Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa
File:                     3133382e39392e32302e302f32332d3234203d3e20323632383833.roa (raw, json)
Hash identifier:          puIUBM7u2+Ds13R03PccbwlcjcSHtnTpsleS+EzH2pU=
Subject key identifier:   96:41:AC:4F:92:0F:9E:37:E5:7C:77:92:7D:82:F6:D1:D3:E5:B3:D1
Certificate issuer:       /CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
Certificate serial:       63252CA0150BD29057267D3C231708EB9DF0B03C
Authority key identifier: C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     262883
IP address blocks:        138.99.20.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:25:2c:a0:15:0b:d2:90:57:26:7d:3c:23:17:08:eb:9d:f0:b0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject: CN=3082010A0282010100A4BECB614A4CB8026F6A679279C0166E16304CE000FA29170FF5B2270BF8AC87DC46A5823FACE55D687FA2AE1AF2489CB992CD428FFCB3B89E3E5C542DE4ACCD9734B64E5641CDBF2D8ED27E311F99FB310A06CD07B939B1ADC045E31AC907F8F7A3C684A6C678DED95FE2800AB1144981BE41EFA794590272100112AC6A8E138454BBC1132993FF0EDE8A43C86BF7AA777E4A010947EB26C38BEC40D6093D225755804E95D6B69EE38BAEA19E967D43C36522619231A5FA46BE6FAD170B481478B9F262A017084A2A79D44D5A6D24950BA0C02955DF21A05116FBA7BC212AF7CF1A6DD9A61FB850225F51F1FF7A64FB192285502BDA4BDB5CD6FCBD629FA4930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:cb:61:4a:4c:b8:02:6f:6a:67:92:79:c0:
                    16:6e:16:30:4c:e0:00:fa:29:17:0f:f5:b2:27:0b:
                    f8:ac:87:dc:46:a5:82:3f:ac:e5:5d:68:7f:a2:ae:
                    1a:f2:48:9c:b9:92:cd:42:8f:fc:b3:b8:9e:3e:5c:
                    54:2d:e4:ac:cd:97:34:b6:4e:56:41:cd:bf:2d:8e:
                    d2:7e:31:1f:99:fb:31:0a:06:cd:07:b9:39:b1:ad:
                    c0:45:e3:1a:c9:07:f8:f7:a3:c6:84:a6:c6:78:de:
                    d9:5f:e2:80:0a:b1:14:49:81:be:41:ef:a7:94:59:
                    02:72:10:01:12:ac:6a:8e:13:84:54:bb:c1:13:29:
                    93:ff:0e:de:8a:43:c8:6b:f7:aa:77:7e:4a:01:09:
                    47:eb:26:c3:8b:ec:40:d6:09:3d:22:57:55:80:4e:
                    95:d6:b6:9e:e3:8b:ae:a1:9e:96:7d:43:c3:65:22:
                    61:92:31:a5:fa:46:be:6f:ad:17:0b:48:14:78:b9:
                    f2:62:a0:17:08:4a:2a:79:d4:4d:5a:6d:24:95:0b:
                    a0:c0:29:55:df:21:a0:51:16:fb:a7:bc:21:2a:f7:
                    cf:1a:6d:d9:a6:1f:b8:50:22:5f:51:f1:ff:7a:64:
                    fb:19:22:85:50:2b:da:4b:db:5c:d6:fc:bd:62:9f:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:41:AC:4F:92:0F:9E:37:E5:7C:77:92:7D:82:F6:D1:D3:E5:B3:D1
            X509v3 Authority Key Identifier:
                keyid:C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/3133382e39392e32302e302f32332d3234203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:e2:88:cc:98:cd:11:e1:d9:e8:4a:21:3d:48:a1:3f:14:78:
         3f:10:d6:c7:5c:a9:36:93:46:10:a6:bf:cf:41:4e:f2:37:35:
         db:9a:1c:e8:11:22:6d:23:94:43:8a:c4:0a:d8:52:7c:8f:1d:
         bb:1d:7f:22:e3:f8:f4:2e:95:ee:6a:f9:37:15:b3:c6:63:57:
         06:b5:57:a5:b7:9e:6a:5a:8d:cd:f7:06:ad:0c:2d:a3:d0:96:
         d5:85:7a:59:f4:c5:8d:7e:87:8e:ea:f4:47:71:4b:37:94:be:
         f1:74:0a:58:8c:41:a5:64:97:83:83:2b:cc:92:7f:d9:4d:9b:
         08:f3:02:02:ad:e7:83:e7:bf:97:d5:c3:7e:1e:28:99:3a:55:
         85:aa:fb:6a:e9:16:04:a1:6c:92:f9:58:87:29:ee:54:d5:67:
         56:9f:1e:e9:b1:ee:9d:d6:66:1f:c9:f4:52:b1:2e:fc:41:2d:
         33:dd:27:30:3a:f9:16:f3:51:00:9d:e1:7e:ed:60:05:60:6a:
         62:4c:59:81:5c:0e:9f:e6:c3:1e:c8:ff:93:13:cd:6c:3e:63:
         f7:f3:01:1d:25:a2:39:7e:11:1e:76:ba:90:ef:26:7c:e1:63:
         62:79:4e:47:65:7b:b0:0d:54:87:9b:88:52:96:7d:48:08:4d:
         e1:82:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org