Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3234203d3e20323634323831.roa
File:                     3133382e3132312e35322e302f32322d3234203d3e20323634323831.roa (raw, json)
Hash identifier:          wZeF94rakIQwJ7u5EtZYa0rHJBhNJeGiAga5ZNl03hY=
Subject key identifier:   C6:2F:93:9E:29:E6:F5:6C:EC:DE:4B:C2:D5:54:1F:C2:B7:F0:66:BB
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       717AB02C507E029DAEB873DCD9AC70222ABA0599
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3234203d3e20323634323831.roa
Signing time:             Fri 09 Dec 2022 23:36:33 +0000
ROA not before:           Fri 09 Dec 2022 23:31:33 +0000
ROA not after:            Fri 08 Dec 2023 23:36:33 +0000
asID:                     264281
IP address blocks:        138.121.52.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:7a:b0:2c:50:7e:02:9d:ae:b8:73:dc:d9:ac:70:22:2a:ba:05:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Dec  9 23:31:33 2022 GMT
            Not After : Dec  8 23:36:33 2023 GMT
        Subject: CN=C62F939E29E6F56CECDE4BC2D5541FC2B7F066BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:5d:68:39:4e:57:49:91:4f:79:c8:ba:d8:80:
                    ec:19:42:bc:18:86:74:3e:f5:63:8c:dc:3b:d4:a1:
                    f2:32:f2:35:ca:7f:b8:fb:90:61:7f:26:bc:09:89:
                    c5:05:b1:08:22:ad:60:f9:c2:3b:f2:17:14:2a:43:
                    f0:47:e3:2c:2b:77:6d:24:a9:9e:71:a0:88:11:22:
                    01:e1:ad:94:78:96:a7:07:60:b7:ce:d4:f8:ef:56:
                    b9:56:c8:ac:df:58:12:bd:84:d7:8d:70:bb:9e:a0:
                    fc:a4:c0:e3:ee:fe:24:e1:ee:9d:b4:ac:15:7f:11:
                    e8:ed:f4:27:8f:34:fe:49:78:25:57:f9:73:69:28:
                    01:d8:5f:0d:fa:c5:73:4a:8e:d0:7d:3c:3b:49:4f:
                    6c:11:39:5c:5f:76:ce:ce:f6:f6:a8:80:8b:94:bc:
                    bb:20:67:5c:01:ee:c9:5c:7a:29:4e:05:15:4c:ea:
                    2b:58:62:70:ed:8e:1e:d7:26:0d:c6:5f:c8:f3:47:
                    39:18:78:4a:4a:8d:60:bc:b6:ea:b2:5e:ad:58:47:
                    da:23:b6:d4:20:9e:91:c9:cd:21:2d:2d:3d:fc:0a:
                    0e:5b:52:a1:23:4f:ad:90:e6:a2:11:8a:11:79:77:
                    23:13:96:36:f0:c0:35:53:7a:79:b7:51:54:86:25:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:93:9E:29:E6:F5:6C:EC:DE:4B:C2:D5:54:1F:C2:B7:F0:66:BB
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32322d3234203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:67:84:bc:4a:70:04:5a:fd:6a:ba:63:b8:aa:12:8d:1f:db:
         19:9b:f8:7b:6c:7e:99:2c:98:4c:6f:ae:b3:60:ef:31:16:eb:
         69:9f:39:cb:f8:8c:03:6a:11:62:30:62:75:f6:1c:72:d6:da:
         5d:8e:47:11:48:6a:66:19:a6:ee:20:94:ba:eb:9d:4d:58:af:
         74:b0:a8:6b:2a:3b:2c:cf:ac:6f:9d:50:9e:86:ff:9e:39:f5:
         49:4f:46:6f:91:9e:f3:02:16:9e:61:c0:ba:4f:04:5c:bb:46:
         70:7f:6d:b8:2d:be:cf:26:9f:4f:82:f8:93:dc:b1:c0:67:ea:
         e5:16:5e:dc:45:3b:00:6c:f8:93:76:04:4f:9b:f5:62:20:74:
         2a:88:79:c6:31:90:1e:7c:71:87:e1:86:6f:92:eb:d1:dd:b0:
         62:3b:c4:b6:1e:16:c1:4e:0f:90:c1:a8:ee:7a:91:1e:e2:38:
         10:13:16:a0:88:ab:07:fe:85:70:86:92:7b:f5:f7:e7:b4:57:
         1e:e6:78:87:36:0d:fd:39:fc:92:62:45:7e:e1:e6:3d:b7:2c:
         1f:f3:36:be:28:a1:c4:b1:84:6b:c1:8d:0d:c0:f5:fc:f1:64:
         74:67:f4:43:70:ff:d2:e3:36:b1:cf:3f:db:a2:88:9e:72:39:
         5b:b0:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org