Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa
File:                     3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa (raw, json)
Hash identifier:          7tiLzCoBingb8THIVO8whAbzRT1G8G6eE5Ix5egDB8E=
Subject key identifier:   D1:D6:7A:77:0F:70:49:E0:00:9D:D0:CE:EC:A6:E0:DD:C7:D8:3F:6F
Certificate issuer:       /CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
Certificate serial:       2A1CC8E3A83B3DBD986818A5FF5AF291374419BA
Authority key identifier: F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa
Signing time:             Wed 28 Feb 2024 14:23:27 +0000
ROA not before:           Wed 28 Feb 2024 14:18:27 +0000
ROA not after:            Wed 26 Feb 2025 14:23:27 +0000
asID:                     264205
IP address blocks:        138.99.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:c8:e3:a8:3b:3d:bd:98:68:18:a5:ff:5a:f2:91:37:44:19:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D1F1F17A045541F859EF9EE3C95D32E062C66E
        Validity
            Not Before: Feb 28 14:18:27 2024 GMT
            Not After : Feb 26 14:23:27 2025 GMT
        Subject: CN=D1D67A770F7049E0009DD0CEECA6E0DDC7D83F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:88:27:b8:77:70:33:c7:d3:8b:69:25:14:3e:
                    1f:78:19:0f:c0:03:fc:4b:46:79:df:0c:57:4e:05:
                    3b:3b:bd:e5:ba:4e:0a:c4:a3:5e:58:0d:fe:2c:2c:
                    80:75:41:d7:5b:de:70:17:f5:0d:f5:89:36:44:40:
                    a1:1d:9f:b6:42:f4:11:93:b1:bf:b3:2c:e1:0d:ff:
                    00:9e:65:e3:56:55:26:e5:f0:f0:2b:6f:7b:2b:b1:
                    7b:4b:a9:27:7d:ce:48:fc:15:b0:97:3b:da:a7:46:
                    d5:06:06:e6:d4:b2:d4:47:d8:2e:d2:93:93:31:2d:
                    d0:7d:0b:d7:45:eb:ed:35:93:c4:5e:e2:52:94:ff:
                    60:d9:aa:56:41:74:81:86:a3:a0:35:7b:57:e7:bb:
                    50:8f:87:53:b1:b3:1e:df:c9:36:b1:11:be:5a:d1:
                    e6:cc:bd:d3:65:ef:a8:68:78:00:06:05:4f:f4:f9:
                    d1:b9:b3:ae:1d:9f:51:16:6f:e1:f0:10:de:55:c3:
                    bc:f4:63:90:e7:2f:2f:eb:95:76:74:0c:1b:05:50:
                    7f:61:d2:b6:8f:9e:1e:f1:ce:8b:25:f5:e5:ee:49:
                    83:dd:9b:31:32:22:14:3f:33:58:dc:1c:89:8e:8d:
                    55:72:d1:ae:df:3d:ab:7a:e2:a0:c1:5f:31:de:b2:
                    4d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D6:7A:77:0F:70:49:E0:00:9D:D0:CE:EC:A6:E0:DD:C7:D8:3F:6F
            X509v3 Authority Key Identifier:
                keyid:F3:D1:F1:F1:7A:04:55:41:F8:59:EF:9E:E3:C9:5D:32:E0:62:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3D1F1F17A045541F859EF9EE3C95D32E062C66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6sYpEbk1Y6hok3r4Li48acdfSRGxchVmXgdL1mXz3G4U/0/3133382e39392e3135322e302f32322d3232203d3e20323634323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:e3:b3:d3:a7:19:d2:38:41:1e:3f:96:0a:2b:37:ed:2d:2a:
         c9:3e:57:38:af:d7:2c:05:76:c7:03:6c:63:00:ce:c3:4e:1a:
         98:93:e5:97:d0:78:d7:9a:c5:c0:27:36:04:86:f3:46:77:49:
         b4:f0:8a:fa:77:5e:2e:16:5c:e5:a4:cb:41:d3:17:5c:c2:03:
         9f:1b:8b:8e:b4:21:09:99:e4:aa:06:c7:d3:c0:ca:25:2b:f7:
         01:b2:ff:5d:3e:b0:99:fb:e5:82:ba:60:fd:dd:ed:81:5a:bf:
         d8:a1:74:00:28:8b:9b:9e:42:c6:39:2a:f6:76:71:7b:cf:6e:
         74:07:64:70:b9:20:ea:27:13:61:22:16:05:af:a4:40:e3:56:
         22:4d:76:43:a5:bc:15:37:e3:35:a4:f1:51:d5:e0:79:44:ff:
         e2:46:ce:e9:d6:22:b3:07:ce:fd:31:57:0f:a1:4f:15:3d:a7:
         58:93:73:97:ae:ae:03:9d:cf:7e:59:1f:f8:3f:3e:da:53:62:
         df:9b:ea:d3:bd:36:9e:fe:d0:a2:f8:6a:82:59:89:bf:bb:09:
         3e:e5:4a:68:24:72:1b:94:7e:29:98:d7:c0:ed:b4:85:2c:52:
         8a:85:4f:71:63:91:98:7b:cb:61:45:6c:49:b4:20:5f:df:97:
         26:fd:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:05 2024 by rpki-client on console-ams.rpki-client.org