Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          GD6oSDSlf8veQI+KnzeOsVtSs83CC3f+M5sfT0NhDv8=
Subject key identifier:   08:7F:D8:67:B7:94:73:10:F3:21:1B:60:04:90:19:05:C0:CA:72:87
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       1DD041270020C8B7EA4419C64DC2FF337B01230F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:01 +0000
ROA not before:           Mon 09 Oct 2023 15:55:01 +0000
ROA not after:            Wed 09 Oct 2024 16:00:01 +0000
asID:                     262494
IP address blocks:        138.185.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:d0:41:27:00:20:c8:b7:ea:44:19:c6:4d:c2:ff:33:7b:01:23:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:01 2023 GMT
            Not After : Oct  9 16:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:91:db:0e:3f:03:53:ad:a6:c4:8f:42:3d:
                    11:e5:7f:a4:65:42:3d:c1:ec:5e:3f:61:d2:16:c4:
                    b9:cf:7f:6e:ed:8b:43:d7:9e:6b:ec:62:81:62:bf:
                    0f:10:3b:2a:0e:4a:84:4e:b9:30:55:c5:19:31:7a:
                    d0:3d:42:34:c1:f9:3b:17:69:6e:b0:ee:52:b6:ee:
                    44:1d:50:aa:6b:96:66:6d:e6:52:0c:bd:56:a2:45:
                    56:b9:3a:ba:2f:35:a6:fd:f0:25:8f:1f:31:7e:d7:
                    50:d3:90:14:eb:ec:39:51:2b:3f:71:a5:f9:64:16:
                    e6:92:14:c8:80:fb:0d:35:3f:89:3c:11:6e:15:cb:
                    b8:c4:7a:a1:62:9f:b8:85:fa:65:20:72:f9:a5:21:
                    9e:03:69:c7:fa:2c:20:df:c1:de:82:32:8a:b7:3a:
                    30:58:50:14:d4:b6:01:3b:38:06:48:59:bf:da:77:
                    7b:1d:aa:99:46:2a:c5:31:54:22:f2:a1:c6:e8:c7:
                    f0:0a:d1:cd:ca:d3:15:85:0e:0d:4d:fc:f0:f5:21:
                    c6:18:47:da:80:a6:76:37:48:28:89:6a:12:ed:d7:
                    52:07:68:a2:80:e8:08:48:ed:41:62:21:20:43:00:
                    b1:4e:34:e7:4f:74:71:a1:cb:fc:bd:1f:c9:21:ec:
                    de:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:D8:67:B7:94:73:10:F3:21:1B:60:04:90:19:05:C0:CA:72:87
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:0e:f9:f4:76:3a:b7:0e:86:ee:68:44:45:27:ed:94:ed:f8:
         7e:d6:87:8e:34:7f:e6:d4:53:99:36:21:86:f7:67:09:a2:03:
         69:87:29:17:5f:f8:4a:2a:0d:42:30:f4:d4:19:41:08:7f:20:
         eb:c8:73:1c:98:15:72:21:0b:e7:ea:f0:91:29:99:cc:cd:4f:
         03:1d:db:24:39:e2:ca:58:aa:53:e5:f2:1b:8f:2e:f1:30:3b:
         1b:43:e9:6c:6e:e5:ba:0d:07:4a:61:6f:e5:4c:72:05:ef:a5:
         d8:7b:8d:93:93:c1:ae:4f:3b:da:be:9f:dc:58:d1:3e:61:11:
         2d:e5:81:21:83:bb:fd:ce:c1:e4:d4:02:6a:3d:d1:c8:70:aa:
         af:d3:d6:52:f6:53:6e:8c:de:de:08:8e:24:0f:de:56:3f:db:
         4d:e3:ef:e4:07:44:10:44:51:9e:f8:56:93:76:6e:45:85:b8:
         8d:46:3b:2a:c0:90:b9:5c:7c:d2:28:6f:f4:f2:34:b2:23:09:
         bf:e7:1f:b3:28:4a:d9:27:d5:29:1a:90:11:a4:ac:1c:fc:df:
         98:16:6e:ce:c3:47:1f:34:ea:7c:c7:ad:4c:bd:ac:99:e4:2a:
         6b:83:b4:65:67:22:ec:69:53:b6:db:14:e8:f3:fe:8e:72:fb:
         a3:1a:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org