Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa (raw, json)
Hash identifier:          EAogfYj2LHcvYSc8GzdVb8NX8aiT+PGG8SaO32Fq+ik=
Subject key identifier:   50:4C:B6:FB:44:96:21:12:DE:FA:32:15:C0:70:CA:95:9C:15:CF:90
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       26B988896D1FAB03BF483D4BA29929364ED1D159
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:13 +0000
ROA not before:           Thu 23 Nov 2023 20:06:13 +0000
ROA not after:            Thu 21 Nov 2024 20:11:13 +0000
asID:                     263384
IP address blocks:        138.185.40.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b9:88:89:6d:1f:ab:03:bf:48:3d:4b:a2:99:29:36:4e:d1:d1:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:13 2023 GMT
            Not After : Nov 21 20:11:13 2024 GMT
        Subject: CN=504CB6FB44962112DEFA3215C070CA959C15CF90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:24:57:72:df:f3:c6:2c:83:cd:3d:b3:23:
                    3a:d1:a6:fb:34:0d:32:fc:fa:94:68:b3:a5:34:5c:
                    4f:c9:01:79:29:a4:63:f1:c4:25:85:3d:bd:51:a5:
                    3b:65:e7:69:ee:55:52:d3:e7:26:7a:69:98:7c:a1:
                    c6:2f:40:26:20:8b:3e:3a:25:af:1b:2f:44:cb:85:
                    c1:94:3e:d9:7c:0e:48:ed:f8:7c:c9:07:39:a8:38:
                    0b:5a:fd:b7:dc:de:df:b7:ca:54:08:a5:6b:c9:ad:
                    47:d0:ab:69:80:6c:1f:da:7c:3e:94:8e:d3:20:26:
                    c8:dc:70:c7:61:1f:11:1d:19:77:35:e1:cd:39:8e:
                    45:a2:73:20:ad:18:3a:a6:9b:1a:4a:cb:0f:be:5f:
                    e2:52:d9:5a:73:5b:bc:69:72:97:55:5a:b4:cd:21:
                    62:83:d4:ad:fe:d9:94:2f:32:bd:57:6a:58:2b:88:
                    30:1d:bb:fc:93:f4:97:78:87:bf:1d:bc:77:45:a9:
                    92:5f:16:76:e6:4a:df:ff:5c:26:82:8b:1a:7f:7b:
                    b0:aa:3a:fc:75:95:bf:b0:7b:77:b3:8d:eb:be:8a:
                    3f:74:bc:46:25:fb:eb:e0:da:c3:7d:bb:a7:b4:f6:
                    37:97:4d:fa:b6:b3:fb:a9:14:eb:0f:7d:07:6e:e6:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:B6:FB:44:96:21:12:DE:FA:32:15:C0:70:CA:95:9C:15:CF:90
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32332d3233203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:12:91:8a:56:8c:b1:83:71:f2:0e:f5:34:d9:cd:76:51:7d:
         d1:8d:14:84:3d:de:de:3c:2e:95:16:94:53:27:db:52:7a:12:
         da:af:34:1e:7a:c3:f9:6d:4c:98:cf:c1:5e:21:82:bc:95:a2:
         4e:00:0e:4a:ba:a3:d8:68:89:8e:c3:f8:43:4a:ff:c2:49:8c:
         d8:c3:17:a6:da:3d:eb:34:d4:ad:d3:ca:4f:0d:1f:b6:f6:17:
         d1:22:11:55:21:7a:da:e2:d7:80:29:3d:93:ba:02:9f:01:e6:
         c8:8a:40:e4:53:ad:42:10:a2:0e:17:29:e3:b5:bf:30:b7:46:
         21:79:f9:51:4c:a8:d2:66:05:c2:52:a8:96:10:aa:92:a5:39:
         28:d0:4d:19:ca:2d:d1:4d:24:b5:29:5e:05:ab:6b:b1:56:51:
         6a:12:46:b0:fa:63:b1:44:5f:14:e9:77:ae:48:4d:59:52:75:
         ef:39:fa:4e:6f:95:c2:3b:43:f8:7b:8b:51:61:2f:41:44:f7:
         d8:74:a5:32:60:d4:93:d1:b7:9b:fa:b3:9f:7b:5b:dc:91:81:
         86:69:a3:7c:87:b6:61:5a:cc:b2:69:11:93:ae:ad:fe:fc:ff:
         9b:6e:1c:a3:fd:88:56:b2:f9:2f:6e:62:cf:81:b1:b2:e1:c3:
         39:2a:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org