Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35342e302f32332d3233203d3e20323634323831.roa
File:                     3133382e3132312e35342e302f32332d3233203d3e20323634323831.roa (raw, json)
Hash identifier:          WQpyla12GZaS1g3iOx5ZvxSIRjVvcXsFY7CScVdz8Y4=
Subject key identifier:   FB:55:B0:3E:B8:84:B6:96:BC:BF:79:E3:C0:50:07:32:22:49:D6:4C
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       5E585400C99210E140E7011A052F9712AE993E0E
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35342e302f32332d3233203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:06:29 +0000
ROA not before:           Sat 08 Apr 2023 14:01:29 +0000
ROA not after:            Sat 06 Apr 2024 14:06:29 +0000
asID:                     264281
IP address blocks:        138.121.54.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:58:54:00:c9:92:10:e1:40:e7:01:1a:05:2f:97:12:ae:99:3e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 14:01:29 2023 GMT
            Not After : Apr  6 14:06:29 2024 GMT
        Subject: CN=FB55B03EB884B696BCBF79E3C05007322249D64C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d8:04:52:a2:6a:2c:3e:67:2f:f4:2f:22:0d:
                    49:1d:08:c8:38:de:17:ad:1c:f0:35:e6:be:5b:67:
                    7d:fc:1b:01:25:f2:04:c5:25:d1:10:b2:a1:31:33:
                    0f:f7:71:a6:4c:0a:f8:72:22:ce:c9:9e:5f:09:a0:
                    f2:69:0a:0f:f8:44:b2:23:ad:93:eb:a1:2f:95:ed:
                    f1:2a:5a:3e:a5:20:a6:7d:ca:da:c9:aa:33:eb:72:
                    9e:5b:18:23:e9:7e:26:e8:c4:6d:a7:b5:a7:16:4b:
                    96:6a:2f:87:a7:d3:99:7a:76:f0:62:73:cd:86:5d:
                    dd:0d:3c:cc:98:f4:d4:ba:87:88:98:0a:76:a2:12:
                    b1:ff:84:e4:a6:af:70:06:e4:31:fd:64:9d:33:57:
                    b9:54:2a:3e:5c:42:ac:11:eb:fa:9a:26:9b:1d:22:
                    6a:af:f7:89:95:4f:1e:c8:15:29:00:34:b7:1b:7c:
                    4e:90:b3:cf:ca:f2:d7:ec:fb:28:c0:a3:6e:fb:ac:
                    93:de:51:a7:78:76:df:56:37:b6:bd:05:fa:37:62:
                    f8:71:02:ff:34:f6:49:51:ad:f8:ee:99:70:d1:65:
                    9a:4b:f4:4c:e6:f1:ca:70:15:59:31:b7:c2:b7:01:
                    f7:f7:b2:5f:ad:c0:a9:88:1b:a9:2d:a9:ce:a3:05:
                    c0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:55:B0:3E:B8:84:B6:96:BC:BF:79:E3:C0:50:07:32:22:49:D6:4C
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/3133382e3132312e35342e302f32332d3233203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:1b:99:d0:b1:47:0b:1a:cf:c0:a8:99:59:05:8b:04:50:24:
         f5:d1:9d:23:2d:a1:ad:2f:fa:22:9d:ea:ec:92:d5:76:ed:14:
         a0:d7:67:2b:98:de:aa:33:91:c5:4d:d5:3f:36:18:d6:32:33:
         d2:e0:c6:72:36:9e:ae:a2:94:96:6a:18:a8:93:4b:82:51:0c:
         ad:c8:5e:ad:94:ff:ab:56:08:d9:5e:8d:90:55:36:51:81:e9:
         67:e8:07:fb:d0:17:f4:a3:1c:7c:da:67:ec:48:a3:21:40:d3:
         be:92:ab:ab:51:2c:7b:5d:d6:05:ea:ae:2f:eb:b6:a7:c8:31:
         ae:17:0a:37:c0:d4:42:db:bc:1e:fc:f7:d2:19:60:3d:28:2b:
         6d:33:db:b0:de:11:65:d8:88:91:df:e7:d0:4d:e2:f7:f1:3a:
         cc:f7:cc:2a:f3:8d:e2:5a:9b:5e:a6:e2:6f:d6:aa:89:55:69:
         ee:34:85:f9:cd:a7:80:3f:d2:1a:e0:93:1a:94:f9:92:01:02:
         f7:77:d1:5c:f8:c4:54:67:69:d7:74:8a:47:49:af:b3:a3:9b:
         16:70:1e:76:45:01:69:6d:30:51:6d:7b:48:e5:9b:c0:f9:31:
         ba:1e:e3:6b:30:8e:e9:62:c7:19:c4:47:ec:08:f1:d0:0d:5f:
         ea:bd:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org