Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/3133382e3235352e34342e302f32322d3234203d3e203631373732.roa
File:                     3133382e3235352e34342e302f32322d3234203d3e203631373732.roa (raw, json)
Hash identifier:          0/hMYjKOoarxWSsm65FyZCkbNdMHyRq1dLsfw61jQ3w=
Subject key identifier:   2E:65:4D:5A:6B:00:17:95:CE:6A:F0:48:F6:A2:B5:77:FA:24:50:79
Certificate issuer:       /CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
Certificate serial:       43490D47331F1F2F66F5DA3F09AC2A41C037598B
Authority key identifier: FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/3133382e3235352e34342e302f32322d3234203d3e203631373732.roa
Signing time:             Wed 02 Aug 2023 20:00:00 +0000
ROA not before:           Wed 02 Aug 2023 19:55:00 +0000
ROA not after:            Wed 31 Jul 2024 20:00:00 +0000
asID:                     61772
IP address blocks:        138.255.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:49:0d:47:33:1f:1f:2f:66:f5:da:3f:09:ac:2a:41:c0:37:59:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF386C9BDA689F9AA04623D5ADF743F1BA316CD5
        Validity
            Not Before: Aug  2 19:55:00 2023 GMT
            Not After : Jul 31 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:e8:f0:7d:93:01:79:0b:d9:35:f2:af:dd:
                    f5:fd:1e:ba:55:b7:db:d9:e9:71:ff:01:0e:30:b3:
                    c3:99:bc:2d:3a:59:97:2b:f8:2e:f5:86:82:db:b4:
                    83:b6:cc:7e:b2:be:94:c2:b4:35:38:71:6a:87:7a:
                    c2:67:e5:04:ce:ab:96:fc:8c:1b:90:16:0c:dc:56:
                    1c:a5:d1:ca:61:a0:44:a6:ef:84:40:61:95:c5:1f:
                    86:12:76:05:1e:ff:90:1c:1a:c6:7d:97:98:57:b3:
                    16:ad:7e:b9:85:3c:40:c8:17:72:82:02:03:49:a0:
                    53:0e:0f:cb:67:2e:5c:ba:34:ad:32:0f:64:c2:da:
                    88:42:59:06:ff:b8:9f:3e:22:92:ea:d2:5a:a7:35:
                    56:6e:c2:96:18:bd:b8:46:7b:ed:e3:db:22:c1:3a:
                    a7:a8:b6:f6:d4:99:6b:b6:e8:ac:01:5e:fb:c6:5c:
                    05:21:c3:a3:d1:f3:f0:bc:65:79:9c:b3:94:03:37:
                    9b:86:5a:c5:41:a4:53:1c:25:cf:22:33:7b:6d:ee:
                    70:6f:48:7a:7c:c5:be:18:e9:0b:68:12:36:9f:ce:
                    0f:8d:df:21:4d:92:4e:10:51:81:30:1e:85:7d:d7:
                    1c:b7:e5:57:b9:b9:9a:b1:49:05:ab:89:4c:34:c1:
                    b5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:65:4D:5A:6B:00:17:95:CE:6A:F0:48:F6:A2:B5:77:FA:24:50:79
            X509v3 Authority Key Identifier:
                keyid:FF:38:6C:9B:DA:68:9F:9A:A0:46:23:D5:AD:F7:43:F1:BA:31:6C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF386C9BDA689F9AA04623D5ADF743F1BA316CD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeKtUThforcB1ZbV6FKmxZcqeheyJEqkS1gdMuhVkyVN/0/3133382e3235352e34342e302f32322d3234203d3e203631373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:5e:ae:1e:83:fc:11:b5:5b:15:b5:f5:85:8e:c0:69:2f:97:
         64:64:cf:88:d5:0e:9d:0d:73:19:e1:31:6b:88:ce:35:68:d8:
         6e:51:2a:de:d4:d9:f9:2e:1b:6b:65:a9:23:31:f2:99:da:09:
         82:45:21:fc:fd:41:7e:22:9d:ae:a2:6d:57:6e:d4:be:17:0f:
         89:64:6d:97:68:06:89:ff:68:f7:6a:53:d6:5e:e2:5f:08:6b:
         90:17:64:60:ab:a8:a8:1a:f3:d2:c8:70:2e:d6:2c:03:e0:30:
         51:7c:78:50:21:51:b1:34:7e:1a:c7:d9:51:e0:95:39:6c:19:
         6d:d0:28:53:67:90:47:f2:9e:ec:7d:a4:b7:7b:ab:92:76:32:
         43:13:73:08:1b:1a:bb:86:0d:38:82:44:b0:ee:71:e0:a6:48:
         eb:6a:4c:b1:5c:b6:89:1b:9f:ef:b7:a4:3c:9c:c6:df:b0:2e:
         74:2b:bb:4a:84:0d:c6:09:fb:bd:7c:6a:fe:6a:2f:e2:e6:7f:
         93:1a:09:91:65:24:2a:99:50:88:22:e4:94:b2:62:b2:e8:90:
         6d:ed:63:01:34:d5:af:95:bd:b7:81:40:0a:b2:d0:e0:f8:fd:
         3d:48:31:5c:4a:42:29:f6:9f:5a:88:ca:34:18:5b:40:b5:36:
         ff:2d:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org