Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa
File:                     3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa (raw, json)
Hash identifier:          gqo4qfc79H8PpzqK+hO+S/c6mWi85MBTcy4OUM1+auU=
Subject key identifier:   E4:E1:6B:CE:34:AB:68:16:7C:A3:B7:AE:7A:D7:8D:3B:9D:40:CC:2A
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       1E47B2C5C156DEBE8FFB2621D2CB26502E26758F
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        138.185.188.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:b2:c5:c1:56:de:be:8f:fb:26:21:d2:cb:26:50:2e:26:75:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:80:b7:b8:ba:2a:d7:d6:a1:f9:1e:80:b1:
                    da:79:d4:d0:64:33:fe:2d:d6:74:ca:80:ff:83:bd:
                    19:c4:7f:a2:4d:86:7e:18:22:56:57:9e:a9:bf:28:
                    bb:d8:49:f4:d6:89:56:6f:04:d5:a0:c0:ce:c2:1c:
                    8d:c8:85:10:41:c0:4a:e3:a3:5a:9d:6a:09:2a:53:
                    71:f9:a3:3b:10:00:d4:b7:38:62:dd:5e:92:38:44:
                    ee:80:21:c0:a2:a6:29:d2:54:0c:3a:06:e0:40:e9:
                    44:b6:12:c7:d3:2e:11:5e:a6:12:7f:e7:2f:b7:c7:
                    2e:99:2d:5f:0e:4d:e5:c8:e4:57:62:4d:d1:79:2f:
                    79:04:46:60:0f:8a:2e:57:4b:19:8b:5a:8c:c8:17:
                    99:bc:1e:2d:e6:e2:a2:72:88:8c:d3:d9:43:51:17:
                    f8:ba:94:b8:ae:4a:8b:28:fd:ba:c5:37:29:a8:63:
                    91:1a:02:2d:c9:5d:9c:59:fb:6b:cb:e5:2c:d5:b9:
                    ac:7a:f9:ca:82:cd:6c:14:a8:34:35:c6:9a:55:a6:
                    49:4f:46:f9:76:98:bb:e2:05:d0:90:53:d3:72:be:
                    a1:30:38:d3:8a:7c:57:58:4e:27:99:04:1e:ca:d8:
                    b8:33:b8:5c:4d:a9:1d:12:9f:b4:a2:43:fc:6f:86:
                    93:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E1:6B:CE:34:AB:68:16:7C:A3:B7:AE:7A:D7:8D:3B:9D:40:CC:2A
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138382e302f32322d3232203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:ac:e4:0f:24:6d:bd:b6:ad:1b:f3:41:1e:74:43:55:d6:9a:
         ac:1c:ab:c2:69:b6:35:16:48:c2:fd:e7:43:94:1c:e8:d3:dd:
         64:f2:c8:1a:8d:3b:5f:72:1c:b3:ae:de:2b:1b:89:66:ef:49:
         e3:c5:bf:16:b5:7f:f5:6b:04:96:63:35:be:49:22:cd:32:cd:
         89:0d:5a:83:65:67:ef:55:8c:18:72:e7:9e:34:5f:1f:b9:77:
         f7:ab:66:d2:28:52:b4:6d:11:cd:2e:21:4b:6c:f8:f6:c7:44:
         1d:c4:70:5f:bf:61:02:e8:19:68:9f:2a:6b:7a:0e:dd:65:9e:
         bb:78:fc:9a:25:9d:7b:7b:e7:01:79:ec:02:8c:a7:58:ce:47:
         e5:fa:98:25:ea:d1:d8:de:a7:9a:21:39:1b:fd:e0:ab:b6:a9:
         08:48:70:28:c8:40:a4:8b:92:fa:f2:fe:8c:50:f4:e9:6b:db:
         ee:6f:25:7a:99:e3:ef:a5:7b:11:76:76:c2:ba:08:28:09:f3:
         f8:b9:f3:f9:7d:9a:59:7c:f3:18:0b:a5:f6:78:03:3a:6c:e5:
         51:46:9a:97:da:3e:b9:0e:b9:7b:49:2d:c0:58:be:a9:08:04:
         b4:82:b5:40:32:b9:e5:a0:0d:d5:16:77:f7:02:b7:6d:41:da:
         46:a4:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org