Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa
File:                     3133382e3138352e34352e302f32342d3234203d3e203532353430.roa (raw, json)
Hash identifier:          GVBzK2PFcP0u+lnFSzc4fp4q1P7ff2Mky1FGUcQVm/I=
Subject key identifier:   EF:32:90:FE:5B:A7:4A:2B:9F:B7:0F:B4:54:A2:47:B4:0F:5F:35:DE
Certificate issuer:       /CN=6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7
Certificate serial:       516BE5746B2C10345D2A052ADC1DDE79010721AE
Authority key identifier: 6A:72:73:FC:2D:F7:3E:03:B2:D4:59:E6:7E:6A:CA:D6:55:59:A2:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa
Signing time:             Fri 04 Aug 2023 11:58:16 +0000
ROA not before:           Fri 04 Aug 2023 11:53:16 +0000
ROA not after:            Fri 02 Aug 2024 11:58:16 +0000
asID:                     52540
IP address blocks:        138.185.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:6b:e5:74:6b:2c:10:34:5d:2a:05:2a:dc:1d:de:79:01:07:21:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7
        Validity
            Not Before: Aug  4 11:53:16 2023 GMT
            Not After : Aug  2 11:58:16 2024 GMT
        Subject: CN=EF3290FE5BA74A2B9FB70FB454A247B40F5F35DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3f:c3:b6:5a:d4:7c:5b:01:dd:d9:02:e0:e0:
                    26:22:49:a7:b7:7a:fc:19:20:99:96:f4:01:05:ff:
                    77:6b:58:fe:8e:b1:50:df:b0:b8:eb:99:e3:9c:db:
                    ed:e5:4e:37:4b:df:fe:06:90:da:12:5e:42:93:f0:
                    88:b2:e2:73:ad:96:07:30:57:d8:58:18:1a:f8:b9:
                    33:a1:ba:81:74:f3:bd:3f:64:c5:a0:c6:ca:99:26:
                    b4:8e:12:b7:f0:19:7c:0c:4b:4c:43:80:97:83:62:
                    e5:96:8f:a6:aa:ce:de:37:ed:53:18:b5:80:7c:27:
                    e1:bd:38:13:d6:eb:92:ca:64:e1:91:e7:6f:cd:ca:
                    be:a8:56:76:01:ef:e0:e4:ff:d7:7f:41:5e:91:41:
                    24:75:fd:4f:36:49:65:43:b6:cd:1c:d3:c8:91:2f:
                    f9:85:a3:d5:63:a9:f9:50:e0:59:0e:55:6e:d6:ec:
                    aa:47:01:af:c4:07:5b:1d:d8:7a:3f:71:84:13:35:
                    28:be:4d:79:0d:f0:09:d9:18:23:45:1b:c2:86:e0:
                    d4:f3:77:92:2b:41:67:1b:37:43:4a:ee:e4:68:95:
                    f6:3f:9b:11:e2:54:3b:33:4e:4a:a1:4d:48:b1:be:
                    cf:64:a7:c9:5c:67:f8:24:90:83:e0:cc:69:6d:5d:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:32:90:FE:5B:A7:4A:2B:9F:B7:0F:B4:54:A2:47:B4:0F:5F:35:DE
            X509v3 Authority Key Identifier:
                keyid:6A:72:73:FC:2D:F7:3E:03:B2:D4:59:E6:7E:6A:CA:D6:55:59:A2:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A7273FC2DF73E03B2D459E67E6ACAD65559A2F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/0/3133382e3138352e34352e302f32342d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:99:a8:e3:65:d0:e8:c1:dd:ac:5b:70:23:e5:a4:62:be:
         a9:d4:3b:39:31:2b:e3:57:86:c6:f3:44:d8:7b:cc:33:84:93:
         4c:4e:d0:80:06:97:a1:97:78:73:15:c4:8d:cc:db:f3:3c:61:
         15:a2:1b:02:cd:f2:da:f9:25:10:cd:39:de:65:dc:48:66:11:
         87:97:ae:13:69:22:c6:ab:c1:f6:17:dd:6a:a5:93:5b:02:8e:
         d0:7a:79:5b:b7:a2:91:5d:7e:92:f5:bb:6e:0f:92:fb:5d:8a:
         30:92:b1:ce:44:9a:c9:f8:f6:64:76:c6:a3:f1:2d:45:37:c2:
         3a:39:37:f1:2a:3a:c6:1e:c5:50:09:8e:57:4d:a8:76:16:db:
         cd:80:c4:2a:35:87:99:79:fd:f7:44:9d:11:90:a2:bb:ef:e2:
         0e:76:39:d2:d4:79:c2:71:b5:10:ad:fe:dd:77:c9:66:a6:90:
         5d:84:d7:73:22:7c:42:86:bf:f0:d6:68:ca:2b:4b:d9:31:f0:
         52:55:2a:7d:67:0d:4f:68:a1:a6:30:73:7f:14:68:7b:a9:da:
         3c:79:c1:59:af:29:8d:46:d2:32:d1:0a:c5:87:c1:6e:7b:c5:
         22:a0:33:db:1e:e1:ac:b9:48:6e:9d:97:3c:16:6b:c0:f5:bf:
         76:36:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org