Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203437303635.roa
File:                     3133382e3138352e3233302e302f32332d3234203d3e203437303635.roa (raw, json)
Hash identifier:          1Oi8zgBGtHjYc1po4dwGg+ze+hgA0FurxGcB/zdZfYA=
Subject key identifier:   80:37:CA:70:D2:1C:F7:97:B7:59:D2:36:BA:3F:4F:CB:BB:D9:01:EA
Certificate issuer:       /CN=4EDD7C03982C823094F71366C91D29D176F1E0AF
Certificate serial:       3F92F0D3B5D604E4DF3E54397D2FAFFEB41D7EB7
Authority key identifier: 4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203437303635.roa
Signing time:             Tue 28 Feb 2023 17:00:43 +0000
ROA not before:           Tue 28 Feb 2023 16:55:43 +0000
ROA not after:            Tue 27 Feb 2024 17:00:43 +0000
asID:                     47065
IP address blocks:        138.185.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:f0:d3:b5:d6:04:e4:df:3e:54:39:7d:2f:af:fe:b4:1d:7e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EDD7C03982C823094F71366C91D29D176F1E0AF
        Validity
            Not Before: Feb 28 16:55:43 2023 GMT
            Not After : Feb 27 17:00:43 2024 GMT
        Subject: CN=8037CA70D21CF797B759D236BA3F4FCBBBD901EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:e5:d8:8f:3b:cc:d1:c2:57:19:2d:43:30:
                    30:b1:0a:11:05:b2:93:3e:af:bc:a4:25:04:e0:90:
                    f5:03:14:0b:af:49:f8:19:35:bd:68:51:5d:5d:f8:
                    1f:26:35:5f:d5:00:58:af:54:84:df:a1:3e:1d:bd:
                    32:12:44:37:b9:2d:6c:9f:0a:e4:e1:68:6d:81:64:
                    3f:40:7a:e6:73:96:96:17:5e:0c:e0:7c:6c:84:93:
                    af:f1:b4:f6:e4:91:45:33:3d:12:5f:88:0b:5f:09:
                    6a:b7:75:d2:6d:8e:66:3d:2f:7b:33:ba:82:fc:c4:
                    c9:3b:cc:09:ef:67:a0:64:fe:9b:27:16:1e:c7:ee:
                    c0:06:fd:26:8c:a8:b9:54:6d:b4:5c:14:6e:1f:0b:
                    13:6b:97:e7:52:23:a8:46:cd:70:37:18:72:f3:0e:
                    8e:d2:0f:69:8f:01:22:50:16:e1:28:9d:76:5a:5e:
                    1f:6b:f9:e2:ba:82:4f:fe:9a:60:b8:da:69:b9:a1:
                    5e:77:50:db:e7:e6:39:78:a7:a1:aa:21:9f:1b:d6:
                    04:20:18:0b:85:8e:f2:27:71:c3:97:a4:f8:82:f8:
                    ab:16:24:1e:b2:6f:6c:32:38:54:6c:23:cb:47:aa:
                    8d:1c:92:6d:15:9b:7e:c4:ff:d2:63:49:fa:89:1e:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:37:CA:70:D2:1C:F7:97:B7:59:D2:36:BA:3F:4F:CB:BB:D9:01:EA
            X509v3 Authority Key Identifier:
                keyid:4E:DD:7C:03:98:2C:82:30:94:F7:13:66:C9:1D:29:D1:76:F1:E0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4EDD7C03982C823094F71366C91D29D176F1E0AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203437303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:ce:a2:cb:68:5b:cd:58:ff:27:4e:bf:ad:5d:e5:35:10:
         11:41:ae:a8:e6:a4:c2:83:b3:f3:13:cc:d3:c8:19:fb:cd:b7:
         82:5d:65:31:3f:95:ea:7e:22:c9:3f:7c:f7:a7:1f:57:16:35:
         0d:96:14:c1:0f:08:0d:00:6c:de:42:15:ef:ff:86:46:04:3a:
         c4:bf:09:88:d8:98:d5:65:87:a1:9d:a7:d7:5c:3e:51:43:30:
         a2:1c:ed:30:a1:37:80:de:f7:ed:62:5d:b9:f1:bf:89:29:97:
         54:86:4c:37:f2:ac:7d:7a:6d:3f:6a:bf:ed:04:16:f6:a6:a4:
         c2:7a:3f:6d:20:77:68:0f:c1:7f:d7:90:d6:55:a2:e2:08:15:
         ed:01:11:07:0a:cb:6f:d5:c5:ba:4c:90:52:a5:f7:1a:24:57:
         6b:0e:66:25:40:b0:d4:b1:45:9e:3b:01:cf:96:67:6f:8c:a9:
         6c:93:df:d0:a2:b0:48:7f:41:a3:07:48:a9:57:e0:06:80:14:
         fd:75:a8:b8:fd:29:0c:9f:65:63:48:aa:49:a9:3d:d8:84:9e:
         b4:2e:99:91:8e:75:3d:75:2a:b1:fc:ed:62:76:79:f4:2a:5e:
         f4:f8:be:d2:a3:7d:24:42:95:cf:0d:25:14:ec:ba:7d:df:0c:
         1a:a2:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org