Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/0/3133382e3132322e36352e302f32342d3234203d3e20323634333039.roa
File:                     3133382e3132322e36352e302f32342d3234203d3e20323634333039.roa (raw, json)
Hash identifier:          1ZbX3iabq35r1lZifx7AXhGKBOvoGcxZne8W2bw5zsE=
Subject key identifier:   EE:5D:07:38:37:33:BE:6A:CD:62:DF:33:DF:CC:EE:C0:0F:41:45:16
Certificate issuer:       /CN=FC6C90BB7976DDEDEA8032AAEA17214C42602E73
Certificate serial:       0219480DD24490B6CBE81529ECB3B0EF479BAB2D
Authority key identifier: FC:6C:90:BB:79:76:DD:ED:EA:80:32:AA:EA:17:21:4C:42:60:2E:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC6C90BB7976DDEDEA8032AAEA17214C42602E73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/0/3133382e3132322e36352e302f32342d3234203d3e20323634333039.roa
Signing time:             Wed 15 Feb 2023 22:33:38 +0000
ROA not before:           Wed 15 Feb 2023 22:28:38 +0000
ROA not after:            Wed 14 Feb 2024 22:33:38 +0000
asID:                     264309
IP address blocks:        138.122.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:19:48:0d:d2:44:90:b6:cb:e8:15:29:ec:b3:b0:ef:47:9b:ab:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC6C90BB7976DDEDEA8032AAEA17214C42602E73
        Validity
            Not Before: Feb 15 22:28:38 2023 GMT
            Not After : Feb 14 22:33:38 2024 GMT
        Subject: CN=EE5D07383733BE6ACD62DF33DFCCEEC00F414516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:b3:4c:ed:e1:27:0b:3f:3e:d7:36:ec:c2:
                    6b:1c:45:bd:f1:fc:fb:82:9f:32:c5:74:a9:97:f6:
                    f1:96:81:29:0d:1d:0d:e4:86:c4:92:e4:5f:ec:45:
                    84:64:15:8d:1c:1c:a2:cf:17:9c:0b:02:11:3d:b5:
                    31:ec:bb:5a:af:80:fd:1f:e2:a9:f6:99:95:3c:17:
                    b4:b2:7e:07:56:8e:4e:58:c9:b2:17:57:c3:a0:85:
                    44:3e:ed:fd:0a:89:f0:81:20:af:2c:7f:dc:76:ac:
                    09:67:3f:1c:49:a1:04:2b:54:45:20:c8:bd:bc:d8:
                    fc:c0:5a:6e:d4:ab:cc:04:1f:29:7a:05:91:a4:ae:
                    bf:0c:df:65:08:96:f0:8b:76:de:aa:58:b3:39:e7:
                    6d:5e:ee:f5:63:38:00:d1:63:7b:90:0f:64:42:9f:
                    5b:5e:75:7f:bc:b7:70:33:99:ea:2c:f3:3e:67:5d:
                    98:dc:56:38:f4:a1:ff:22:f4:20:66:95:f2:cc:63:
                    e2:51:e0:b3:e9:d5:78:4d:0a:18:81:f7:e8:68:6e:
                    78:cb:0b:df:bc:d2:10:00:75:e8:20:55:46:f8:9c:
                    db:55:2a:a5:39:99:eb:2f:50:df:a8:3a:15:e0:a1:
                    a6:35:36:07:2c:c8:f6:ec:f0:07:58:bd:ab:ba:eb:
                    97:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5D:07:38:37:33:BE:6A:CD:62:DF:33:DF:CC:EE:C0:0F:41:45:16
            X509v3 Authority Key Identifier:
                keyid:FC:6C:90:BB:79:76:DD:ED:EA:80:32:AA:EA:17:21:4C:42:60:2E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/0/FC6C90BB7976DDEDEA8032AAEA17214C42602E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC6C90BB7976DDEDEA8032AAEA17214C42602E73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSwiRtWT96ep3wxEfP5bA25eYN6LGDtvncFq64uk6HDA/0/3133382e3132322e36352e302f32342d3234203d3e20323634333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:2b:fe:80:98:e9:4c:3a:72:3b:ad:8d:e6:86:c6:90:24:98:
         98:c3:46:b9:f5:03:fa:a5:47:36:47:82:77:e9:84:4b:68:d7:
         f4:44:85:5e:de:d7:2e:95:2f:29:14:c9:01:83:18:6a:fc:25:
         2a:76:7f:65:35:5c:4a:09:09:49:9f:67:85:84:2e:67:80:8e:
         c3:00:3f:18:9c:f5:d0:51:8e:18:55:f9:cc:5c:7f:be:28:e5:
         c6:90:cd:b4:2f:d8:e7:09:9b:f9:50:0b:5e:33:25:92:cf:02:
         d9:78:8c:d3:ca:94:c3:9c:2a:51:65:d4:a0:63:9a:95:bc:e8:
         6e:f8:ef:08:33:b5:34:5e:59:ca:cc:b8:0a:0e:e2:c6:0f:fb:
         66:71:87:d2:ba:a3:ee:d8:8c:71:f4:18:10:7e:6a:88:da:26:
         13:2f:0a:2c:cf:dd:a0:b5:80:cf:cf:bf:f4:4f:3b:a2:8c:29:
         4c:57:58:e1:0b:08:af:24:9b:27:8f:45:20:50:86:3e:64:e7:
         ac:d4:6b:19:55:1e:df:3f:9b:be:96:fa:06:d2:02:2f:c8:d5:
         54:04:7c:6a:f9:8e:c4:02:68:45:23:c4:4f:3f:4c:55:95:c4:
         e5:42:54:fe:1c:76:ff:b5:92:6e:8c:e0:a9:0a:51:e4:97:5e:
         9b:00:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:14 2025 by rpki-client