Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32332d3233203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32332d3233203d3e20323633383837.roa (raw, json)
Hash identifier:          y32/dK5A8jO8m6fT6jWowf9oo+xV0TqBBFGV0xA90c0=
Subject key identifier:   15:32:0D:5F:73:AB:0B:D4:08:FF:03:58:DF:80:49:75:6F:09:00:25
Certificate issuer:       /CN=7258464143C44D8129F40A067027439DBCFB626B
Certificate serial:       7F449B814ABD7B156BC21362DC8A19416BB0FEC9
Authority key identifier: 72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32332d3233203d3e20323633383837.roa
Signing time:             Thu 18 Jan 2024 16:33:06 +0000
ROA not before:           Thu 18 Jan 2024 16:28:06 +0000
ROA not after:            Thu 16 Jan 2025 16:33:06 +0000
asID:                     263887
IP address blocks:        138.204.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:9b:81:4a:bd:7b:15:6b:c2:13:62:dc:8a:19:41:6b:b0:fe:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7258464143C44D8129F40A067027439DBCFB626B
        Validity
            Not Before: Jan 18 16:28:06 2024 GMT
            Not After : Jan 16 16:33:06 2025 GMT
        Subject: CN=15320D5F73AB0BD408FF0358DF8049756F090025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:3c:89:1b:4c:ba:23:97:3e:90:bc:b3:f1:
                    ef:d3:4a:56:f2:15:38:50:fc:b2:d4:7d:82:7d:6d:
                    48:b1:32:7c:aa:8f:5c:df:47:91:a7:03:fb:93:6a:
                    bb:73:94:77:b3:f3:8c:1d:de:46:41:43:18:8b:9f:
                    45:75:de:7c:b7:6a:cb:d1:e6:25:14:f7:97:1f:46:
                    2c:a9:70:2e:73:fa:d6:a7:92:e2:a9:20:99:1a:a1:
                    bb:51:2b:6c:5e:ea:a2:52:0d:54:f1:e1:ea:82:b0:
                    95:3c:ae:de:ae:a6:74:31:f4:94:a3:d4:f7:96:55:
                    97:67:2e:c1:29:ba:6d:3b:8d:6a:09:49:d2:58:18:
                    06:ed:6b:13:93:b4:6e:be:89:93:ac:ee:bf:5c:24:
                    ab:89:31:25:2a:09:85:ca:ad:72:53:2d:ea:28:6d:
                    7d:43:94:9b:9a:1e:0d:e1:e8:6f:8c:c4:5d:b3:ea:
                    3a:51:20:03:61:03:6c:65:e7:3f:a8:53:11:86:5a:
                    21:f2:4c:d1:8c:ca:89:6b:b4:07:7b:70:db:0d:1b:
                    a6:8b:67:d3:85:3a:05:71:0f:90:51:bd:d1:6e:bb:
                    d0:80:12:cc:8f:05:28:dc:1f:22:aa:6f:4f:3e:3e:
                    7a:cd:71:94:0d:9c:da:46:98:7a:74:c5:7e:1e:d2:
                    a5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:32:0D:5F:73:AB:0B:D4:08:FF:03:58:DF:80:49:75:6F:09:00:25
            X509v3 Authority Key Identifier:
                keyid:72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/7258464143C44D8129F40A067027439DBCFB626B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32332d3233203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:8f:fa:5a:72:54:9b:d1:8b:81:f2:5a:f4:38:b8:3e:9d:f0:
         d2:6d:92:99:d3:89:e3:46:10:e1:f8:05:cc:fd:39:cf:9a:da:
         84:2e:32:65:49:fd:55:77:25:9a:b1:d6:52:d2:73:7f:29:6a:
         68:a5:23:f2:c8:a0:29:43:a4:bf:7d:66:b0:f6:dc:4a:a1:06:
         7a:dc:bb:fc:4d:3b:68:bc:c5:fe:4f:07:68:f4:88:ed:5e:4d:
         b1:9f:5e:6f:e1:9f:9c:fc:10:6a:cb:62:6d:9b:58:2b:11:15:
         9e:52:e9:3a:d6:45:ff:a3:68:ec:fd:c9:cf:e1:eb:a5:c7:5e:
         e3:10:04:b3:cf:48:27:60:d9:3c:a0:2d:b7:d6:e5:b2:9f:a6:
         05:08:79:11:17:5f:65:40:82:8f:c1:6d:9b:38:ed:04:dc:e2:
         b4:79:4f:97:a1:73:cc:23:93:f7:d1:7d:05:21:9a:08:f9:8b:
         2f:c0:fe:bf:2c:e3:ef:28:87:e1:05:c7:5a:8f:97:84:71:2a:
         f1:75:95:7c:4a:04:27:3e:60:a1:9f:1a:37:52:50:cd:a5:0e:
         c2:84:46:a9:7b:f0:ae:35:c5:35:99:66:d7:a5:8b:19:8f:8c:
         ed:31:3d:d6:e3:90:c7:61:5b:c9:52:ee:02:88:fd:ab:4b:93:
         b1:bd:90:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org