Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa
File:                     3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa (raw, json)
Hash identifier:          tRNSA95iwvcoFLJzTkaYqTpyCKloEhxbz0bnZETtyTI=
Subject key identifier:   D0:6C:41:2B:7A:BA:03:0C:CA:EC:79:35:0E:B2:BD:F6:ED:A6:04:7B
Certificate issuer:       /CN=449F0959CA2E6BDCBC1B721B60810876C153408D
Certificate serial:       7AE8337452CA57C1274BB706EB12DEDE38477BB8
Authority key identifier: 44:9F:09:59:CA:2E:6B:DC:BC:1B:72:1B:60:81:08:76:C1:53:40:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449F0959CA2E6BDCBC1B721B60810876C153408D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa
Signing time:             Tue 26 Dec 2023 16:00:00 +0000
ROA not before:           Tue 26 Dec 2023 15:55:00 +0000
ROA not after:            Tue 24 Dec 2024 16:00:00 +0000
asID:                     270919
IP address blocks:        138.185.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e8:33:74:52:ca:57:c1:27:4b:b7:06:eb:12:de:de:38:47:7b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449F0959CA2E6BDCBC1B721B60810876C153408D
        Validity
            Not Before: Dec 26 15:55:00 2023 GMT
            Not After : Dec 24 16:00:00 2024 GMT
        Subject: CN=D06C412B7ABA030CCAEC79350EB2BDF6EDA6047B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:ab:1d:26:3c:a3:02:c9:e4:0b:fa:88:51:
                    66:c3:02:c1:2d:1a:8c:8e:b3:f9:f5:2e:62:95:57:
                    80:ae:fa:26:37:58:ac:35:4c:31:5d:ed:7f:99:9a:
                    1e:3d:f5:38:f9:c5:75:89:ed:83:1c:a5:41:c5:55:
                    31:14:90:d3:32:d0:df:e8:77:1e:4f:d6:6a:1c:19:
                    bf:24:94:46:8d:54:08:9c:e5:5c:fb:2d:99:63:39:
                    6a:e8:00:0c:3f:88:d8:d2:85:05:53:e4:36:b7:e3:
                    9a:8e:6e:57:a1:ab:26:3f:15:69:7f:2f:53:f5:3d:
                    6f:7a:9b:b7:0c:5b:e3:dd:25:80:ed:37:8b:fb:63:
                    3e:9e:fa:47:e1:af:72:97:79:fa:37:8a:71:e5:26:
                    2d:c6:7d:f9:72:e8:22:04:5e:07:c5:01:fb:f9:80:
                    21:7f:ee:d6:4f:61:2f:5f:51:4d:9b:69:f3:d3:10:
                    a2:ae:ed:05:4c:6d:e5:a9:e4:18:9b:27:b0:d5:fd:
                    4d:99:6d:62:c7:d1:08:f6:81:7c:44:5f:41:51:4e:
                    72:bd:b8:7d:b3:a0:67:ba:af:ca:a1:e6:ae:10:c5:
                    e2:8e:a9:b7:64:cd:2f:a3:d0:ce:72:8b:27:f8:3b:
                    3b:df:4b:9c:21:7b:53:56:9f:c1:2a:e6:22:02:99:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:41:2B:7A:BA:03:0C:CA:EC:79:35:0E:B2:BD:F6:ED:A6:04:7B
            X509v3 Authority Key Identifier:
                keyid:44:9F:09:59:CA:2E:6B:DC:BC:1B:72:1B:60:81:08:76:C1:53:40:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/449F0959CA2E6BDCBC1B721B60810876C153408D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/449F0959CA2E6BDCBC1B721B60810876C153408D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EbD5Dt1faYC6VDT8wr4D3GioeLGLranHgNz6d3LbExVq/0/3133382e3138352e36382e302f32322d3232203d3e20323730393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:cb:d6:c3:cf:3d:a3:1f:35:bb:31:46:a9:6e:85:be:50:
         f3:5a:85:12:d3:ed:b8:d9:45:62:28:b9:09:97:e7:d0:c7:60:
         1d:bf:33:56:b2:4b:d5:38:49:ee:e7:e2:30:b3:e7:a8:66:0e:
         d2:b1:99:5b:da:9e:5a:74:d5:e5:f9:69:0f:7c:de:1a:14:f4:
         f9:ee:0f:f1:b9:3c:73:ea:52:01:5e:c6:43:64:e3:71:2b:65:
         ca:09:c3:bc:e0:8e:db:35:b5:97:e5:82:78:45:e3:9d:68:23:
         12:d0:38:32:f6:b4:70:1a:83:1a:38:98:8f:d3:12:39:cb:73:
         d1:5d:31:ab:a4:1c:d2:61:90:07:b6:23:f7:0b:45:18:93:4a:
         cf:46:d8:5c:e8:28:90:9e:c9:71:f5:be:d1:88:8a:5b:71:13:
         62:87:28:45:27:96:5a:ee:af:e5:98:3c:51:4d:4d:4e:fa:d9:
         ce:9f:bc:4f:7a:48:06:25:c4:f6:35:f8:6c:fd:6d:b9:88:57:
         cf:f1:20:53:42:2f:de:64:0a:2e:0c:27:7c:dd:fc:8e:4e:f4:
         5b:ef:47:c8:46:40:71:88:c1:d9:71:b9:43:17:08:7f:b9:75:
         d1:af:be:73:c0:b4:33:29:64:a9:e2:65:43:a4:01:48:ee:45:
         b2:c7:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org