Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          Q0Y7BRVVLiVipDzVpWCM7KXvQiyCHotsZi2nEljFi/I=
Subject key identifier:   2B:0D:DF:67:E1:7C:61:AB:E5:0A:94:69:BD:83:0D:4D:FA:D7:9B:1C
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       3DC65681593F31C472CDED50EB4FAAB901512732
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:31 +0000
ROA not before:           Mon 18 Dec 2023 17:21:31 +0000
ROA not after:            Mon 16 Dec 2024 17:26:31 +0000
asID:                     263940
IP address blocks:        138.185.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c6:56:81:59:3f:31:c4:72:cd:ed:50:eb:4f:aa:b9:01:51:27:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:31 2023 GMT
            Not After : Dec 16 17:26:31 2024 GMT
        Subject: CN=2B0DDF67E17C61ABE50A9469BD830D4DFAD79B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ee:50:55:eb:6c:2e:a4:97:8e:33:e3:4d:4e:
                    d4:79:ea:c2:fe:da:8c:d3:8d:fd:bb:11:33:7b:0a:
                    50:0b:65:64:c7:01:23:c9:e9:b0:ef:c2:e0:99:98:
                    17:1e:67:03:4c:f9:31:21:d6:3e:a9:8d:1c:a5:fb:
                    b8:09:a7:b2:a1:76:98:4e:b9:57:e6:91:bd:d1:75:
                    22:4f:dc:21:55:95:fd:f0:cc:05:3b:a8:34:08:ef:
                    b9:2b:8c:42:7c:1d:3f:29:b1:db:db:87:70:d2:f4:
                    07:e0:44:25:83:95:ee:e5:da:22:f5:4d:2b:6c:eb:
                    ce:2a:ca:e0:62:45:bd:8a:18:8d:6b:a2:ff:79:86:
                    e2:e3:a4:ab:c2:40:10:65:98:57:d6:f5:4d:56:f9:
                    e9:55:3f:13:f2:92:f6:9f:8f:96:d2:7c:6b:6b:f1:
                    7a:14:e9:34:d3:70:8e:08:58:b1:fe:16:49:e7:f2:
                    d8:5e:43:d3:24:4d:a5:c1:56:74:09:dc:ab:f0:0c:
                    fd:33:af:e4:8c:d9:b7:ac:ee:60:06:e2:35:59:b6:
                    23:f1:a7:4d:6d:44:83:02:40:80:dd:f4:0c:29:af:
                    86:b0:c9:31:e7:20:d3:fd:05:cc:d6:12:f3:0a:e7:
                    ba:6a:d8:3c:ce:ce:ae:b4:89:d2:05:1b:66:1a:f7:
                    ce:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:DF:67:E1:7C:61:AB:E5:0A:94:69:BD:83:0D:4D:FA:D7:9B:1C
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235322e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:38:ac:8c:5c:52:93:3f:bc:10:a7:42:bc:07:c3:c0:ac:2b:
         3a:b9:97:10:e2:7d:3e:5f:08:3f:71:00:8f:9a:9c:e4:94:86:
         7d:ff:40:6b:f8:60:e4:aa:e0:da:db:02:6c:77:ae:5c:c9:af:
         a2:6f:11:c7:06:b5:75:65:ae:0d:2e:22:ec:fa:bf:09:26:72:
         ae:ea:0a:4c:ba:c5:41:ad:7b:94:6a:4f:89:1f:16:ac:39:d9:
         d5:84:4f:b2:2c:60:a9:12:83:8a:0a:31:8f:07:e7:17:b4:31:
         1d:fe:80:5a:2d:7f:b8:5a:86:67:cd:de:70:29:07:59:8f:a7:
         ec:70:19:59:48:d4:dd:e5:d2:47:ad:b9:08:94:2b:84:cd:27:
         01:c4:42:84:f1:73:3a:1f:36:7b:20:21:20:fa:c4:ec:a5:02:
         46:40:f5:b9:6c:73:05:61:92:1e:e0:ad:dd:d1:51:f5:55:df:
         a3:a5:8f:4d:a3:1d:ff:0c:f2:c9:8b:6f:d7:f1:22:2a:35:9d:
         2c:91:0c:69:f4:b3:98:72:83:4d:a9:29:3a:84:fe:c3:74:a9:
         2d:4b:fb:e5:6c:13:e6:72:79:5b:ca:6f:a5:e0:cd:01:2d:be:
         8c:36:28:80:66:80:ec:0b:58:9c:3e:46:b4:20:41:fb:be:84:
         09:4e:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org