Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323639313639.roa
File:                     3133382e302e3134382e302f32322d3234203d3e20323639313639.roa (raw, json)
Hash identifier:          x+e0Mndu761VFF4aCPJt2fnf+EOpiXo5b+wj70FkRQ0=
Subject key identifier:   BF:99:39:DF:93:8A:3E:60:BB:35:9C:5A:BB:2D:B0:AA:4E:8C:03:E5
Certificate issuer:       /CN=4A1758C02056B68B850854C0D9687F347003679B
Certificate serial:       7404265C898523671A1FCE3DE917587B4FBB5C9A
Authority key identifier: 4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323639313639.roa
Signing time:             Thu 04 Jan 2024 16:00:00 +0000
ROA not before:           Thu 04 Jan 2024 15:55:00 +0000
ROA not after:            Thu 02 Jan 2025 16:00:00 +0000
asID:                     269169
IP address blocks:        138.0.148.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:04:26:5c:89:85:23:67:1a:1f:ce:3d:e9:17:58:7b:4f:bb:5c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1758C02056B68B850854C0D9687F347003679B
        Validity
            Not Before: Jan  4 15:55:00 2024 GMT
            Not After : Jan  2 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:dc:81:62:5a:d2:56:98:f0:81:0b:eb:70:
                    30:f9:ac:cc:92:a6:91:e7:93:ad:7b:fa:22:a5:99:
                    78:63:ab:e1:5a:a0:23:91:75:e8:e3:d8:a8:1c:23:
                    4e:07:c3:8d:9c:1d:59:7b:c6:0e:0a:b0:ce:f9:00:
                    2c:ba:14:a4:98:06:98:c6:da:7b:4d:96:9d:f8:26:
                    d6:21:8a:44:97:af:96:1c:28:6e:22:ac:6e:a5:76:
                    46:eb:ab:d5:23:88:1c:40:f9:1b:c3:94:81:47:a1:
                    46:a9:a1:4f:12:55:e6:d0:37:c7:f8:21:68:ac:32:
                    ac:e0:00:c2:5c:17:99:ad:3b:b7:81:e3:ef:73:c7:
                    0b:47:ff:7d:86:f2:71:d6:ca:86:48:57:83:63:a1:
                    47:29:0c:9e:04:e9:b9:2c:78:d1:6a:3b:0f:d9:8a:
                    33:fb:3a:7e:3b:90:0d:73:a5:a4:3f:6b:a6:42:f8:
                    4d:61:90:15:43:07:55:10:a4:2c:d4:50:95:d0:9b:
                    8e:fd:f3:c1:72:51:24:bf:88:0e:b4:c4:50:6a:49:
                    f1:7a:60:87:b7:8b:90:09:f5:cb:db:0c:6e:6e:71:
                    bb:b0:14:32:f9:70:ea:4c:12:b9:bf:d3:81:d0:19:
                    f6:79:41:42:16:76:06:c5:87:1b:36:16:cb:14:91:
                    e1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:99:39:DF:93:8A:3E:60:BB:35:9C:5A:BB:2D:B0:AA:4E:8C:03:E5
            X509v3 Authority Key Identifier:
                keyid:4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/4A1758C02056B68B850854C0D9687F347003679B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/3133382e302e3134382e302f32322d3234203d3e20323639313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:db:fe:c8:d2:39:3e:f7:d6:db:3a:98:4b:f1:46:8b:62:bb:
         94:36:62:46:c3:64:2a:b4:18:da:29:40:1e:a0:b1:25:7f:4c:
         dc:72:53:78:54:b1:a7:42:0a:b1:a6:b2:8f:20:c7:e3:3f:f1:
         7c:58:1b:71:8f:42:78:ae:19:7f:15:5a:6c:27:3a:64:64:54:
         81:61:09:58:5f:34:1e:e8:f6:9e:d2:06:b2:09:a2:e7:cf:00:
         eb:9d:fa:95:71:97:14:b3:a6:19:e6:3c:68:a4:64:75:b6:ec:
         91:21:de:e8:3d:7d:ff:f6:5b:8b:f5:79:b7:2f:81:e8:cb:36:
         c5:40:24:af:a3:0f:db:0d:30:88:13:45:52:52:3a:a0:71:64:
         ba:0b:19:8b:9d:51:48:3f:90:66:9b:ab:12:16:90:cb:b3:d9:
         9d:0c:1c:89:cb:01:18:52:b9:61:cc:43:8e:9a:47:18:29:7b:
         8c:0c:13:4f:e0:17:5b:34:47:fd:42:b3:d4:42:0e:bb:71:5e:
         74:90:bb:86:2f:b2:9b:af:31:c4:55:27:5d:db:25:33:08:f0:
         2c:13:6b:1e:64:0b:20:fc:e7:2f:23:de:2e:47:39:18:ef:2e:
         70:b6:51:0c:bb:a7:d7:d9:95:54:c1:c8:ec:3c:ae:94:8a:65:
         34:98:4e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:03 2024 by rpki-client on console-ams.rpki-client.org