Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa
File:                     3133382e39392e32302e302f32332d3234203d3e20323632383833.roa (raw, json)
Hash identifier:          ziYc6PyRhck+uds7cpfqZxBXHIgoSTSATCN3Z6XaKxA=
Subject key identifier:   5B:6C:6C:E9:3D:8B:73:29:4B:19:75:09:2B:83:36:50:18:2C:81:C5
Certificate issuer:       /CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
Certificate serial:       49807E651BD889F70C4CE4D482B76580A5A9A19B
Authority key identifier: E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa
Signing time:             Fri 25 Aug 2023 12:00:00 +0000
ROA not before:           Fri 25 Aug 2023 11:55:00 +0000
ROA not after:            Fri 23 Aug 2024 12:00:00 +0000
asID:                     262883
IP address blocks:        138.99.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:80:7e:65:1b:d8:89:f7:0c:4c:e4:d4:82:b7:65:80:a5:a9:a1:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5754BC58952E3CFD46152E05FECC3D0D1B5429C
        Validity
            Not Before: Aug 25 11:55:00 2023 GMT
            Not After : Aug 23 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:01:d3:93:52:63:51:1b:38:b9:09:24:e1:3f:
                    7b:93:35:75:9a:42:23:2f:6d:2f:ca:d9:53:c5:5e:
                    03:c0:55:27:17:c1:e8:61:8b:1a:dd:3f:50:17:16:
                    2d:8f:1a:70:e1:0f:79:d4:ab:61:b6:07:f2:2b:25:
                    bf:95:f8:ee:85:06:27:04:2a:42:6c:f5:bf:96:14:
                    b9:0b:b7:c3:3f:6e:80:79:a7:c6:90:12:5b:db:30:
                    44:5a:25:69:fe:ea:b4:60:a9:6b:69:d7:a8:c9:c7:
                    95:93:ae:c6:17:97:38:df:9a:2c:36:d1:45:2a:16:
                    cf:70:45:e8:28:f4:08:4b:14:42:94:d4:68:25:1c:
                    0c:f4:99:8a:03:d3:27:c3:58:37:46:d1:d5:99:05:
                    d6:ea:e8:f2:ba:b5:48:72:36:ed:ac:b8:6d:9a:e9:
                    af:5d:3d:78:87:ca:e6:fa:c8:82:88:44:21:7f:38:
                    32:42:72:c8:47:72:e9:85:05:34:0d:6e:93:de:ed:
                    24:6d:c6:02:6d:5c:d5:7d:28:7a:98:ef:fb:9e:3f:
                    a4:72:79:2a:13:ae:2f:25:e4:5c:38:00:27:55:d9:
                    79:f5:b2:d2:4b:bb:4a:a8:16:8f:48:fa:70:63:98:
                    3a:85:16:46:d5:39:3f:88:83:51:05:95:a5:5f:e0:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6C:6C:E9:3D:8B:73:29:4B:19:75:09:2B:83:36:50:18:2C:81:C5
            X509v3 Authority Key Identifier:
                keyid:E5:75:4B:C5:89:52:E3:CF:D4:61:52:E0:5F:EC:C3:D0:D1:B5:42:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5754BC58952E3CFD46152E05FECC3D0D1B5429C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/0/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:40:1e:9c:01:f1:da:c1:fe:f0:d6:5a:01:b6:82:40:a7:
         ab:6f:e9:21:4f:ce:9c:67:1a:3d:0f:e0:3d:ac:84:87:f7:e5:
         bb:61:49:88:42:2d:2f:f7:4e:bb:ff:31:7c:67:94:dc:17:d2:
         09:14:35:e1:92:e6:10:ef:19:99:a6:f6:11:4b:24:48:eb:f0:
         c0:6c:8d:ba:7a:2c:6a:0b:ef:93:d3:ef:71:cb:d1:d2:7f:10:
         59:91:51:a7:a7:cb:46:38:3d:27:e5:7f:f2:3f:84:af:39:77:
         1d:72:7b:09:b9:59:c4:9f:03:c9:f9:71:db:91:be:60:3b:e7:
         a5:e5:6c:3c:aa:74:65:e4:74:37:fc:56:a9:11:04:9b:6a:5e:
         f7:9c:8d:fa:fc:83:a8:0e:b5:e5:a2:26:77:5e:eb:10:39:d6:
         18:92:3d:aa:bb:7e:63:d1:9d:4d:91:1e:59:70:0a:fb:77:63:
         3e:62:17:15:71:79:9b:19:b8:bf:8d:04:55:8f:22:44:b9:e9:
         53:86:a9:51:30:95:9c:98:26:9b:36:43:a9:15:6b:ea:a0:27:
         8a:af:2e:2f:66:e5:85:79:5c:35:3b:4b:20:a1:55:8b:aa:04:
         8c:91:70:be:26:c7:e4:62:ac:6f:86:b2:0f:59:26:5c:11:69:
         6c:32:38:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org