Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          CAU84uTML+EndIDsOTBCCSxmXdhnJb/DH6chXheGb2E=
Subject key identifier:   83:B1:1F:59:F1:18:0A:3F:08:12:F6:8B:C2:BE:6A:9D:26:33:A9:6F
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       6172C237DE77113A05DF9D205F35040901AD31C2
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 16:00:02 +0000
ROA not before:           Mon 09 Oct 2023 15:55:02 +0000
ROA not after:            Wed 09 Oct 2024 16:00:02 +0000
asID:                     262494
IP address blocks:        138.185.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:72:c2:37:de:77:11:3a:05:df:9d:20:5f:35:04:09:01:ad:31:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 15:55:02 2023 GMT
            Not After : Oct  9 16:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:bd:e0:0b:6f:42:9c:5e:50:fc:04:53:ce:
                    c1:8c:cd:63:b9:de:bc:4d:0a:2e:6c:22:57:09:37:
                    65:44:3e:4f:33:6e:8a:00:77:6b:c8:e2:df:07:0d:
                    1a:4c:91:90:ee:43:62:5b:0b:b2:86:62:22:d0:2b:
                    55:57:38:50:eb:6c:b2:c0:3e:06:81:86:0c:3c:eb:
                    22:a1:7d:19:ee:47:0b:ae:01:7a:4d:d4:fc:99:88:
                    8a:b8:30:ce:0a:29:3d:93:7f:76:28:cc:6c:4c:ea:
                    09:5a:30:76:12:9e:6a:14:1b:87:4c:cc:bf:45:67:
                    6c:93:15:5f:fd:b5:10:5c:aa:2a:3e:56:7b:f0:85:
                    81:d5:06:99:49:f2:d3:35:e0:c5:c3:47:c5:ae:71:
                    27:e4:72:d8:22:6c:c9:3f:a7:4a:0c:ea:62:ff:29:
                    b8:91:41:38:69:5c:77:d4:8f:a6:92:7d:7c:f6:06:
                    58:98:75:c6:fe:44:c2:25:c9:3a:f9:e3:26:af:2b:
                    52:07:6e:bc:f5:1f:d1:f4:0d:3d:21:8a:70:9e:10:
                    62:6e:41:d1:87:b7:ae:45:22:ee:f0:9c:6d:58:09:
                    a6:ba:7d:38:c1:be:ee:4b:64:c1:66:12:ec:f2:a4:
                    ab:ce:34:5e:23:8e:e1:66:27:04:64:e2:a8:4f:ac:
                    09:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B1:1F:59:F1:18:0A:3F:08:12:F6:8B:C2:BE:6A:9D:26:33:A9:6F
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:e8:81:e9:d9:ec:fd:72:99:72:77:c0:d6:d2:83:06:6f:
         56:38:c8:f1:72:98:51:0a:ee:0c:0e:ee:de:b0:12:a5:32:4c:
         fc:ed:43:76:2d:a1:ec:e2:67:c0:e8:b5:3e:11:45:30:59:ea:
         37:1f:a8:4e:f7:c6:e3:85:b7:d4:34:b1:0b:41:dc:69:b5:9a:
         82:1c:dc:52:fd:17:70:26:5b:c1:4a:4e:e1:e4:4e:82:8f:28:
         01:a1:aa:a1:7a:16:52:4b:21:4c:31:ea:7b:90:87:d5:b6:fa:
         e4:4e:7c:45:a1:8b:df:e4:d0:27:92:95:72:3a:7d:e9:ef:00:
         9a:4c:f0:3d:ba:75:73:3f:a3:6a:ae:28:70:28:72:f3:21:c5:
         1c:c3:fb:67:60:e3:9b:af:37:39:dd:24:5e:02:71:e8:c4:bf:
         a3:db:89:f1:7c:13:1f:79:a8:2b:45:45:7d:1f:bf:f6:0a:63:
         6c:bf:25:6c:6d:65:aa:c1:7d:78:b4:ce:48:c1:1f:60:a5:ff:
         65:e1:ca:e5:ba:c9:b4:96:d0:98:e2:22:ee:3d:a0:a1:52:a5:
         9d:e8:87:d9:9d:64:e2:3d:b5:2e:ba:5d:91:43:03:43:74:f8:
         e2:51:96:e7:06:c4:07:84:c6:7f:8a:80:ff:7b:56:cc:a0:ed:
         85:61:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org