Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa
File:                     3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier:          d9w0MzKxiJqM5PBlxEnFmwCClS/N0PQS9XAf/7kqzV0=
Subject key identifier:   FA:D4:F3:8C:AF:C9:E8:D8:FA:09:B6:52:4B:70:E8:41:36:B1:C2:A8
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       0BD96C52333E1FB9FD9C820F1CB5B57A3757E2D1
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:09:56 +0000
ROA not before:           Sat 08 Apr 2023 03:04:56 +0000
ROA not after:            Sat 06 Apr 2024 03:09:56 +0000
asID:                     264301
IP address blocks:        138.121.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d9:6c:52:33:3e:1f:b9:fd:9c:82:0f:1c:b5:b5:7a:37:57:e2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:04:56 2023 GMT
            Not After : Apr  6 03:09:56 2024 GMT
        Subject: CN=FAD4F38CAFC9E8D8FA09B6524B70E84136B1C2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:1f:d2:61:6f:06:b5:2e:fe:40:9c:74:e4:
                    f7:b2:b3:45:a8:f2:2d:0d:29:98:8a:0c:ac:f7:44:
                    7a:dd:3f:fe:83:45:f8:0f:ac:5a:a7:7f:6a:49:6b:
                    21:49:5b:29:aa:2f:db:08:67:10:6d:15:71:ba:88:
                    77:34:21:26:22:99:db:7b:33:5c:39:bd:18:f6:1e:
                    5b:18:75:6b:19:35:13:7e:30:c6:10:4e:54:01:0b:
                    8d:fa:9a:9f:57:52:c4:7d:7d:84:0c:a7:7e:41:6a:
                    23:d4:9e:5f:27:fd:c6:0d:84:0f:10:aa:ae:fa:f6:
                    c2:85:65:c5:55:3e:f7:7c:fc:3c:3d:dc:bf:be:01:
                    cf:c7:f5:21:bd:1f:ca:03:4c:c4:7a:3b:fb:d2:9c:
                    19:34:a3:d6:b8:6b:d2:e9:4a:ef:8b:8d:ef:c1:1c:
                    d9:b9:b1:46:ef:b9:e8:3e:61:39:30:a6:6b:f1:55:
                    aa:76:2c:18:07:cb:6a:c8:8d:52:d8:80:52:84:ea:
                    23:2e:ed:04:8e:78:78:b3:ff:a5:9a:88:98:47:00:
                    5f:a5:b2:8d:8f:f8:16:63:dc:a7:c2:1f:b9:2b:eb:
                    4c:f2:78:a9:ff:50:4a:8a:4b:07:13:e0:73:75:f4:
                    75:2b:15:75:cf:45:d4:60:36:3b:c7:38:9f:84:c6:
                    63:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D4:F3:8C:AF:C9:E8:D8:FA:09:B6:52:4B:70:E8:41:36:B1:C2:A8
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139382e302f32342d3234203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:b4:af:48:08:c1:51:35:a6:4b:f3:ec:41:14:cd:1b:28:2c:
         09:a6:66:5c:49:a4:11:ad:e8:f9:f8:65:23:69:2a:e4:c8:c1:
         86:53:fd:2d:f8:5a:53:b6:c8:64:01:7b:fa:e5:a7:d2:cb:07:
         cc:03:64:16:90:78:c0:ce:91:f4:93:36:9f:20:a6:b7:b7:a3:
         7e:cd:c4:02:04:05:59:17:91:65:92:9c:38:2a:ff:b4:fe:d7:
         98:39:92:22:9d:2f:c5:5c:e4:8c:91:27:b5:64:96:b7:9c:ff:
         9f:81:1c:fc:51:29:06:11:f6:9e:7e:00:4d:d7:32:03:be:8a:
         b1:df:46:4c:28:66:61:78:08:09:60:18:1c:3c:9b:bc:e7:52:
         36:35:f9:aa:cd:e2:36:ea:a3:2c:09:da:ee:54:49:9b:00:10:
         99:78:87:25:2b:97:64:0b:e9:1b:73:b9:e9:cc:7b:9e:45:8d:
         16:47:cf:67:12:ec:e7:f1:e2:37:2a:cc:fa:9b:fc:9e:c3:b0:
         68:c2:d9:53:9d:fc:26:93:f1:34:91:02:fd:ad:60:bd:e1:69:
         aa:60:02:8a:31:fa:04:b9:0f:3e:31:5e:45:88:21:a2:b8:27:
         c0:04:4a:b7:31:1e:5b:c7:5b:85:46:c7:fd:0b:1a:fd:a8:27:
         8f:f4:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org