Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
File:                     3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa (raw, json)
Hash identifier:          s1RvMSQ8Tqz7rCDlBKNdD+fq+OLYPL0g9VW2rXja5b0=
Subject key identifier:   61:62:5D:31:58:54:38:92:01:53:3F:9A:E9:A3:C1:09:59:DF:BF:F8
Certificate issuer:       /CN=5F930352DE227A8D4CED188F902C873925C9D5ED
Certificate serial:       1FC19940B1A1145DF4DD0CB3EE25EB4A55BB176E
Authority key identifier: 5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa
Signing time:             Mon 08 Jan 2024 17:03:12 +0000
ROA not before:           Mon 08 Jan 2024 16:58:12 +0000
ROA not after:            Mon 06 Jan 2025 17:03:12 +0000
asID:                     263907
IP address blocks:        138.204.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c1:99:40:b1:a1:14:5d:f4:dd:0c:b3:ee:25:eb:4a:55:bb:17:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F930352DE227A8D4CED188F902C873925C9D5ED
        Validity
            Not Before: Jan  8 16:58:12 2024 GMT
            Not After : Jan  6 17:03:12 2025 GMT
        Subject: CN=61625D315854389201533F9AE9A3C10959DFBFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a0:50:c2:02:e2:ec:8a:20:3a:98:48:a2:7f:
                    53:31:16:31:a6:32:29:89:c7:3b:4a:69:54:8e:0a:
                    eb:a8:6a:bf:6a:43:8a:f7:48:b2:9c:76:27:30:09:
                    6c:38:c8:7e:b9:7f:3d:c1:7b:42:df:02:51:c9:5f:
                    fb:bf:f6:fe:ad:f6:12:28:d4:03:03:31:d0:43:66:
                    a2:df:f6:8a:63:5f:50:39:dc:6d:c0:54:49:75:1b:
                    56:3e:0b:c1:c5:bf:6b:8d:11:6b:07:d1:64:88:f5:
                    4f:30:bd:a1:26:63:4c:e5:16:c9:2c:99:5a:14:17:
                    dc:05:1d:2d:86:f4:f4:40:eb:ed:c9:2f:d4:61:07:
                    39:30:af:7a:13:28:8c:5f:a1:ba:54:3c:e3:a0:a2:
                    cd:03:3f:17:1a:6b:a7:00:6f:ee:96:91:70:95:e9:
                    31:a2:ef:54:3e:78:54:81:94:4f:6e:2b:31:a6:da:
                    f3:d3:48:92:b2:98:0e:50:82:76:d2:47:0c:d4:52:
                    70:1b:68:ab:83:f0:e2:79:6f:57:bb:b1:cd:fb:74:
                    ca:9d:21:3d:70:3f:a4:8e:fc:4e:42:d6:ad:48:7a:
                    90:d5:b8:e9:6f:a5:20:4e:35:da:36:36:1c:8f:08:
                    b2:0a:b5:c6:4c:92:7d:ec:c3:a6:c9:44:36:73:76:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:62:5D:31:58:54:38:92:01:53:3F:9A:E9:A3:C1:09:59:DF:BF:F8
            X509v3 Authority Key Identifier:
                keyid:5F:93:03:52:DE:22:7A:8D:4C:ED:18:8F:90:2C:87:39:25:C9:D5:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/5F930352DE227A8D4CED188F902C873925C9D5ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5F930352DE227A8D4CED188F902C873925C9D5ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fkvxdyy3ajRBsvyzmSbTsZ9AU6KbAw9SVzYgQLPawRzJ/0/3133382e3230342e3138342e302f32322d3232203d3e20323633393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:f0:5c:44:51:9d:9c:bb:e5:30:d5:5c:de:64:d1:07:e7:49:
         eb:00:5f:43:07:9f:c9:f6:1f:cb:61:a0:3a:ce:bc:1b:1b:31:
         64:18:84:ee:e1:6a:e6:7a:a4:f4:e4:7f:2b:81:95:69:81:58:
         74:42:24:bf:40:c3:bf:4a:7e:c7:30:0a:58:09:28:0f:95:d1:
         67:e3:93:b5:1b:b5:7f:73:d4:fa:b8:4a:36:d5:12:77:7b:58:
         ca:a1:af:95:f7:bd:04:55:98:5e:6c:a8:5f:de:56:c6:1a:07:
         31:6d:52:5d:93:8a:0e:d6:c4:da:73:f6:02:9b:03:74:6e:9c:
         74:4c:e4:e9:5e:b3:ea:62:b7:60:10:6d:eb:cb:b8:8b:6e:33:
         51:23:07:2a:13:0c:36:9e:2c:ae:d2:8c:93:ae:36:74:ea:52:
         49:d1:4a:7f:8d:26:d5:9a:87:49:9f:b5:a6:90:97:0f:13:1b:
         26:aa:0a:1c:12:6e:35:7b:75:0c:66:74:7d:c3:45:7f:35:11:
         91:01:68:c8:c2:1a:0c:ef:3c:7c:63:77:81:a0:a4:5d:5d:be:
         46:96:85:75:ee:38:bf:e6:22:18:b3:16:75:b4:ce:47:3e:ac:
         21:36:2d:c8:ce:16:02:c3:01:88:de:0c:83:70:07:a9:3c:37:
         a4:d1:46:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org