Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa
File:                     3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier:          dfw90rYsDjImLePbhVmX4+W6fv+8vqI6U287ZOGMKF4=
Subject key identifier:   3F:06:E9:FB:65:76:5C:8C:35:2A:D8:95:A1:E7:7F:DE:5A:2B:BF:4D
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       41993A2CE74FB70C607D396B08C1383A2E8E0CB5
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:22:07 +0000
ROA not before:           Fri 27 Jan 2023 20:17:07 +0000
ROA not after:            Fri 26 Jan 2024 20:22:07 +0000
asID:                     263934
IP address blocks:        138.219.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:99:3a:2c:e7:4f:b7:0c:60:7d:39:6b:08:c1:38:3a:2e:8e:0c:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:17:07 2023 GMT
            Not After : Jan 26 20:22:07 2024 GMT
        Subject: CN=3F06E9FB65765C8C352AD895A1E77FDE5A2BBF4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:f8:24:ae:0b:63:c0:5f:75:9d:1a:9d:7c:
                    85:70:63:ef:d5:28:b5:da:f7:63:3c:d2:86:f5:ab:
                    32:88:dc:e1:f4:58:48:62:ea:64:37:ee:4e:af:b2:
                    22:1a:41:a4:15:53:e7:7b:f7:42:05:ff:39:67:c8:
                    0b:19:ad:20:f9:1c:08:81:41:7c:b4:ef:b5:f3:e5:
                    7e:f9:a5:aa:63:c4:ef:1b:fa:de:eb:a0:af:f2:38:
                    e1:bf:df:22:5b:2c:c6:5f:ef:f4:43:31:e6:46:e6:
                    d7:8a:df:06:08:fd:f0:a6:96:20:2d:01:e8:f5:95:
                    76:b6:c1:9d:d1:71:7c:8b:0b:44:42:78:8e:20:a9:
                    2e:56:db:a8:67:7f:13:2f:b7:da:6c:e1:e6:bd:8e:
                    c0:f4:aa:8c:53:43:fa:fb:56:16:91:78:72:b2:30:
                    82:39:f8:41:b7:df:e3:c7:2d:cd:35:76:4a:08:4a:
                    29:b9:6e:95:cb:7f:e3:7d:15:d1:03:fd:2b:6e:9e:
                    3e:76:dd:6d:87:db:f4:d8:c4:4b:dd:3b:9d:6b:11:
                    b0:cf:84:58:21:e8:f4:49:e0:c1:b5:83:9f:45:1d:
                    71:45:de:34:26:1c:f1:2c:9f:0b:17:03:22:ff:4f:
                    8e:d4:cf:0d:e9:43:d4:66:15:eb:27:c8:88:34:49:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:06:E9:FB:65:76:5C:8C:35:2A:D8:95:A1:E7:7F:DE:5A:2B:BF:4D
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3133312e302f32342d3234203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e8:67:b7:c5:05:87:c2:ca:09:c2:cf:bc:d7:fd:ed:a2:97:
         c0:52:86:29:9f:9c:3c:17:4a:8e:3d:bf:2f:09:66:18:fe:df:
         0c:f1:30:05:c3:07:b9:f9:29:d5:fc:68:01:b4:92:3e:9e:24:
         71:3c:6a:be:ae:78:6b:c0:77:6d:c0:85:8e:b2:53:1a:04:39:
         d6:5a:23:26:9d:7c:cf:45:03:ed:33:41:28:6d:2c:e8:3e:e5:
         64:6d:7b:47:25:cb:9a:b0:cc:97:de:80:3b:f6:ae:3c:7e:99:
         70:1c:95:1c:bf:c7:75:5f:bc:83:70:4d:e9:5d:a3:40:26:23:
         81:b7:c8:4c:5b:05:61:73:c4:0b:35:ac:ca:4f:73:66:e3:46:
         76:dc:08:b7:9d:0e:ef:d9:73:48:ad:00:4c:e7:de:bb:d3:4f:
         a9:cc:15:81:80:ad:9d:fc:ad:39:13:67:1b:bf:85:6a:5b:6c:
         33:e2:15:2b:94:6e:a6:ce:98:fa:d6:30:aa:b6:f0:67:1f:93:
         60:85:34:6b:fa:39:8d:fb:3c:c8:73:3b:69:90:ba:86:cb:d1:
         38:da:07:10:68:ed:c8:96:2b:c9:05:85:7d:4a:ac:4d:b4:63:
         5c:ed:ac:a3:10:33:54:0d:98:18:d1:9c:9f:87:35:af:ad:e1:
         9d:a9:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org