Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          p2HlEyjuz6H3FzxDai6lV0rLGpb93dEM34FuK857HHQ=
Subject key identifier:   54:19:42:0F:84:BF:67:8D:24:E0:16:66:5B:90:DA:3A:86:31:5A:9E
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       6D6C9A4D70F598FEB1C06906AD16B773972AC09D
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:48 +0000
ROA not before:           Thu 04 Apr 2024 12:30:48 +0000
ROA not after:            Thu 03 Apr 2025 12:35:48 +0000
asID:                     262485
IP address blocks:        138.118.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:6c:9a:4d:70:f5:98:fe:b1:c0:69:06:ad:16:b7:73:97:2a:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:48 2024 GMT
            Not After : Apr  3 12:35:48 2025 GMT
        Subject: CN=5419420F84BF678D24E016665B90DA3A86315A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ee:53:5d:fe:34:d0:43:90:71:92:33:ee:02:
                    3c:91:23:2a:2c:6d:1a:ec:ad:ef:94:0b:a0:c3:36:
                    99:a1:a6:d1:3c:00:4c:69:a0:3f:01:87:51:41:04:
                    46:be:21:49:61:92:48:3d:33:a5:5e:7f:0d:97:14:
                    30:e7:58:66:54:62:80:f5:db:39:2e:b8:31:31:b0:
                    be:00:2c:cf:28:81:4a:96:ea:83:37:11:55:70:ac:
                    4a:c6:3f:7a:5e:4e:09:a3:b3:c4:d0:cb:fe:6f:7d:
                    87:95:b3:67:19:3c:0d:fa:f0:fe:26:04:1d:a0:08:
                    0c:6c:4b:65:21:91:c1:e9:c8:d7:26:f1:a3:bc:fa:
                    14:a5:c7:33:e4:05:a8:70:6d:21:00:0d:82:c1:05:
                    1f:06:be:36:da:89:37:c4:35:6a:50:4f:4e:88:63:
                    e5:dc:dc:8f:be:65:39:2d:a6:93:06:84:07:d4:4b:
                    93:30:bc:ef:b2:4b:31:cb:f9:22:92:8f:61:5e:9e:
                    e7:8b:7d:b1:ae:00:8e:49:ab:9b:c9:a0:5e:68:60:
                    09:74:0b:da:46:fc:df:f4:45:ac:4e:62:23:07:8b:
                    a7:81:3c:2f:d7:97:c1:d4:d0:47:15:1b:b6:f0:67:
                    c8:08:37:f3:24:31:dd:c6:67:dc:4e:ac:52:d0:f7:
                    f9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:19:42:0F:84:BF:67:8D:24:E0:16:66:5B:90:DA:3A:86:31:5A:9E
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38382e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:ea:23:d5:a0:58:f3:ff:be:37:bf:78:af:64:c8:a7:cf:
         0a:a9:c9:0a:78:57:a2:3b:cb:2d:6f:35:eb:3f:d8:26:6e:69:
         4c:10:2f:34:2b:8a:4d:40:35:2e:65:83:23:ac:fd:81:0f:90:
         7e:3a:f0:23:df:30:57:cd:30:9e:b9:71:fb:5c:81:61:21:7e:
         7f:4f:ca:04:29:5d:5e:41:58:4b:9e:58:82:b6:35:64:e0:14:
         39:a6:86:5e:67:19:98:ce:19:56:1c:21:42:e6:bb:4e:b7:75:
         49:08:48:d4:8b:aa:80:32:78:c7:36:c9:97:5f:bc:dc:8a:73:
         d2:3e:72:68:08:4b:1b:98:15:93:34:14:79:05:a2:a7:54:86:
         dc:55:34:60:8e:4c:4e:aa:f9:8c:8d:62:72:fa:c9:48:6a:01:
         f4:41:61:3e:ec:40:3c:5d:69:11:f9:df:6e:f9:35:f2:08:a2:
         28:65:96:06:8f:39:43:85:4f:31:0b:48:8b:26:e3:86:fd:5d:
         30:4c:89:f1:3e:64:f6:c9:54:1f:ef:5e:37:94:1f:2c:73:bc:
         95:bb:59:0d:9f:2f:c0:ea:91:6e:bf:d5:98:3e:f8:59:08:61:
         56:11:5a:fb:e7:fe:db:58:17:ca:0f:d9:a0:f8:f9:79:ff:66:
         3f:ce:f8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org