Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32332d3233203d3e20323634313630.roa
File:                     3133382e39392e36382e302f32332d3233203d3e20323634313630.roa (raw, json)
Hash identifier:          byHTuGbJ+Gjb/tylu2R9If/veiP7/7d+ggDluykgowo=
Subject key identifier:   FD:CB:1B:56:98:49:D2:ED:7E:D3:AA:8D:94:77:AC:DE:AE:4F:FF:4C
Certificate issuer:       /CN=432A09356CFC4BB8197E452038BB66C2873D93C6
Certificate serial:       2BEAC4991A846ABD80075CB9EC37AF148DF2E75C
Authority key identifier: 43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32332d3233203d3e20323634313630.roa
Signing time:             Fri 27 Oct 2023 21:31:20 +0000
ROA not before:           Fri 27 Oct 2023 21:26:20 +0000
ROA not after:            Fri 25 Oct 2024 21:31:20 +0000
asID:                     264160
IP address blocks:        138.99.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ea:c4:99:1a:84:6a:bd:80:07:5c:b9:ec:37:af:14:8d:f2:e7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432A09356CFC4BB8197E452038BB66C2873D93C6
        Validity
            Not Before: Oct 27 21:26:20 2023 GMT
            Not After : Oct 25 21:31:20 2024 GMT
        Subject: CN=FDCB1B569849D2ED7ED3AA8D9477ACDEAE4FFF4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:95:cd:97:ca:b0:00:a8:8c:54:f1:d5:3d:
                    46:e0:85:80:16:d4:04:85:f2:46:8b:2d:5e:f4:62:
                    f3:1a:a8:27:ec:b8:f1:e4:fe:4a:9a:36:47:3f:3e:
                    dc:3b:d5:8e:e6:1c:74:b4:f0:9e:43:cd:10:33:24:
                    1e:ed:df:f9:59:d5:10:f0:3f:c9:e4:fe:91:ab:29:
                    50:a2:ba:91:a0:a4:12:26:92:b8:24:94:b5:0d:bf:
                    d9:17:9f:78:81:e4:3f:8f:15:8c:76:99:b1:bd:e7:
                    f7:78:b8:3e:9a:31:12:7a:4f:4d:2e:9f:7f:3a:b4:
                    cc:6d:90:54:6d:68:e0:a8:0e:a3:7e:0e:cd:8d:6c:
                    1a:2f:7e:f4:b2:d5:68:55:0b:90:88:fd:c4:ec:af:
                    e2:d1:94:0a:6f:24:88:4d:25:5c:74:00:24:81:b1:
                    a1:68:e8:0f:ef:40:00:93:ab:8c:b9:fc:b1:e2:87:
                    78:c5:98:fc:3e:b7:31:e6:7a:46:d2:81:19:7e:17:
                    18:54:8a:93:f1:84:17:5d:7d:cc:28:51:f7:ee:3a:
                    e3:f8:12:81:01:3e:9d:10:87:8a:b4:bb:fb:c9:54:
                    d1:80:db:3f:c7:de:fe:da:3e:b6:b3:97:e9:1e:75:
                    25:7d:6c:ae:9d:b2:c0:25:82:37:34:d9:a4:43:42:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CB:1B:56:98:49:D2:ED:7E:D3:AA:8D:94:77:AC:DE:AE:4F:FF:4C
            X509v3 Authority Key Identifier:
                keyid:43:2A:09:35:6C:FC:4B:B8:19:7E:45:20:38:BB:66:C2:87:3D:93:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/432A09356CFC4BB8197E452038BB66C2873D93C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/432A09356CFC4BB8197E452038BB66C2873D93C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BxWYRR9yVuLhzPzeXEbJAUoU63c97fPF1HFAE4fNytWz/0/3133382e39392e36382e302f32332d3233203d3e20323634313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:ea:39:02:f9:b6:cd:30:e8:61:79:18:49:45:e2:2b:7b:6d:
         71:14:b3:09:bf:78:7f:68:87:94:e4:d7:92:f7:ee:e9:73:04:
         fb:e3:30:10:d8:11:06:36:6c:4b:7b:19:1d:f2:4f:6f:4b:34:
         93:e1:72:da:bb:4b:1e:f8:84:12:e2:30:f3:2e:a0:81:63:38:
         69:c0:6f:bf:88:17:06:4f:3e:47:78:6d:5b:42:4c:57:3e:3b:
         7c:43:9b:9e:76:5c:4a:d1:cd:47:44:98:56:60:ac:24:21:18:
         ac:67:e8:81:3d:d7:69:e1:60:fb:4f:c3:eb:d8:46:a9:fa:98:
         64:d6:5b:84:11:64:05:68:6b:26:94:52:c5:1e:d8:3d:c8:e6:
         6a:43:7c:e7:e8:c4:38:cf:31:b1:c3:bc:7d:e3:20:a9:89:c3:
         98:c5:a0:e9:b8:c5:43:94:36:f7:6e:1a:c0:33:fb:6c:98:21:
         3b:79:5f:62:53:6b:a2:65:12:52:d1:43:d6:90:3e:40:cd:67:
         b9:44:0d:11:a9:0a:97:a8:6c:eb:27:9f:84:7d:50:b8:5a:5d:
         c3:08:f6:d2:b8:b6:83:95:47:d7:2e:e7:a9:f1:39:14:40:85:
         71:e9:7d:17:d3:6c:7b:e2:0e:83:92:14:09:10:11:ae:6e:54:
         b4:11:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org