Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa (raw, json)
Hash identifier:          1PpVNb4/TgXbT4tC64BJ3fWIF6eFeFhjBnLjRZsvNv8=
Subject key identifier:   87:BC:12:31:1D:FF:BD:79:AE:38:81:BB:DD:A9:59:48:72:74:CC:DD
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       7B04885818ABEFEC3248055A5AD0DCBD0648BD45
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        138.204.148.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:04:88:58:18:ab:ef:ec:32:48:05:5a:5a:d0:dc:bd:06:48:bd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=87BC12311DFFBD79AE3881BBDDA959487274CCDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:06:9b:39:fd:d9:cc:e1:7b:36:65:bf:43:
                    46:38:6a:86:6a:be:76:a9:74:32:b2:25:b2:51:29:
                    b2:80:7a:6d:0c:f6:1f:25:1b:69:72:cd:d9:30:47:
                    5d:8c:3e:36:74:d0:5a:3d:55:e7:82:23:57:e8:be:
                    34:d9:11:ad:42:28:2c:6d:33:f0:c6:c5:c9:7e:ae:
                    b2:c1:7d:e9:16:f6:2e:6f:88:7c:b2:cf:85:36:5d:
                    d0:db:61:f2:84:35:da:a1:6d:a1:c6:ff:cb:fe:1d:
                    b4:75:fa:34:4c:1b:bc:87:78:a6:cf:9c:08:38:04:
                    24:0b:84:ea:fc:45:fb:fb:12:3d:f4:6b:77:03:e6:
                    e3:02:32:3c:50:94:59:b4:61:20:8f:1d:9b:3b:d4:
                    78:5a:1a:20:bb:51:b8:f4:f8:c6:9b:d1:e0:fd:c8:
                    86:4b:27:bc:36:30:24:dc:71:ce:19:64:39:76:3e:
                    e3:f5:73:88:c3:43:83:9d:06:6c:2e:83:ab:bc:cd:
                    de:fb:d6:d7:72:17:18:31:4e:2e:96:26:4c:8f:77:
                    d3:de:00:e0:80:43:50:1f:9b:ac:e8:80:52:49:2d:
                    f9:76:3a:27:34:b4:86:d0:3a:02:b9:8f:c8:77:2f:
                    a0:98:30:55:2c:d8:ff:c5:1e:69:da:c8:a5:5f:23:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:12:31:1D:FF:BD:79:AE:38:81:BB:DD:A9:59:48:72:74:CC:DD
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32322d3232203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:c3:a8:5e:fc:11:38:42:2d:f6:a5:0b:73:29:e1:24:35:25:
         9f:f1:96:a3:d1:5c:39:60:c6:57:e6:13:da:5f:0c:ba:09:20:
         7e:ce:d5:25:84:69:05:e7:a3:f9:da:60:ee:ed:69:aa:c1:77:
         d8:38:65:e6:43:ad:37:48:3e:1a:a5:cb:dd:22:9b:61:58:28:
         2f:c8:2e:a7:c5:a9:69:51:65:ee:cb:ef:15:65:34:15:b9:9d:
         24:50:7e:b8:3e:0b:c5:53:59:de:97:15:aa:ff:c5:da:c6:94:
         d3:f8:ca:cd:31:51:4a:2c:e4:5a:b3:cb:95:9c:82:9a:59:d2:
         c0:ab:27:94:3e:42:84:f5:90:92:84:d7:6f:1d:a5:8a:9c:e2:
         f6:7e:45:e4:5e:ad:7f:ce:06:04:62:ac:49:7c:12:e1:a0:1f:
         b9:85:c5:91:2b:d4:41:42:3c:b3:ae:13:50:05:30:98:97:3d:
         9f:e6:46:47:56:85:3a:04:99:c1:d3:b2:32:07:26:ca:fe:58:
         8d:d1:f3:56:66:86:75:e3:09:5d:ca:53:ef:8e:95:50:44:8d:
         58:bc:f2:72:39:83:d7:d2:ad:d6:02:43:5b:bb:6f:ef:05:77:
         22:65:21:c2:43:18:44:18:09:ba:50:6e:d6:c3:64:20:1b:6f:
         81:47:cb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org