Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32332d3233203d3e20323634323035.roa
File:                     3133382e39392e3135322e302f32332d3233203d3e20323634323035.roa (raw, json)
Hash identifier:          mqbVbTMuvTYDwWCYlWkLWtAdhvMIWU/MgZiYmiZmfUo=
Subject key identifier:   76:BC:B9:2C:98:9F:89:61:8F:A2:39:BF:81:01:4E:10:E1:EA:28:C8
Certificate issuer:       /CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
Certificate serial:       799EF935EE9C3EB14745BCE0A1D49D062B719A2E
Authority key identifier: F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32332d3233203d3e20323634323035.roa
Signing time:             Wed 28 Feb 2024 14:23:31 +0000
ROA not before:           Wed 28 Feb 2024 14:18:31 +0000
ROA not after:            Wed 26 Feb 2025 14:23:31 +0000
asID:                     264205
IP address blocks:        138.99.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9e:f9:35:ee:9c:3e:b1:47:45:bc:e0:a1:d4:9d:06:2b:71:9a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
        Validity
            Not Before: Feb 28 14:18:31 2024 GMT
            Not After : Feb 26 14:23:31 2025 GMT
        Subject: CN=76BCB92C989F89618FA239BF81014E10E1EA28C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:5e:aa:f3:d3:c3:8d:f4:b1:e7:4f:af:9f:
                    d3:74:4f:6c:93:f2:06:a2:24:43:04:75:df:ec:76:
                    91:d3:5b:d1:e7:6c:24:03:3e:df:4e:a5:c5:45:ce:
                    7f:82:dd:4d:f3:f5:e4:fa:32:27:db:59:7a:f1:f1:
                    57:f6:b4:83:85:b3:28:a5:0e:2f:01:93:cb:c5:34:
                    71:5c:2d:01:fc:08:0b:66:f9:2a:bd:f1:02:7f:a8:
                    ac:aa:0e:26:2a:84:4f:20:95:53:2b:a5:88:92:fa:
                    3c:82:7e:85:39:a6:fa:3d:2a:cf:57:6b:63:a8:ef:
                    09:b2:7f:d3:57:ab:6a:2d:41:1a:49:b3:38:25:43:
                    a5:28:e5:0d:30:d3:ef:2e:39:ff:cf:48:08:4a:c2:
                    af:fb:6e:0f:62:47:1b:46:69:c3:e4:26:d9:6e:8c:
                    c8:0f:1d:4d:16:bd:07:de:ee:5b:c5:c0:e8:2c:81:
                    6f:ec:02:93:9d:15:28:ac:c5:08:45:80:1e:6a:fe:
                    c8:40:df:c5:50:fc:dc:c7:8a:d3:78:5e:e2:50:4b:
                    2a:b4:af:a8:b4:c5:4f:d1:49:08:0a:ac:76:2b:a4:
                    8c:b3:a3:db:1b:f0:9d:b8:ee:2b:13:cd:e2:6a:2e:
                    ff:38:f8:b2:f5:5f:41:a5:3f:c7:5f:50:ac:ef:3e:
                    29:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:B9:2C:98:9F:89:61:8F:A2:39:BF:81:01:4E:10:E1:EA:28:C8
            X509v3 Authority Key Identifier:
                keyid:F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32332d3233203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:d2:51:d9:3a:46:6b:a5:ca:97:46:ab:ba:22:4c:3c:a4:
         c2:2d:85:90:d7:d1:2f:fb:e6:23:f1:c7:bc:a9:73:01:d9:15:
         d8:de:a5:9e:c5:57:2c:aa:e5:0a:b3:03:ea:44:1b:c4:76:10:
         e3:3f:62:3a:ef:82:bb:53:4f:7e:dc:73:05:0e:19:23:d5:05:
         e4:51:94:8a:03:fa:eb:dd:7c:e4:a3:bd:30:d5:50:c1:f6:a5:
         f9:76:9c:a6:ff:77:07:3b:4b:05:9d:ad:ed:87:eb:ea:ac:05:
         a8:91:a2:d5:66:ac:da:1d:e5:8c:ea:1a:25:9a:68:9a:31:f2:
         9b:64:06:53:20:b3:51:42:25:a4:dd:50:f2:b9:b4:5f:fd:50:
         69:38:45:d2:52:03:83:24:2e:64:37:de:9b:53:01:d1:cf:dc:
         dc:8c:1d:d3:d7:1c:39:e6:54:a3:91:18:8e:45:b9:5d:a9:c1:
         32:6e:50:66:7d:f3:d7:7e:1a:9d:42:c5:80:3c:ef:91:14:e1:
         cc:f1:94:c0:f4:d2:81:40:58:d1:63:d9:5f:9f:74:7e:c9:68:
         49:ab:3d:5c:09:b1:d0:f3:f7:dd:02:b9:9a:e5:fa:7b:ce:2a:
         5d:a1:d4:aa:38:98:a5:12:73:2b:f2:80:23:34:0a:e7:26:a2:
         2d:3f:d5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org