Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          J0U0cW5QrUBBQZVQ2ZvYk6ZyQwm1lCbao/8OoTwbZO4=
Subject key identifier:   4D:7B:87:4B:19:47:8D:6F:32:C8:C8:72:E4:E8:05:FB:25:1F:73:62
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       691194A97F6DB73FB39447AA236BE569C07F0C11
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa
Signing time:             Mon 09 Oct 2023 15:00:01 +0000
ROA not before:           Mon 09 Oct 2023 14:55:01 +0000
ROA not after:            Wed 09 Oct 2024 15:00:01 +0000
asID:                     262494
IP address blocks:        138.185.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:11:94:a9:7f:6d:b7:3f:b3:94:47:aa:23:6b:e5:69:c0:7f:0c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Oct  9 14:55:01 2023 GMT
            Not After : Oct  9 15:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:7b:3d:4f:d2:3b:2d:d3:cd:b8:58:e6:69:
                    95:39:f1:74:e4:1b:41:22:bb:79:de:bb:57:c8:6a:
                    bf:13:ec:f2:d0:3c:58:14:c9:97:76:3c:a4:00:14:
                    c5:59:1e:da:bb:8b:49:94:4c:bb:af:d7:87:a5:3c:
                    db:a0:a0:53:00:dd:5e:0b:e1:13:53:12:31:bc:20:
                    96:a6:86:3e:30:c0:c0:ef:af:8c:8b:ec:e2:49:da:
                    b8:af:8a:f4:a5:22:39:2c:c9:fe:0d:9e:a3:31:14:
                    17:38:5e:01:6a:5c:57:cd:54:5a:e7:da:85:43:ac:
                    72:2b:4a:9f:ef:c7:24:48:8f:db:3a:96:dd:19:ac:
                    68:ba:ee:12:73:92:ae:7a:ef:90:1b:a9:e8:b9:54:
                    10:9c:f0:93:fe:ef:f2:23:54:7e:f3:14:2c:48:2f:
                    37:7c:86:7b:aa:7c:40:e1:de:ce:99:59:d8:3e:08:
                    2a:38:ce:78:79:8d:75:95:fa:e9:1f:6d:b1:a0:f3:
                    b0:1f:88:e5:66:d5:95:d2:ed:a5:a7:6d:c4:ed:88:
                    2f:c5:dd:16:c2:c9:bc:98:23:cf:e6:f3:67:eb:b1:
                    ec:8b:a5:d5:02:59:34:d9:eb:32:9b:a5:41:26:56:
                    f3:aa:61:8c:d2:c6:ca:45:46:f3:e0:ee:5a:c4:da:
                    b5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7B:87:4B:19:47:8D:6F:32:C8:C8:72:E4:E8:05:FB:25:1F:73:62
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3139302e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:d6:e4:5b:e2:c5:4b:d0:93:02:58:aa:67:fc:ed:65:3d:f1:
         39:f0:48:f4:e5:83:17:dc:c6:9f:d9:de:df:1f:53:19:d1:39:
         2a:3c:53:18:fe:f1:c9:5c:a5:cd:d7:97:56:f1:a8:bd:5a:83:
         b2:2d:c6:22:e6:fa:7a:ba:7d:a8:92:6b:42:50:ab:86:23:e5:
         0b:e1:99:36:4a:07:82:a4:c5:23:b0:c8:f3:b5:97:c3:2c:1a:
         e7:84:ec:a3:23:85:43:71:d1:73:d1:69:5b:ac:f5:64:e8:c2:
         27:a3:b7:b1:62:96:25:1f:c0:f8:8b:52:3c:58:3c:06:ea:89:
         d7:7b:b0:a9:5a:d5:72:53:31:fa:ef:4a:22:c0:62:4d:e8:df:
         a7:6b:2f:4f:d1:a4:2b:e4:08:82:b0:be:cb:20:8c:1e:cf:d5:
         e0:29:57:0e:94:02:f0:7b:53:8f:77:6a:40:2a:4b:15:f6:d2:
         b7:4b:db:62:25:8b:8a:f6:73:a3:44:ca:d4:9d:6a:cd:cd:b4:
         fc:f0:4c:7b:3c:8f:3d:06:29:ad:cb:38:42:98:2f:7e:71:a0:
         c3:e7:03:11:4f:45:18:44:f1:7d:9e:66:d6:80:a9:31:f5:a2:
         e7:86:67:48:c7:29:d0:01:55:71:fb:47:4f:cb:75:af:aa:b7:
         43:98:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org