Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
File:                     3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa (raw, json)
Hash identifier:          Df9U/E2nTVNNO8COvIDDGPE2Yh4zYNsUapT4rWt2ZqI=
Subject key identifier:   F5:61:4B:E8:3D:4C:C9:5D:9B:52:C2:DA:AD:1A:31:AB:D6:04:BD:9C
Certificate issuer:       /CN=7258464143C44D8129F40A067027439DBCFB626B
Certificate serial:       04348D6AECAEF50A6853518C63D9E59A6EF3103C
Authority key identifier: 72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa
Signing time:             Thu 04 Jan 2024 22:56:57 +0000
ROA not before:           Thu 04 Jan 2024 22:51:57 +0000
ROA not after:            Thu 02 Jan 2025 22:56:57 +0000
asID:                     263887
IP address blocks:        138.204.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:34:8d:6a:ec:ae:f5:0a:68:53:51:8c:63:d9:e5:9a:6e:f3:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7258464143C44D8129F40A067027439DBCFB626B
        Validity
            Not Before: Jan  4 22:51:57 2024 GMT
            Not After : Jan  2 22:56:57 2025 GMT
        Subject: CN=F5614BE83D4CC95D9B52C2DAAD1A31ABD604BD9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:51:1e:1f:fa:b4:fe:f2:b5:22:ea:de:72:
                    44:f5:92:bd:ff:09:2b:b3:46:6d:2a:35:02:7b:c2:
                    ab:09:2f:13:83:68:c8:a3:ab:c6:c6:b4:0d:ec:6c:
                    97:a6:50:58:03:4e:d9:c0:18:ea:1b:90:ae:87:aa:
                    2d:33:a1:c0:82:c7:b4:7b:1d:c9:fa:e3:d7:18:7e:
                    33:73:1b:51:98:ad:5c:a5:4d:b6:cb:2d:a5:75:0c:
                    69:b5:bc:8a:b8:cd:46:36:11:75:90:a3:94:e4:d4:
                    22:b4:90:00:ca:01:a6:17:72:c2:e0:48:12:6b:a5:
                    f7:da:a2:33:e2:50:c4:04:f5:d2:63:f6:51:2d:3e:
                    71:a7:21:e0:03:70:84:3e:24:aa:33:39:a4:83:8d:
                    bc:62:81:43:3c:86:38:5b:75:bb:bf:b6:24:54:f8:
                    6f:3f:56:03:02:8f:e1:fe:49:6a:e5:72:8f:f1:35:
                    b2:b5:8c:5d:db:02:94:17:ae:3e:54:06:14:3f:f9:
                    fe:d7:b7:02:08:7c:05:e5:d2:0e:2d:25:04:27:0a:
                    fc:dd:0a:90:08:2c:a4:7f:90:33:53:4c:78:ce:7e:
                    86:42:90:d8:39:1c:5b:77:f0:2d:c0:61:7b:13:c8:
                    20:6c:ef:a4:53:4a:52:b7:c0:bb:4c:15:da:ed:47:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:4B:E8:3D:4C:C9:5D:9B:52:C2:DA:AD:1A:31:AB:D6:04:BD:9C
            X509v3 Authority Key Identifier:
                keyid:72:58:46:41:43:C4:4D:81:29:F4:0A:06:70:27:43:9D:BC:FB:62:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/7258464143C44D8129F40A067027439DBCFB626B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7258464143C44D8129F40A067027439DBCFB626B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQKStmkSEMFsdgbLYHxsVJEaFkfoZEVLRy49x3GowDH2/0/3133382e3230342e3133302e302f32342d3234203d3e20323633383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d1:9e:02:20:6f:25:4d:67:73:1b:9c:c7:95:8c:df:9d:3c:85:
         ac:2b:44:4b:7f:a5:34:26:42:8a:26:c5:4d:43:9a:67:13:84:
         38:79:17:b3:ad:20:6d:13:14:c2:43:d4:15:46:f4:f7:c6:64:
         e6:9e:77:17:57:fb:5a:0b:df:f9:f6:fa:37:7f:42:94:57:67:
         d7:0d:8f:1a:d8:fa:14:b0:94:3b:27:75:65:f6:f7:45:71:73:
         be:0f:3b:82:0e:14:2c:7e:e0:13:8c:8a:32:13:ff:9d:c0:5b:
         f1:95:a1:b8:6d:33:04:54:2c:51:6f:26:85:f9:bc:11:9b:7a:
         e7:7d:05:02:7b:54:ee:00:9a:63:14:08:81:f9:70:eb:14:c6:
         d6:f8:a2:31:f1:a2:b2:34:12:a9:aa:ea:41:3d:0b:3d:b1:9f:
         01:05:38:c1:d2:7a:35:bd:8d:6c:0f:da:f0:2d:b9:44:27:fa:
         43:52:e6:d6:e0:32:43:ee:f8:72:78:e0:60:b1:da:c2:36:32:
         b1:ea:a0:3c:e1:4d:d8:34:7b:94:43:f7:76:49:f2:f5:7c:ca:
         da:86:08:fe:e1:18:7c:e4:0a:c2:d0:0e:c6:46:fd:21:d5:6f:
         44:88:a3:2f:d2:7e:61:80:c1:d6:fa:62:28:d1:b9:7d:7e:c0:
         f0:47:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org