Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa
File:                     3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa (raw, json)
Hash identifier:          gtO7u7SaGXt743Dz5i77WGX0ChBE8JgzK4kWy+YfAns=
Subject key identifier:   FE:9F:BB:57:8D:49:E1:DA:13:A1:94:FC:F2:EF:43:FE:34:58:5E:72
Certificate issuer:       /CN=53DBD8550574BFB1767083FAD3A327CD5351750E
Certificate serial:       2B27ADC7545206F704BAE3C6B860D96A59054CAF
Authority key identifier: 53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa
Signing time:             Fri 22 Sep 2023 03:52:42 +0000
ROA not before:           Fri 22 Sep 2023 03:47:42 +0000
ROA not after:            Fri 20 Sep 2024 03:52:42 +0000
asID:                     263919
IP address blocks:        138.185.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:27:ad:c7:54:52:06:f7:04:ba:e3:c6:b8:60:d9:6a:59:05:4c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53DBD8550574BFB1767083FAD3A327CD5351750E
        Validity
            Not Before: Sep 22 03:47:42 2023 GMT
            Not After : Sep 20 03:52:42 2024 GMT
        Subject: CN=FE9FBB578D49E1DA13A194FCF2EF43FE34585E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5a:0e:3b:05:e0:39:c1:99:c8:7a:4e:ae:93:
                    d4:3b:46:79:83:f8:e4:01:4a:60:f6:02:18:a7:ec:
                    05:6c:70:d1:35:2a:7d:0b:0b:02:14:2e:8c:ed:5f:
                    e8:81:85:5a:c6:17:3b:bb:34:88:1e:41:10:3c:d7:
                    fb:76:19:e0:74:07:c9:3e:24:cf:e9:45:99:d2:bb:
                    c8:c5:3e:7f:ab:1c:65:fc:6b:81:d9:50:9e:cd:3c:
                    ec:63:9f:94:de:c9:45:bd:03:87:64:74:cd:6d:c9:
                    4b:9a:b1:ee:c5:30:c8:7b:95:e0:43:3f:73:43:f7:
                    9d:4f:3b:23:d7:1e:af:79:0b:51:86:7a:2e:d8:c1:
                    1a:38:d7:8a:31:76:af:73:61:db:1f:d5:4d:68:a8:
                    c0:01:ae:c6:59:bb:d7:3d:69:24:c5:a8:ad:7f:e7:
                    29:8e:b7:bb:d1:88:87:c0:1d:2f:4b:d0:14:82:3a:
                    17:e2:55:fd:70:0a:14:b6:10:c1:e0:bf:3c:6d:67:
                    26:73:66:b6:23:58:f5:55:db:7a:6a:dc:ac:3c:48:
                    80:67:da:5e:5f:59:53:a6:ff:05:b2:e0:d7:6b:d5:
                    ea:e9:e7:98:34:0c:97:36:18:97:da:7f:c4:49:d9:
                    72:c8:35:05:0b:23:bc:cd:75:87:6c:e4:3b:6c:3e:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:BB:57:8D:49:E1:DA:13:A1:94:FC:F2:EF:43:FE:34:58:5E:72
            X509v3 Authority Key Identifier:
                keyid:53:DB:D8:55:05:74:BF:B1:76:70:83:FA:D3:A3:27:CD:53:51:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/53DBD8550574BFB1767083FAD3A327CD5351750E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53DBD8550574BFB1767083FAD3A327CD5351750E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/0/3133382e3138352e3233362e302f32322d3234203d3e20323633393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:51:d9:01:e9:a0:cd:09:40:9b:09:66:6d:8f:66:ca:e9:
         5f:c9:6e:f7:94:4b:3b:08:90:09:62:dd:62:34:e7:96:24:ef:
         38:d1:d9:c0:b3:a5:d0:d8:72:18:09:b5:ca:08:a0:63:ee:9a:
         f5:66:6a:87:ac:5f:a2:3f:a3:5a:fd:d9:97:ba:bb:6f:92:96:
         9b:09:08:6f:b9:22:b5:21:17:76:f8:fa:b6:14:ac:d7:63:d1:
         f0:e4:8f:65:7b:85:43:c0:18:49:37:39:c2:9c:41:5c:b1:46:
         c3:20:34:18:77:8d:14:64:11:9c:0e:de:20:ec:fc:cb:a1:e5:
         e5:53:96:61:09:69:c7:c1:4b:6c:0d:ed:2e:04:e0:a7:39:4f:
         fb:91:41:be:d2:d7:ec:23:9c:c6:5a:ec:85:b9:4c:02:af:24:
         b7:90:83:06:19:50:99:e2:c4:67:5d:51:3a:27:59:2b:b2:c8:
         54:f0:93:47:27:45:d3:5b:f7:ed:c1:a5:62:a9:b9:fa:b9:a6:
         d8:cb:75:8c:58:a6:cf:0d:d8:e2:d1:c1:90:9f:d7:ee:0d:c7:
         70:50:9b:d9:ad:5d:73:99:37:06:ab:37:34:7f:75:a5:f0:c3:
         52:d7:a7:cc:f7:7d:f6:d0:29:ed:0c:b9:87:98:25:59:dd:42:
         40:00:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org