Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135342e302f32332d3233203d3e20323634323035.roa
File:                     3133382e39392e3135342e302f32332d3233203d3e20323634323035.roa (raw, json)
Hash identifier:          xYdbWVzbV9FZue2uisnfiUrY1ypY4NM0etdW4GwlCOM=
Subject key identifier:   64:79:F6:47:72:07:C7:8E:8B:FC:1F:C6:BE:43:05:66:90:E9:43:8F
Certificate issuer:       /CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
Certificate serial:       18D74951A5E8970FA20A70695CB2D82855A372AD
Authority key identifier: F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135342e302f32332d3233203d3e20323634323035.roa
Signing time:             Wed 28 Feb 2024 14:23:35 +0000
ROA not before:           Wed 28 Feb 2024 14:18:35 +0000
ROA not after:            Wed 26 Feb 2025 14:23:35 +0000
asID:                     264205
IP address blocks:        138.99.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d7:49:51:a5:e8:97:0f:a2:0a:70:69:5c:b2:d8:28:55:a3:72:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
        Validity
            Not Before: Feb 28 14:18:35 2024 GMT
            Not After : Feb 26 14:23:35 2025 GMT
        Subject: CN=6479F6477207C78E8BFC1FC6BE43056690E9438F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:42:6e:d6:f0:7d:e6:73:9c:55:56:0d:8d:38:
                    7b:f7:a7:fa:6c:16:47:f7:f3:d7:ed:fd:63:f6:69:
                    4a:bb:9d:89:4a:cd:74:e0:f4:c7:c8:9b:10:01:40:
                    f3:8f:6c:98:19:f7:9a:21:e8:07:08:f5:fb:65:8b:
                    7d:0d:54:a1:aa:e6:db:3c:d3:8f:fa:d7:12:7c:45:
                    02:a5:08:b3:88:7b:dc:6a:a4:97:f5:2b:34:6f:76:
                    59:d6:a4:10:64:90:ec:bc:8e:1a:df:ed:4e:d4:b6:
                    be:b9:49:a0:24:72:8e:54:6b:8a:fb:37:3b:3a:aa:
                    52:6c:c4:29:25:cf:51:e0:19:42:4d:dd:7f:34:f5:
                    80:2d:41:ce:5a:68:90:d0:a9:68:46:1d:9d:c5:f9:
                    d5:46:c8:95:b2:e9:ac:7d:ae:b4:c8:85:ff:1a:45:
                    5d:39:c1:9d:f5:f9:9a:9b:5d:2d:8e:48:5c:4e:0f:
                    ee:dd:09:a7:e4:b0:2b:2d:9f:94:04:99:54:35:fb:
                    94:c3:4c:30:39:7c:e4:e2:28:c3:00:70:09:a1:72:
                    68:03:35:62:62:ea:a5:ed:f7:ad:df:78:c1:c0:e0:
                    44:e0:b5:b4:5e:8b:71:71:db:ea:22:1b:1a:b4:bc:
                    8e:9c:a0:85:d4:9c:9a:81:6e:3d:ee:29:de:64:ba:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:79:F6:47:72:07:C7:8E:8B:FC:1F:C6:BE:43:05:66:90:E9:43:8F
            X509v3 Authority Key Identifier:
                keyid:F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135342e302f32332d3233203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:43:af:47:62:26:42:af:39:c4:a3:35:6b:43:da:58:88:e4:
         bb:06:19:c3:31:93:cc:87:06:ec:cc:fc:40:df:dd:e7:5e:eb:
         57:2a:ed:0b:1c:88:96:15:bb:cc:c4:6b:74:4e:b8:35:25:3b:
         72:4b:5c:2d:70:e5:3b:f6:f5:75:f4:42:c1:e5:bf:37:59:fa:
         32:71:87:4a:06:9f:6d:55:c5:86:3e:8e:0b:33:21:c0:ea:52:
         4d:48:d6:d3:3b:2b:81:c6:6c:85:30:c6:48:66:68:78:31:0d:
         c7:93:78:72:40:95:f8:48:30:22:46:39:00:c0:b2:1d:11:16:
         46:6c:c6:72:5c:0d:9d:bf:13:37:c2:1e:f4:14:2b:b8:18:4f:
         37:d3:12:cd:90:34:4d:42:8e:62:2d:0f:54:89:6a:dd:ff:6a:
         55:9b:b4:99:f4:ba:d2:84:88:98:a6:ed:fa:c2:97:a1:f6:71:
         8f:ff:e0:66:e3:1e:63:6c:5d:47:af:ea:40:e5:f5:6e:b9:c3:
         04:76:cc:5b:52:62:09:13:0e:a7:e8:58:a3:13:ea:5c:da:7a:
         0c:8a:98:94:79:12:09:7e:c1:9f:e4:79:bd:8c:57:da:ac:1b:
         bf:8c:93:4c:c2:88:c2:50:49:69:32:ec:64:95:bd:a5:43:58:
         3b:1f:a8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org