Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
File:                     3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa (raw, json)
Hash identifier:          lyz/fJbjPD40b5cQMZyzu6FJQ359dMSpoBkciVMf0Xc=
Subject key identifier:   85:A2:AD:23:5A:38:1B:AE:BF:2E:14:A0:E4:BB:39:68:3F:BF:FE:2B
Certificate issuer:       /CN=F4A13298B8B1DBC0257898EF603127C38CA91069
Certificate serial:       52A2EB237BA354A0455BE6AA9FF24A0E90F98D47
Authority key identifier: F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa
Signing time:             Wed 31 Jan 2024 11:56:19 +0000
ROA not before:           Wed 31 Jan 2024 11:51:19 +0000
ROA not after:            Wed 29 Jan 2025 11:56:19 +0000
asID:                     262323
IP address blocks:        138.185.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a2:eb:23:7b:a3:54:a0:45:5b:e6:aa:9f:f2:4a:0e:90:f9:8d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4A13298B8B1DBC0257898EF603127C38CA91069
        Validity
            Not Before: Jan 31 11:51:19 2024 GMT
            Not After : Jan 29 11:56:19 2025 GMT
        Subject: CN=85A2AD235A381BAEBF2E14A0E4BB39683FBFFE2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:55:f8:7e:05:d7:fd:f9:6c:a5:04:ac:4d:
                    a8:76:b1:fc:c3:6c:04:3c:1e:35:f8:b8:25:b4:e1:
                    11:ca:54:23:40:5b:ea:4a:60:a5:6e:4d:7d:f8:bc:
                    a6:30:f0:24:2a:11:e9:a9:ec:a3:98:43:5f:ac:62:
                    f9:dd:67:d0:c4:58:d5:37:85:71:0d:31:40:ad:b9:
                    b5:61:55:20:a7:95:2a:fe:af:85:6f:71:2c:18:b9:
                    62:0e:f2:ac:d3:3b:e2:a3:e7:c3:e3:b6:4e:a9:ec:
                    6f:a9:11:37:4d:73:1f:3a:e3:05:0f:4f:80:15:07:
                    23:e9:18:7a:31:4c:97:db:dc:70:2b:18:0c:3c:ef:
                    80:c5:9e:8a:ca:bc:42:de:31:69:44:a1:8c:dd:ac:
                    fa:26:d6:c3:15:8b:ce:66:45:e8:5e:93:93:dc:cb:
                    39:14:d4:81:50:9a:0a:4d:75:98:e5:cf:96:c8:03:
                    05:2b:37:e5:4a:b4:bb:58:6d:ec:fb:fe:0c:48:5c:
                    2b:d3:60:c8:83:53:34:0a:7d:40:2f:4f:e6:63:90:
                    c0:20:94:38:18:1d:38:b7:2c:3c:37:08:44:55:d3:
                    58:0a:18:ea:b8:91:e5:4a:70:83:38:64:1e:03:d9:
                    4c:a0:a3:8a:25:a7:8f:90:46:98:82:41:6f:08:e0:
                    41:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A2:AD:23:5A:38:1B:AE:BF:2E:14:A0:E4:BB:39:68:3F:BF:FE:2B
            X509v3 Authority Key Identifier:
                keyid:F4:A1:32:98:B8:B1:DB:C0:25:78:98:EF:60:31:27:C3:8C:A9:10:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/F4A13298B8B1DBC0257898EF603127C38CA91069.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4A13298B8B1DBC0257898EF603127C38CA91069.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELV7EmnPN2DqhE196sFJRwCGnw9hCXbWp6vCKLuPM9Zm/0/3133382e3138352e34382e302f32322d3234203d3e20323632333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:48:11:f7:33:c2:14:9d:ea:e8:24:ca:1d:78:17:56:ba:
         1a:c0:ce:6b:f4:0b:ea:1f:21:60:61:f5:83:7c:b7:10:2f:0a:
         59:ad:6b:89:eb:17:33:b2:ea:1e:3c:0b:18:ce:38:7c:63:e9:
         91:87:42:50:c0:4e:19:a4:2d:67:44:46:3a:fd:a6:b0:af:e8:
         21:20:6b:b7:13:e8:1c:84:e9:ed:91:d6:38:92:1a:fe:2b:50:
         0a:1e:45:0d:91:79:8e:6f:36:3a:d9:4d:55:ba:38:11:1c:e0:
         0f:17:dd:e9:9d:f5:72:42:69:4e:9b:ca:41:8c:12:c3:c5:f0:
         84:ea:52:69:0c:86:c2:d3:f5:38:5e:76:ce:42:e8:84:56:0d:
         ee:83:c1:86:23:1b:ab:25:59:9d:9f:ab:b5:46:23:b1:16:b4:
         fd:0b:b0:43:2e:3e:6d:1f:48:c1:0f:1a:29:f4:20:3b:e2:61:
         21:32:92:61:af:43:fc:13:c7:9f:de:68:2b:14:e3:87:45:fe:
         0d:87:97:52:82:18:3f:89:69:51:99:37:33:0f:1a:a6:5f:25:
         7d:4b:7d:da:63:38:ee:99:93:21:d0:f2:5a:82:19:30:fc:4e:
         00:76:1b:fe:ac:f2:34:3e:00:85:46:fb:0d:20:ac:0b:87:b5:
         80:e2:17:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org