Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa
File:                     3133382e302e3134302e302f32322d3234203d3e20323634353531.roa (raw, json)
Hash identifier:          r3adC6kt0GlFAKNMplt0VuMDH6xag+zpFQS77fYbJqw=
Subject key identifier:   FF:88:3B:DA:AF:72:22:4B:A2:E2:B8:47:20:5E:3F:F8:53:E1:0A:72
Certificate issuer:       /CN=2B566734F24D7728FDB7066E1F7CD7E7FA56C944
Certificate serial:       5F3B6CABB337F0FC6C67676B39CA391D1F191154
Authority key identifier: 2B:56:67:34:F2:4D:77:28:FD:B7:06:6E:1F:7C:D7:E7:FA:56:C9:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa
Signing time:             Wed 03 Apr 2024 19:21:30 +0000
ROA not before:           Wed 03 Apr 2024 19:16:30 +0000
ROA not after:            Wed 02 Apr 2025 19:21:30 +0000
asID:                     264551
IP address blocks:        138.0.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3b:6c:ab:b3:37:f0:fc:6c:67:67:6b:39:ca:39:1d:1f:19:11:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B566734F24D7728FDB7066E1F7CD7E7FA56C944
        Validity
            Not Before: Apr  3 19:16:30 2024 GMT
            Not After : Apr  2 19:21:30 2025 GMT
        Subject: CN=FF883BDAAF72224BA2E2B847205E3FF853E10A72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:86:f0:f3:0a:52:0a:52:a0:30:cb:c9:6d:
                    09:88:1e:97:b2:33:59:1e:aa:8c:70:a6:90:e8:8e:
                    cc:5c:e8:a2:20:0e:fb:49:b5:e0:f8:38:b0:66:8f:
                    35:03:0c:e2:74:06:fb:f6:9d:14:31:3e:31:74:2f:
                    ee:67:43:cf:41:87:45:0d:5b:24:10:8b:e8:8a:41:
                    00:2c:64:6b:b6:60:10:0c:94:fa:98:97:11:04:e1:
                    74:eb:e4:31:d5:0f:83:17:74:50:bc:fd:0d:0f:73:
                    8c:5b:e1:7a:11:0f:97:a3:47:1d:aa:b7:d4:e6:ce:
                    b0:be:71:8a:e1:b9:b7:fe:7b:3c:c5:33:43:3b:d3:
                    8f:7e:6a:4a:0b:30:a0:ea:35:64:bb:0f:01:3f:61:
                    69:ab:e3:5c:be:55:c2:a1:99:ed:93:c6:b7:42:9f:
                    ab:d1:36:af:13:4c:a6:c6:14:b7:6f:50:bc:d9:31:
                    7d:bd:36:85:26:30:e4:96:aa:8e:7b:d7:3e:58:60:
                    26:3b:ff:9f:54:44:fb:f1:94:d8:ce:39:4e:8f:04:
                    2d:b7:c4:2b:dc:2b:e3:52:e2:db:e7:e8:fb:a9:82:
                    7a:ff:c7:e5:1c:93:a1:fd:4a:96:4d:88:61:7a:8f:
                    88:55:96:79:bb:ec:e8:90:a2:26:5c:e4:1f:c8:2c:
                    a3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:88:3B:DA:AF:72:22:4B:A2:E2:B8:47:20:5E:3F:F8:53:E1:0A:72
            X509v3 Authority Key Identifier:
                keyid:2B:56:67:34:F2:4D:77:28:FD:B7:06:6E:1F:7C:D7:E7:FA:56:C9:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B566734F24D7728FDB7066E1F7CD7E7FA56C944.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9kcvRxCXa8YweSa3xkWdhPejhZBxh7oUpTiGrUg3rbR5/1/3133382e302e3134302e302f32322d3234203d3e20323634353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:f5:ab:60:33:fe:11:6a:c0:e6:a9:37:f9:6d:e5:8e:63:
         75:41:75:44:71:a6:a4:1d:7e:68:4b:a5:1d:0b:39:48:58:65:
         53:76:68:1e:90:d8:f8:61:d5:02:11:ab:ac:49:76:37:7b:1d:
         8f:dd:79:6e:51:90:0e:80:10:3c:32:02:07:de:c6:23:9f:93:
         55:6c:dc:96:4e:f6:29:ce:5e:9c:fe:23:28:16:20:71:3b:40:
         a0:5d:1a:3b:ca:ec:0b:b3:45:a6:de:19:0c:ed:70:71:88:2b:
         58:f2:7b:f2:2b:8e:76:33:89:b5:b2:e5:97:85:b3:32:56:e2:
         4e:33:be:66:dc:95:4b:fe:ae:c3:fb:90:c2:ff:c4:a9:25:28:
         46:61:c3:be:f6:9d:e2:9a:07:1a:c8:9f:cd:92:68:47:94:e2:
         e6:6c:6d:39:3b:ec:56:01:a2:67:6a:5a:cc:83:f1:35:db:5a:
         15:6b:4d:f1:cd:12:4c:36:f5:0e:53:df:2c:d4:a6:c2:14:bc:
         b8:96:a1:26:d3:6c:11:df:13:02:64:69:3e:0e:97:28:00:96:
         a8:10:1e:6e:e7:4d:93:9e:19:83:5f:77:35:37:83:14:f9:51:
         1e:76:81:1e:44:d3:da:4f:07:d0:98:b3:be:11:ea:da:9e:3d:
         7f:06:a5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org