Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa
File:                     3133382e39342e36382e302f32322d3234203d3e20323633343731.roa (raw, json)
Hash identifier:          yi3d2lPSEaiFrWmqiIM1+gVMY4H4/NdH5jDshc/sFEo=
Subject key identifier:   7D:47:E2:12:60:43:A5:80:5D:D8:A8:BE:E3:90:A0:F8:25:06:FC:D0
Certificate issuer:       /CN=A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD
Certificate serial:       52F04B9DC9D2E6DC6ADADBA60A9B3F8FA2426F23
Authority key identifier: A6:F0:56:FF:C6:6B:17:D1:FC:C3:53:D6:6D:F4:EE:FC:59:D2:49:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa
Signing time:             Tue 12 Mar 2024 17:56:06 +0000
ROA not before:           Tue 12 Mar 2024 17:51:06 +0000
ROA not after:            Tue 11 Mar 2025 17:56:06 +0000
asID:                     263471
IP address blocks:        138.94.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f0:4b:9d:c9:d2:e6:dc:6a:da:db:a6:0a:9b:3f:8f:a2:42:6f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD
        Validity
            Not Before: Mar 12 17:51:06 2024 GMT
            Not After : Mar 11 17:56:06 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:fb:ed:7c:9f:1c:1c:d0:f5:2d:9a:91:23:
                    5b:a6:9c:f9:ec:8e:6c:ee:c0:d2:af:52:02:e1:07:
                    e1:d4:be:82:33:10:9d:31:20:3b:66:1a:af:9f:b6:
                    8b:af:28:e0:d6:7f:77:90:ff:be:50:4f:76:ad:85:
                    a8:63:ce:68:46:72:96:60:bc:46:1b:a0:36:9f:9c:
                    21:80:0f:fe:f3:2f:eb:95:6e:24:55:91:1c:71:a2:
                    54:67:04:7c:20:1c:9e:6e:a7:8a:de:c2:4f:e1:17:
                    31:e2:71:aa:64:b2:1a:ba:c0:b6:28:6b:b4:26:27:
                    0a:e8:4a:e3:59:d3:a2:33:2d:20:f5:c1:65:a0:b5:
                    c9:29:e2:27:1c:74:31:b5:e7:de:41:46:75:60:fb:
                    d5:c3:ce:e3:42:dd:67:07:2f:ae:69:cd:ae:23:a6:
                    51:58:18:54:db:8f:44:84:cc:15:a1:0b:b7:d8:54:
                    6c:75:87:e5:77:a7:93:99:cc:1c:3d:e8:c8:51:82:
                    25:38:6b:84:41:9a:cd:c3:e7:bd:83:75:b7:97:81:
                    49:ad:cf:7c:96:82:19:87:5b:9e:ee:35:dc:07:09:
                    72:e7:59:8d:f5:d2:53:5c:35:f0:e3:09:47:d4:14:
                    cf:ee:f9:8a:d2:63:b3:28:7d:21:5d:4e:4c:5c:d9:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:47:E2:12:60:43:A5:80:5D:D8:A8:BE:E3:90:A0:F8:25:06:FC:D0
            X509v3 Authority Key Identifier:
                keyid:A6:F0:56:FF:C6:6B:17:D1:FC:C3:53:D6:6D:F4:EE:FC:59:D2:49:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6F056FFC66B17D1FCC353D66DF4EEFC59D249BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J4nTDSGJZhxfj2VXf9vAwrA2GdWTYY94pagfP4uYTu1c/0/3133382e39342e36382e302f32322d3234203d3e20323633343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:78:69:b8:ce:1c:b3:43:4a:44:fa:74:42:a6:b0:5d:59:
         17:4b:53:ef:f6:fa:ca:90:68:90:84:ac:d0:7e:42:84:0a:f7:
         ed:ad:e8:92:22:07:b0:4f:e9:47:63:cf:ad:ab:9b:ef:48:1e:
         4e:4c:7f:de:09:43:f1:95:c8:94:98:7f:4c:88:c3:24:87:20:
         73:dc:15:df:c6:8f:c8:00:c8:39:91:f7:7a:e1:f1:0f:f5:1c:
         69:ca:87:ae:0c:8b:b7:35:de:da:36:47:60:95:e3:8f:95:ad:
         b5:e1:4b:83:bc:76:bc:1c:d4:fe:67:61:9e:86:fd:ed:55:d2:
         37:5e:37:d9:95:83:f3:de:f8:c0:b7:b6:10:40:07:fa:5b:24:
         ff:36:6f:df:d6:36:6d:a3:e3:6a:ea:3b:d9:ae:5d:da:e1:93:
         c2:f1:65:f4:9a:9b:2d:9c:8e:c2:0e:7a:45:d0:38:2b:8a:9d:
         80:e2:28:83:79:24:65:5b:78:eb:19:c2:d8:e0:e7:56:ed:e6:
         a3:47:ae:90:aa:34:89:32:54:27:f2:ed:0b:4a:f5:ce:4d:35:
         75:a5:68:f2:e2:16:5d:e8:9d:38:5c:84:a8:d0:63:88:56:4c:
         78:37:5b:64:62:fd:67:57:e4:e4:fd:ad:57:36:9f:98:a6:6a:
         2f:36:b3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org