Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          P1NsWjchtvStmU0m6TMtcucOqzXD62gARyt38c5kcQ4=
Subject key identifier:   EE:92:4C:EE:3A:FF:00:D2:C2:94:78:BF:F8:9E:73:D5:5F:32:83:EA
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       73308A886FEEF4B911A77D3FDF27798D7D68F3B7
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:00 +0000
ROA not before:           Mon 09 Oct 2023 14:55:00 +0000
ROA not after:            Wed 09 Oct 2024 15:00:00 +0000
asID:                     262494
IP address blocks:        138.185.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:30:8a:88:6f:ee:f4:b9:11:a7:7d:3f:df:27:79:8d:7d:68:f3:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:00 2023 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100EDC81238C2BFCF03006BDD5E9E9617F06B013DBA03910308C18FF6038569F0AC24733FE2892E80A644EC580AA50CFE6B705DABEC821DA1DD74DDF310741F752457CA040C1D3F43A8B67BAE273566CF1A44B3D5F3500E17C922BC86A64FB0EA231FF46626C4A2B929215385E81178738506EB98525F9DA5B407CEE8D7B7BCBD8325F28024D4B4FE1888EB23EFA9517C89AB71F696AB0C76F0FEF1DAAAD4FC23777F515AF2BFE1F3920E049FBBE418F0AAFFD9B76BD9DCFEAA5895F1E0E33944EB0AAF6B1BED8DF9A93608878C63095C8D60069B8DEAC381FA6CC802C5DEB4EB3F44C08EF134FA7E0B6F86D0F8BBF9839CA9D5A0304971A94CF3AC7DC2A899DF7F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:12:38:c2:bf:cf:03:00:6b:dd:5e:9e:96:
                    17:f0:6b:01:3d:ba:03:91:03:08:c1:8f:f6:03:85:
                    69:f0:ac:24:73:3f:e2:89:2e:80:a6:44:ec:58:0a:
                    a5:0c:fe:6b:70:5d:ab:ec:82:1d:a1:dd:74:dd:f3:
                    10:74:1f:75:24:57:ca:04:0c:1d:3f:43:a8:b6:7b:
                    ae:27:35:66:cf:1a:44:b3:d5:f3:50:0e:17:c9:22:
                    bc:86:a6:4f:b0:ea:23:1f:f4:66:26:c4:a2:b9:29:
                    21:53:85:e8:11:78:73:85:06:eb:98:52:5f:9d:a5:
                    b4:07:ce:e8:d7:b7:bc:bd:83:25:f2:80:24:d4:b4:
                    fe:18:88:eb:23:ef:a9:51:7c:89:ab:71:f6:96:ab:
                    0c:76:f0:fe:f1:da:aa:d4:fc:23:77:7f:51:5a:f2:
                    bf:e1:f3:92:0e:04:9f:bb:e4:18:f0:aa:ff:d9:b7:
                    6b:d9:dc:fe:aa:58:95:f1:e0:e3:39:44:eb:0a:af:
                    6b:1b:ed:8d:f9:a9:36:08:87:8c:63:09:5c:8d:60:
                    06:9b:8d:ea:c3:81:fa:6c:c8:02:c5:de:b4:eb:3f:
                    44:c0:8e:f1:34:fa:7e:0b:6f:86:d0:f8:bb:f9:83:
                    9c:a9:d5:a0:30:49:71:a9:4c:f3:ac:7d:c2:a8:99:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:4C:EE:3A:FF:00:D2:C2:94:78:BF:F8:9E:73:D5:5F:32:83:EA
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:b7:86:17:96:3c:46:38:93:2c:f3:45:d4:f9:db:3d:d9:
         f2:17:4a:af:8e:70:b3:6c:fd:10:19:5f:b5:fc:29:25:70:f0:
         98:86:ff:61:68:06:40:a4:82:ab:c1:fc:fc:f0:20:e4:8f:1a:
         1d:43:fd:57:b7:02:ee:b7:7e:bd:e1:92:04:87:86:e7:c0:cd:
         c6:57:ed:05:5e:11:cf:5b:90:73:00:f2:09:f3:f9:e9:d0:09:
         0c:65:cb:f6:23:eb:a3:30:30:3b:6f:ee:9b:88:68:16:d4:4d:
         8b:4c:1c:d9:a7:95:b1:39:a7:30:1f:ca:db:db:19:e7:a6:2c:
         15:bc:b0:ba:84:49:5a:88:28:71:b2:36:d8:57:c6:d0:e9:d3:
         5d:f7:5e:5f:f6:0a:7a:d4:41:89:65:09:47:cb:d2:f5:62:53:
         e6:50:33:20:5b:2a:e0:17:65:19:ac:4b:a1:49:80:4e:32:a1:
         b9:23:cb:07:ad:4f:7b:27:4d:02:40:c4:7b:37:d9:06:c5:8c:
         02:a7:ea:e6:d1:e9:8f:2d:fc:d3:d2:d6:c8:35:ba:fb:23:21:
         1f:37:f5:06:0a:52:33:b0:79:a4:42:3e:b1:c5:ff:cd:31:74:
         72:95:59:12:a9:fc:71:bd:c8:23:9b:91:cd:76:67:bf:8a:c8:
         1c:9e:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org