Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa
File:                     3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa (raw, json)
Hash identifier:          oi9vXs8oHB9cM0kc44RmV8ZbpzEFDtOY8+wDadgFRSg=
Subject key identifier:   28:EF:EB:1E:02:A5:14:2F:15:F8:32:34:D6:FF:30:44:90:81:6D:3E
Certificate issuer:       /CN=F153A07A7EFD17B6BA606CA309C9575303F9D421
Certificate serial:       7FE42D9D638C73380B70B6431A77C50A593E98B0
Authority key identifier: F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa
Signing time:             Fri 26 May 2023 14:00:31 +0000
ROA not before:           Fri 26 May 2023 13:55:31 +0000
ROA not after:            Fri 24 May 2024 14:00:31 +0000
asID:                     264285
IP address blocks:        138.121.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e4:2d:9d:63:8c:73:38:0b:70:b6:43:1a:77:c5:0a:59:3e:98:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F153A07A7EFD17B6BA606CA309C9575303F9D421
        Validity
            Not Before: May 26 13:55:31 2023 GMT
            Not After : May 24 14:00:31 2024 GMT
        Subject: CN=28EFEB1E02A5142F15F83234D6FF304490816D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:a4:99:2e:91:b3:99:5d:2a:89:16:83:5f:
                    4b:8e:78:99:6d:d8:d3:2f:a0:34:c7:11:1c:5c:2c:
                    f0:60:29:d2:d4:e3:5a:ea:94:be:55:e3:2c:ad:9a:
                    cd:08:ad:f8:b6:0a:ef:7f:1d:e7:e0:72:4a:ce:22:
                    37:76:77:18:2f:14:26:13:e8:08:d1:4b:6e:e2:c1:
                    53:c0:03:89:d5:3d:79:9c:ef:da:b1:18:be:f3:a8:
                    4c:0b:c5:c1:97:8e:42:89:86:a9:4e:4a:34:68:59:
                    e8:7a:92:e9:08:f4:8d:03:47:61:97:57:fc:d1:c5:
                    ea:23:5e:7f:56:4f:07:57:78:e6:99:92:39:f2:6b:
                    b8:f3:63:3b:0c:6f:64:b9:b2:36:6d:65:ba:09:07:
                    bd:8a:da:c2:f5:a5:05:01:6d:12:8e:0c:cc:fc:82:
                    5b:57:d0:ca:0d:f8:da:2f:8d:08:ef:f4:3c:46:1b:
                    2b:54:c7:c6:a3:a5:d1:e1:cc:9f:f6:e6:3f:58:0a:
                    94:ec:eb:32:9c:c4:03:a5:5e:53:9e:b7:27:dc:f4:
                    79:a5:8e:8a:85:ec:b5:40:74:7a:19:09:f1:78:bc:
                    8a:6c:9a:b6:c3:8f:4d:15:22:9e:2c:7a:2a:b4:26:
                    e2:67:7c:8c:df:77:ac:b7:35:32:63:41:e9:85:68:
                    0d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EF:EB:1E:02:A5:14:2F:15:F8:32:34:D6:FF:30:44:90:81:6D:3E
            X509v3 Authority Key Identifier:
                keyid:F1:53:A0:7A:7E:FD:17:B6:BA:60:6C:A3:09:C9:57:53:03:F9:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F153A07A7EFD17B6BA606CA309C9575303F9D421.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7FDVBJCfNkiHrte2ahc1NAuGnzk9vFmoELcgCQNWsCyr/0/3133382e3132312e35362e302f32322d3234203d3e20323634323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:5c:8d:24:5b:e7:d7:b1:39:cc:03:04:03:3b:4f:ed:cc:e8:
         1f:8d:fc:2c:75:f9:95:6c:07:8b:e0:24:f2:63:82:8b:5f:8b:
         de:f8:b9:89:73:be:f9:ed:7c:f8:5f:d0:e8:a0:87:2c:d2:21:
         c7:ad:e1:8d:07:ce:19:c7:b8:01:5c:96:e2:be:3c:ac:41:7a:
         97:99:cf:5c:07:e7:05:d5:1a:0d:1d:d5:26:f4:fb:e1:bc:18:
         7f:e2:4f:9d:c1:d4:40:57:ef:d4:36:22:c0:0f:94:80:28:25:
         a8:14:59:96:ee:b7:92:a0:73:f0:06:69:4d:33:ea:f4:6c:aa:
         bc:e5:07:11:6a:0a:f9:5c:c4:07:10:1e:ce:95:d5:cb:03:70:
         48:bb:10:99:ef:82:9d:17:13:d9:30:91:f6:aa:8d:33:b8:1e:
         2c:18:30:be:80:0e:7f:f2:dc:6d:db:37:df:e2:00:e6:69:89:
         82:4d:7f:59:9e:5d:8f:32:c0:84:1d:0f:04:ad:c5:14:2f:0a:
         ce:d9:6b:5f:3e:a9:44:da:d4:09:99:7a:7e:72:cd:a1:c7:75:
         44:d8:fe:27:5a:6c:10:ac:41:15:96:e1:38:f6:4c:61:03:e3:
         ab:d1:98:74:8f:8b:ac:c7:3b:e7:36:20:39:95:95:73:bb:96:
         77:09:9d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org