Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3231312e302f32342d3234203d3e20323632363536.roa
File:                     3133382e3132312e3231312e302f32342d3234203d3e20323632363536.roa (raw, json)
Hash identifier:          t7CYDeMDUuO45zNTv6VnRWD7kgKKnjQK9en2LWK4+/k=
Subject key identifier:   16:19:D6:FD:B6:C1:59:5A:8F:CD:E8:B1:0C:95:66:6A:0D:DA:CA:90
Certificate issuer:       /CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
Certificate serial:       635510F96BBB55402873C30E2B2903D242F5AC38
Authority key identifier: FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3231312e302f32342d3234203d3e20323632363536.roa
Signing time:             Thu 11 Apr 2024 23:08:46 +0000
ROA not before:           Thu 11 Apr 2024 23:03:46 +0000
ROA not after:            Thu 10 Apr 2025 23:08:46 +0000
asID:                     262656
IP address blocks:        138.121.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:55:10:f9:6b:bb:55:40:28:73:c3:0e:2b:29:03:d2:42:f5:ac:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Validity
            Not Before: Apr 11 23:03:46 2024 GMT
            Not After : Apr 10 23:08:46 2025 GMT
        Subject: CN=1619D6FDB6C1595A8FCDE8B10C95666A0DDACA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:2e:be:1a:72:3e:36:59:2d:00:54:2f:8b:
                    2d:5d:5f:bd:d2:fa:2d:95:f3:3a:76:97:5d:0a:31:
                    ce:2d:08:e0:84:37:1d:8b:6d:c5:55:61:fa:16:67:
                    1d:02:03:b7:e0:7c:8c:9c:8e:ee:c8:d8:f0:bd:da:
                    c3:50:dc:e0:4e:c7:d3:23:f1:89:2a:cc:c9:28:cd:
                    3a:40:59:bb:f0:87:38:8d:e6:50:73:9f:e8:e7:ac:
                    bc:62:34:2d:bf:03:88:8f:eb:b0:9b:f7:19:81:20:
                    14:42:db:22:8c:ab:64:91:c6:72:88:bc:d1:26:4b:
                    df:d4:31:46:8b:ef:3f:fd:32:80:25:45:f7:77:8a:
                    8d:f1:7e:75:44:ab:dc:17:c8:69:b1:4b:34:7c:e4:
                    1e:e7:b7:1e:f4:a6:c1:dd:8a:e7:11:6f:1f:82:9a:
                    b1:67:a0:d1:f4:0a:a4:cf:a7:49:68:29:69:54:84:
                    09:ed:c8:3c:2a:27:7c:40:d5:4b:90:c0:92:cf:b0:
                    1d:16:93:40:ca:dd:d4:ab:cc:6b:95:cd:fd:2f:16:
                    81:6a:75:cb:73:41:29:6c:bf:c3:47:f6:b1:db:34:
                    e9:16:20:33:75:7b:83:5c:0d:13:02:a1:29:16:3f:
                    9e:ae:eb:7d:4a:59:2d:34:64:f1:52:4f:75:ca:bb:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:D6:FD:B6:C1:59:5A:8F:CD:E8:B1:0C:95:66:6A:0D:DA:CA:90
            X509v3 Authority Key Identifier:
                keyid:FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3231312e302f32342d3234203d3e20323632363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:65:16:7e:2f:cf:7c:2e:c2:a3:39:ce:52:56:80:7d:d0:49:
         e8:68:e7:d8:45:3c:f4:47:13:73:7a:a7:20:41:27:4a:ba:d1:
         86:e3:ae:14:7a:28:5e:48:38:94:12:99:47:d7:77:05:84:fb:
         fe:88:77:bb:82:d6:a7:ab:2b:bb:2a:ba:60:f0:c3:56:30:5c:
         41:9e:1e:48:aa:55:fc:c6:c0:82:0b:56:c9:07:ee:a5:a0:54:
         88:78:a7:67:ac:a7:45:bc:82:f2:98:f1:4e:6c:50:23:e4:0b:
         49:9f:54:f4:22:11:71:dc:55:04:7e:d1:e8:ba:09:73:72:6a:
         d0:1f:87:72:48:95:ab:ce:86:40:6a:62:73:db:85:8f:84:fd:
         52:a4:dc:7a:f5:06:bb:62:71:07:96:de:f9:4e:b7:ea:93:6b:
         72:4f:ea:63:49:4c:10:70:02:3c:13:ed:d4:bf:1e:41:a8:58:
         f5:ea:02:47:51:ad:5e:d9:9a:9b:29:bf:6c:78:92:29:91:1e:
         11:28:00:18:b9:64:f8:8a:47:87:c1:51:69:db:ca:e5:bf:8e:
         29:3a:02:9c:82:98:27:2a:ba:61:ca:5f:d2:73:d3:83:d7:27:
         d2:c8:54:b0:7f:00:44:b4:2a:88:0e:66:2a:f1:80:41:73:30:
         17:8a:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org