Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32332d3233203d3e20323634323831.roa
File:                     3133382e3132312e35322e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          6I5vDzNChAK+PvXMcXIh23FYyNyLke9ua07jRk+b+SM=
Subject key identifier:   06:76:CC:88:C3:DC:81:96:3B:1E:96:48:3A:82:B3:AF:35:C6:57:25
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       71208BCEDAB22B22E390ED435A5EE9F1563A8702
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:06:24 +0000
ROA not before:           Sat 08 Apr 2023 14:01:24 +0000
ROA not after:            Sat 06 Apr 2024 14:06:24 +0000
asID:                     264281
IP address blocks:        138.121.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:20:8b:ce:da:b2:2b:22:e3:90:ed:43:5a:5e:e9:f1:56:3a:87:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:01:24 2023 GMT
            Not After : Apr  6 14:06:24 2024 GMT
        Subject: CN=0676CC88C3DC81963B1E96483A82B3AF35C65725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:1b:5e:72:5a:86:ab:91:e7:8c:ae:f8:33:
                    0f:64:bc:fd:45:75:dd:cd:c7:99:81:8a:f4:3a:67:
                    71:b0:24:4b:e3:71:c3:29:6d:fb:1e:c8:bf:7e:db:
                    52:ab:51:7d:7d:eb:a9:6b:36:57:be:e1:11:93:e3:
                    32:86:63:c5:d7:c5:71:86:80:af:9f:21:09:37:2f:
                    47:2c:49:a8:c3:e3:79:08:86:34:da:9e:0e:f7:54:
                    1e:18:a6:5d:5a:87:f4:e9:43:c7:9d:81:60:00:75:
                    5a:81:b0:33:9c:a1:91:98:d9:35:40:11:94:b0:c0:
                    43:8f:f6:44:bf:04:7b:b6:b7:52:58:b8:d7:8e:83:
                    36:e2:31:3a:f8:63:e8:df:72:a4:68:e2:cc:39:d3:
                    64:8f:54:61:12:10:09:d8:c6:f0:82:8b:f5:85:3c:
                    41:3f:f3:df:0f:9b:78:78:4e:d8:b1:2b:e9:bb:fe:
                    c1:bc:84:7c:c1:27:82:66:a3:d9:cc:5c:cf:8a:43:
                    a7:9d:58:fb:8b:84:18:be:6c:81:f2:ed:c9:64:3f:
                    80:ca:50:fb:7b:88:74:65:b5:81:81:f1:f7:20:00:
                    19:56:5b:fb:f9:b9:cb:73:b5:6b:16:63:04:76:a2:
                    39:06:3a:d4:11:e0:7b:f1:b7:88:f0:4c:1c:c0:06:
                    11:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:76:CC:88:C3:DC:81:96:3B:1E:96:48:3A:82:B3:AF:35:C6:57:25
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35322e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:48:5b:6e:b2:f4:6a:9b:e3:c5:95:9c:39:b7:cf:14:40:44:
         07:b4:83:e0:5d:7a:16:9c:30:63:93:86:93:f3:59:b1:58:e1:
         f9:9e:7b:f8:a4:78:11:29:09:de:02:98:56:82:e7:9a:36:e7:
         d3:27:80:c3:e4:b0:a0:16:2b:15:b3:4a:f5:61:65:d8:32:f9:
         d6:3d:a1:4c:a2:c4:76:7e:02:80:f3:fb:16:39:b7:a1:b1:f0:
         c4:b3:8c:80:b2:16:77:9c:8c:bd:d7:c5:43:be:13:27:b4:6d:
         b8:1a:80:e8:e1:13:09:5b:7c:34:2f:50:14:ca:c8:28:64:71:
         0b:f7:e7:7d:64:56:2f:06:29:6d:08:f1:95:32:51:f4:26:f8:
         3c:16:92:24:b6:b3:a6:8a:45:9b:ef:38:62:a3:63:9e:85:41:
         04:99:37:fa:a5:23:98:51:c3:fc:98:36:a5:72:ae:01:b4:c3:
         c7:2d:8c:35:29:d1:72:32:1c:f9:b0:2a:d6:a3:1e:c3:0b:72:
         89:b4:0f:6d:59:5d:ae:cc:4f:22:bc:14:a9:79:23:52:43:76:
         12:49:90:29:5c:93:14:40:d2:e4:3b:db:e7:18:24:dd:97:53:
         37:58:53:a5:c5:a2:aa:8f:74:03:5a:27:e8:56:c9:e3:96:c0:
         a2:60:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org