Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          uKo1lWf8K+Us24zkdQ+BPNBL6dph01+k0St+O1EIl1k=
Subject key identifier:   E2:C0:60:AC:5D:6F:E0:D1:91:20:15:9F:57:4D:7B:20:32:5B:82:0A
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       6BE3FF1BDAC0B5C8338F529B75EA2FBD6E6BD336
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:49 +0000
ROA not before:           Thu 04 Apr 2024 12:30:49 +0000
ROA not after:            Thu 03 Apr 2025 12:35:49 +0000
asID:                     262485
IP address blocks:        138.118.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:ff:1b:da:c0:b5:c8:33:8f:52:9b:75:ea:2f:bd:6e:6b:d3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:49 2024 GMT
            Not After : Apr  3 12:35:49 2025 GMT
        Subject: CN=E2C060AC5D6FE0D19120159F574D7B20325B820A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7a:ba:f4:ea:e1:31:66:3e:f1:0d:ee:f8:e1:
                    72:ad:90:99:fb:8a:38:4b:89:bd:74:62:c7:8e:2f:
                    87:78:98:2f:6f:50:f1:a2:13:76:ae:10:ce:5d:04:
                    40:f6:ff:84:13:1b:24:7d:96:90:64:cd:4e:fc:91:
                    a1:fd:b1:61:a1:23:ad:76:86:3e:36:46:d3:28:6a:
                    fb:78:3b:1d:47:14:65:8e:4a:34:f5:7c:ad:5d:65:
                    52:09:d4:2c:43:2d:ae:20:d4:fc:7f:50:7b:c9:b8:
                    40:4b:65:84:94:bb:42:b6:08:2d:6b:c1:82:7a:b2:
                    e2:8f:cc:95:60:31:18:2a:a6:1c:54:97:af:2d:fa:
                    d9:04:7a:92:6e:d4:05:2b:d2:f1:ea:c5:e4:7e:d6:
                    54:a5:0d:a5:04:f5:95:e8:a3:29:a9:26:6f:43:5c:
                    0d:27:2f:b6:45:cb:ed:ef:5e:bb:b9:aa:73:23:80:
                    db:37:14:36:e8:67:76:58:9a:61:e2:3f:d8:42:b9:
                    42:e5:e3:a4:22:91:fb:97:cf:0e:50:28:b4:82:14:
                    f8:e3:c0:77:88:97:9c:da:8d:18:65:46:fe:d5:87:
                    9d:ef:da:af:84:d1:44:30:d6:6c:c3:88:e2:06:7e:
                    6f:22:c3:b5:9c:48:dd:1b:b1:6d:28:b3:11:ee:89:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C0:60:AC:5D:6F:E0:D1:91:20:15:9F:57:4D:7B:20:32:5B:82:0A
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e39312e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:f0:84:7a:ef:83:a9:42:8d:86:0b:df:d4:d8:6c:d6:73:fb:
         1f:00:f2:5f:b7:4e:0a:e0:ec:6a:0c:b9:07:21:4c:73:70:d6:
         7d:26:77:c1:1a:bf:12:c0:4d:5e:4e:de:14:e7:7a:24:96:84:
         76:eb:c4:82:35:97:aa:ad:e9:4e:38:44:50:2e:24:57:90:7c:
         7e:f6:38:66:b7:ad:85:a0:e6:8e:a5:00:74:36:8c:f8:8a:7e:
         38:51:e9:6b:29:f8:17:7a:16:e6:0c:a2:c2:ba:a3:e3:d3:1d:
         c3:9b:b5:b1:fe:be:31:45:65:f3:7f:7a:00:57:e7:ea:d5:74:
         45:b7:84:72:89:17:34:ab:e8:62:97:a1:ce:dd:83:29:fc:89:
         50:5e:7b:cf:79:8a:ed:49:23:77:57:d2:97:a8:ef:c9:f6:16:
         6b:84:10:3e:f2:48:6b:0d:97:cc:bc:f7:2e:49:e7:79:00:47:
         fd:97:8c:de:87:68:13:45:d4:e8:de:66:55:ba:9b:9f:a7:8e:
         be:ad:35:86:c9:fa:b8:10:0c:e5:40:82:1c:e7:e5:91:f4:45:
         17:3a:60:6a:6c:8a:20:a9:8a:e5:1e:be:13:4b:2f:e1:53:39:
         f4:29:5b:2d:a3:a4:a8:c4:5c:d4:34:92:89:ad:8d:bb:a3:9b:
         27:5e:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org