Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
File:                     3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier:          ycfZd0Yogcy+HRMXKQjmG8L/aX/VDX435W2ATYozRcI=
Subject key identifier:   21:C3:EA:96:09:58:14:8A:A0:A6:8B:75:80:AA:5C:C7:ED:17:35:74
Certificate issuer:       /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial:       0FC2FFEA4461BCE8824A9CF24ED0E55BAD5CB62F
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa
Signing time:             Fri 03 May 2024 21:05:48 +0000
ROA not before:           Fri 03 May 2024 21:00:48 +0000
ROA not after:            Fri 02 May 2025 21:05:48 +0000
asID:                     61844
IP address blocks:        138.255.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c2:ff:ea:44:61:bc:e8:82:4a:9c:f2:4e:d0:e5:5b:ad:5c:b6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
        Validity
            Not Before: May  3 21:00:48 2024 GMT
            Not After : May  2 21:05:48 2025 GMT
        Subject: CN=21C3EA960958148AA0A68B7580AA5CC7ED173574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2e:da:b2:d6:39:b7:56:c8:be:9d:c5:7a:d9:
                    bc:b5:81:13:72:fd:46:83:34:64:f9:5c:04:bb:81:
                    66:3f:32:12:39:0c:14:e7:85:13:fe:b7:7f:b3:e1:
                    2b:45:c7:21:40:02:e3:7e:c6:13:d4:35:82:1f:57:
                    1c:ba:48:cf:b3:ec:2b:2a:3c:b6:a3:88:b5:ce:8e:
                    5f:4c:45:35:dc:6b:1a:ca:65:3e:5b:56:45:21:68:
                    8d:cd:00:3b:47:97:99:02:42:d8:46:85:b9:2a:db:
                    97:d0:fd:cc:7f:1e:8e:09:26:d3:35:27:66:6e:67:
                    f3:77:ad:13:82:25:68:31:6f:db:c6:0a:78:47:e9:
                    82:f8:9d:06:b3:26:fa:1a:26:f9:cb:e7:ab:85:61:
                    c5:5b:c9:50:db:2c:ee:d5:57:36:74:26:83:de:56:
                    b7:71:c0:eb:71:bf:e0:b1:dc:b3:9e:c6:47:04:b3:
                    6f:7e:08:a5:95:ef:3d:60:7a:2c:73:47:8a:a1:c9:
                    c8:f5:25:8b:36:4d:94:9d:0c:3e:fb:f4:f0:17:ca:
                    64:fc:74:7b:4f:e3:70:fe:c1:87:5d:01:4a:1a:47:
                    aa:f1:59:06:77:7c:f3:8a:9b:19:6f:ee:2e:00:a9:
                    a1:ba:d6:98:93:87:e8:65:48:fb:65:cc:8b:f0:ba:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:EA:96:09:58:14:8A:A0:A6:8B:75:80:AA:5C:C7:ED:17:35:74
            X509v3 Authority Key Identifier:
                keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3235352e3231322e302f32322d3234203d3e203631383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:21:e6:81:f2:e9:24:da:02:77:5d:e7:e5:3b:75:54:53:45:
         45:d3:c6:84:f1:8a:60:e1:be:bd:f8:c4:dc:1d:a0:fa:d7:94:
         45:1e:c7:85:a9:6f:23:84:54:b3:c2:e9:17:d7:36:a9:76:fe:
         d1:b4:d8:aa:4e:ed:ae:b3:5b:6f:a6:6c:70:5a:d1:d6:f6:7e:
         13:c7:75:6b:2e:f2:9c:1a:fb:19:c1:ab:85:e9:13:e4:48:5d:
         23:ee:06:d0:0a:f1:87:54:84:a4:3a:02:ff:d7:22:9a:f8:ba:
         73:9e:bd:42:73:05:2c:a7:6c:72:7d:21:1a:5e:ce:2e:dd:ed:
         4f:be:9a:6c:a5:60:fe:6f:c2:92:e7:a1:2e:48:fa:d9:f1:37:
         9a:d6:b9:a0:ee:58:70:44:9a:9c:c3:2c:98:a4:37:1e:72:98:
         b3:20:84:20:10:6f:0d:c4:30:88:ef:45:e0:2e:e0:c3:f9:6e:
         f1:c0:97:d0:6e:ad:8a:36:54:89:93:76:60:36:16:33:52:03:
         be:1d:b4:6b:f8:66:2c:86:cd:c4:71:6e:5c:e4:8d:c0:88:87:
         a9:6a:47:75:4d:2d:11:8b:7e:37:96:7d:8b:e2:91:9f:56:42:
         e2:c5:44:90:f1:bd:06:93:bf:b3:99:91:c1:07:83:d2:5c:ca:
         7a:15:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org