Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3234203d3e20323634353935.roa
File:                     3133382e35392e34342e302f32322d3234203d3e20323634353935.roa (raw, json)
Hash identifier:          XQG5bXTKKTU1Y/NRDdM5aHF9tkvU+3m4GyxbitL2rcg=
Subject key identifier:   7E:C1:93:37:4F:17:34:39:5A:25:E5:09:6A:60:64:D1:10:60:13:BF
Certificate issuer:       /CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
Certificate serial:       07561AD1677502BF8CA898AD38828E6F419DA166
Authority key identifier: FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3234203d3e20323634353935.roa
Signing time:             Wed 12 Oct 2022 16:30:53 +0000
ROA not before:           Wed 12 Oct 2022 16:25:53 +0000
ROA not after:            Wed 11 Oct 2023 16:30:53 +0000
asID:                     264595
IP address blocks:        138.59.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:56:1a:d1:67:75:02:bf:8c:a8:98:ad:38:82:8e:6f:41:9d:a1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF71661DF3D46D07FC37BD72F1B79D1D5E87961B
        Validity
            Not Before: Oct 12 16:25:53 2022 GMT
            Not After : Oct 11 16:30:53 2023 GMT
        Subject: CN=7EC193374F1734395A25E5096A6064D1106013BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:e1:3e:85:e5:05:78:7b:b0:99:b2:cd:1c:
                    4d:99:31:9f:28:02:54:35:f6:52:6f:d5:e6:a1:8a:
                    98:71:f1:d3:52:47:6e:36:e9:83:d0:c2:d2:5d:d2:
                    4e:a9:c1:98:aa:a3:3e:82:51:a6:05:c3:91:59:2d:
                    ed:67:99:3d:02:f6:d0:38:ee:26:4c:b3:bb:d1:f2:
                    9c:d7:2e:d4:9c:cf:7f:27:64:a6:40:e2:c2:1f:4c:
                    bc:17:6d:25:91:0d:d2:08:79:63:b3:e4:57:6a:98:
                    b0:6c:ab:62:13:6a:a7:a1:f8:95:52:8c:56:72:39:
                    75:5f:9c:28:00:80:a5:ba:5c:fc:ed:87:7d:fb:3a:
                    da:06:3d:75:d5:ea:37:31:b4:ab:79:fe:77:39:e3:
                    89:ed:5b:0f:f4:e1:39:83:6c:8a:0a:9e:c6:0c:73:
                    5d:8d:ab:b2:34:bd:fd:c1:b2:c3:fd:7a:e7:30:e1:
                    14:56:fe:db:74:10:ee:07:9a:bf:75:ef:8f:90:da:
                    8f:63:7f:9b:1d:69:52:0f:a9:c5:91:87:d5:59:f9:
                    59:ec:99:ee:40:19:2e:22:18:24:d9:cc:10:a1:c2:
                    47:d1:be:30:70:6d:ce:6a:8f:04:ef:49:8d:46:4b:
                    4f:2d:3b:d1:e4:eb:5a:12:a1:59:5b:7a:a6:d4:72:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C1:93:37:4F:17:34:39:5A:25:E5:09:6A:60:64:D1:10:60:13:BF
            X509v3 Authority Key Identifier:
                keyid:FF:71:66:1D:F3:D4:6D:07:FC:37:BD:72:F1:B7:9D:1D:5E:87:96:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF71661DF3D46D07FC37BD72F1B79D1D5E87961B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/3133382e35392e34342e302f32322d3234203d3e20323634353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:1a:c7:7a:17:b0:fc:31:4f:08:12:63:60:2f:78:96:e0:2c:
         8d:41:b9:ee:b1:f2:98:e8:16:12:8a:48:96:6e:58:b9:77:c1:
         f0:c4:fd:fd:0c:5e:6c:95:e8:ee:5e:7e:7f:ec:98:f2:0f:39:
         72:28:14:de:7b:67:eb:9b:e8:f3:c6:1b:77:9e:cc:93:56:30:
         24:d0:79:69:b6:14:53:1e:17:ce:ba:4b:d2:d0:95:30:fc:c1:
         c6:75:61:04:25:83:48:47:79:58:46:9c:d7:da:ae:36:a1:15:
         eb:79:28:84:74:93:33:9d:28:70:7e:c6:4e:f7:3a:3e:20:30:
         ac:d2:d0:22:c1:52:53:3e:48:e8:8c:6a:3c:fb:1b:f1:d7:eb:
         a9:80:24:df:5c:33:d7:f1:d9:a9:7e:ff:a0:fb:62:bd:50:e5:
         cb:6e:1e:2d:32:88:69:45:48:92:56:f5:55:b9:23:36:58:f3:
         de:0c:ae:35:3f:b4:7e:78:0c:45:0b:f9:df:93:ea:d8:30:95:
         81:a8:dc:48:49:e1:82:40:d6:f1:1c:68:7a:90:3f:60:a7:c8:
         d6:2b:76:39:3b:52:bc:f7:49:e8:b1:f8:b8:16:13:16:b8:b0:
         59:c5:58:a0:e3:94:b1:09:56:7b:3c:46:cf:81:32:d8:13:59:
         c0:df:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org