Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
File:                     3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa (raw, json)
Hash identifier:          NEocU/pb+1Mh0Cp6rwe5Oj2Angka20vWbq3ht7Ppab8=
Subject key identifier:   CF:93:B8:95:C0:2A:F4:19:9C:63:ED:34:AB:0A:A5:AA:C3:F3:C0:37
Certificate issuer:       /CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
Certificate serial:       684BB0B7E4B8DC187FB682B7DB5682FFD325377E
Authority key identifier: 15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa
Signing time:             Thu 04 Apr 2024 15:25:19 +0000
ROA not before:           Thu 04 Apr 2024 15:20:19 +0000
ROA not after:            Thu 03 Apr 2025 15:25:19 +0000
asID:                     264281
IP address blocks:        138.121.52.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:4b:b0:b7:e4:b8:dc:18:7f:b6:82:b7:db:56:82:ff:d3:25:37:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157D2CD3D2F5A4D86D84698569F7F82D093EDE54
        Validity
            Not Before: Apr  4 15:20:19 2024 GMT
            Not After : Apr  3 15:25:19 2025 GMT
        Subject: CN=CF93B895C02AF4199C63ED34AB0AA5AAC3F3C037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:49:85:a9:7e:ed:27:2d:19:38:a4:4c:a2:0f:
                    6e:26:c1:88:d7:c6:bc:dd:c0:61:71:8d:91:16:6e:
                    ae:48:f6:1a:26:14:53:0d:eb:9b:66:2f:52:a3:13:
                    20:fe:ce:f1:22:66:64:4e:0d:d2:7e:b2:41:5f:5b:
                    a5:0a:93:2a:e7:ee:25:56:78:cf:6c:92:8a:3f:eb:
                    cc:59:c1:3f:c5:d5:c1:4c:2d:1f:94:d5:d3:7b:78:
                    31:a7:27:6b:d2:7f:a5:1c:ee:34:68:19:3f:e0:63:
                    60:67:cd:88:06:bf:71:44:84:a4:73:5d:d7:5b:16:
                    8f:9a:38:17:66:c3:92:e8:9d:06:2a:40:45:fc:47:
                    ea:ea:56:bc:57:53:ec:68:19:dc:83:82:15:e5:76:
                    20:40:47:d1:d2:90:97:2f:8f:38:a2:b8:d5:8a:bd:
                    8a:76:08:d0:3b:52:c5:34:4f:8d:f5:2c:cf:98:01:
                    13:fb:cb:e9:7e:77:04:4e:f2:e5:c7:31:1a:b5:dd:
                    21:a3:b7:37:4a:ef:71:33:6a:3a:67:a2:5b:45:42:
                    bd:45:8e:af:7e:3c:aa:08:fd:6b:68:5b:3d:0f:df:
                    d9:9a:a9:b3:73:38:7a:79:11:ef:f1:78:3a:cc:c7:
                    e7:ed:ec:d9:00:b2:21:39:74:90:b8:f0:8b:58:e5:
                    99:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:93:B8:95:C0:2A:F4:19:9C:63:ED:34:AB:0A:A5:AA:C3:F3:C0:37
            X509v3 Authority Key Identifier:
                keyid:15:7D:2C:D3:D2:F5:A4:D8:6D:84:69:85:69:F7:F8:2D:09:3E:DE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157D2CD3D2F5A4D86D84698569F7F82D093EDE54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/1/3133382e3132312e35322e302f32322d3332203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:0a:46:2f:8a:ec:ed:a1:94:c8:4d:7b:7f:15:17:b0:42:e8:
         65:52:b3:06:98:a7:f4:18:74:8d:ae:fa:e5:bd:1f:6d:59:88:
         ee:5d:65:12:9b:7e:4c:3b:fd:11:f0:3a:4e:6b:7d:f0:9f:89:
         fc:d5:6b:35:d0:0a:eb:b3:50:a4:13:a8:6e:d0:01:69:d3:5d:
         e0:21:cd:f2:84:a3:a5:21:fc:b9:01:ce:3d:b3:e5:61:1e:39:
         10:fc:a2:79:fd:08:9d:d5:ae:ec:85:0e:6b:cb:c7:c3:f0:3f:
         3c:ac:0b:55:2a:61:6f:88:22:22:70:e2:e0:40:67:79:2a:23:
         64:75:5a:7f:88:cc:81:77:ac:07:4d:3c:cc:98:ac:d7:89:a9:
         39:3c:e3:4e:ac:4f:1f:23:c8:b7:ce:e6:29:80:1b:3c:9e:fa:
         7b:16:56:f4:96:87:b0:a6:93:6e:92:2f:34:f4:00:88:40:0f:
         22:a2:dc:4b:a4:67:d2:a7:87:a4:64:92:7d:a9:a2:8a:19:36:
         51:30:3e:70:43:17:a0:87:b9:26:3e:7a:ef:e3:78:46:a0:ef:
         60:e9:6a:ce:07:cf:84:fe:b7:69:0d:be:ec:ab:66:0f:5c:fd:
         47:fc:cb:7b:ab:c7:50:7e:7a:44:62:bf:c3:0f:d0:4a:9d:b4:
         73:c8:f8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org