Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
File:                     3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa (raw, json)
Hash identifier:          QMaCqkgJ4XRFOpCpjT4kozdsWZUaKqN4BIAiz7Jj3yg=
Subject key identifier:   21:0F:C1:A6:E2:4B:71:49:97:18:69:E1:02:DE:F7:5C:BD:ED:F3:67
Certificate issuer:       /CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
Certificate serial:       6C065105BFFC4270522FEE71DCB731491FD2DC84
Authority key identifier: F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa
Signing time:             Fri 24 Feb 2023 11:33:20 +0000
ROA not before:           Fri 24 Feb 2023 11:28:20 +0000
ROA not after:            Fri 23 Feb 2024 11:33:20 +0000
asID:                     263321
IP address blocks:        138.117.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:06:51:05:bf:fc:42:70:52:2f:ee:71:dc:b7:31:49:1f:d2:dc:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3BDCD1528286CE48AC6FD653291774EA335B83E
        Validity
            Not Before: Feb 24 11:28:20 2023 GMT
            Not After : Feb 23 11:33:20 2024 GMT
        Subject: CN=210FC1A6E24B7149971869E102DEF75CBDEDF367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:b2:73:ed:f9:5b:a3:59:ed:69:3e:5c:ed:
                    6a:6f:f8:69:fe:ff:49:e4:d0:15:eb:b3:65:06:d9:
                    c2:cf:e1:61:72:2d:e6:81:fd:5a:bb:e4:7f:9d:08:
                    80:20:61:32:5a:28:ce:6d:ac:26:85:42:6f:79:70:
                    7f:a5:f9:43:a2:14:d2:f2:0c:7b:68:cd:8e:00:4b:
                    10:75:50:fa:47:ff:57:05:4e:2d:4e:66:b3:4f:39:
                    1e:a2:b8:6f:87:48:91:1d:ef:de:fb:04:06:4c:0d:
                    64:e3:2c:22:54:0a:d8:5e:83:c9:b8:1f:2d:ff:3b:
                    fd:a4:9f:15:81:1f:90:09:8a:d3:17:c1:ce:f6:5e:
                    b7:c6:68:25:7d:60:48:bf:35:be:de:f1:3a:26:b9:
                    91:8c:7e:fb:a4:9a:d1:6d:58:7c:d7:3c:dd:88:e2:
                    74:ad:c9:29:bf:b4:90:cd:93:e4:22:a7:56:e5:f8:
                    b2:0c:89:29:76:bb:2a:ff:a3:43:6a:af:e4:1d:8f:
                    18:76:80:e8:74:85:f9:89:f8:24:48:93:aa:8f:da:
                    16:a9:43:3c:9d:6e:ae:df:ba:52:54:33:bf:a4:2b:
                    fa:3d:8f:1e:10:17:e1:9c:f2:8d:d1:59:ee:68:28:
                    ee:a5:ac:74:54:e7:6d:bd:7d:42:c2:6f:26:47:1d:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0F:C1:A6:E2:4B:71:49:97:18:69:E1:02:DE:F7:5C:BD:ED:F3:67
            X509v3 Authority Key Identifier:
                keyid:F3:BD:CD:15:28:28:6C:E4:8A:C6:FD:65:32:91:77:4E:A3:35:B8:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3BDCD1528286CE48AC6FD653291774EA335B83E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3234203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:a4:19:08:01:20:1d:f9:2c:d8:fb:21:62:d8:e6:16:a0:3d:
         b4:88:bc:aa:c8:2a:ec:61:b9:86:8e:c6:da:96:30:b0:84:08:
         65:71:6a:bf:ff:a5:e8:05:6d:bc:42:7f:f6:23:16:ea:d8:f2:
         e6:eb:00:be:27:85:1f:e9:a8:69:8f:0f:a9:46:e8:38:d5:25:
         42:35:67:af:a3:d1:10:35:60:bf:f4:e6:dd:7c:20:d0:a4:c6:
         5d:89:6b:57:87:a8:99:bd:41:ac:cb:3e:79:ae:14:81:17:8b:
         29:4c:fc:ad:f4:6a:5a:fc:47:3a:97:e3:34:30:ee:68:e6:3a:
         14:26:75:4b:d9:d1:86:ae:b5:87:78:b9:38:0b:a4:df:c2:70:
         5f:f9:c1:30:ee:ee:9a:fd:40:c5:a8:e8:bb:a6:2c:c3:bd:24:
         d5:0f:67:b0:b7:a3:00:5b:21:64:0d:75:e6:39:44:b0:20:b4:
         df:63:2c:e0:c4:ed:e5:16:0f:3f:ac:9e:66:7a:9d:25:17:35:
         49:25:f4:61:f0:b0:10:c7:4d:51:97:18:3e:7c:f2:09:ff:3a:
         36:a9:f1:cd:2b:e8:00:7e:39:77:52:c7:83:0c:6e:0d:ba:1c:
         42:ab:50:5e:b6:31:e1:fe:ae:9e:85:b0:b9:7d:5a:34:9c:03:
         80:71:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:49 2024 by rpki-client on console-fra.rpki-client.org