Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa (raw, json)
Hash identifier:          /afac+BDvPIsA3H5LEqQZGIA3okV/Zv964SxKqzhR8M=
Subject key identifier:   8A:DE:58:C4:3C:2C:49:C0:AF:EC:39:45:C9:19:9C:28:5F:BB:E7:AC
Certificate issuer:       /CN=5F930352DE227A8D4CED188F902C873925C9D5ED
Certificate serial:       6475A7E0D6EC1DBC3D2396480B56FA50D35EB70E
Authority key identifier: 5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa
Signing time:             Mon 08 Jan 2024 17:03:14 +0000
ROA not before:           Mon 08 Jan 2024 16:58:14 +0000
ROA not after:            Mon 06 Jan 2025 17:03:14 +0000
asID:                     263907
IP address blocks:        138.204.184.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:a7:e0:d6:ec:1d:bc:3d:23:96:48:0b:56:fa:50:d3:5e:b7:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F930352DE227A8D4CED188F902C873925C9D5ED
        Validity
            Not Before: Jan  8 16:58:14 2024 GMT
            Not After : Jan  6 17:03:14 2025 GMT
        Subject: CN=8ADE58C43C2C49C0AFEC3945C9199C285FBBE7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:1f:a7:f4:e5:7c:93:66:1d:81:e4:7c:ad:
                    16:8f:da:d7:aa:ca:fd:c3:ac:4b:f1:6a:39:17:24:
                    e0:8e:78:1b:a5:05:dd:4b:8d:70:0f:e4:00:75:23:
                    39:39:87:ce:09:58:e8:da:bd:56:2d:c3:e7:c6:23:
                    8e:88:59:e6:86:5a:19:76:0b:f8:12:20:3d:2c:94:
                    aa:eb:db:30:ee:85:3c:7e:15:f8:6a:02:95:82:66:
                    ba:fd:15:e9:ff:75:33:6d:78:78:a5:52:b1:1c:cd:
                    16:23:41:65:b4:cb:37:2a:d4:d1:00:03:35:c9:30:
                    c7:e6:b7:a9:56:74:59:6a:61:fa:d6:38:70:c2:82:
                    d7:1a:ec:12:a7:16:c0:91:3f:c5:a2:23:a4:93:49:
                    4b:1c:92:4c:e8:15:14:4f:23:ec:c9:89:61:46:c4:
                    71:47:4f:84:dd:43:11:90:9c:ff:f9:a4:9b:7b:8e:
                    c9:f9:20:c9:db:4b:a1:ee:43:9f:8c:78:bb:9d:ae:
                    ca:3f:74:ed:2d:4e:7e:e7:86:84:37:cd:fc:0f:8a:
                    36:a7:e2:12:2e:7f:cf:b3:71:4a:55:95:4f:2c:e5:
                    47:36:47:5e:e8:2f:0d:e8:5c:b8:e3:0a:82:3e:cf:
                    39:02:f0:7e:2e:38:aa:09:e2:46:c2:5d:4c:40:66:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DE:58:C4:3C:2C:49:C0:AF:EC:39:45:C9:19:9C:28:5F:BB:E7:AC
            X509v3 Authority Key Identifier:
                keyid:5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/5F930352DE227A8D4CED188F902C873925C9D5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32332d3233203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:62:4c:41:91:75:c2:8f:26:c8:e6:ff:04:b2:e6:7b:67:
         8c:34:4a:12:c4:99:71:2b:d1:c2:33:37:7a:2e:39:eb:a8:44:
         ed:d1:19:de:9c:c3:4e:9f:b7:d0:e2:a4:c1:1d:94:da:7c:68:
         35:d9:c6:15:17:19:f8:69:97:34:fc:5c:f8:bb:f7:05:98:df:
         36:98:46:37:0b:03:5c:5e:a5:e6:d9:63:85:2d:34:38:2c:bd:
         49:3e:82:81:b6:b2:8c:14:11:2c:7f:e1:df:cd:f7:a1:9b:2f:
         f3:f8:c7:1a:d1:12:78:70:7c:e7:3b:92:9e:9b:c2:85:a5:bc:
         b2:18:d6:22:5d:0e:d4:f6:b8:9e:a2:11:96:e6:4e:d6:03:76:
         b9:f6:18:4b:81:fe:89:27:4f:a7:d3:95:9e:9d:08:23:bd:18:
         27:e7:73:77:2c:8a:62:c7:90:5d:09:7a:b0:d0:82:04:3e:7b:
         45:c1:db:1a:c8:3c:8f:93:be:59:85:2d:a8:38:7d:52:28:64:
         aa:5e:a1:27:12:40:db:60:10:80:a1:84:8d:95:72:48:5e:64:
         4d:c0:22:7e:17:d2:de:c9:a4:0f:21:1c:55:4b:55:c1:2c:2e:
         f9:66:ab:d7:ad:52:ca:a2:6a:c5:83:40:7a:b6:f8:12:ef:21:
         55:64:87:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org