Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa
File:                     3133382e39392e36382e302f32322d3232203d3e20323634313630.roa (raw, json)
Hash identifier:          hbZ4Bxg9+I9kyfOwQt3W9aVtU/+N0ylxgigs06K9PQk=
Subject key identifier:   7F:55:59:9A:79:F8:4D:D4:3F:AE:22:B6:27:3C:A0:02:71:5F:FD:9C
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       4AAD2C0674E92EE0978FBF3B608D655C42BCEA55
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa
Signing time:             Fri 27 Oct 2023 21:31:20 +0000
ROA not before:           Fri 27 Oct 2023 21:26:20 +0000
ROA not after:            Fri 25 Oct 2024 21:31:20 +0000
asID:                     264160
IP address blocks:        138.99.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ad:2c:06:74:e9:2e:e0:97:8f:bf:3b:60:8d:65:5c:42:bc:ea:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Oct 27 21:26:20 2023 GMT
            Not After : Oct 25 21:31:20 2024 GMT
        Subject: CN=7F55599A79F84DD43FAE22B6273CA002715FFD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:44:03:e7:9e:34:ed:c0:a1:8c:7c:f3:36:57:
                    d7:f7:57:e3:90:a1:73:28:48:ae:3b:03:42:71:de:
                    b6:91:5c:81:22:ba:18:2d:1c:e3:73:83:53:6e:de:
                    6c:15:ae:e7:d6:3a:de:0b:e9:37:71:ae:82:0b:3a:
                    7f:43:f1:c7:cb:9b:7b:01:53:bd:0e:10:d0:ad:d1:
                    64:ec:7f:3b:f9:ee:d5:15:96:ab:71:2e:28:a0:b2:
                    ae:7b:69:dc:02:2b:6f:60:06:5c:66:4f:4f:cf:8b:
                    78:ac:f5:35:a7:f7:bd:c1:ba:51:55:46:ee:81:0e:
                    eb:d0:82:8f:64:5d:26:ab:8d:2a:99:e1:36:b0:80:
                    cc:a8:61:26:49:a7:ab:12:05:17:33:ad:45:15:4b:
                    fe:d3:c9:11:67:6f:e5:fb:ab:86:d7:7d:44:33:cf:
                    ef:d5:f7:89:7a:0a:3b:9a:f1:43:98:3f:53:b2:b1:
                    a5:56:8b:e4:6f:d7:9e:5d:b0:3e:93:e8:57:4f:92:
                    fe:e3:c6:79:2f:62:1a:88:8a:df:9d:54:7b:41:7a:
                    5e:7a:d1:00:1a:4b:a5:9f:5b:f5:fe:7c:a9:df:78:
                    c3:eb:67:8e:e2:c1:be:52:dd:9e:47:fd:cb:28:3a:
                    cb:0e:b6:27:1c:54:3d:ca:d4:72:54:08:5e:c1:4e:
                    05:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:59:9A:79:F8:4D:D4:3F:AE:22:B6:27:3C:A0:02:71:5F:FD:9C
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32322d3232203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:ef:49:13:22:20:94:30:a8:5f:a6:dc:7f:cd:19:b4:82:fd:
         f9:fa:ff:f3:e5:3c:ea:6c:1c:d8:e2:43:0c:4f:44:ee:cc:3a:
         c0:58:44:eb:a2:90:94:35:20:4d:cd:9d:de:4f:0c:f9:3e:11:
         03:c0:f6:df:4e:9e:41:40:e9:b6:47:f6:e8:29:49:2e:3e:de:
         07:09:b3:59:cd:24:55:83:f8:c0:5f:9f:31:60:61:c2:1b:31:
         f1:a0:ea:09:bc:73:56:b0:1f:fd:ef:a1:a2:0f:3e:5d:bd:2d:
         72:7b:28:25:de:00:2d:7e:f2:97:99:28:4e:c4:23:ec:77:92:
         39:be:9a:36:98:1f:8c:1e:e8:96:f4:f6:b7:b9:42:ce:e4:68:
         52:ce:05:39:10:47:68:c6:3c:76:92:e1:f8:f2:08:c0:c5:87:
         4b:5c:24:d7:14:c7:b6:e1:42:c2:27:30:9d:0c:71:78:af:65:
         80:8f:b2:58:5d:c7:e1:70:d0:d7:89:ec:d5:b5:83:84:b2:9d:
         c9:0b:b7:61:7c:44:c7:bf:3e:6e:fe:6b:69:61:23:b0:bc:a1:
         7f:69:6e:39:71:32:b9:3f:f9:17:a4:cd:b9:a8:69:74:a0:d7:
         fb:7c:2d:91:5b:49:4c:4a:67:fa:da:a2:25:2e:7c:f6:63:30:
         dc:38:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org