Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32342d3234203d3e20323634323839.roa
File:                     3133382e3132312e33302e302f32342d3234203d3e20323634323839.roa (raw, json)
Hash identifier:          yk41PKF5d9OyPR+G/4udrfV572JE7nmHTVyCoM6AqDY=
Subject key identifier:   FE:B0:CD:2C:F8:E4:DC:68:28:8A:C4:70:1C:80:80:63:95:15:B8:B8
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       35EE7A91356BD2743BCDB781B87E887165F43DDC
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32342d3234203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 09:26:50 +0000
ROA not before:           Wed 12 Jul 2023 09:21:50 +0000
ROA not after:            Wed 10 Jul 2024 09:26:50 +0000
asID:                     264289
IP address blocks:        138.121.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ee:7a:91:35:6b:d2:74:3b:cd:b7:81:b8:7e:88:71:65:f4:3d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 09:21:50 2023 GMT
            Not After : Jul 10 09:26:50 2024 GMT
        Subject: CN=FEB0CD2CF8E4DC68288AC4701C8080639515B8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:2b:b5:d0:cf:d2:ea:dc:01:e5:75:ab:80:
                    8a:1c:75:6c:b3:c4:5f:78:98:27:36:e0:5a:93:fc:
                    fd:0f:f3:cf:73:ed:c8:81:ce:8a:98:c5:a3:5d:77:
                    04:77:cd:b0:47:a4:29:4d:40:c0:0e:d0:6c:d5:7d:
                    48:0d:66:58:2e:6d:61:9a:14:39:14:80:7d:8a:f6:
                    25:b9:65:8d:40:41:ef:e5:ee:09:d5:5a:55:19:76:
                    d8:e7:76:de:9b:cb:06:23:ab:ed:92:8f:ae:c4:7f:
                    8c:72:e8:8d:81:b1:2c:11:df:02:45:b3:b8:49:8b:
                    30:d9:97:ba:fe:10:a0:56:61:5c:e7:c7:da:fc:a2:
                    5f:4e:c6:21:b9:b9:82:ac:ab:f1:e7:ed:21:3d:48:
                    6e:bb:68:c2:f6:30:be:f3:61:6c:f3:c6:bc:a4:47:
                    d5:57:82:8b:12:10:a3:ec:01:0e:f7:f7:ba:37:52:
                    76:0c:5c:82:a1:90:9d:ba:b0:c4:fc:d4:c4:a9:5f:
                    f0:e1:36:f8:a1:7d:43:61:9a:44:59:60:fc:92:fd:
                    7e:c9:92:f6:a3:84:40:e5:7d:bf:c7:ea:70:25:69:
                    e3:5c:c6:06:ad:7d:18:76:19:99:39:cc:1a:39:f0:
                    9f:05:ab:87:d3:e1:b1:b9:6b:d8:46:c9:14:77:ae:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:CD:2C:F8:E4:DC:68:28:8A:C4:70:1C:80:80:63:95:15:B8:B8
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/3133382e3132312e33302e302f32342d3234203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:4e:c7:8c:41:d3:dd:95:c0:05:d1:1e:70:ee:e0:b7:f5:0f:
         1f:2e:74:45:ed:bd:76:cb:3f:2d:7e:b0:c0:69:06:ae:c8:75:
         f8:35:0f:5f:dd:91:e9:33:01:2b:b8:c4:d3:8e:ec:86:e0:d0:
         2b:cc:e8:0e:20:b2:69:40:b6:ee:2e:25:a9:4d:a5:60:f4:62:
         62:df:31:67:d3:69:80:08:d1:1f:bf:0a:4a:cf:3c:fa:ed:cd:
         4d:e9:12:57:ca:b1:47:77:78:45:8b:a0:db:77:f8:61:2e:6c:
         23:f7:72:c9:76:bd:d6:f0:2c:6f:2c:5d:40:22:a8:dc:7b:f4:
         8d:c6:10:dc:dd:15:dd:38:a0:30:c9:27:44:fc:d9:95:7f:2b:
         f6:68:a6:7e:6f:e0:8a:05:0e:b9:ad:29:09:c1:8f:1c:45:05:
         0d:ee:34:4b:e1:6f:45:d8:ab:d4:0f:3e:75:7c:b6:b6:42:fd:
         21:f3:46:94:36:7e:04:69:bb:3d:7e:9f:da:25:a1:7e:fb:f9:
         f5:5c:ed:cb:5a:51:13:50:ed:3c:41:0e:b3:cc:01:a1:51:de:
         5b:65:5e:67:95:69:d8:e3:f7:f0:29:c4:d2:8e:91:d2:a0:01:
         74:54:7c:64:3b:ee:fd:88:e6:e5:16:77:2a:d3:4d:93:90:02:
         59:71:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org