Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37342e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37342e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          9F/uEuucsqwTq9rjaqNavDVZCuA6eVLVbHwX6zftZXQ=
Subject key identifier:   29:D2:44:6F:BB:F3:1C:76:08:23:78:4D:4E:B4:31:3D:5D:E6:7F:6E
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       1F40D4CF9027EF43E07FC56F3E0FB939478F1F4C
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37342e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:18 +0000
ROA not before:           Tue 16 May 2023 11:55:18 +0000
ROA not after:            Tue 14 May 2024 12:00:18 +0000
asID:                     263263
IP address blocks:        138.122.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:40:d4:cf:90:27:ef:43:e0:7f:c5:6f:3e:0f:b9:39:47:8f:1f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:18 2023 GMT
            Not After : May 14 12:00:18 2024 GMT
        Subject: CN=29D2446FBBF31C760823784D4EB4313D5DE67F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:64:2d:fb:91:fd:23:6c:31:d4:42:d3:6e:27:
                    a7:39:e7:fd:ba:ef:4b:f2:87:6d:a1:fd:c7:a0:bc:
                    39:87:d1:2b:b2:e9:bd:14:13:3f:ca:d3:a1:7a:7d:
                    8d:ee:1d:5a:ab:e9:7e:00:6b:b1:53:47:38:5d:3f:
                    9f:11:b9:db:ff:ab:e1:56:ef:1f:ab:6c:30:26:a2:
                    5d:f9:ee:c9:e0:5a:f5:62:73:d7:d9:e9:b9:f8:31:
                    30:f1:8d:1d:db:c4:a3:3b:cb:f9:da:cc:40:da:54:
                    5e:ce:f8:23:2a:08:fd:c9:85:fe:01:f8:b9:39:37:
                    a0:b3:e6:55:70:19:75:27:57:b3:87:2a:c8:0c:74:
                    f6:4b:c9:3f:0e:83:3b:30:ba:8f:4d:88:e2:3a:bd:
                    df:ae:cd:5b:4e:85:0d:d7:ee:e7:f9:18:62:13:18:
                    1c:48:9e:04:bd:64:09:e2:af:71:01:43:bb:c1:93:
                    e3:8e:3e:ad:2f:84:76:da:be:a1:38:12:18:df:03:
                    09:52:0e:29:92:c5:54:5e:be:4e:4f:4b:0f:3f:04:
                    ac:0c:e5:16:77:e6:86:48:65:23:7e:d0:48:e7:48:
                    9f:5e:7d:25:d2:5a:2f:39:b4:1e:74:ad:87:6f:39:
                    2f:6d:a0:f5:ec:9b:3d:01:ef:fd:4f:87:d8:cb:0e:
                    9c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D2:44:6F:BB:F3:1C:76:08:23:78:4D:4E:B4:31:3D:5D:E6:7F:6E
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37342e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d6:0d:7a:a2:57:8e:ce:e2:71:0e:d6:00:67:59:07:48:c1:
         a2:7c:84:17:c4:42:32:7d:c7:a4:b6:43:1f:9c:dc:aa:d9:d5:
         a1:41:85:a7:50:b1:cd:57:bf:c4:59:b3:ea:62:f6:c6:75:fe:
         0e:f7:e7:d8:ed:d3:b3:6f:f6:3f:fb:57:23:99:9f:55:f3:19:
         28:c6:dd:93:88:15:4f:e4:5f:8b:b7:f6:54:7d:43:ec:18:c3:
         6d:10:f6:e3:5a:83:99:96:d7:f0:79:a7:67:83:b7:92:07:b5:
         aa:e3:da:a0:ce:8e:5a:59:22:8f:36:20:ad:f0:28:32:66:ed:
         7c:4a:30:a9:34:d4:13:10:44:2a:bb:87:d4:0c:01:39:5a:28:
         2b:6a:d7:eb:b1:fd:a7:59:a3:a6:1d:6d:10:67:14:58:74:3b:
         37:6e:b0:39:cc:2a:87:64:8e:bb:a5:af:04:18:dd:5e:38:28:
         6a:9d:40:fa:13:6d:55:de:08:65:13:6a:26:0f:ed:23:5a:ab:
         76:81:3b:f1:6e:be:ec:8c:01:53:d4:dc:3a:72:30:1f:ec:e5:
         ea:b4:f9:c9:5b:37:a7:f7:33:aa:bf:f2:d1:2b:9d:ee:ff:70:
         33:82:9d:94:03:aa:f0:e9:58:f3:7e:81:b7:1a:1d:e4:ce:43:
         25:46:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org