Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa
File:                     3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa (raw, json)
Hash identifier:          kfgFZSDd6FEMktWY/DIUTeoU54RAezJFHnn+xfdlriE=
Subject key identifier:   F6:7B:F2:E6:38:9A:66:8D:C1:E7:A4:69:A9:50:4B:24:DA:69:F7:95
Certificate issuer:       /CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
Certificate serial:       140E61CEF6B80A2AE17E0F4FBEB5152C3C0CA7A5
Authority key identifier: AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa
Signing time:             Wed 03 Apr 2024 18:32:58 +0000
ROA not before:           Wed 03 Apr 2024 18:27:58 +0000
ROA not after:            Wed 02 Apr 2025 18:32:58 +0000
asID:                     263902
IP address blocks:        138.204.53.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:0e:61:ce:f6:b8:0a:2a:e1:7e:0f:4f:be:b5:15:2c:3c:0c:a7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2
        Validity
            Not Before: Apr  3 18:27:58 2024 GMT
            Not After : Apr  2 18:32:58 2025 GMT
        Subject: CN=F67BF2E6389A668DC1E7A469A9504B24DA69F795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ba:95:64:8e:13:82:6d:27:7b:8b:c3:89:6e:
                    29:1f:ff:39:2d:df:bf:6c:22:30:a6:a1:51:1b:ae:
                    bd:7e:77:7c:58:8c:05:e5:83:d2:ea:ab:48:66:30:
                    3c:3b:01:02:11:ac:7d:b1:69:56:f5:de:6a:ed:2e:
                    b8:da:de:ca:b3:13:ca:59:e6:c8:43:f6:b7:cb:39:
                    0c:64:aa:d2:3a:1b:d3:68:1c:46:73:52:df:24:39:
                    2d:92:3f:e1:a4:cb:72:a9:9c:e2:c9:10:07:6e:33:
                    1c:64:88:8c:f9:32:82:38:c4:ff:93:3d:37:65:cd:
                    a2:6b:e3:da:04:70:70:26:fe:f4:ec:7c:cf:46:87:
                    50:23:40:18:47:41:81:c7:d9:05:0c:d8:18:67:60:
                    41:12:03:65:2c:95:84:4b:4e:eb:34:2f:68:26:c6:
                    d6:3c:a7:7a:b0:c7:d0:b3:03:31:9b:f8:0a:0b:f4:
                    0f:d5:e0:c5:d6:16:b3:3b:bd:17:85:a2:ac:f7:c0:
                    da:7d:6a:8d:4b:42:a8:04:4e:4e:69:3a:3e:7e:d5:
                    ad:17:e1:4c:80:22:8e:26:04:e8:bb:75:da:53:b6:
                    8a:a5:25:dd:b0:a9:b7:fa:22:42:74:77:45:f0:d6:
                    9c:b3:91:59:43:05:f6:22:d0:43:e8:2b:40:d5:b4:
                    cc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:F2:E6:38:9A:66:8D:C1:E7:A4:69:A9:50:4B:24:DA:69:F7:95
            X509v3 Authority Key Identifier:
                keyid:AC:F9:AE:0D:17:0D:44:6F:D5:A5:A3:77:A0:EC:AB:AE:B7:F6:27:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACF9AE0D170D446FD5A5A377A0ECABAEB7F627A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/1/3133382e3230342e35332e302f32342d3234203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:b2:a0:f9:41:3f:12:99:0d:c9:32:0b:05:9a:b2:e1:9a:
         af:5c:c1:a0:57:cd:58:ba:06:e9:d0:d5:08:41:dc:57:4a:d1:
         a6:35:21:dc:00:fa:0b:e0:ed:e8:d3:b6:b9:fe:5e:26:d7:4d:
         f3:fe:79:13:bb:46:c9:ff:89:28:e2:51:49:4d:c4:43:64:31:
         bc:e6:af:1d:dd:95:c8:3d:52:76:fe:63:2b:b3:75:22:cf:f2:
         67:c2:21:e6:b3:ef:a8:7e:35:26:1c:f6:d3:cc:a3:69:55:bd:
         76:59:dd:88:1f:dd:76:43:a8:45:86:b2:a7:a4:2c:b7:d8:bb:
         2f:3f:e7:e0:f7:d4:e8:a0:8a:4c:1d:9b:12:90:17:1c:c1:f0:
         c7:98:98:93:b6:02:22:bc:32:ac:ff:58:51:2f:a1:31:8f:f8:
         a0:6e:dd:84:fc:97:b3:76:db:42:ff:b3:f0:f0:08:ea:3b:42:
         0a:97:6c:4a:3f:23:75:77:29:de:23:52:b4:4c:8a:ac:36:49:
         e7:12:f6:88:de:f5:d5:b3:c0:23:10:55:64:22:fb:11:f0:84:
         30:31:93:28:15:a0:60:db:7c:9b:ad:69:b2:e1:19:ee:de:4c:
         53:60:e5:b4:28:c7:a7:66:8b:6b:97:f8:3e:5b:6b:b6:91:2c:
         ab:56:bb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 02:41:47 2024 by rpki-client on console-ams.rpki-client.org