Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32332d3233203d3e20323633393333.roa
File:                     3133382e3231392e34382e302f32332d3233203d3e20323633393333.roa (raw, json)
Hash identifier:          JAlODOnMJ/OrmtnzcKF2e0iTA5y3qCEvsOsuONkr048=
Subject key identifier:   0C:B2:2D:E2:C3:CB:4D:DC:1E:97:8A:D4:D7:65:03:D4:FC:68:16:78
Certificate issuer:       /CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
Certificate serial:       0D68F1F7D6F2161D783B8F85429BB7D54671F489
Authority key identifier: F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32332d3233203d3e20323633393333.roa
Signing time:             Thu 06 Apr 2023 16:05:02 +0000
ROA not before:           Thu 06 Apr 2023 16:00:02 +0000
ROA not after:            Thu 04 Apr 2024 16:05:02 +0000
asID:                     263933
IP address blocks:        138.219.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:68:f1:f7:d6:f2:16:1d:78:3b:8f:85:42:9b:b7:d5:46:71:f4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1EF90C4880B5ECE704D6E2591B0D59F5799CA16
        Validity
            Not Before: Apr  6 16:00:02 2023 GMT
            Not After : Apr  4 16:05:02 2024 GMT
        Subject: CN=0CB22DE2C3CB4DDC1E978AD4D76503D4FC681678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:cd:12:d9:a7:81:de:29:a8:1e:f6:4c:8d:
                    97:19:e4:ef:e9:fc:54:e3:6c:f3:01:0a:e3:68:64:
                    9c:52:a6:96:30:96:fa:f6:1e:25:23:08:59:c3:e6:
                    82:a6:61:25:fa:d1:ab:4f:77:54:c2:62:19:86:2b:
                    17:99:45:57:6e:43:8a:f0:c3:41:89:29:e6:65:ac:
                    ed:48:d2:35:fe:89:56:b9:17:48:25:ee:f9:a5:1c:
                    56:73:f5:10:f4:bb:7a:11:e1:30:f4:9b:1d:8e:bf:
                    70:9c:4b:f3:2d:c8:b0:15:dd:52:2f:0d:41:14:79:
                    ee:61:01:b6:df:54:32:9e:1c:53:db:78:88:11:4e:
                    d4:50:12:b7:b5:d6:3c:27:e3:0a:b3:19:b8:3e:19:
                    d4:e3:1f:91:c1:81:d9:4d:41:05:34:c8:db:d6:35:
                    73:cb:2f:f9:cc:fc:c7:01:e3:5a:8b:99:79:30:5a:
                    7d:d6:d7:d3:a3:c6:cb:7b:0d:90:ad:87:ea:f1:45:
                    7b:c0:56:a7:30:9d:60:68:cd:a5:a0:ba:54:0e:b1:
                    f8:d2:7d:9a:42:e7:ea:31:d0:1d:81:f2:4f:44:3d:
                    1e:14:d9:0f:5a:00:0f:ba:e6:84:d2:c7:7b:34:c1:
                    13:61:37:92:2b:03:5a:e2:2e:eb:99:d5:bf:9b:62:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B2:2D:E2:C3:CB:4D:DC:1E:97:8A:D4:D7:65:03:D4:FC:68:16:78
            X509v3 Authority Key Identifier:
                keyid:F1:EF:90:C4:88:0B:5E:CE:70:4D:6E:25:91:B0:D5:9F:57:99:CA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1EF90C4880B5ECE704D6E2591B0D59F5799CA16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vMdBsKgQXVZQ1af4gqepEKzYdAuUy7QFoWjeoMHoWCX/0/3133382e3231392e34382e302f32332d3233203d3e20323633393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:10:c1:f0:63:e9:9f:ed:22:78:c2:a8:1f:34:d5:70:6e:6f:
         7f:ef:dc:4a:70:bf:cd:cf:a4:71:27:5b:60:fe:af:30:d7:e1:
         81:17:6c:fb:c6:2c:50:a2:2e:50:9a:67:76:8a:0e:56:72:02:
         fd:94:84:86:1f:0c:13:98:65:95:e7:eb:10:82:67:65:c6:34:
         9d:c8:0e:e1:9f:b8:a3:50:06:42:8f:cc:fc:a4:c0:c1:ba:75:
         09:6a:1f:3b:4e:df:22:b8:1f:a5:6b:f7:10:13:02:be:d2:dd:
         de:09:95:29:07:fc:74:85:69:b5:40:40:bd:24:3b:de:70:a1:
         ec:9f:68:8c:93:16:ad:02:09:89:1f:d6:76:0c:c1:19:9a:a0:
         53:fb:f6:ec:93:c7:cb:9b:c2:e4:5a:f0:d9:c1:9f:ea:95:df:
         a8:db:24:06:5f:86:75:09:fb:3a:5b:48:11:9c:43:55:16:04:
         02:f0:22:d3:30:a7:d2:54:2c:57:18:a4:87:96:b2:39:e2:79:
         8b:11:1f:7d:c7:1f:a6:42:26:23:24:0b:8f:dd:8b:82:28:97:
         3f:c5:e1:39:94:f3:e9:9c:63:f2:8b:43:cb:a1:4b:8c:a5:3d:
         9a:bf:e2:58:bf:ff:48:37:17:b0:4b:7c:a0:92:18:23:f4:e6:
         22:2f:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org