Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
File:                     3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa (raw, json)
Hash identifier:          iuK40PDcYI1e7VU+5cK+uk/No2kyEw5de9LSgxGvv40=
Subject key identifier:   F1:1E:55:8D:E6:6F:BC:38:64:2F:35:63:2C:AF:CD:A5:FF:02:52:6F
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       2549D675006B3006A9E78A41FB3AE30B3505A2E6
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:30 +0000
ROA not before:           Mon 18 Dec 2023 17:21:30 +0000
ROA not after:            Mon 16 Dec 2024 17:26:30 +0000
asID:                     263940
IP address blocks:        138.185.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:49:d6:75:00:6b:30:06:a9:e7:8a:41:fb:3a:e3:0b:35:05:a2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:30 2023 GMT
            Not After : Dec 16 17:26:30 2024 GMT
        Subject: CN=F11E558DE66FBC38642F35632CAFCDA5FF02526F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:21:b2:60:b0:54:94:76:47:83:6d:d3:29:
                    39:6c:52:bd:6c:49:ba:88:a8:8f:ca:be:a8:51:ea:
                    51:29:c5:ae:20:25:e9:bc:44:eb:fd:a0:10:be:b4:
                    84:dc:80:a2:9e:1a:5a:04:8f:ca:54:76:28:5e:e7:
                    75:f4:03:c3:62:e4:57:39:25:ff:7a:a3:ed:36:bb:
                    4c:0f:65:42:3c:2e:20:4e:d9:d8:12:8f:40:97:cc:
                    ae:35:e9:1c:f0:2e:cc:c3:d1:58:90:aa:eb:c2:e7:
                    21:fe:29:91:fa:f9:49:2d:ef:e5:36:e7:b3:45:f2:
                    2d:a8:ae:b9:d1:1a:53:2b:07:c5:c4:37:ca:eb:68:
                    5d:19:35:89:7a:9b:ba:5f:35:6e:3d:9f:cd:07:a4:
                    60:20:15:ee:72:e3:72:0f:f1:62:6c:00:89:bb:08:
                    d4:13:8d:b3:99:0c:d2:bd:e9:a6:5a:58:19:3a:28:
                    b9:4a:9a:ea:ca:48:e4:0c:fa:20:96:d2:83:5d:41:
                    09:d7:96:99:6c:dc:cf:89:19:b3:93:50:88:14:ab:
                    5b:c2:70:ac:15:71:17:7f:51:a0:f1:d1:b2:04:22:
                    4d:1e:e2:ab:9d:93:51:fb:98:09:9d:7a:09:3b:cf:
                    ff:35:2a:46:60:85:09:ad:62:c8:23:72:fc:95:85:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:1E:55:8D:E6:6F:BC:38:64:2F:35:63:2C:AF:CD:A5:FF:02:52:6F
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235342e302f32332d3233203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:08:ab:db:a9:56:44:26:ba:02:23:ae:58:a9:76:a3:10:4b:
         51:da:7a:5e:14:92:bd:75:99:98:4b:fe:a3:a9:bb:ce:64:59:
         15:62:8d:97:65:fd:ac:01:bb:2e:6e:98:48:9c:a8:b2:35:a1:
         80:81:e4:0c:c2:81:8a:0e:6a:60:57:15:26:5b:b9:db:70:7b:
         59:54:df:d3:90:18:17:49:c3:6d:8e:81:48:1a:82:81:e3:37:
         b6:09:a1:83:fa:a3:58:ab:9e:96:a0:58:1e:53:a9:f3:b2:41:
         bf:24:30:89:b2:2f:a1:5b:03:64:6c:db:26:bb:0d:c3:03:7c:
         7e:83:0e:13:37:93:9d:41:e8:24:cb:39:16:1e:73:2e:fa:22:
         bf:7f:4d:7b:d7:c7:0a:e5:c7:2e:b5:db:04:16:33:e9:f5:9b:
         0b:e6:4e:1b:ed:c3:22:f9:1b:40:16:bb:a8:6d:d4:90:37:87:
         59:f6:7d:48:89:ef:1f:5a:da:6d:22:19:d5:e7:91:12:d3:d8:
         17:0b:cd:ff:87:8f:2b:cd:5b:ff:3f:fa:76:a2:af:aa:d9:66:
         cb:2e:dc:0a:ad:71:d0:38:87:10:cd:f1:ab:c3:56:3b:72:28:
         8d:4e:e5:62:28:f9:ad:85:63:88:8d:10:44:f9:4d:ae:d0:e3:
         a2:6f:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org