Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3133382e39372e342e302f32322d3232203d3e203533313132.roa
File:                     3133382e39372e342e302f32322d3232203d3e203533313132.roa (raw, json)
Hash identifier:          oQlArgl6C306upYh9cGsHHQKQsw0ljy8lMJ0dvmT3Uc=
Subject key identifier:   61:5B:FC:EC:14:80:DC:88:CA:BF:72:68:3E:ED:3E:69:3F:22:26:38
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       634AF8D883FBE9E853EA125EDF99EEB5D1B344D7
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3133382e39372e342e302f32322d3232203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        138.97.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:4a:f8:d8:83:fb:e9:e8:53:ea:12:5e:df:99:ee:b5:d1:b3:44:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=615BFCEC1480DC88CABF72683EED3E693F222638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:01:e6:89:5a:5a:9e:91:73:70:0b:df:b8:bd:
                    15:ef:e6:75:ba:7f:21:31:5d:ec:43:ae:9a:39:e3:
                    d1:40:05:e5:0f:98:90:43:fe:a8:92:1f:9e:88:49:
                    d7:cd:0f:95:d5:c7:5c:44:16:c7:16:79:89:e4:44:
                    08:d3:90:ec:3c:1d:d3:44:dd:29:64:ad:71:c3:bf:
                    0e:bb:18:92:d5:1b:b8:9f:30:41:78:dc:f8:1c:c2:
                    22:d8:3a:45:ea:73:3b:e3:71:ad:0a:e6:03:ef:66:
                    94:f4:12:af:d7:71:74:bc:0d:9e:4f:41:db:88:61:
                    32:10:44:f9:7e:b8:1e:4b:39:d6:c9:94:f4:03:6d:
                    2f:4b:e8:ce:85:1d:37:b4:73:1b:f7:9e:8e:7a:8c:
                    33:a1:f3:e7:af:e7:e7:97:4d:e7:f1:ae:59:36:a0:
                    00:7b:4e:d2:4d:02:e1:6f:0d:19:a3:0f:7a:95:a3:
                    0c:b5:f1:9c:61:c6:81:22:97:2e:08:98:df:96:30:
                    40:3f:56:e2:bd:9c:17:47:42:12:a2:59:f1:a1:a6:
                    f8:50:0d:3d:ad:b1:ba:8e:98:83:6d:d6:60:6f:0b:
                    48:ac:ca:2f:03:05:6e:4b:6e:d2:65:52:49:90:fb:
                    63:7c:d4:ac:ac:04:c6:be:1e:39:a9:9b:4d:77:f4:
                    c7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:FC:EC:14:80:DC:88:CA:BF:72:68:3E:ED:3E:69:3F:22:26:38
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/3133382e39372e342e302f32322d3232203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:ec:b5:df:e7:50:79:15:1d:6a:ba:a5:3f:de:d5:19:65:c3:
         f1:01:54:7d:4d:2f:e5:3d:f2:39:21:fb:3c:ca:5f:6e:c8:fb:
         6b:95:59:dd:af:f9:9c:3c:16:9b:db:f3:9c:f3:ff:35:18:93:
         6c:2d:d9:4f:70:7c:dd:e5:cb:e1:dc:d5:b0:39:3a:dc:ca:34:
         2f:2b:06:19:94:d8:f7:4e:31:e7:b9:38:cf:11:32:4d:2c:cf:
         b7:db:65:4c:1f:17:41:93:1f:9e:39:9f:a0:d6:4c:dc:cc:40:
         12:7c:31:2c:86:39:62:4f:72:d1:7d:83:c0:33:b8:6b:bd:ae:
         62:4e:8a:bf:19:4b:79:0f:78:d3:19:76:d2:10:be:7d:a3:86:
         8f:8d:f9:7e:bf:5e:3f:b4:13:cc:82:43:a1:50:54:56:06:a5:
         54:30:ad:32:65:c0:6a:f1:23:12:62:38:a6:ce:03:68:24:7b:
         8e:57:62:a0:aa:3b:3c:15:9a:9a:6b:39:fb:5c:95:41:89:7f:
         72:b2:e4:05:0e:37:87:f5:df:b1:2a:75:04:45:e2:40:c2:15:
         81:c2:cd:24:42:fb:31:37:4f:c8:c8:b9:2d:c0:5f:d7:f3:8f:
         2c:7a:88:40:f4:e3:01:c9:1a:e1:a1:27:b2:d6:53:ef:f8:b5:
         27:72:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org