Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
File:                     3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa (raw, json)
Hash identifier:          sqVOivrqr5ZT8/qjD3gtEBEJa172XdYqgua5sjY7YDo=
Subject key identifier:   4E:B4:45:7E:8D:C1:C6:2C:5B:13:14:59:D1:F9:D3:53:06:F2:EA:53
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       41760FFFAD59626BAF04443565BD60BDE6CD8C4E
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:31 +0000
ROA not before:           Mon 18 Dec 2023 17:21:31 +0000
ROA not after:            Mon 16 Dec 2024 17:26:31 +0000
asID:                     263940
IP address blocks:        138.185.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:76:0f:ff:ad:59:62:6b:af:04:44:35:65:bd:60:bd:e6:cd:8c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:31 2023 GMT
            Not After : Dec 16 17:26:31 2024 GMT
        Subject: CN=4EB4457E8DC1C62C5B131459D1F9D35306F2EA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:31:37:09:28:de:60:12:9c:28:45:9d:3d:
                    35:7f:91:5b:ec:82:79:5d:3e:db:b8:7b:ab:71:a7:
                    9e:ec:5e:fc:a0:06:99:6f:71:99:c5:94:95:9c:cd:
                    f0:e2:6b:96:c5:bc:c8:06:64:86:82:bf:57:0b:7d:
                    86:7a:3b:8d:7e:c7:9e:d0:34:d7:ea:4b:75:47:bc:
                    c8:ac:a2:7e:40:64:03:31:0c:03:a7:8b:81:67:d7:
                    10:41:2b:a3:26:51:c1:a6:e6:71:b7:99:d5:1d:d8:
                    96:42:34:c4:51:56:4c:ac:b7:c2:b4:0c:65:be:9f:
                    e0:6b:f9:0d:ea:91:0f:39:3f:2e:1c:1b:72:d7:71:
                    30:ae:cf:5c:2e:b0:f3:a5:bd:48:dd:13:28:8a:d8:
                    f2:e0:f3:77:c9:b6:a2:9d:8a:64:2b:00:b8:23:90:
                    05:2f:70:66:ce:1b:04:ec:31:6a:80:99:a1:7d:78:
                    79:8c:da:34:b9:9e:68:bc:96:da:45:cb:ed:ca:10:
                    05:a3:0a:e6:77:74:ee:50:93:80:c9:aa:56:08:31:
                    cf:57:ab:97:cf:58:dc:39:6f:2c:97:8e:8c:6f:04:
                    8e:51:d7:57:ac:66:69:7b:fe:27:0d:ac:f9:6e:a3:
                    fe:89:d3:b5:f8:07:04:fb:dc:b4:be:a9:76:1f:d9:
                    b3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B4:45:7E:8D:C1:C6:2C:5B:13:14:59:D1:F9:D3:53:06:F2:EA:53
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32322d3232203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:55:64:b7:0c:94:7f:58:1f:da:1a:07:cd:91:10:47:e8:ee:
         9e:c7:84:d2:f8:89:49:56:e2:71:23:d0:9d:80:45:c7:78:2a:
         d2:60:9e:8c:56:35:c8:e5:81:47:05:40:a5:dc:86:33:c2:14:
         25:e0:ed:2a:8b:4e:c2:7a:84:0d:ca:18:90:e8:bd:24:f1:b7:
         79:ae:06:79:2c:9c:62:f2:c8:b8:73:ad:19:8f:2d:e6:2a:a4:
         3c:82:3a:00:1e:de:85:1a:16:aa:3d:03:98:5f:61:08:ee:1b:
         45:34:7a:95:f3:2c:91:e5:2a:5f:b8:9b:f8:0d:a1:6e:1a:39:
         b3:a2:a1:4b:ef:ed:3c:80:05:7a:cb:db:9c:29:b6:44:8f:7d:
         a1:8e:b1:26:3a:cd:04:ec:bb:ce:90:64:f4:86:19:f3:e2:0a:
         9e:cb:2c:79:49:19:08:a4:b6:f2:a3:77:9f:37:93:60:ed:1f:
         11:e6:21:36:9d:11:eb:5f:04:60:b1:fd:17:78:96:7c:cb:43:
         74:0c:a3:87:62:79:11:6a:99:a3:eb:7e:9c:e6:0c:1b:4d:1d:
         15:52:fe:6b:83:f1:4c:4c:97:e8:7e:f9:67:2d:a1:7e:c4:f6:
         dc:61:64:4b:a6:2b:0e:24:2b:77:66:be:ce:c8:89:6e:01:e0:
         3c:a6:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org