Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa
File:                     3133382e39392e32302e302f32322d3233203d3e20323632383833.roa (raw, json)
Hash identifier:          KLNbxHHpeEkFfhdrCb06iJypY9qNgg2V20YclWt19yA=
Subject key identifier:   38:D8:0D:5A:8A:D1:50:36:96:4B:B8:DD:5D:AA:73:1B:E1:66:58:70
Certificate issuer:       /CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
Certificate serial:       1382DDD9405257EB72333059E15FE188CB6B839D
Authority key identifier: E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa
Signing time:             Fri 25 Aug 2023 12:00:00 +0000
ROA not before:           Fri 25 Aug 2023 11:55:00 +0000
ROA not after:            Fri 23 Aug 2024 12:00:00 +0000
asID:                     262883
IP address blocks:        138.99.20.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:82:dd:d9:40:52:57:eb:72:33:30:59:e1:5f:e1:88:cb:6b:83:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
        Validity
            Not Before: Aug 25 11:55:00 2023 GMT
            Not After : Aug 23 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:69:c5:85:09:c7:1c:2c:a1:b5:1f:8d:98:
                    4b:24:1d:51:f7:e6:e9:b1:b6:84:e0:e4:0e:4f:ba:
                    eb:09:89:11:c1:ce:26:78:bd:b0:5e:f1:af:c0:de:
                    82:d4:c5:fd:97:45:3c:1b:74:94:06:a2:d5:48:21:
                    17:7b:12:8a:18:8d:7f:36:55:9c:12:48:2b:f1:41:
                    88:15:31:55:72:83:47:52:9a:10:ac:29:a8:c0:3c:
                    2d:8a:52:d5:15:9c:97:a8:8a:ac:86:9e:d4:1d:d0:
                    fd:37:04:23:ef:05:29:43:1c:e7:df:c7:e6:e6:78:
                    f8:7f:35:db:fa:52:0e:68:c4:24:ab:e9:12:9e:79:
                    55:19:a6:48:24:f8:03:6c:9b:33:5e:de:62:de:11:
                    5c:9a:c8:4f:15:aa:1f:5c:71:2f:50:13:03:fa:4c:
                    d3:af:c8:6c:07:73:cb:ef:10:63:0a:95:1c:b7:b2:
                    1d:ee:06:b5:d1:26:b3:d2:83:21:09:21:8b:a5:27:
                    7e:96:99:99:d5:c3:90:aa:38:a2:47:74:c3:14:c8:
                    1f:9c:06:1d:e9:a3:e9:59:0c:c1:34:b2:ba:ca:50:
                    0d:55:a8:08:02:fa:2a:8d:87:f9:dc:22:ae:ee:c5:
                    97:65:95:b7:0c:4b:14:76:83:0b:3d:68:1e:22:95:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D8:0D:5A:8A:D1:50:36:96:4B:B8:DD:5D:AA:73:1B:E1:66:58:70
            X509v3 Authority Key Identifier:
                keyid:E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:62:b4:63:50:70:45:aa:d9:51:90:53:69:0e:91:d1:ea:a7:
         94:25:e7:55:b3:e0:4d:48:3a:a3:aa:38:f9:ad:86:15:b1:dc:
         f5:ba:60:5b:0d:56:b5:65:41:5f:c1:25:d4:38:29:f8:1a:54:
         8f:c0:43:a3:60:8b:c4:9f:30:b7:93:8b:54:cb:76:fa:63:bf:
         15:0f:ba:59:ee:8a:77:60:f7:f5:04:da:95:20:d4:3a:7d:10:
         50:9d:8e:b7:85:45:2c:0e:e3:c7:cc:ee:61:25:1b:7d:6c:8f:
         fd:e6:83:b0:8b:92:06:15:93:ce:6a:f9:1d:a1:d1:10:be:98:
         00:72:03:e1:87:a1:7e:34:f3:1c:69:c1:87:2d:ff:ea:b0:2a:
         b9:61:59:65:46:cd:f7:49:18:ec:54:ec:7f:24:1d:5a:bd:3d:
         73:a8:d7:a9:57:f0:06:e0:e2:ca:99:f5:68:85:31:7d:ce:cc:
         a1:f7:a1:c2:75:11:a8:0f:f9:31:bb:8e:75:cd:71:1c:ef:1d:
         1b:51:bf:8c:04:af:5e:19:34:9f:8c:7f:56:01:46:47:37:d8:
         63:b9:78:fb:49:29:88:ed:2d:a8:4b:21:a2:95:c1:72:42:40:
         4e:21:14:72:91:bd:a0:db:94:65:ad:7b:de:c1:fe:d8:9b:f9:
         fa:57:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org