Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e302e3138302e302f32322d3234203d3e203238353830.roa
File:                     3133382e302e3138302e302f32322d3234203d3e203238353830.roa (raw, json)
Hash identifier:          m5c4aE4q3JUzXlfbe5OHYFILZyc1UviS3NicGf9BguQ=
Subject key identifier:   79:47:8F:D3:77:62:A5:78:C2:B9:AE:B3:35:54:99:63:FA:88:B7:87
Certificate issuer:       /CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
Certificate serial:       3A02579BA4579A82315CB7A21D188661D0E48F01
Authority key identifier: CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e302e3138302e302f32322d3234203d3e203238353830.roa
Signing time:             Thu 19 Oct 2023 19:15:03 +0000
ROA not before:           Thu 19 Oct 2023 19:10:03 +0000
ROA not after:            Thu 17 Oct 2024 19:15:03 +0000
asID:                     28580
IP address blocks:        138.0.180.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:02:57:9b:a4:57:9a:82:31:5c:b7:a2:1d:18:86:61:d0:e4:8f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D
        Validity
            Not Before: Oct 19 19:10:03 2023 GMT
            Not After : Oct 17 19:15:03 2024 GMT
        Subject: CN=79478FD37762A578C2B9AEB335549963FA88B787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:2b:4a:26:a1:05:6f:2b:fd:c6:cf:89:ce:
                    f8:8a:a9:ba:88:e4:58:08:07:3b:bd:07:b9:a1:84:
                    a9:ee:01:c4:c7:57:49:15:2e:0f:01:ce:23:fa:d2:
                    ed:bd:b8:42:9c:7e:08:65:ad:a9:f0:42:93:a8:ca:
                    6b:55:15:d5:26:3e:3a:24:0c:85:2a:ab:7c:1e:3a:
                    08:c2:f3:1a:bc:65:23:78:bf:2b:c2:8b:e6:28:80:
                    73:17:59:ee:cd:ce:ae:1d:33:88:ca:62:1b:12:51:
                    7f:39:30:1e:61:20:84:d4:61:13:17:50:39:bc:4b:
                    76:6e:ac:d9:49:26:59:9c:75:63:b8:d8:3e:a5:5e:
                    bc:9e:18:b1:f4:c6:c4:14:0f:be:ee:53:66:68:4d:
                    aa:4f:1e:dd:52:cf:bf:b9:63:e9:06:a5:8c:36:20:
                    3a:41:b7:ba:4d:37:66:31:f2:1a:8a:b3:f4:22:67:
                    a5:00:12:fc:d1:6c:7a:28:b6:ba:8e:50:b0:93:5f:
                    48:71:37:0d:5d:b3:d9:31:25:4c:f5:6d:c8:7a:82:
                    1f:64:90:52:a8:8b:80:b9:d8:52:e7:73:6a:f3:1e:
                    6d:55:a1:06:f3:e3:cc:98:19:ea:b8:ec:60:77:ff:
                    08:0e:7f:04:6c:28:73:d8:63:0f:8e:fa:16:88:10:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:8F:D3:77:62:A5:78:C2:B9:AE:B3:35:54:99:63:FA:88:B7:87
            X509v3 Authority Key Identifier:
                keyid:CF:EA:D7:9E:B3:C4:E3:3F:B4:94:8A:A8:8B:F9:B3:ED:C5:51:1E:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CFEAD79EB3C4E33FB4948AA88BF9B3EDC5511E6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6QnJY37qdcZrYAamkSyJhgKR3PSpjxkqkZp4qnA49NMQ/0/3133382e302e3138302e302f32322d3234203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:11:d4:7f:04:fe:4b:25:09:75:92:35:e0:59:43:a4:89:21:
         00:bb:12:3d:ab:08:86:65:7d:af:ae:96:b6:5a:8d:1d:9b:87:
         74:1d:a9:c9:c8:52:6c:41:dd:f5:55:a6:25:e7:6e:bb:60:6e:
         61:1a:a2:d5:90:5d:e8:06:5f:2d:c8:6d:43:49:24:da:24:b9:
         1a:0f:87:0c:21:0f:fa:00:1f:12:f9:b4:3a:6c:e5:68:41:70:
         fe:5a:02:6d:9d:c9:d6:02:f8:0a:97:70:e5:01:1e:27:89:62:
         84:c5:81:88:21:9f:07:c9:53:0c:1e:48:12:d4:52:7d:84:2f:
         a0:54:d8:2c:34:67:3f:99:53:c0:27:6f:f7:a8:da:44:f0:85:
         93:45:e6:9a:50:f6:ed:b4:f9:f9:cd:ae:2f:6d:bb:98:95:54:
         85:d9:3e:18:35:68:5a:6d:f8:f5:b1:e7:3e:03:a3:ad:0d:d5:
         68:cb:5d:43:45:6a:ba:b4:39:58:cc:f2:e5:97:d8:93:08:fd:
         2f:61:39:f1:17:3c:f4:f9:a2:f2:1d:1c:83:f2:1b:13:53:ea:
         ec:a3:d3:53:f9:6c:b8:75:7e:0e:eb:e8:5e:d3:e4:b7:46:2d:
         b5:f5:05:a9:11:5b:d6:14:26:67:17:42:35:f3:c5:04:d4:2f:
         f7:08:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org