Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
File:                     3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa (raw, json)
Hash identifier:          doZN6WLvGeEFnVYAQ5SwEf//121+fVo5u+8Um511flM=
Subject key identifier:   F1:3A:88:D6:C3:94:2E:94:3A:24:26:70:69:2A:CF:DD:CB:CE:A0:AE
Certificate issuer:       /CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
Certificate serial:       174AD4D3FF87A125099B72C1759F24CA6909F076
Authority key identifier: F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa
Signing time:             Thu 04 Apr 2024 14:40:53 +0000
ROA not before:           Thu 04 Apr 2024 14:35:53 +0000
ROA not after:            Thu 03 Apr 2025 14:40:53 +0000
asID:                     264367
IP address blocks:        138.185.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4a:d4:d3:ff:87:a1:25:09:9b:72:c1:75:9f:24:ca:69:09:f0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A91B48CC984B1956E0C296E2876B54F91800B5
        Validity
            Not Before: Apr  4 14:35:53 2024 GMT
            Not After : Apr  3 14:40:53 2025 GMT
        Subject: CN=F13A88D6C3942E943A242670692ACFDDCBCEA0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:fc:41:45:88:06:12:9a:99:23:d1:a6:fb:
                    05:3b:79:85:cc:1a:51:4f:57:40:dd:72:d0:9b:ed:
                    61:47:91:ba:aa:da:2a:b6:58:91:d3:69:f8:c7:b5:
                    fb:44:6e:86:b3:0a:8b:d9:a2:93:74:fb:fd:58:82:
                    80:d0:09:d4:cb:7a:38:22:a7:30:81:bf:f9:da:af:
                    f4:13:85:4c:05:0a:4c:85:1e:fb:b0:2b:2c:a8:5e:
                    93:24:d2:fa:9d:57:ec:38:cc:18:46:18:4c:fe:64:
                    dc:40:25:11:4a:af:82:31:3f:ea:cc:74:50:2a:f7:
                    61:43:59:d9:4a:e9:f5:6d:e8:eb:66:7d:e4:06:2b:
                    4b:c7:de:5b:a3:5f:c5:23:c3:9e:dd:a6:70:a7:68:
                    43:5b:88:66:f1:0b:74:67:bc:e8:e1:5b:24:85:ad:
                    3d:fc:be:00:e3:41:4a:7e:f2:48:4b:bc:95:98:c5:
                    2d:5f:4d:43:31:64:03:51:c0:8d:6d:6d:ca:92:43:
                    99:e9:b6:52:72:f0:8d:67:23:0b:ba:db:f7:70:72:
                    e4:a4:bb:3d:fd:c9:90:10:2f:5d:1c:b7:4e:f1:20:
                    f1:7d:6d:19:22:80:a6:ba:07:1a:17:22:6f:a9:72:
                    e1:cf:7f:3e:8d:ab:a7:9c:fb:86:0f:9a:8d:2f:c2:
                    1b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3A:88:D6:C3:94:2E:94:3A:24:26:70:69:2A:CF:DD:CB:CE:A0:AE
            X509v3 Authority Key Identifier:
                keyid:F0:A9:1B:48:CC:98:4B:19:56:E0:C2:96:E2:87:6B:54:F9:18:00:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0A91B48CC984B1956E0C296E2876B54F91800B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fcryUt6tZxGMcsBWirDueP7pdVkKMZz3ZXoqe6uvR7m/1/3133382e3138352e3231362e302f32322d3234203d3e20323634333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:45:72:03:d6:7f:04:25:52:3e:c7:a0:ec:08:39:08:b5:93:
         09:87:bb:34:bb:19:be:ca:d5:f6:7b:52:8d:2d:64:22:66:9f:
         5c:2d:b0:ed:c3:19:13:a2:9a:75:53:e9:50:1e:39:02:77:30:
         fa:b8:53:31:e3:30:e1:c1:e9:c7:55:ec:31:fd:da:95:d3:ba:
         85:e0:ee:09:29:e4:2a:0d:48:85:ee:eb:b8:55:b5:bb:a7:4c:
         c2:9f:0e:3d:e2:e7:78:54:62:75:2d:76:37:fb:df:11:71:74:
         e6:6b:4e:36:38:69:2e:c4:06:db:62:8c:fe:35:f1:d5:62:80:
         64:14:8e:0c:9c:7e:c4:dd:a2:d3:11:5c:3d:83:5c:90:73:c3:
         82:d7:4a:b5:0c:96:8c:14:7a:2b:a5:20:4b:a0:c4:88:fd:7f:
         2b:68:56:c4:8f:3f:37:3e:a5:c2:f6:a1:0c:b6:11:c6:c1:ed:
         46:53:1f:08:fb:57:c1:da:dd:6e:07:4f:5c:2b:15:b7:c2:b9:
         e5:46:1f:23:54:c5:b7:07:c1:9e:55:0a:e7:6d:24:7b:c8:1c:
         33:ca:b9:b4:0b:4f:d4:0d:c7:9d:8c:a0:e0:24:91:2c:12:78:
         cd:cf:c8:29:09:74:3c:b0:0b:79:d3:01:0c:cb:88:cd:3e:b8:
         69:4e:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 09:07:39 2024 by rpki-client on console-fra.rpki-client.org