Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
File:                     3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa (raw, json)
Hash identifier:          xvhwqjN4ArmQF68Tt7d71ZpU+pzY4EBlV0hBgl/KQX4=
Subject key identifier:   B7:D7:34:34:D3:89:D9:ED:72:21:ED:72:EB:90:EF:F0:03:60:B9:B3
Certificate issuer:       /CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
Certificate serial:       1F1B48CA32E0ABACA1283407727C4B42FC3662FA
Authority key identifier: 32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa
Signing time:             Tue 28 Nov 2023 01:00:26 +0000
ROA not before:           Tue 28 Nov 2023 00:55:26 +0000
ROA not after:            Tue 26 Nov 2024 01:00:26 +0000
asID:                     263903
IP address blocks:        138.204.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1b:48:ca:32:e0:ab:ac:a1:28:34:07:72:7c:4b:42:fc:36:62:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329861E01AE7B51B7D7965F1537F72FFCB2506D3
        Validity
            Not Before: Nov 28 00:55:26 2023 GMT
            Not After : Nov 26 01:00:26 2024 GMT
        Subject: CN=B7D73434D389D9ED7221ED72EB90EFF00360B9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:3f:71:8b:e4:69:27:6f:4e:34:c2:c4:a1:
                    db:9c:d3:0b:74:62:93:6d:23:81:49:ed:ef:2c:f4:
                    d5:45:97:00:57:f6:81:70:e1:6f:e6:e7:79:a1:68:
                    e3:c3:c7:bf:eb:05:47:b0:31:e1:7f:c8:88:9e:1f:
                    dd:a4:2f:cd:65:38:15:53:05:ee:ba:08:ef:ff:4c:
                    f0:15:08:cf:f8:bb:da:8e:d3:bf:f8:ea:55:f0:33:
                    f4:65:d7:80:fd:2e:80:4e:b7:06:85:96:7a:ca:9e:
                    4f:e7:a4:97:8e:87:85:d1:0c:74:ee:e5:4e:4d:38:
                    ad:fc:35:a5:77:6e:dc:60:b3:7e:84:57:72:cf:30:
                    0f:c3:ae:c4:08:a0:31:03:19:84:a7:d4:55:27:08:
                    1a:88:5a:a2:72:dc:84:a0:fe:3c:b5:3b:2c:a2:fc:
                    25:36:41:4e:2f:fe:3f:56:5f:12:a8:89:8a:80:df:
                    27:2c:a3:5d:57:f5:11:6e:da:3e:63:0c:e5:f7:32:
                    5b:82:95:12:4d:b1:9e:67:18:04:5e:6a:c9:35:c7:
                    fd:a9:5e:42:d5:7a:f3:51:fd:4f:48:46:b7:fa:58:
                    ef:63:10:4b:b6:20:00:9b:45:27:4d:ec:b0:ee:9d:
                    50:d4:f6:67:3c:33:ff:74:a6:01:73:33:6f:72:f0:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D7:34:34:D3:89:D9:ED:72:21:ED:72:EB:90:EF:F0:03:60:B9:B3
            X509v3 Authority Key Identifier:
                keyid:32:98:61:E0:1A:E7:B5:1B:7D:79:65:F1:53:7F:72:FF:CB:25:06:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329861E01AE7B51B7D7965F1537F72FFCB2506D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x51inqhgbhbB9SwduF16yZfHPZrkKZbEdfsRyY6DKAe/0/3133382e3230342e3134302e302f32322d3234203d3e20323633393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:db:2e:df:83:fd:49:34:47:c7:a7:4a:26:00:75:fb:56:ab:
         cf:00:a9:09:d5:cd:f1:f5:21:a9:12:3a:06:c3:a1:a8:26:30:
         ec:a2:48:6f:2e:59:a0:22:5f:29:34:d9:57:82:5f:a9:da:f8:
         4a:99:53:8f:e0:06:80:7d:fc:b9:38:de:d8:52:cf:53:c2:48:
         22:7a:b5:e4:d4:10:ef:16:b2:11:74:c1:b5:fe:b9:28:e7:2b:
         45:ef:40:80:7c:0c:0c:ac:57:45:28:db:e8:57:04:55:4e:a6:
         1b:dc:7f:43:5a:39:53:c7:13:6c:a8:a0:61:ee:c9:25:76:9f:
         00:39:9a:3a:5c:9e:e0:62:c8:82:06:af:b7:2c:19:6a:c9:10:
         dd:ad:4a:ef:58:a1:c0:a7:f5:d7:fa:30:5f:a3:fc:3a:de:05:
         e6:9e:ba:39:3b:00:8c:df:a2:ce:7a:bd:c6:5d:35:28:ac:7f:
         14:2e:7d:b4:43:ca:a7:c3:ae:b9:80:4b:b8:62:d7:89:4b:3c:
         42:d4:ad:3b:e0:71:50:94:ab:88:e0:2a:53:ba:99:e5:c9:bb:
         1c:3f:3a:e4:ca:4c:c3:db:90:80:d1:ef:1e:c0:85:7a:dd:58:
         36:49:e6:5f:bc:0d:87:8a:c4:be:73:8e:3c:06:98:b8:ce:28:
         f2:f6:7a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org