Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
File:                     3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa (raw, json)
Hash identifier:          YgRnYNOg4E+kkVEZfsNexk+hKRMAQAd5aND19k6seZQ=
Subject key identifier:   F0:B9:9D:7B:02:A6:6A:12:01:CB:42:F3:A0:DE:1F:E0:09:87:34:54
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       1C4215736A2A1CFD07880714C8B55DA41B9C1811
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:24 +0000
ROA not before:           Tue 16 May 2023 14:19:24 +0000
ROA not after:            Tue 14 May 2024 14:24:24 +0000
asID:                     52653
IP address blocks:        138.122.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:42:15:73:6a:2a:1c:fd:07:88:07:14:c8:b5:5d:a4:1b:9c:18:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:24 2023 GMT
            Not After : May 14 14:24:24 2024 GMT
        Subject: CN=F0B99D7B02A66A1201CB42F3A0DE1FE009873454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a9:e3:df:3f:44:91:04:fc:85:ff:0c:ac:ed:
                    39:3b:4d:ae:73:94:9c:2c:03:59:eb:91:90:1d:2d:
                    7a:de:a1:c7:ad:e9:76:8f:02:02:84:af:1d:e7:10:
                    9e:f3:a5:13:fe:27:3d:ad:fe:51:17:92:97:a8:81:
                    0e:ad:25:36:c0:a8:98:3c:86:d4:73:c0:22:d2:d3:
                    3b:63:31:bd:c5:8a:76:da:34:90:ca:bb:f4:74:a0:
                    e5:21:12:1e:e5:dc:43:fe:85:2e:25:be:68:ae:41:
                    0f:39:5f:05:df:2b:ac:52:51:32:6e:ef:ef:50:d9:
                    72:06:7a:38:c5:1f:a5:0e:e1:18:fe:00:ae:67:da:
                    72:de:eb:a3:33:bd:97:f1:ca:cc:51:47:07:c6:38:
                    7e:a9:37:47:19:c4:90:10:97:43:3e:fe:24:41:dc:
                    fe:b0:bc:06:d2:ba:20:49:35:f6:7d:58:a8:c5:1e:
                    70:6c:c3:8c:69:a0:9f:e8:b8:63:d1:b5:bf:0d:ac:
                    a9:34:50:9f:99:f4:f3:86:d0:31:47:58:0f:25:94:
                    89:90:5e:a5:7b:62:42:cb:fc:2d:33:a2:64:ca:d0:
                    e6:44:40:94:bc:7d:f0:bc:c4:87:c6:34:18:f2:f5:
                    7c:49:38:97:77:db:eb:88:dc:3f:3e:36:9f:e1:b6:
                    25:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:B9:9D:7B:02:A6:6A:12:01:CB:42:F3:A0:DE:1F:E0:09:87:34:54
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138332e302f32342d3234203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:e9:89:2d:48:5f:46:9e:d0:79:f9:be:3c:97:e1:6b:83:
         86:79:f9:47:ec:c7:38:2f:4a:37:8f:4d:ae:e8:1c:5a:f7:e7:
         93:13:f8:b3:96:ea:da:34:85:e6:3c:ca:e0:dc:c0:f2:b0:09:
         db:38:0b:5e:35:e0:28:58:4c:fe:c3:60:a3:e2:b9:cc:fd:24:
         71:78:f5:a4:75:0b:3b:6b:35:40:85:48:9f:ea:eb:2d:67:55:
         b6:68:e8:a5:db:e9:e3:df:11:64:57:6e:aa:1f:b3:1a:06:18:
         02:2a:46:7c:76:29:12:52:f3:4e:ce:12:1d:d4:2e:af:9f:5e:
         f6:fd:e4:59:71:04:ab:5d:23:d6:a7:74:d0:71:f2:5b:dd:72:
         69:da:0b:72:5c:6c:51:d7:f7:f1:e6:02:80:4c:45:52:c8:65:
         4c:23:26:3b:06:d8:c7:14:d2:e6:a6:80:2e:01:da:f5:e9:08:
         1b:1f:2c:a5:f5:69:fb:4a:c9:32:54:38:bc:be:20:55:c6:19:
         e5:e8:3d:a2:18:1e:04:75:51:dd:73:0b:40:bd:a0:fd:91:81:
         dd:00:36:60:a6:26:e6:f7:b3:4d:cd:d8:fa:7c:af:43:44:7f:
         08:47:f5:7b:0e:78:da:53:ed:6a:2b:a3:52:7d:8d:2b:42:ef:
         2b:d0:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org