Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39382e302f32342d3234203d3e20323633393232.roa
File:                     3133382e3231392e39382e302f32342d3234203d3e20323633393232.roa (raw, json)
Hash identifier:          Ypnu4Ig7ZWbtEKWNEM+4wF3PrXD1To0FX2ISgJlivZU=
Subject key identifier:   F0:5A:9A:66:2F:41:40:85:53:A4:2F:F3:E8:79:DB:96:06:E9:22:8C
Certificate issuer:       /CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
Certificate serial:       3D796831BCBE9FA958C51B76C554945087222B1F
Authority key identifier: A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39382e302f32342d3234203d3e20323633393232.roa
Signing time:             Sat 25 Mar 2023 21:14:02 +0000
ROA not before:           Sat 25 Mar 2023 21:09:02 +0000
ROA not after:            Sat 23 Mar 2024 21:14:02 +0000
asID:                     263922
IP address blocks:        138.219.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:79:68:31:bc:be:9f:a9:58:c5:1b:76:c5:54:94:50:87:22:2b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
        Validity
            Not Before: Mar 25 21:09:02 2023 GMT
            Not After : Mar 23 21:14:02 2024 GMT
        Subject: CN=F05A9A662F41408553A42FF3E879DB9606E9228C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9e:87:4f:0b:4b:4c:4f:5e:62:90:79:df:95:
                    c1:4b:9e:53:8f:21:b8:45:01:7b:2d:4a:f8:69:d6:
                    bc:88:f9:d9:07:73:3c:71:1f:a9:0c:3e:2f:a9:e6:
                    ed:c3:29:55:ea:e9:bb:2b:72:14:ac:ac:f4:86:c2:
                    22:ac:eb:f3:b5:e6:c2:b4:04:49:e7:8a:a3:5f:7d:
                    93:b0:57:89:00:a5:53:e5:ae:ab:eb:7a:87:28:db:
                    00:9f:16:e1:87:97:7b:21:51:fa:98:f6:65:14:cc:
                    c2:e9:23:3d:69:70:fa:52:9e:d5:8b:62:69:c2:9d:
                    b4:16:8e:89:bf:9a:fc:d2:7a:2e:69:e3:c0:77:35:
                    5d:11:db:7a:70:3c:c8:07:37:eb:84:7d:40:31:1f:
                    f3:f1:c0:ca:c2:e0:00:0c:fc:ef:06:c6:16:0f:90:
                    e9:69:e4:d6:b1:e8:73:72:f7:44:98:9b:9b:98:1a:
                    12:32:25:27:81:55:a5:0e:f0:3a:bf:e4:6b:08:e2:
                    19:7e:30:c0:19:79:46:8f:e9:16:1d:87:82:a4:ee:
                    c4:70:2e:5c:66:2f:5a:da:26:a7:09:a5:55:f6:7d:
                    a0:b0:0d:fa:b1:f2:d9:29:d4:f5:3e:c5:33:26:c9:
                    58:9d:20:d4:97:dd:ed:f1:9e:69:34:2f:68:38:a8:
                    cd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5A:9A:66:2F:41:40:85:53:A4:2F:F3:E8:79:DB:96:06:E9:22:8C
            X509v3 Authority Key Identifier:
                keyid:A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39382e302f32342d3234203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:09:44:1f:be:0e:5a:c3:f0:89:d7:ca:d1:24:6a:8b:2b:
         ca:f0:58:59:e0:2f:fc:62:da:8d:d7:7e:23:e8:6f:17:cb:a9:
         75:4a:1f:87:89:1b:8e:d0:7b:f6:ee:4f:da:0f:5f:d9:bb:ff:
         85:9f:9b:f7:fe:6f:9e:3b:41:67:22:58:4f:d1:65:c7:ee:38:
         b5:79:80:97:cd:81:56:44:e4:ec:4b:53:18:08:d6:a1:97:b9:
         21:60:f7:26:62:b2:00:4a:33:6c:1e:98:84:d6:56:6e:88:eb:
         a6:6a:fd:c3:c6:66:4b:ca:bc:3f:42:bc:f0:30:7b:1e:4d:84:
         9e:47:6c:bb:97:a2:f6:0d:4b:19:64:73:58:10:2e:3d:35:24:
         e6:27:07:ee:15:d0:e0:65:3c:00:a3:f2:7f:08:1d:51:7c:a7:
         9b:50:75:83:8b:66:21:45:06:23:47:64:d4:44:e1:ce:b8:71:
         fe:b1:96:3b:c7:2c:7a:60:f3:54:82:8e:88:23:5d:41:86:a8:
         6e:8b:c8:3a:71:6b:99:6b:7a:29:ea:00:63:fe:d7:4f:19:a2:
         a6:d6:11:86:73:1f:e9:0a:94:6b:b5:c9:7b:8c:a3:5f:c6:cd:
         11:da:9a:e3:9e:44:55:33:ee:aa:da:f2:b8:a1:16:6e:cc:1c:
         46:0a:06:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org