Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232312e302f32342d3234203d3e20323634323733.roa
File:                     3133382e3131382e3232312e302f32342d3234203d3e20323634323733.roa (raw, json)
Hash identifier:          GqFWh0bVpIay/Gwo3laa4bt0G7elRgIQ9itB7HaaSDk=
Subject key identifier:   40:DC:66:22:40:32:83:17:B5:CE:C6:C6:00:64:DD:35:D4:DD:45:17
Certificate issuer:       /CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
Certificate serial:       0B35136A7E7E617708DB03FB2666D9AFE7E56A92
Authority key identifier: F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232312e302f32342d3234203d3e20323634323733.roa
Signing time:             Wed 07 Feb 2024 12:58:38 +0000
ROA not before:           Wed 07 Feb 2024 12:53:38 +0000
ROA not after:            Wed 05 Feb 2025 12:58:38 +0000
asID:                     264273
IP address blocks:        138.118.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:35:13:6a:7e:7e:61:77:08:db:03:fb:26:66:d9:af:e7:e5:6a:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F42A0DCA25F30767A6CCA69324EE2356AC775DE7
        Validity
            Not Before: Feb  7 12:53:38 2024 GMT
            Not After : Feb  5 12:58:38 2025 GMT
        Subject: CN=40DC662240328317B5CEC6C60064DD35D4DD4517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2a:69:0d:1c:19:8f:a1:86:ba:bc:cc:fd:e1:
                    6b:51:94:63:6d:1e:de:7a:b1:13:0d:8d:85:ae:b9:
                    00:f1:8e:57:b1:34:8c:a5:e4:00:c8:b5:d6:47:c1:
                    79:34:8d:54:29:c4:57:81:ff:35:fc:27:c4:b2:04:
                    ee:64:e7:55:f6:1a:99:93:a8:ec:62:7f:c5:da:db:
                    80:73:5a:31:8d:e1:b2:dc:85:7c:c9:09:d2:a8:b2:
                    3a:27:a4:63:11:74:0f:d7:b7:9c:ed:5c:f1:fd:27:
                    fd:58:69:3a:48:6e:9f:0a:2e:df:9d:2a:8d:4e:6c:
                    c5:e1:d7:9b:9f:5e:d2:c5:9a:e7:06:26:ab:6c:96:
                    fd:b5:ad:b8:d7:27:8b:bd:46:32:6b:71:49:73:47:
                    15:6a:8a:d9:06:13:38:a2:04:c3:d6:9a:bb:98:71:
                    e4:ed:79:3c:fe:ea:02:ae:df:48:eb:27:73:92:69:
                    12:72:4a:3e:6e:f7:23:1b:0c:f6:73:fe:eb:f4:03:
                    51:b6:6f:eb:82:e0:8f:18:e2:9b:89:17:b7:e4:d4:
                    60:2b:56:7c:56:2b:81:d3:bd:f9:4e:df:d8:24:b7:
                    26:12:81:4f:87:04:67:f7:b6:6b:ec:e4:78:66:7b:
                    7d:60:6a:7d:4c:69:95:21:16:2b:95:c7:6c:dc:b1:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DC:66:22:40:32:83:17:B5:CE:C6:C6:00:64:DD:35:D4:DD:45:17
            X509v3 Authority Key Identifier:
                keyid:F4:2A:0D:CA:25:F3:07:67:A6:CC:A6:93:24:EE:23:56:AC:77:5D:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F42A0DCA25F30767A6CCA69324EE2356AC775DE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/3133382e3131382e3232312e302f32342d3234203d3e20323634323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:b8:af:18:59:1f:66:30:07:60:70:12:68:f1:a9:f1:3e:
         fb:07:a0:af:94:05:54:55:9f:01:b3:3a:90:1a:c3:10:c4:d6:
         9b:d7:52:72:57:fa:c9:e6:44:f8:35:16:f8:d3:ed:95:6b:5b:
         f9:23:20:b3:59:45:3e:39:1d:2c:3c:85:1e:3c:d6:ca:5e:ae:
         df:86:67:94:64:fa:f7:37:30:a7:e0:01:66:b1:63:dc:8f:8e:
         56:95:f1:06:ec:b0:39:bb:c5:ea:d9:38:a1:62:04:17:b0:a4:
         10:38:e8:af:ca:0d:bb:80:3d:48:31:e3:1c:d8:10:e7:63:4b:
         a1:9d:86:96:92:b0:f7:45:9c:eb:f7:e7:71:8a:96:62:72:21:
         b5:7f:3d:f7:c2:5a:16:be:79:5e:04:97:69:03:cc:32:62:25:
         f0:2e:fe:e7:40:4b:e8:03:f6:86:df:2a:9f:16:1c:68:10:c7:
         76:e0:d4:8e:66:f4:3f:e1:c7:ae:46:31:cf:74:4a:89:fa:67:
         36:c8:6f:6a:a3:1b:46:77:61:d9:99:ae:1d:b1:2e:a6:71:c6:
         49:f9:c9:f6:53:5e:a7:f3:ad:ce:34:6c:ce:33:0b:df:84:45:
         1f:2a:d3:b9:01:da:4d:a7:01:33:48:d6:19:aa:6c:3d:63:9f:
         38:66:32:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org