Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38352e302f32342d3234203d3e203631363636.roa
File:                     3133382e3231392e38352e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          4TkRi1vUNTY4Zal5VDKkxrUI61Q4kvYegVoFbq9+STQ=
Subject key identifier:   BA:72:9F:C1:4A:4F:1E:D6:0B:2F:ED:3C:30:D8:2E:75:90:83:DF:61
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       669173F083E5B4D46D1DDB3D15AF84C8D638096A
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38352e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:56 +0000
ROA not before:           Thu 14 Dec 2023 13:15:56 +0000
ROA not after:            Thu 12 Dec 2024 13:20:56 +0000
asID:                     61666
IP address blocks:        138.219.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:91:73:f0:83:e5:b4:d4:6d:1d:db:3d:15:af:84:c8:d6:38:09:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:56 2023 GMT
            Not After : Dec 12 13:20:56 2024 GMT
        Subject: CN=BA729FC14A4F1ED60B2FED3C30D82E759083DF61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:2e:1f:6b:60:fe:f2:1d:57:f9:8e:24:46:
                    ea:7b:98:ad:7f:88:94:97:14:4b:ca:cb:be:a0:86:
                    9a:d4:fa:73:d0:53:0d:db:78:5d:2b:90:c6:25:53:
                    f0:35:79:2a:df:20:4f:23:52:f3:8c:c1:98:63:46:
                    99:9f:c5:80:d6:7e:fc:c0:fc:6a:71:84:a2:4b:cd:
                    01:3e:8a:aa:e5:06:9b:57:7a:5c:b8:b8:67:c4:15:
                    37:22:7c:ff:89:8d:a1:e2:db:0d:0d:a0:b2:95:f0:
                    1c:72:a6:78:81:07:c5:dc:3c:22:5a:9a:5e:94:f5:
                    aa:24:47:d8:ab:7e:f2:78:f9:0c:8f:21:03:c2:32:
                    f7:eb:00:fd:d6:b0:f6:49:5b:da:31:60:52:0f:7c:
                    6b:62:ba:86:a6:82:00:1a:b9:e0:ed:81:55:40:29:
                    0a:e9:64:86:7e:68:e7:73:a1:0b:ca:c7:13:46:4b:
                    72:66:7b:ce:6c:8e:17:d7:81:45:45:2a:d7:5e:7d:
                    f7:de:a1:65:06:f3:fb:3c:1d:13:aa:a0:20:d7:69:
                    bb:e5:9c:73:63:ce:7f:3d:4f:07:99:89:35:4f:00:
                    07:dc:9c:ce:4c:00:47:c5:ba:71:c6:c6:35:34:7e:
                    49:58:1f:a4:57:50:f3:bf:87:86:7a:3a:85:94:2b:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:72:9F:C1:4A:4F:1E:D6:0B:2F:ED:3C:30:D8:2E:75:90:83:DF:61
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38352e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:cd:e8:88:df:07:29:58:49:50:e4:b6:0e:1e:14:4b:16:fc:
         34:6a:03:92:9d:91:d4:24:8b:63:ec:e4:d9:53:56:18:1f:1d:
         3c:e8:0e:a0:f1:99:4e:1d:ef:c6:aa:7f:96:86:89:ab:ae:6e:
         7f:a0:f6:17:b2:08:1f:82:c7:80:57:81:53:74:81:e0:4b:99:
         5f:fc:a6:7c:e1:68:f1:07:9a:a7:68:d4:d3:c4:c8:27:0d:2a:
         f6:b5:84:87:c3:73:fa:3f:db:66:ab:4c:9a:9b:7b:02:84:aa:
         d9:3b:c4:5b:63:58:a1:ed:7b:86:58:ac:9d:83:2a:34:82:2f:
         28:61:19:e0:67:57:b8:d6:78:9d:dd:3d:02:8a:85:47:51:8c:
         5a:92:ff:e4:d9:8d:a8:05:b8:89:39:72:ef:5c:6d:0d:5a:36:
         03:fe:77:f7:31:17:13:b0:01:96:f8:ae:80:0a:24:db:c3:25:
         36:fb:c2:73:de:3c:ef:a5:c6:3f:95:d3:32:20:f9:93:42:dc:
         ec:70:95:5e:33:eb:98:b9:1f:68:9a:c4:94:2a:49:8c:32:ad:
         bd:a4:f0:24:19:16:f6:d0:84:3b:43:a4:91:3d:af:a4:d0:dc:
         59:0a:58:6f:a4:da:a9:ef:2d:98:4f:e4:d0:56:97:6c:77:a3:
         61:9b:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org