Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          Nhd3AOz6ZxDDaebKN/UmP8pTtAGYrhjRNRLWfV6+OGA=
Subject key identifier:   C0:21:7C:B9:2E:3E:BD:57:4C:E5:63:4A:A3:8D:E7:56:DE:B1:D1:8C
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       43D1567D5E002096CF21CE61551101F58C0AB59A
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        138.204.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:d1:56:7d:5e:00:20:96:cf:21:ce:61:55:11:01:f5:8c:0a:b5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=C0217CB92E3EBD574CE5634AA38DE756DEB1D18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:b3:23:7b:11:1b:59:5f:f2:2e:d9:85:3b:
                    f0:b9:4a:58:23:c6:c8:07:d0:3b:e3:3b:99:89:82:
                    5a:16:d1:33:0d:a7:96:73:1b:46:bf:88:7c:36:87:
                    ac:3e:50:77:69:e6:88:a0:47:46:78:55:57:6a:b5:
                    de:fe:c2:32:9a:9d:17:db:8b:56:fc:e5:ad:0c:8d:
                    5a:b7:dc:fd:94:72:2c:10:71:f8:49:51:4d:14:bd:
                    01:22:0f:63:ab:02:24:17:ac:08:78:03:a4:b7:73:
                    0f:3d:54:57:d4:70:01:60:f0:46:f4:2b:b8:9c:32:
                    4c:f3:57:57:9e:4a:3a:0a:8c:7e:09:01:e9:31:b7:
                    f0:5c:c8:b0:51:33:e6:03:fe:9a:0b:04:59:e4:e6:
                    22:0b:4f:40:d3:ba:a4:ec:50:d6:15:51:8b:79:d5:
                    57:ee:88:19:43:ca:15:d2:82:03:88:f9:2f:fe:ff:
                    1f:5e:58:8f:75:b8:22:4a:70:68:01:32:3a:e7:31:
                    e3:ca:b3:d5:87:00:89:0b:20:43:69:aa:d0:f7:61:
                    92:46:4e:df:dd:57:ee:83:9a:aa:1a:30:13:12:dc:
                    84:f1:83:36:53:6e:a6:a0:b5:bb:e6:95:eb:85:58:
                    fe:aa:b2:68:a4:e0:11:bb:46:4a:f0:50:5b:36:c7:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:7C:B9:2E:3E:BD:57:4C:E5:63:4A:A3:8D:E7:56:DE:B1:D1:8C
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3135312e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:69:0d:c0:f2:d6:d2:85:b1:15:e2:c9:5e:31:94:bc:0c:25:
         04:de:8c:f6:ec:1d:67:c8:f1:a2:53:fe:07:28:c8:56:e5:c1:
         b1:f5:ee:a6:94:2f:5e:48:76:c3:92:5b:c5:42:d5:b0:82:0d:
         e2:52:b6:01:fb:24:31:20:00:67:4f:b2:90:07:65:5c:9b:72:
         7b:73:a2:fa:9f:e7:78:a1:79:32:2e:36:65:30:4c:dc:e0:67:
         5a:1b:ce:12:fd:7d:c3:a7:67:dc:05:0c:81:28:e5:3d:72:a6:
         3f:a6:da:5c:4a:d5:64:c9:c7:15:e7:60:8a:b6:6b:c2:42:08:
         33:db:fe:fd:be:c4:da:1d:f6:3f:10:f8:68:35:81:0f:68:63:
         9f:e6:9f:73:e4:c8:43:50:23:93:8a:8b:cd:0a:bd:6d:3b:ae:
         29:89:5c:ad:06:34:94:09:1b:29:65:91:3e:08:2b:75:71:cf:
         be:20:28:4a:08:d5:f1:b6:56:79:49:6d:b7:5d:95:9f:52:3b:
         91:0e:3f:2b:42:d3:b8:3d:29:90:03:89:46:18:c5:4e:91:f9:
         52:4a:b7:a0:d3:92:32:8f:a5:dd:29:e9:35:51:91:1f:75:bb:
         c5:2f:10:21:9c:4c:ee:2b:eb:b7:b7:5b:9d:d1:ed:64:da:1e:
         34:d4:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org