9a:67:68:
                    1b:79:f0:3a:3b:7f:32:eb:c0:95:ba:38:ec:cf:46:
                    72:e2:df:9b:18:b4:a3:a7:0e:30:10:8f:a6:7d:9d:
                    6b:8a:3a:5a:f7:fd:46:55:3e:4e:94:39:16:af:e5:
                    3d:d1:57:f0:b4:1f:53:00:53:95:95:50:cd:36:65:
                    d3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:00:9B:FC:78:36:7F:7A:B0:25:FF:A7:8E:E3:8E:6F:E1:65:B0
            X509v3 Authority Key Identifier:
                keyid:7F:81:63:A8:57:45:7D:0C:51:1E:76:1F:3A:F9:EB:FA:AE:B1:53:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F8163A857457D0C511E761F3AF9EBFAAEB15371.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/0/3133382e3131382e39302e302f32332d3233203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:87:e9:e2:c6:88:ab:57:f3:e6:69:3a:9f:49:6e:cb:df:
         ed:da:30:b9:59:35:59:55:6b:e3:20:77:c7:73:82:e1:f8:47:
         bf:89:e2:f9:8a:f0:2a:e9:bd:5a:66:73:24:04:86:9a:96:6b:
         ce:5a:79:29:e0:4c:66:38:ea:04:cd:5f:a1:35:35:a2:db:3e:
         86:81:8f:ea:35:52:19:02:36:40:ea:a3:44:78:ca:bc:cc:28:
         10:f7:99:61:42:34:41:f3:7d:75:94:a8:0c:a1:9e:bc:ca:31:
         3b:a4:f5:49:7c:c2:34:82:81:f9:fc:be:42:77:aa:b0:8e:68:
         ac:b2:89:81:29:a8:6c:c2:45:d4:04:20:ec:ef:50:ca:bc:a5:
         45:c2:d1:0e:bc:03:53:47:65:af:aa:99:59:e2:22:3e:5a:c1:
         4a:10:f4:b9:64:93:8a:0e:44:fb:ca:06:6d:08:e5:07:ab:c1:
         95:04:bf:55:9e:87:b0:fb:d6:d9:63:f1:04:c9:03:4f:a8:d7:
         d1:18:44:cf:23:6e:2d:77:7b:d4:1d:05:c4:fa:78:d9:28:ca:
         ca:86:14:2b:0e:c4:45:8b:4c:27:2d:1f:0c:83:50:22:39:88:
         fb:6d:f9:8d:f9:2b:17:64:03:00:0f:3a:e3:31:8d:e4:b2:e2:
         d1:63:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org