Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3233203d3e203532353430.roa
File:                     3133382e3138352e34342e302f32322d3233203d3e203532353430.roa (raw, json)
Hash identifier:          ip7+Gqa4rHjPEopi4XgNVB4KQgqxyZsM6lFDo0UV4jM=
Subject key identifier:   C5:E4:E9:EE:94:D3:C9:37:17:F1:C4:E6:78:80:95:27:13:07:71:9A
Certificate issuer:       /CN=8C004D33839E9718AC5A43521533E7535258D419
Certificate serial:       2F87295893763343DF168CC43F3CB2137A9D8D49
Authority key identifier: 8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3233203d3e203532353430.roa
Signing time:             Mon 18 Mar 2024 21:17:35 +0000
ROA not before:           Mon 18 Mar 2024 21:12:35 +0000
ROA not after:            Mon 17 Mar 2025 21:17:35 +0000
asID:                     52540
IP address blocks:        138.185.44.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:87:29:58:93:76:33:43:df:16:8c:c4:3f:3c:b2:13:7a:9d:8d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C004D33839E9718AC5A43521533E7535258D419
        Validity
            Not Before: Mar 18 21:12:35 2024 GMT
            Not After : Mar 17 21:17:35 2025 GMT
        Subject: CN=C5E4E9EE94D3C93717F1C4E6788095271307719A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f7:ac:ee:02:c7:e4:f3:1e:df:96:27:7f:6c:
                    1a:b8:82:5a:29:a1:64:49:6a:28:30:27:ce:4e:06:
                    b2:e5:dd:e9:f6:85:24:82:dd:35:5a:39:75:c3:21:
                    84:c6:25:21:60:de:7f:17:68:3d:62:b9:6a:08:cb:
                    af:d0:65:c8:79:2b:23:f6:1e:9b:5b:bc:7e:76:c8:
                    3c:48:38:38:45:02:57:2f:13:9c:89:c6:54:12:71:
                    a2:15:d5:71:e7:29:8a:4d:bd:3f:c8:1d:28:33:9a:
                    3f:b4:73:39:98:75:9c:b4:00:4a:5c:6c:f5:a9:5e:
                    64:f9:c2:d5:6a:fb:3e:bd:81:f6:26:6d:4d:65:0a:
                    17:66:08:9a:45:b1:03:a0:24:89:c0:22:73:34:c0:
                    17:5b:28:f0:ee:2e:41:ae:4c:1f:c1:86:75:07:30:
                    ec:b0:e2:81:bf:1f:38:2f:01:30:d9:a3:c3:f2:6a:
                    67:8a:be:84:97:bf:18:d4:33:11:7d:10:8b:7f:e3:
                    aa:06:80:0b:73:a4:8f:fd:a8:48:9d:6b:21:07:c7:
                    62:3b:14:b5:91:87:1b:64:fd:17:a6:87:03:c6:c0:
                    f2:1a:8f:9d:c4:ad:a2:cf:35:2c:03:95:73:9c:81:
                    07:7a:a8:55:00:18:17:74:83:35:de:8d:d6:54:0b:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E4:E9:EE:94:D3:C9:37:17:F1:C4:E6:78:80:95:27:13:07:71:9A
            X509v3 Authority Key Identifier:
                keyid:8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/8C004D33839E9718AC5A43521533E7535258D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3233203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:1d:f0:99:18:00:97:0b:b5:73:a4:5d:54:ad:b0:85:25:64:
         ef:5b:72:be:ee:b8:3f:08:c3:e5:24:db:b0:43:72:5c:9e:5f:
         31:20:2c:99:a7:02:c3:63:2c:8d:e5:62:1d:d9:22:38:df:a9:
         c1:97:54:91:47:19:43:50:dd:62:fa:75:d1:be:f7:02:6e:97:
         f9:f2:78:f9:af:a8:7f:ef:44:74:d6:a4:fd:1b:88:b2:2f:24:
         09:a1:52:c2:fc:d4:9a:e3:1e:45:8c:7e:eb:b7:bb:4b:36:ef:
         4c:db:74:67:ce:5f:e5:eb:f0:7c:5f:2e:22:07:cf:b0:2c:ec:
         0f:c2:5c:ec:04:b3:ec:ae:29:9f:96:23:1b:69:3b:3b:53:bf:
         db:19:23:47:5c:31:7b:cf:96:ef:cf:b3:d0:18:ef:48:00:a5:
         51:aa:27:3f:05:e3:44:83:9b:13:de:00:23:14:a4:9b:16:85:
         35:4d:a4:ad:1a:5d:3c:8a:cd:64:be:ae:ab:06:92:5c:cd:ea:
         39:e1:ba:f6:da:f2:22:53:5c:a9:6a:87:f4:ab:29:ca:12:b0:
         79:62:97:9c:a6:ca:2d:f0:84:6a:19:d9:34:2a:51:58:7f:93:
         c3:e6:05:00:7a:04:f9:88:70:4d:82:e8:5d:8d:37:f9:c1:ac:
         c9:ea:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org