Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (raw, json)
Hash identifier:          wskoIKWw/6yNsbI+86dTOxnpwoC64ZtWDt1Br0K1MTQ=
Subject key identifier:   6E:95:55:9F:C1:4B:A0:DF:DA:44:2C:BB:D2:9D:E0:BD:DE:C3:76:31
Certificate issuer:       /CN=55268646F33053B8CA50C07462C0B20DA7420218
Certificate serial:       6C81DDF6D98E8685F84A80156DD45EFAF04710A8
Authority key identifier: 55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
Signing time:             Fri 26 Jan 2024 19:30:06 +0000
ROA not before:           Fri 26 Jan 2024 19:25:06 +0000
ROA not after:            Fri 24 Jan 2025 19:30:06 +0000
asID:                     263900
IP address blocks:        138.204.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:81:dd:f6:d9:8e:86:85:f8:4a:80:15:6d:d4:5e:fa:f0:47:10:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55268646F33053B8CA50C07462C0B20DA7420218
        Validity
            Not Before: Jan 26 19:25:06 2024 GMT
            Not After : Jan 24 19:30:06 2025 GMT
        Subject: CN=6E95559FC14BA0DFDA442CBBD29DE0BDDEC37631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:39:0d:9d:6c:76:50:01:83:6e:0d:33:66:
                    b4:56:c1:15:84:0b:0c:f1:86:34:21:42:dc:e8:5a:
                    9c:f8:bf:49:28:96:fd:e9:5f:ef:d2:6b:e9:b2:29:
                    19:5d:d3:d2:0e:1a:70:2b:87:29:2b:1f:f3:70:d2:
                    db:4e:fa:86:49:18:fd:88:00:81:50:03:6e:eb:57:
                    36:82:6c:9f:15:10:69:05:ea:fd:3e:16:a0:4e:4c:
                    99:ac:2d:52:3a:5e:b3:6b:7c:7b:cc:20:3b:90:92:
                    18:ed:83:35:13:47:7e:79:a1:c1:64:34:af:65:61:
                    4b:36:84:e9:18:c7:ad:70:ee:44:73:9c:27:f6:8a:
                    0d:05:45:90:31:45:be:a9:61:6b:38:00:f4:7a:c2:
                    20:69:33:7b:71:4a:1b:27:6d:47:01:fa:a4:26:17:
                    47:57:70:48:0b:13:d3:d7:31:97:b0:ad:df:18:e2:
                    c1:0f:c6:7e:ea:94:33:f2:88:d5:d8:10:aa:c8:c0:
                    84:cd:3d:b2:b2:0f:3d:c2:22:1a:1c:8f:e9:76:0c:
                    9f:a9:59:b2:f9:ea:6f:8e:6e:4f:0d:b5:a0:1e:af:
                    2c:bd:d4:63:9c:4c:2a:52:51:bd:95:aa:40:65:92:
                    9f:b5:dd:54:56:11:44:8f:35:26:89:be:b2:86:10:
                    a3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:95:55:9F:C1:4B:A0:DF:DA:44:2C:BB:D2:9D:E0:BD:DE:C3:76:31
            X509v3 Authority Key Identifier:
                keyid:55:26:86:46:F3:30:53:B8:CA:50:C0:74:62:C0:B2:0D:A7:42:02:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/55268646F33053B8CA50C07462C0B20DA7420218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55268646F33053B8CA50C07462C0B20DA7420218.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/0/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:da:99:4a:23:7a:a8:97:e5:7f:eb:1c:fb:41:c3:c5:91:7f:
         68:61:4b:16:a5:8b:0e:00:35:68:68:18:b1:e1:08:64:70:ca:
         7d:e6:2d:69:93:b0:36:34:4c:f5:b5:5d:ee:ee:4a:4c:b9:88:
         0b:16:87:1f:c4:c5:f1:71:31:5f:ef:53:77:cd:4f:95:d8:44:
         85:6a:2b:e0:9e:7c:5b:ff:37:ac:0e:9b:7c:ed:34:d4:d8:24:
         90:8f:b4:7e:cb:15:fe:71:86:af:36:bd:23:18:14:c0:be:c0:
         39:a7:eb:59:0a:56:e0:c0:47:69:f2:9b:0b:66:ca:d9:dc:12:
         75:71:70:d8:cb:f8:a1:37:2e:fc:dd:96:bd:d5:d7:0e:d5:c2:
         b6:73:68:70:d3:be:67:a4:9e:82:76:b1:ba:8b:96:21:f1:dd:
         15:70:b9:81:94:af:92:3b:80:72:9f:43:b2:8e:6f:ab:17:54:
         49:de:bb:02:1c:97:1b:d3:ba:d1:eb:d0:7c:6b:b1:3b:5f:4a:
         4d:36:2f:70:cd:1c:88:39:50:17:96:14:db:b4:ed:65:0f:2a:
         21:ae:57:61:f2:67:2e:6f:32:8d:ac:0a:87:30:16:1e:95:1e:
         71:48:8e:49:72:73:66:9b:b1:d3:f5:48:7b:fa:35:2c:69:95:
         ea:34:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org