Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa
File:                     3133382e39392e32302e302f32322d3233203d3e20323632383833.roa (raw, json)
Hash identifier:          1/p+b5axa8t1F7KO1pwIN7AJ34Jlf6J9cIXrmY9VJ7c=
Subject key identifier:   C1:23:2E:83:FA:F1:C4:53:33:B5:7A:C8:20:CB:48:69:D9:15:E0:1D
Certificate issuer:       /CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
Certificate serial:       06FAAA8041D76DD1138FEF5BDB4BFF565C680495
Authority key identifier: C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     262883
IP address blocks:        138.99.20.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:aa:80:41:d7:6d:d1:13:8f:ef:5b:db:4b:ff:56:5c:68:04:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:f3:10:12:e4:f4:e8:4e:e9:aa:27:0e:80:
                    ff:88:09:f4:fb:d2:3f:c5:32:aa:0a:17:b8:0b:86:
                    a5:d7:76:c6:82:0e:36:97:d0:f0:5d:4a:93:90:06:
                    ff:59:6d:49:65:f5:33:f0:36:90:7f:de:98:d0:3e:
                    7b:c8:24:20:f0:e3:69:bf:d5:d7:5d:55:74:30:d7:
                    40:6a:81:0a:04:a8:59:2b:c9:51:e2:cb:a7:40:41:
                    9d:8c:21:5f:71:3f:44:9e:7d:fb:83:51:ee:fd:e4:
                    9e:bc:88:b5:b4:f1:85:97:76:d8:f0:68:cc:c8:6e:
                    6b:d0:6f:70:6e:c2:e7:61:8e:52:58:5b:7e:f2:93:
                    2f:21:ca:ea:7d:e8:5c:df:4b:1c:8c:e1:48:3d:e0:
                    26:42:8f:82:46:0c:74:fd:bf:d8:8e:d0:25:5d:07:
                    b8:78:2d:1f:76:38:4c:8b:e4:cf:6a:74:bf:e9:a4:
                    4d:95:b8:69:e2:68:0f:6c:50:ae:20:95:a8:0b:a2:
                    73:e3:af:c7:35:c3:8f:0f:28:19:08:2d:d0:cf:70:
                    42:91:eb:8d:1f:5b:85:fb:2d:0a:34:4e:1e:bb:83:
                    36:a9:a2:3c:5f:a8:a8:eb:93:b7:72:b2:b3:62:c9:
                    6c:44:01:38:06:eb:9d:c4:0c:aa:24:ff:fb:cf:64:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:2E:83:FA:F1:C4:53:33:B5:7A:C8:20:CB:48:69:D9:15:E0:1D
            X509v3 Authority Key Identifier:
                keyid:C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32322d3233203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:59:aa:d6:b7:28:ac:c7:d7:7e:c7:ea:cd:8b:4e:31:be:d8:
         ed:e1:27:64:3b:f2:07:5d:65:7f:f4:8a:9b:14:f0:8c:41:27:
         b2:66:81:02:fd:c4:ae:d7:b2:5b:a4:7d:15:46:35:b1:2d:e9:
         37:01:71:f2:73:2b:64:db:01:da:b1:cc:06:1d:58:f2:94:fe:
         b1:60:94:5c:53:f4:8d:10:84:d4:1d:23:7d:dd:6c:2b:1f:b0:
         25:ab:ea:54:07:16:4f:35:1e:6f:1c:99:ca:5e:51:6e:dc:fc:
         7d:7a:76:17:5c:97:74:c4:28:34:d2:ea:08:0d:16:4b:93:0e:
         d9:a7:9d:31:83:d5:f8:cd:0c:b9:ae:63:61:9f:81:17:ec:cb:
         dc:3f:42:5b:21:1c:8e:e8:bc:f8:d8:6a:d4:e1:d7:85:cb:6d:
         d9:2d:2a:69:9c:51:2d:55:33:be:9e:8f:5d:93:6b:9c:c0:8e:
         0b:2f:38:68:27:42:e5:bb:b7:f2:a5:2c:1c:25:87:03:ea:9e:
         b5:29:d5:45:fd:23:ef:70:0a:cb:7e:53:c3:6f:7f:09:36:59:
         f4:87:89:13:32:af:46:30:61:fc:09:f4:ce:ca:23:b1:2e:7b:
         11:b3:54:57:2d:08:d2:3a:d8:0a:0d:c6:4e:ed:c6:d3:16:12:
         d0:b3:62:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org