Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa
File:                     3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa (raw, json)
Hash identifier:          0pZYDVb/G2N87oe5wvgIQQGWmKw5DgZoZY6k9OWNT44=
Subject key identifier:   7C:C9:0F:A8:D7:AF:55:35:00:BB:9F:37:5E:13:9C:B1:6C:B3:4D:3F
Certificate issuer:       /CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
Certificate serial:       45F3821A3E7BF83FE8BE4330611AC996A6392DD9
Authority key identifier: FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa
Signing time:             Fri 08 Dec 2023 16:34:48 +0000
ROA not before:           Fri 08 Dec 2023 16:29:48 +0000
ROA not after:            Fri 06 Dec 2024 16:34:48 +0000
asID:                     262374
IP address blocks:        138.99.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f3:82:1a:3e:7b:f8:3f:e8:be:43:30:61:1a:c9:96:a6:39:2d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD189F4FD7735283B4B27F3CF49E9E1A8456D18F
        Validity
            Not Before: Dec  8 16:29:48 2023 GMT
            Not After : Dec  6 16:34:48 2024 GMT
        Subject: CN=7CC90FA8D7AF553500BB9F375E139CB16CB34D3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:01:68:e2:9f:ea:1c:45:a3:2e:66:07:f4:
                    39:28:fb:24:7f:96:f8:5b:e4:39:bb:ca:5b:18:78:
                    6b:3b:6e:1e:71:b1:50:ba:3d:be:65:59:57:60:6a:
                    dd:d4:eb:a6:58:e4:33:95:f6:96:d3:b2:e6:93:d8:
                    23:93:88:10:62:00:e4:65:95:c2:9b:24:44:f0:82:
                    35:79:66:a9:a1:19:fc:88:4e:c1:21:cf:66:3b:61:
                    89:a5:da:10:c2:71:36:cd:11:f2:45:ca:d2:39:f5:
                    b6:0c:05:26:27:00:6d:36:17:41:d0:9e:c7:3e:b9:
                    f9:64:06:a0:a5:90:d6:de:b7:66:2d:41:5b:f8:da:
                    82:60:40:09:34:88:88:32:d6:ff:19:08:fd:a0:23:
                    d6:d3:b0:cc:85:0c:17:d7:4c:24:b4:e3:20:88:81:
                    ad:b9:fd:f4:1d:49:2f:bb:17:45:4a:00:6e:a4:6e:
                    bd:25:fd:8b:91:a3:1d:3e:8a:3f:1c:c3:b2:d2:1f:
                    1b:f5:cb:5b:6c:ba:f5:07:e5:d1:70:51:e4:b3:e1:
                    f0:50:d6:1e:01:bd:40:34:20:41:e4:6f:16:ea:1b:
                    3f:a6:1b:ae:3b:c0:41:62:57:f1:81:72:87:ea:78:
                    9d:66:97:1e:c3:0a:ea:e7:b1:db:43:eb:1b:48:1f:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C9:0F:A8:D7:AF:55:35:00:BB:9F:37:5E:13:9C:B1:6C:B3:4D:3F
            X509v3 Authority Key Identifier:
                keyid:FD:18:9F:4F:D7:73:52:83:B4:B2:7F:3C:F4:9E:9E:1A:84:56:D1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD189F4FD7735283B4B27F3CF49E9E1A8456D18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ekh5NwJrJi89cKY9oKx4aUK1shLUBk99dNwEHz7W5Jn/0/3133382e39392e3234342e302f32322d3234203d3e20323632333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:e4:33:84:61:86:ac:2e:f0:03:1b:93:21:02:4a:71:a3:71:
         1a:3b:8d:09:4e:04:35:7d:65:0b:9b:4c:a6:ca:e7:1a:8d:8e:
         a2:41:ab:d1:0c:ad:bb:5a:c8:53:4c:5b:dd:24:4a:9e:4b:ff:
         fd:32:36:40:b3:8d:68:44:28:82:9a:34:d8:8b:71:cc:0c:7d:
         a3:18:83:2a:79:b3:5a:f5:a6:e8:20:57:06:0b:64:ca:9f:50:
         4d:57:45:f4:9d:38:f4:06:f0:3a:38:42:37:f6:13:75:14:35:
         30:02:8a:20:cc:79:4d:80:27:1e:b8:97:95:2a:9a:34:c1:b8:
         a2:95:37:cd:0e:a6:0c:8a:58:c0:fa:12:68:ef:92:9f:e5:2b:
         b8:d5:dd:62:61:bf:d7:ac:cb:f7:6d:e9:72:c6:c9:ab:dd:1a:
         27:13:04:c9:e0:9d:65:97:4a:48:62:90:f0:13:95:ee:9a:9f:
         bf:d0:18:b5:26:45:6a:5b:74:6b:e0:e5:1d:7e:12:39:5c:62:
         36:65:a8:b1:ae:34:0d:51:28:37:39:1b:d3:24:be:c1:87:d9:
         09:06:f2:40:ee:61:f9:5d:c4:72:73:6a:1b:1c:ec:71:8c:78:
         e1:8b:f9:a8:55:36:72:ef:7c:08:ef:5f:08:0a:92:a6:54:c2:
         d3:47:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org