Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32342d3234203d3e20323633393530.roa
File:                     3133382e3235352e302e302f32342d3234203d3e20323633393530.roa (raw, json)
Hash identifier:          9DMLn875E3ENySNqB8gUVEjNEnrQtv03Jj3o3mc4c0Q=
Subject key identifier:   48:92:DF:90:48:C2:1D:CC:AD:C8:F1:B9:3B:A4:34:E4:5B:1B:15:FA
Certificate issuer:       /CN=F541966412A9926340E8F10C31ABE0041F25A41F
Certificate serial:       6CD75F068CC0483ABC46877D3C60F3CF44227604
Authority key identifier: F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32342d3234203d3e20323633393530.roa
Signing time:             Fri 09 Feb 2024 19:07:53 +0000
ROA not before:           Fri 09 Feb 2024 19:02:53 +0000
ROA not after:            Fri 07 Feb 2025 19:07:53 +0000
asID:                     263950
IP address blocks:        138.255.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:5f:06:8c:c0:48:3a:bc:46:87:7d:3c:60:f3:cf:44:22:76:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F541966412A9926340E8F10C31ABE0041F25A41F
        Validity
            Not Before: Feb  9 19:02:53 2024 GMT
            Not After : Feb  7 19:07:53 2025 GMT
        Subject: CN=4892DF9048C21DCCADC8F1B93BA434E45B1B15FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:51:22:ef:aa:07:15:c5:89:75:12:29:ee:c5:
                    07:bb:6b:e2:5b:9d:91:1d:a1:b6:23:4d:d2:1b:d0:
                    b5:2d:8a:c0:fe:fa:2a:7f:d1:97:70:b7:ad:e0:9f:
                    1d:b8:c0:28:26:8b:88:6b:d3:25:22:b4:0b:f3:6d:
                    ef:56:91:38:ab:b3:8a:da:e2:85:0d:fd:8e:9c:2c:
                    e7:b1:b7:b7:b8:85:3f:0c:6a:06:f7:9a:58:38:ca:
                    c7:0f:c8:41:c4:1b:3f:c0:9d:96:ba:80:83:dc:d3:
                    c5:c1:8f:c2:7a:20:26:5e:68:14:a1:ec:ee:22:24:
                    6f:dd:93:17:ab:da:46:ae:f0:f8:20:3d:0f:a0:81:
                    8c:5b:8f:b1:f9:fe:d9:23:0c:1f:07:3d:a9:b8:d1:
                    b9:6d:18:da:93:62:a5:37:6b:e7:fd:c2:a3:b0:79:
                    1b:8e:a6:9d:fc:a5:f6:91:7c:05:41:56:60:41:65:
                    70:73:55:40:fb:e6:71:8d:58:b9:df:46:58:9c:7f:
                    28:9d:f9:66:59:85:5d:dc:64:31:57:d1:92:b4:57:
                    4c:a6:3b:0d:05:62:5a:63:7a:ed:3e:23:e8:db:f7:
                    2c:56:06:30:7d:2f:e4:69:fa:76:bf:81:a7:20:ac:
                    2c:b4:61:16:0a:a4:c5:b6:1d:20:27:ae:b2:47:37:
                    42:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:92:DF:90:48:C2:1D:CC:AD:C8:F1:B9:3B:A4:34:E4:5B:1B:15:FA
            X509v3 Authority Key Identifier:
                keyid:F5:41:96:64:12:A9:92:63:40:E8:F1:0C:31:AB:E0:04:1F:25:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/F541966412A9926340E8F10C31ABE0041F25A41F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F541966412A9926340E8F10C31ABE0041F25A41F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/3133382e3235352e302e302f32342d3234203d3e20323633393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:57:b1:56:4b:90:e0:75:5d:1f:7d:c6:49:ab:db:ed:46:
         26:f8:c3:7c:cf:fd:f1:65:b6:97:d2:65:7f:37:2c:74:f6:b1:
         a0:05:8b:c1:c0:80:60:99:fd:f2:1f:5a:90:69:b3:70:51:20:
         13:50:49:c9:8b:22:4e:53:56:5b:42:35:28:31:c7:f6:2d:82:
         b4:b0:e4:74:53:c4:d8:eb:89:04:c4:a9:8d:f1:f5:63:c0:94:
         0b:2d:f9:b5:46:96:d1:c7:46:5e:ed:cf:77:f8:f4:74:9c:7d:
         43:fa:9c:86:88:7f:f6:b0:b3:a9:7e:52:9e:70:03:16:f4:be:
         29:42:52:9f:7d:12:0a:8d:a4:b9:75:d2:59:da:47:2c:a4:16:
         16:0d:68:ea:90:b0:d5:d3:b1:28:7c:12:79:c5:1f:38:37:e3:
         b2:77:99:64:4b:71:4d:17:36:cf:55:13:62:cb:16:6c:90:fa:
         2b:f8:cd:46:fc:5a:d0:17:f9:b6:f5:8b:e2:07:0e:6d:98:68:
         e2:00:b3:02:71:95:75:74:f4:49:69:af:2b:5c:0e:fd:cb:32:
         fe:32:b2:a3:44:b2:f5:56:30:0f:86:1f:c0:3d:3e:b3:88:cb:
         29:b6:a3:26:2c:4a:6d:37:e5:6b:38:8a:f3:88:3f:52:8e:e5:
         e2:42:79:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org