Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa
File:                     3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa (raw, json)
Hash identifier:          ahwgT57rMuulqJpnWcFUA6WtGAx2w8LGJsX0B30EjrE=
Subject key identifier:   A9:3C:72:5B:C6:35:ED:C7:3E:85:26:A1:15:65:4A:20:C8:E5:65:5B
Certificate issuer:       /CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
Certificate serial:       60BE9DEA273D977CCC99018BBEB0060C4495BC25
Authority key identifier: FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa
Signing time:             Wed 13 Sep 2023 18:58:19 +0000
ROA not before:           Wed 13 Sep 2023 18:53:19 +0000
ROA not after:            Wed 11 Sep 2024 18:58:19 +0000
asID:                     263439
IP address blocks:        138.185.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:be:9d:ea:27:3d:97:7c:cc:99:01:8b:be:b0:06:0c:44:95:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE9AB02BBA9AA128E66394FDEACDF67D5006B93
        Validity
            Not Before: Sep 13 18:53:19 2023 GMT
            Not After : Sep 11 18:58:19 2024 GMT
        Subject: CN=A93C725BC635EDC73E8526A115654A20C8E5655B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:45:77:28:62:ad:b1:31:b4:cc:10:d7:bf:f1:
                    73:7b:bc:8f:f3:6d:02:f5:81:a3:33:d9:5e:6c:b1:
                    62:51:13:51:0d:17:05:dc:d6:8b:10:4f:11:5f:a0:
                    6e:71:76:f0:a6:ff:ab:f3:98:f5:f1:9a:3c:f3:a5:
                    86:04:da:8e:68:d2:73:15:75:6d:a3:b2:ca:c5:1b:
                    62:90:2a:3b:73:c3:6b:83:43:91:93:a0:e3:3d:df:
                    a1:8c:a2:20:44:2f:23:ab:4d:96:71:8e:f8:f0:80:
                    9f:5f:40:b3:b5:74:c0:1a:a4:d9:3e:23:f3:7b:88:
                    78:f3:c1:ac:94:e9:cd:31:67:7a:7c:3b:2d:4f:c4:
                    b5:86:db:61:b7:ca:5e:0a:32:7f:00:b5:43:09:85:
                    62:ef:ce:0b:2a:e6:b6:3b:37:05:74:4c:0b:36:e7:
                    99:07:70:cb:3c:d9:8e:2d:8b:eb:cd:ce:7b:51:33:
                    17:30:6b:cf:d9:f9:a7:64:46:17:2c:f3:09:28:b1:
                    e3:04:cd:ff:69:13:96:7d:e3:89:01:76:81:a9:1e:
                    b4:f4:e7:24:a3:c8:0d:0b:69:7a:18:16:2e:af:5a:
                    d8:1c:e7:44:b8:2e:4d:6a:ba:25:44:1e:af:1f:c5:
                    6e:d2:be:36:1f:ba:1a:25:dd:7d:c1:84:e8:e4:71:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:72:5B:C6:35:ED:C7:3E:85:26:A1:15:65:4A:20:C8:E5:65:5B
            X509v3 Authority Key Identifier:
                keyid:FA:E9:AB:02:BB:A9:AA:12:8E:66:39:4F:DE:AC:DF:67:D5:00:6B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE9AB02BBA9AA128E66394FDEACDF67D5006B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDyNuXCCs85AgZyPxJvmn373ag2BAbsZ8m5s1XqJ2vc4/0/3133382e3138352e3133322e302f32322d3234203d3e20323633343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:b4:3d:7e:9f:e0:1b:0e:30:8c:a6:e9:a5:f7:f8:dd:07:95:
         59:2f:25:fc:24:82:46:24:7f:ec:a4:b9:ad:31:f2:f0:78:9d:
         f0:90:9b:da:ed:d0:26:34:70:b0:d3:f2:4c:1f:c4:b7:2a:c9:
         4d:f1:58:bb:4a:86:bc:89:f3:37:d6:ff:eb:14:fb:8f:79:09:
         1e:f4:9a:05:55:f9:43:26:09:36:c2:1e:05:d7:95:d7:7a:b3:
         d5:30:69:0f:ca:82:03:04:be:39:b4:9e:cb:89:de:bf:27:d2:
         07:93:48:d9:62:46:b1:b9:c9:55:6b:b4:6c:75:43:d3:cf:46:
         a2:0c:6b:b7:8f:81:9e:df:c3:1f:1b:fd:75:de:8b:0e:a3:db:
         91:d0:1a:66:6c:67:bb:3b:d1:f6:5c:eb:2a:43:5f:cb:b6:eb:
         fc:63:33:09:a8:c8:a4:ae:9d:b2:8a:76:01:8e:2b:8b:96:fd:
         0a:a2:5f:0d:19:c8:2a:1b:13:af:3e:99:83:cc:87:fe:c3:53:
         a2:71:69:c2:55:d2:53:ae:69:53:d2:95:f8:de:99:e9:ea:53:
         f3:35:40:a8:79:7a:47:9c:60:33:c0:8c:17:df:e7:3b:87:23:
         ab:5f:06:a6:16:3f:8e:27:9c:3b:60:e6:4e:b9:01:c6:58:a6:
         c6:a1:6d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org