Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa
File:                     3133382e302e35322e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          G0QVVkpQUgewz9e7ANj7AdlXYQQZi/A1WOnDcirVTcc=
Subject key identifier:   49:14:67:C6:6D:EA:4D:49:92:22:43:C1:2D:07:BA:30:AE:F3:DC:C8
Certificate issuer:       /CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
Certificate serial:       280A31040BE93CE1844BF62A181D687F4727AC96
Authority key identifier: 0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa
Signing time:             Fri 14 Apr 2023 22:00:00 +0000
ROA not before:           Fri 14 Apr 2023 21:55:00 +0000
ROA not after:            Fri 12 Apr 2024 22:00:00 +0000
asID:                     264525
IP address blocks:        138.0.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:0a:31:04:0b:e9:3c:e1:84:4b:f6:2a:18:1d:68:7f:47:27:ac:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Validity
            Not Before: Apr 14 21:55:00 2023 GMT
            Not After : Apr 12 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:6c:66:c2:83:1e:c1:77:0d:bf:e9:10:fa:
                    e3:32:32:49:39:70:75:ec:8b:f3:38:46:20:48:d9:
                    8f:d5:34:91:61:9c:31:09:6d:6f:8c:f4:87:21:ea:
                    e7:71:80:63:1b:cf:57:e3:ca:07:0f:dd:dc:5d:09:
                    5b:65:b2:39:87:82:5e:7c:db:db:f4:98:a3:08:13:
                    04:0e:c0:a5:73:65:ec:e3:67:c2:56:ef:4e:9f:30:
                    cf:f4:0d:0d:10:ac:7e:f3:93:6c:c6:23:16:54:60:
                    22:63:7f:0a:69:21:94:ce:e4:d7:6f:4b:91:2a:5a:
                    f5:8e:1b:91:91:a0:f6:6b:af:c4:15:6a:51:6a:16:
                    db:cc:6b:9a:e1:2a:d9:93:28:a8:69:ba:16:c4:c2:
                    e1:31:1e:61:fc:ff:03:79:6b:5e:4e:4c:8e:d9:5b:
                    1a:de:6e:ef:4c:0f:78:44:a2:fd:ba:1a:08:21:3a:
                    73:bc:e4:27:84:12:54:bc:ec:5b:02:c5:ac:36:8a:
                    4b:c8:02:ca:ab:bf:bc:34:9d:c4:4e:8c:7b:ba:00:
                    13:5f:30:b5:b3:70:f9:f5:77:32:d9:a7:f0:2f:ca:
                    c6:6e:ab:d0:74:e8:8e:a2:83:a0:55:26:af:ce:6e:
                    46:55:b4:40:8f:c2:81:e6:5e:e1:f9:13:ba:a8:73:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:67:C6:6D:EA:4D:49:92:22:43:C1:2D:07:BA:30:AE:F3:DC:C8
            X509v3 Authority Key Identifier:
                keyid:0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e302e35322e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:b9:96:cd:ba:e1:de:bb:37:9f:1a:39:a5:00:f1:d5:80:
         38:8b:ed:9a:07:52:2a:c8:71:bb:a1:c2:18:c8:76:db:bc:e8:
         7e:52:6f:a3:7c:0b:45:b5:a9:b0:6c:4e:10:6b:1d:0f:74:23:
         85:ee:c7:c0:bb:e9:40:9c:fb:9b:98:d2:91:03:6c:be:2c:52:
         39:f5:69:3f:70:93:23:6b:f0:f9:1b:b3:a9:e7:72:48:98:a3:
         be:ab:42:78:23:de:44:93:3d:4a:e5:e6:5a:26:d2:3b:96:ee:
         6c:5c:11:14:fa:04:94:52:d2:f6:b6:b4:de:1d:d8:33:1a:37:
         5e:fd:bf:2c:72:cc:b0:b9:7a:65:84:5e:5a:b8:cd:c7:23:98:
         b8:3b:9f:64:97:36:e9:40:49:ca:34:d3:26:15:5d:59:c9:4e:
         b1:58:61:2e:50:21:dc:74:25:a4:8c:b4:ac:d1:96:b1:f3:6f:
         9c:d5:03:4b:6f:2e:f4:82:f5:b9:7d:cf:dc:87:b8:15:7a:7d:
         47:64:97:f3:a3:51:b5:c4:46:50:b8:44:ad:ff:a6:f8:1b:8c:
         fc:67:7d:5a:d3:cf:96:86:63:ef:87:dc:2f:97:ae:fc:6f:b8:
         43:d7:fb:d2:5f:f8:b9:e1:0d:8b:53:be:23:c7:f9:33:f4:29:
         c8:8f:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org