Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa
File:                     3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa (raw, json)
Hash identifier:          fN3W0704BjrZhDPZ7RWRyxGret6GFDWXYRzS+XBVF4c=
Subject key identifier:   41:9B:AC:39:BA:35:4C:F5:5D:C1:29:36:C2:2D:3B:7F:BE:66:52:61
Certificate issuer:       /CN=7F039E23B966EF2F75A4A331F68A67A0FC530F10
Certificate serial:       7363A38AF91C8DEB6EF1DA801B901403F677F3B6
Authority key identifier: 7F:03:9E:23:B9:66:EF:2F:75:A4:A3:31:F6:8A:67:A0:FC:53:0F:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa
Signing time:             Sun 24 Mar 2024 02:08:27 +0000
ROA not before:           Sun 24 Mar 2024 02:03:27 +0000
ROA not after:            Sun 23 Mar 2025 02:08:27 +0000
asID:                     61574
IP address blocks:        138.185.230.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:63:a3:8a:f9:1c:8d:eb:6e:f1:da:80:1b:90:14:03:f6:77:f3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F039E23B966EF2F75A4A331F68A67A0FC530F10
        Validity
            Not Before: Mar 24 02:03:27 2024 GMT
            Not After : Mar 23 02:08:27 2025 GMT
        Subject: CN=419BAC39BA354CF55DC12936C22D3B7FBE665261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:2e:af:8b:45:2f:48:11:3d:5e:76:ec:de:
                    8f:c7:e3:08:d5:84:cd:cc:20:10:16:83:2c:a7:7a:
                    aa:39:72:40:bc:d7:70:1a:f5:a7:43:3a:ce:7f:b9:
                    a0:1a:c6:cd:be:5f:cc:2e:ee:fa:4e:aa:33:0b:e4:
                    92:e4:b5:aa:bf:9d:cd:66:fb:8a:72:d2:cb:02:af:
                    3a:85:5d:d6:87:04:ad:ad:a8:49:a2:27:ba:d1:c2:
                    64:9a:e4:83:61:c2:6f:f8:12:c2:aa:59:a8:e3:b5:
                    5e:49:7d:cc:df:e1:48:12:7a:20:47:b8:08:70:35:
                    ab:d8:f0:77:98:bb:2f:3f:d6:ae:fc:b1:55:a7:e8:
                    fe:36:50:95:4e:78:71:e3:4b:49:6f:96:fd:b2:71:
                    32:c1:35:34:0a:51:04:36:4f:ed:18:bc:35:7e:7a:
                    19:ff:16:a1:65:9a:74:cd:9d:b2:08:5c:2e:6d:9e:
                    43:40:36:a0:69:1e:fb:99:46:97:c3:a3:8f:1a:b6:
                    da:be:19:e9:16:79:99:39:17:2c:2a:72:16:83:5d:
                    c9:39:1e:f5:42:05:4c:ec:bf:d0:b9:f4:0f:12:8e:
                    ce:b9:a5:cc:e2:ae:a2:e2:5c:13:34:ab:0f:0b:96:
                    0f:0f:a8:83:c9:c5:2d:42:f7:70:d6:6d:74:52:b5:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9B:AC:39:BA:35:4C:F5:5D:C1:29:36:C2:2D:3B:7F:BE:66:52:61
            X509v3 Authority Key Identifier:
                keyid:7F:03:9E:23:B9:66:EF:2F:75:A4:A3:31:F6:8A:67:A0:FC:53:0F:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F039E23B966EF2F75A4A331F68A67A0FC530F10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/0/3133382e3138352e3233302e302f32332d3234203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:29:3f:e4:1e:1e:ec:ef:ab:c5:73:a4:27:b5:fa:14:f6:5b:
         c0:ea:64:bb:ff:c4:5c:cb:57:0e:a5:51:61:e2:5c:50:bd:8f:
         f6:bd:bb:5a:b4:90:7c:9c:13:58:56:81:36:f7:c4:91:db:15:
         5f:cc:8c:58:b5:de:c9:35:27:3a:0e:23:8c:5b:81:cf:68:44:
         9d:17:de:0f:8e:65:d3:05:89:40:89:54:5f:46:0d:c5:d5:ca:
         98:db:cd:f8:41:a5:86:4d:48:9f:5e:f7:fb:a4:f1:a0:89:e8:
         71:84:9b:85:33:8d:f6:83:ad:cb:48:4c:d2:33:3e:aa:d7:fd:
         98:9c:22:c6:f3:37:10:84:85:d3:ef:b1:b5:81:1b:2b:95:d9:
         4c:ff:cf:8a:70:c0:07:37:f1:ce:30:f9:5f:de:72:32:67:26:
         02:d1:1c:2e:52:76:f3:55:ac:2a:fd:46:b0:49:76:5a:2e:82:
         8a:89:ca:5b:02:2f:3e:86:8f:c7:4b:b8:23:b1:8a:29:4d:26:
         2a:67:e1:58:9d:2a:98:fb:b9:2a:90:28:e9:53:4c:6a:46:10:
         34:d9:57:8e:c8:e1:ca:d3:56:09:59:26:9a:51:a0:a8:05:0e:
         c9:b6:56:3a:36:e8:25:40:df:c6:01:a7:fa:41:c8:bb:ca:8a:
         41:29:64:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org