Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          rHtx+fQAmibJbqxQnPXxGRzICT1cEt9/iUjn1ykDuAQ=
Subject key identifier:   81:73:47:63:31:DC:2C:57:22:DC:12:04:DF:98:62:43:20:62:6C:D9
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       61D294ECAFC9C858E884BDCCEB43CFA757E9A5A1
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:13 +0000
ROA not before:           Wed 20 Dec 2023 14:01:13 +0000
ROA not after:            Wed 18 Dec 2024 14:06:13 +0000
asID:                     263900
IP address blocks:        138.204.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d2:94:ec:af:c9:c8:58:e8:84:bd:cc:eb:43:cf:a7:57:e9:a5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:13 2023 GMT
            Not After : Dec 18 14:06:13 2024 GMT
        Subject: CN=8173476331DC2C5722DC1204DF98624320626CD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:38:3a:ad:4d:9b:a6:ae:5e:ca:5d:76:44:
                    be:a5:3b:78:55:46:a7:c0:44:e9:25:79:3a:9d:e2:
                    20:f1:8b:25:fa:8e:af:d6:59:a4:cc:cf:d9:06:9e:
                    d7:b0:6a:93:be:5f:b6:b0:68:85:1f:d8:13:f9:54:
                    d6:6d:6b:7d:85:5a:3e:41:d4:9a:51:90:7c:1f:24:
                    94:61:a8:1d:36:17:53:d2:39:6a:9c:4f:39:e2:ba:
                    64:a7:22:9a:98:a7:28:3c:a8:25:52:8f:f7:67:cb:
                    69:bf:2f:99:c8:11:52:d6:91:eb:a5:12:43:f4:55:
                    e3:9c:0a:c6:d5:2f:cb:ac:c3:13:3f:0d:07:db:04:
                    d6:39:13:28:e9:17:29:24:44:f9:72:92:30:da:f4:
                    97:e3:d5:57:bf:c7:e4:7b:69:13:f6:c5:55:09:22:
                    0f:d0:64:37:8d:12:b5:f1:49:80:bf:2c:b4:cf:35:
                    a1:d0:de:c2:08:f9:2f:05:92:c4:00:6f:43:c7:c6:
                    a1:8d:49:92:29:fd:c0:31:e1:86:d5:61:c8:10:0b:
                    c9:35:fc:5c:e1:81:c7:9a:fc:8b:81:bc:b4:e7:c4:
                    6f:4a:db:2e:b0:cb:de:ec:0a:24:44:0f:f4:e9:68:
                    18:bc:38:b4:c4:f9:8a:40:ea:04:30:87:2e:18:07:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:47:63:31:DC:2C:57:22:DC:12:04:DF:98:62:43:20:62:6C:D9
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135302e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:65:bf:00:eb:82:6e:ab:ee:01:20:83:de:b8:b6:3c:12:3b:
         05:62:fe:0b:a6:43:e2:05:5c:79:4f:bf:10:bf:29:5d:f9:c1:
         d5:ee:ac:c9:a8:df:5d:86:12:d1:ba:2b:18:4a:9b:58:df:64:
         f5:d2:a8:95:16:78:53:17:f1:ed:7b:29:05:55:31:d7:81:07:
         d4:5f:c2:0a:3a:13:29:de:3a:c1:d9:ee:66:b9:88:e9:b9:02:
         40:c4:36:6e:e5:c0:e7:20:06:cd:1c:16:56:c2:32:c9:3b:dc:
         ea:e1:7a:89:eb:a1:c3:d6:86:b2:7f:b3:aa:fc:82:1d:35:92:
         48:b7:ad:9f:27:fb:37:f4:c3:fd:7e:8f:a5:8d:cd:c2:5c:71:
         85:9e:3a:3e:ce:97:2d:1d:4e:45:6b:69:a0:33:a4:bc:38:ec:
         7b:06:e3:6d:bc:8b:31:9e:8b:55:f0:61:d8:51:3c:e8:c4:ee:
         4f:a0:88:fd:84:83:aa:05:5b:77:7d:65:5d:91:02:41:75:ef:
         e2:63:44:13:d5:53:bd:0c:cf:65:15:9a:aa:48:e8:72:24:a4:
         98:02:43:da:5a:51:e4:c1:4d:72:9a:66:58:76:68:2b:8d:07:
         8e:db:85:32:45:f9:73:e5:6e:09:e5:77:7e:b8:be:a3:fa:2d:
         4e:ea:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org