Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/3133382e39392e34382e302f32322d3234203d3e20323632343237.roa
File:                     3133382e39392e34382e302f32322d3234203d3e20323632343237.roa (raw, json)
Hash identifier:          YhMmLveHGE0z6ytzFFllSMagNKHG2/ZBoZyvdqVKylo=
Subject key identifier:   FD:C4:2B:C5:5D:42:21:EA:20:F1:AD:04:37:CF:DB:7E:C1:18:15:71
Certificate issuer:       /CN=A6E207AE952DCC3B7F03CA8F3A6EBBA3A89FFF6B
Certificate serial:       7DA4A43A7834EE3FE0A1B43E8E1F376B2444BB58
Authority key identifier: A6:E2:07:AE:95:2D:CC:3B:7F:03:CA:8F:3A:6E:BB:A3:A8:9F:FF:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6E207AE952DCC3B7F03CA8F3A6EBBA3A89FFF6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/3133382e39392e34382e302f32322d3234203d3e20323632343237.roa
Signing time:             Thu 15 Feb 2024 23:32:56 +0000
ROA not before:           Thu 15 Feb 2024 23:27:56 +0000
ROA not after:            Thu 13 Feb 2025 23:32:56 +0000
asID:                     262427
IP address blocks:        138.99.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:a4:a4:3a:78:34:ee:3f:e0:a1:b4:3e:8e:1f:37:6b:24:44:bb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6E207AE952DCC3B7F03CA8F3A6EBBA3A89FFF6B
        Validity
            Not Before: Feb 15 23:27:56 2024 GMT
            Not After : Feb 13 23:32:56 2025 GMT
        Subject: CN=FDC42BC55D4221EA20F1AD0437CFDB7EC1181571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:46:de:9d:b3:f9:03:29:20:4e:08:a2:a5:
                    0b:04:7e:0e:16:26:ea:2d:de:65:94:0f:af:5e:9f:
                    84:e5:cb:56:a6:a0:83:72:d9:56:ee:b3:de:c1:0e:
                    24:07:e5:e2:be:e1:62:8b:e7:75:07:2a:75:d5:da:
                    44:78:46:ea:1a:00:3f:f6:1d:b0:d1:bc:b3:70:46:
                    9c:34:6a:bd:fa:ce:4e:f9:63:e3:47:8f:72:65:57:
                    96:14:40:98:61:b2:8a:62:f6:49:64:0a:b7:65:6e:
                    89:c0:64:84:96:a1:31:0b:c8:fd:bf:59:e6:8f:76:
                    30:c6:aa:8c:a3:60:ed:f4:e3:6d:e3:04:32:85:01:
                    1e:1f:cc:8c:d9:ed:09:4a:af:50:8e:b9:90:70:7f:
                    b9:a5:44:7b:21:9e:51:fb:48:d3:2d:19:c4:b6:2c:
                    e9:13:80:3f:5a:bc:a9:86:9e:23:87:e0:b3:61:6f:
                    b1:17:b6:1d:7e:52:d9:ae:14:cc:3a:7c:8b:70:d9:
                    4f:ab:5f:89:fe:14:92:52:bd:70:9f:35:03:c8:97:
                    c7:c7:fc:85:9f:78:46:d4:fb:a7:b0:f8:a4:42:e7:
                    50:57:c0:de:b0:80:09:29:f4:9e:cb:7e:dc:d9:0f:
                    16:ee:4b:29:1c:cc:ef:aa:9f:66:13:cd:4b:a5:60:
                    0a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C4:2B:C5:5D:42:21:EA:20:F1:AD:04:37:CF:DB:7E:C1:18:15:71
            X509v3 Authority Key Identifier:
                keyid:A6:E2:07:AE:95:2D:CC:3B:7F:03:CA:8F:3A:6E:BB:A3:A8:9F:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/A6E207AE952DCC3B7F03CA8F3A6EBBA3A89FFF6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A6E207AE952DCC3B7F03CA8F3A6EBBA3A89FFF6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/0/3133382e39392e34382e302f32322d3234203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:c2:ec:d2:fd:9b:a9:59:43:c0:78:0b:92:d0:93:fa:83:
         6d:19:1a:fe:fd:72:57:ea:7f:07:3b:f1:c0:89:12:78:d8:97:
         df:d1:38:ef:f9:0d:eb:25:8b:13:12:6c:70:03:95:d7:92:a3:
         af:25:f3:08:8f:09:b8:d5:15:88:77:ba:ec:a3:00:57:94:ce:
         f7:06:b1:20:56:b2:50:ea:1c:0d:da:26:13:3f:b5:c7:e3:ce:
         3e:01:df:17:39:bc:b1:14:8b:63:b2:3c:5f:fd:5e:4f:fd:d5:
         c6:5d:17:86:20:81:52:60:11:60:a8:3c:8c:89:9f:86:ec:31:
         d6:5d:2e:af:cf:6f:f9:5c:8c:f8:17:7a:85:35:b3:09:c1:88:
         cc:8e:e8:bb:09:4e:1c:dd:ec:4e:bb:94:8b:d2:31:81:3b:5d:
         a2:2e:cf:81:07:9b:b6:db:1d:7d:12:0e:d8:a6:46:eb:75:44:
         40:1b:32:98:51:54:c6:3b:f2:ac:b1:22:2a:36:f1:55:a4:f8:
         e8:33:10:9e:5f:70:e6:6f:15:76:d5:d1:85:c5:31:d7:52:4b:
         1b:df:4c:d8:7e:ed:4b:c7:5e:28:5b:48:c1:3f:77:2d:74:d7:
         1c:da:17:41:22:bd:80:6a:7b:87:6f:d3:21:40:cb:23:8c:69:
         ba:50:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org