Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          H0/m+3XcTZHufeQ/v9dAjlqGTCpsicnP0J4Vxc+/fYE=
Subject key identifier:   8A:40:C1:DC:AF:43:41:47:A6:3A:A3:FF:81:72:18:43:70:99:18:73
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       19982ED6AAA5BDEF0184DFE4A73846DEED83E518
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:17 +0000
ROA not before:           Tue 16 May 2023 14:19:17 +0000
ROA not after:            Tue 14 May 2024 14:24:17 +0000
asID:                     52653
IP address blocks:        138.122.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:98:2e:d6:aa:a5:bd:ef:01:84:df:e4:a7:38:46:de:ed:83:e5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:17 2023 GMT
            Not After : May 14 14:24:17 2024 GMT
        Subject: CN=8A40C1DCAF434147A63AA3FF8172184370991873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:3e:b9:20:62:6c:52:fe:be:b1:34:df:46:
                    eb:53:62:69:30:5b:32:29:7a:e7:c2:af:a4:d5:1e:
                    40:84:ca:9b:d8:f9:5d:07:41:17:b3:2f:0c:83:80:
                    4f:9c:c3:06:3c:b4:86:0d:91:ff:a1:24:1c:c0:a6:
                    5b:e1:60:34:73:ef:18:03:ba:64:db:da:64:e9:b4:
                    19:6e:cd:55:e7:08:95:48:5a:f2:6e:0c:be:0e:cd:
                    60:c6:09:fa:43:90:56:f0:8b:d9:fd:40:a8:27:03:
                    bd:af:7a:c1:55:17:4b:b1:d0:27:ab:8b:a9:16:49:
                    a4:73:48:e5:cc:57:82:72:f2:ff:6c:39:8f:f1:5d:
                    ac:b8:d3:3a:9e:7e:f0:3c:c6:f5:31:76:5b:87:ae:
                    ac:22:33:93:ff:8d:cd:35:20:0a:38:46:97:14:33:
                    e0:3c:37:6f:c9:6b:0c:9c:88:a9:5c:67:6b:4e:04:
                    b4:06:3e:8b:c8:9a:31:a9:dc:0f:c0:21:a1:e4:ba:
                    48:f9:bf:3c:2b:15:51:52:23:0a:c8:ea:57:71:4c:
                    ab:f8:f0:66:44:6b:cc:18:a4:7d:ab:bc:d0:df:a4:
                    20:cf:77:11:fc:77:3a:6a:9f:42:bb:74:68:05:72:
                    ed:be:38:a0:c7:c2:bf:08:33:81:2b:ed:99:29:39:
                    3c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:40:C1:DC:AF:43:41:47:A6:3A:A3:FF:81:72:18:43:70:99:18:73
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138312e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:04:30:03:0a:0d:4d:56:21:d7:2a:4f:b5:d1:a5:c3:e3:c5:
         3a:d1:cb:36:ea:e3:19:e9:33:7e:d7:a7:d1:59:99:52:7c:33:
         ee:9f:e3:bb:fd:d7:d2:59:b0:96:9d:71:94:f6:62:21:ac:ee:
         3c:33:73:bf:1e:92:a6:9d:76:35:8a:ba:48:0e:65:68:ce:b7:
         15:47:9c:2c:84:1c:a9:80:e0:f6:f3:c8:35:92:09:a9:30:d7:
         59:26:6c:3d:e0:6f:03:80:bb:c7:5b:d8:1d:d5:77:fc:42:9e:
         9f:9d:b4:9c:f1:8a:79:5f:c4:ab:e1:f6:5a:34:9b:0f:e4:86:
         63:5b:ce:7c:3c:04:9c:04:84:e2:d2:61:a1:f8:91:0b:6b:f9:
         eb:87:7b:8a:25:a3:1c:f0:98:2c:90:7c:bf:40:96:71:ca:70:
         f6:d2:4a:3f:9a:0f:35:98:73:a6:38:b3:fd:88:e4:87:80:4e:
         20:03:34:73:8e:07:58:e0:c4:78:b5:9a:36:14:cf:4f:33:3e:
         39:fc:f9:8d:d4:64:57:13:72:db:b1:46:5e:2a:fd:9b:f8:5b:
         c4:10:8e:96:f0:1f:d9:ae:57:6a:2c:78:d3:30:99:da:c7:e1:
         c7:34:83:85:5d:ce:df:71:61:49:ac:fd:c9:b9:ff:58:6f:82:
         2a:0c:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org