Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139382e302f32332d3234203d3e203631383133.roa
File:                     3133382e3132322e3139382e302f32332d3234203d3e203631383133.roa (raw, json)
Hash identifier:          pEXpgpaNqUyssYCP0WrEFUbPpY6VAOrww7HQp02kSJk=
Subject key identifier:   C0:ED:0D:D6:45:7E:57:56:9B:29:CB:0F:7C:39:85:A9:4A:A4:84:DA
Certificate issuer:       /CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
Certificate serial:       015B6429F10B10C73BBD425DF594BD7FC8976682
Authority key identifier: F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139382e302f32332d3234203d3e203631383133.roa
Signing time:             Wed 03 Apr 2024 18:31:09 +0000
ROA not before:           Wed 03 Apr 2024 18:26:09 +0000
ROA not after:            Wed 02 Apr 2025 18:31:09 +0000
asID:                     61813
IP address blocks:        138.122.198.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5b:64:29:f1:0b:10:c7:3b:bd:42:5d:f5:94:bd:7f:c8:97:66:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0DF2835EB47681D8D66A37C7127005AFB96D37E
        Validity
            Not Before: Apr  3 18:26:09 2024 GMT
            Not After : Apr  2 18:31:09 2025 GMT
        Subject: CN=C0ED0DD6457E57569B29CB0F7C3985A94AA484DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:42:60:23:de:56:6c:de:80:f1:3c:b7:f4:
                    a2:90:fb:75:2c:3b:14:73:5a:0b:de:98:33:01:f2:
                    46:17:49:80:0a:f0:60:6d:9e:9d:18:39:4a:80:ff:
                    f1:2e:af:05:b4:ee:dc:6b:27:f0:1a:b8:24:f3:7b:
                    d6:0a:93:b6:33:5a:3b:77:f9:10:72:d3:ef:1a:24:
                    cf:a1:19:76:12:d1:21:31:48:fc:f2:bb:30:e0:76:
                    b9:61:60:ef:be:8f:ce:c9:b4:9a:6e:12:9f:a1:7e:
                    14:81:4f:95:54:b6:9c:2a:29:9e:f9:6a:a8:6f:f2:
                    d3:de:87:75:84:81:3f:18:34:4b:63:7b:41:e6:97:
                    1a:78:79:3d:dd:83:c1:92:d5:20:14:a3:c4:d6:d9:
                    e7:4a:8c:0d:ef:a1:5b:22:17:d3:e7:1a:87:ae:e2:
                    82:a2:55:b6:fa:6a:68:80:be:46:21:59:c1:6c:5a:
                    e7:59:94:84:47:fe:ae:ef:98:73:64:d5:6c:89:73:
                    15:be:0d:8d:94:84:d0:14:a6:83:d2:41:c3:82:cf:
                    da:7d:4f:fc:60:7f:91:eb:88:9f:61:a5:e5:13:e3:
                    72:21:62:bf:2b:e4:ed:27:f4:aa:61:6e:d5:b2:91:
                    4f:21:f9:a0:6a:2d:17:c0:6e:f9:5b:a1:87:da:71:
                    39:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:ED:0D:D6:45:7E:57:56:9B:29:CB:0F:7C:39:85:A9:4A:A4:84:DA
            X509v3 Authority Key Identifier:
                keyid:F0:DF:28:35:EB:47:68:1D:8D:66:A3:7C:71:27:00:5A:FB:96:D3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0DF2835EB47681D8D66A37C7127005AFB96D37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DXUyF2Vm4aZWcDczs3JMRh4ruGBS1tnMtPNcvCFet6ze/1/3133382e3132322e3139382e302f32332d3234203d3e203631383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:cb:44:1a:86:8a:3a:59:27:f6:66:74:f2:94:8a:15:9d:2e:
         d8:2f:6d:75:42:61:ef:ec:77:bc:e6:fa:42:fa:8e:a2:4c:a8:
         52:84:aa:1f:79:bb:28:e9:71:fb:f4:82:f6:5f:83:90:81:b0:
         ae:d1:2f:0c:13:88:10:f9:e8:df:4b:85:69:35:43:04:f4:b9:
         46:4b:1e:cd:e6:66:dc:61:67:7a:19:7f:57:ff:0c:70:cf:dd:
         74:8e:29:ca:f3:9a:cd:28:c1:b4:1a:41:fe:1b:97:c1:89:ec:
         ce:60:ad:a0:3c:3d:81:42:b3:df:61:9e:54:dc:ff:b9:b9:5e:
         85:00:65:25:3b:48:83:59:a4:bc:73:4c:58:c6:3f:0e:57:a3:
         51:9e:50:f0:99:b3:19:05:a8:34:3d:5d:0f:8f:d3:03:f3:64:
         a0:bf:f3:b8:c5:0b:60:1b:88:3b:fc:03:2b:a2:4d:f1:c7:65:
         a4:af:b0:a8:a5:dd:f7:c2:24:7e:0d:49:20:60:4c:18:e8:ca:
         63:42:ae:84:90:bb:b7:1a:a5:1c:71:97:a7:a5:70:d5:62:3f:
         6c:67:72:02:a1:19:2c:96:9d:e0:1f:36:92:9c:41:92:d4:a1:
         eb:ed:83:53:01:5c:2c:97:5e:b0:b6:e4:6e:6e:3f:1d:e7:bb:
         0f:61:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:27 2024 by rpki-client on console-ams.rpki-client.org