Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/1/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa
File:                     3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa (raw, json)
Hash identifier:          32Iz5P1qcW/njbvRaTPOAROBfyesS+DBJ1wXACFn4ns=
Subject key identifier:   E4:42:1B:F3:FD:F6:C1:E4:A0:30:B4:AF:F9:A3:63:F0:01:42:78:89
Certificate issuer:       /CN=48B5B26F3ACBD014C7ABE683DCBB3BCAED59308E
Certificate serial:       564EED437B1FC13AC75C67F66896091CF526784F
Authority key identifier: 48:B5:B2:6F:3A:CB:D0:14:C7:AB:E6:83:DC:BB:3B:CA:ED:59:30:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B5B26F3ACBD014C7ABE683DCBB3BCAED59308E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/1/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa
Signing time:             Thu 04 Apr 2024 16:23:54 +0000
ROA not before:           Thu 04 Apr 2024 16:18:54 +0000
ROA not after:            Thu 03 Apr 2025 16:23:54 +0000
asID:                     263847
IP address blocks:        138.185.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:4e:ed:43:7b:1f:c1:3a:c7:5c:67:f6:68:96:09:1c:f5:26:78:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48B5B26F3ACBD014C7ABE683DCBB3BCAED59308E
        Validity
            Not Before: Apr  4 16:18:54 2024 GMT
            Not After : Apr  3 16:23:54 2025 GMT
        Subject: CN=E4421BF3FDF6C1E4A030B4AFF9A363F001427889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:87:96:0c:ff:63:c9:b8:44:6a:03:46:32:
                    c5:f1:8d:48:07:5f:4a:85:de:f4:a5:b3:99:02:35:
                    2a:93:0f:25:3e:d7:cd:8c:48:01:b7:b1:39:26:95:
                    ed:44:b9:c9:1f:25:e1:0c:29:7d:5d:12:30:f9:2b:
                    d4:87:b9:86:e3:6c:b5:b4:5c:b0:42:27:fb:5b:ce:
                    ed:51:eb:9e:27:5f:c2:8d:1c:20:b2:9d:c6:16:ca:
                    a0:57:ef:34:c9:9f:8d:aa:86:5b:b1:b0:23:7d:99:
                    61:64:33:aa:03:66:80:3d:31:63:c5:18:57:3d:af:
                    e7:a4:f0:7b:7b:07:e3:4d:89:40:40:2f:7a:50:68:
                    a8:2a:44:29:e2:0e:22:2c:ce:d7:b0:4e:30:c0:4d:
                    a1:aa:7a:dd:08:8a:a5:26:e5:5c:7f:3a:87:73:57:
                    f7:b8:e0:55:1d:99:72:4c:5b:8f:d4:21:c5:9f:fe:
                    ac:77:39:ca:71:c7:7d:86:19:d4:5d:66:c8:29:c4:
                    4a:44:aa:b3:ce:5d:f6:13:2d:54:54:69:99:f0:7f:
                    7f:2b:a5:50:0a:9f:ea:49:03:4c:58:51:c7:6a:7d:
                    32:f3:41:f4:8b:0f:e7:3b:7d:7c:0f:ca:fa:49:e9:
                    ad:ee:46:e0:83:da:4e:a7:df:77:98:c8:4d:21:45:
                    9b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:1B:F3:FD:F6:C1:E4:A0:30:B4:AF:F9:A3:63:F0:01:42:78:89
            X509v3 Authority Key Identifier:
                keyid:48:B5:B2:6F:3A:CB:D0:14:C7:AB:E6:83:DC:BB:3B:CA:ED:59:30:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/1/48B5B26F3ACBD014C7ABE683DCBB3BCAED59308E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/48B5B26F3ACBD014C7ABE683DCBB3BCAED59308E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C288AyDx9zgnU31rNKrri9VknHxYwvzYQbwuj74KVCV2/1/3133382e3138352e3139362e302f32322d3234203d3e20323633383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:79:7c:e7:ce:77:8d:dd:02:da:72:06:64:40:cb:25:91:be:
         69:3a:ef:24:72:63:0c:6f:0f:09:74:cc:07:59:a3:25:ce:c2:
         89:89:0a:c6:8b:c8:9d:ee:90:a5:82:50:dd:fe:f9:d6:9c:3f:
         0b:fa:2d:b2:fd:1c:2d:4c:b0:db:7e:e5:4c:16:1d:58:1d:20:
         fd:ba:ab:d6:70:e7:96:b8:98:d6:32:64:73:ba:09:9c:65:ac:
         7d:c9:ad:51:0d:ff:81:12:30:3b:f7:6b:74:bd:13:54:10:7d:
         95:ce:fb:83:12:22:c4:91:0c:9c:dc:2c:b8:39:61:61:e2:7d:
         ed:c9:fc:89:ab:03:9a:2f:b3:30:6c:04:20:bf:9b:de:f1:e7:
         72:9f:7b:23:e3:51:6f:2d:3f:80:5e:c8:ae:fe:6b:1b:7d:e7:
         1c:45:95:58:71:a5:9a:8f:ca:6f:ac:20:80:3a:4e:18:70:06:
         f4:d0:b4:b5:6d:48:3c:99:ea:85:9b:ec:fa:1d:ef:51:e7:8c:
         b6:3f:44:8e:33:48:1b:00:b3:e1:52:9a:c1:dd:eb:11:eb:03:
         cd:8c:22:1a:fc:35:cc:fd:c8:4f:e1:32:6c:f9:27:b9:1f:de:
         39:57:48:e2:00:75:ae:fc:ce:6e:9f:36:3e:c0:00:5c:bf:19:
         d5:2d:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org