Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa
File:                     3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          RXqvFxYTjLZgYRNn2CHX+Ef4ahGMrAlIUeRFuYbEn4o=
Subject key identifier:   18:CC:B2:39:E3:D9:B7:F0:B5:58:BB:76:72:53:4D:26:16:17:D1:C9
Certificate issuer:       /CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
Certificate serial:       490A0115176B85D6169C6B8E5E667DC6BD217CE5
Authority key identifier: 0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa
Signing time:             Fri 14 Apr 2023 22:00:00 +0000
ROA not before:           Fri 14 Apr 2023 21:55:00 +0000
ROA not after:            Fri 12 Apr 2024 22:00:00 +0000
asID:                     264525
IP address blocks:        138.122.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0a:01:15:17:6b:85:d6:16:9c:6b:8e:5e:66:7d:c6:bd:21:7c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Validity
            Not Before: Apr 14 21:55:00 2023 GMT
            Not After : Apr 12 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:e1:23:09:ad:6f:b6:79:65:26:a8:f7:eb:
                    1f:8b:01:bb:c8:12:12:25:8b:65:16:c2:88:08:df:
                    a4:e1:79:c6:69:ea:d8:df:00:b2:77:b4:96:f3:bf:
                    7e:11:e6:1d:ea:11:65:dd:f6:30:90:67:be:ad:65:
                    9a:a1:15:ae:e8:39:c2:70:94:b4:c3:b2:20:85:4a:
                    05:9a:b8:8d:92:5b:f9:09:34:cd:ce:a0:d1:b0:fd:
                    3c:02:fd:65:64:4f:eb:b5:b1:46:49:f1:aa:85:a9:
                    2b:66:47:55:f5:21:c5:ef:8d:21:ab:2f:99:83:bb:
                    ae:08:b2:5e:8a:84:12:48:bc:87:31:27:8a:10:21:
                    1f:b9:2c:f9:63:39:74:c0:52:ca:73:cc:f0:18:dc:
                    e3:16:72:5a:4c:63:71:43:87:86:80:7d:29:29:3b:
                    ec:09:d8:bb:7b:d9:3c:38:ce:47:84:8d:43:9d:46:
                    2e:08:9d:20:ec:24:03:3f:62:e4:b1:f0:c8:74:36:
                    b4:c6:21:76:35:0d:88:26:b7:95:37:4b:c4:54:31:
                    9c:89:f6:47:2b:4e:a6:3f:fa:0e:bc:0d:c5:5e:ab:
                    7e:50:73:73:17:a6:c0:77:d5:5a:37:9c:b7:82:3f:
                    da:bd:3b:1e:06:b9:17:38:f5:61:c1:a2:64:2f:e3:
                    8a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CC:B2:39:E3:D9:B7:F0:B5:58:BB:76:72:53:4D:26:16:17:D1:C9
            X509v3 Authority Key Identifier:
                keyid:0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/3133382e3132322e3234302e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:f0:ba:fd:4d:e5:fb:f1:0d:d2:52:14:83:d8:c8:ad:f3:77:
         22:fb:ed:d9:8a:27:ad:7f:5a:f5:f9:b5:50:0c:23:25:df:9a:
         78:49:3c:53:97:1d:0f:0e:76:5f:78:96:98:8d:80:33:c3:af:
         20:c7:1f:31:e5:74:cd:ed:1c:2c:5f:67:9d:e4:06:f1:be:14:
         74:26:59:1e:78:68:1c:32:db:62:20:f0:07:fa:29:cb:db:b1:
         6f:f3:53:ef:84:35:36:c5:91:dc:a1:35:ff:34:30:84:33:b5:
         12:90:13:ef:d6:0d:94:69:9f:16:b4:de:c2:a3:89:f4:02:4a:
         53:45:33:ab:12:94:c5:4f:40:89:80:36:3b:0c:b0:5f:0a:8f:
         dc:7e:56:2c:21:34:2b:68:87:f3:7f:d2:f2:39:c6:7a:14:5c:
         b6:de:33:b6:ad:d4:a1:2f:be:d1:58:da:e4:62:75:25:5c:bd:
         cc:76:53:b8:bb:21:0d:44:63:8f:fd:82:e9:61:0e:cc:44:18:
         ac:d4:55:8d:85:64:d1:cd:a9:e2:ff:1e:d4:d9:58:55:6d:cf:
         8c:cf:de:8f:ba:5a:6b:f8:1a:62:3b:90:53:2e:ca:0c:71:09:
         41:ed:f4:2e:ca:05:07:4a:55:35:65:a9:3a:d7:c1:61:a7:e1:
         41:09:bd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org