Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
File:                     3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          xVxOfYVoMC77frcSzfSrn9cVrgQWlfkh9PoMjZZyBzU=
Subject key identifier:   52:4A:A6:81:7B:A3:27:37:5C:E9:2D:6E:A1:A7:95:12:CC:28:09:24
Certificate issuer:       /CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
Certificate serial:       02843B6738BC6733B4E09E0478054610C1995F67
Authority key identifier: 7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa
Signing time:             Mon 04 Dec 2023 22:31:38 +0000
ROA not before:           Mon 04 Dec 2023 22:26:38 +0000
ROA not after:            Mon 02 Dec 2024 22:31:38 +0000
asID:                     264163
IP address blocks:        138.97.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:84:3b:67:38:bc:67:33:b4:e0:9e:04:78:05:46:10:c1:99:5f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FE0F22C7FC909A759F205D5F392B7F33D0E650B
        Validity
            Not Before: Dec  4 22:26:38 2023 GMT
            Not After : Dec  2 22:31:38 2024 GMT
        Subject: CN=524AA6817BA327375CE92D6EA1A79512CC280924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b9:b8:1d:25:0b:ce:36:7d:15:b4:67:9d:65:
                    97:0c:6a:d9:8a:e4:bb:16:00:17:05:90:2f:a8:18:
                    00:f5:b7:48:99:47:59:fe:93:1d:97:8b:9e:18:bb:
                    34:95:a3:c2:9e:76:b8:00:ea:b1:3f:5e:30:33:b5:
                    fc:a1:ec:af:ed:5b:15:2b:0c:28:41:9d:24:19:3c:
                    dd:78:bc:54:e7:51:aa:c9:53:e5:06:60:68:a0:1d:
                    56:89:4a:51:33:51:30:f4:f0:5f:6c:5b:13:42:c3:
                    0b:a1:21:6b:46:a9:30:08:c8:d2:e5:28:74:ce:55:
                    ff:7b:9f:7b:cb:d6:4b:78:da:2e:3c:52:31:71:60:
                    7c:3f:fe:37:a0:28:aa:a7:7c:df:6e:c9:33:81:72:
                    48:33:7f:df:42:14:5c:83:d0:3a:53:a7:48:67:1f:
                    b9:8e:4d:52:12:80:14:c8:9c:c6:f1:03:56:4b:00:
                    d4:c8:dd:7a:50:8c:8b:c7:a0:fe:72:44:64:bf:3e:
                    3d:f1:a6:c9:a8:cc:bc:39:ac:35:91:e7:4d:14:ef:
                    25:d9:2d:1e:c9:d9:1d:39:83:e7:56:49:5b:88:00:
                    ad:97:64:4b:c9:47:68:62:8f:8c:62:37:43:e4:91:
                    a5:8f:04:51:8d:42:1a:b3:41:86:1b:8b:8c:20:df:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4A:A6:81:7B:A3:27:37:5C:E9:2D:6E:A1:A7:95:12:CC:28:09:24
            X509v3 Authority Key Identifier:
                keyid:7F:E0:F2:2C:7F:C9:09:A7:59:F2:05:D5:F3:92:B7:F3:3D:0E:65:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FE0F22C7FC909A759F205D5F392B7F33D0E650B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:6a:01:dd:7c:a8:7d:2c:8f:db:81:ab:d2:b5:98:f7:73:
         90:5a:39:59:91:7f:b6:19:80:69:76:64:94:bd:26:fc:26:ac:
         f7:1a:d9:5b:95:cd:1a:33:46:cd:5e:09:f0:e3:91:e6:64:ff:
         79:19:e1:21:7e:a7:c1:39:ff:4f:df:32:5b:b2:58:b0:8e:17:
         87:a6:4f:e8:e4:99:55:5c:6e:ce:53:60:f0:e7:3c:28:8f:dd:
         2d:9b:fb:3c:4a:ee:22:ba:19:3b:30:c5:ae:50:df:38:01:ab:
         a2:16:37:87:97:3f:3b:2f:7a:dc:8f:a0:cc:d2:ed:10:27:7c:
         a2:4f:14:82:9c:85:0c:11:1a:1d:4d:f2:78:8d:05:85:c9:fe:
         17:85:9e:0a:2f:a4:d2:54:77:67:d2:33:c0:4f:b9:1a:38:1f:
         5a:2b:3a:e4:62:60:ff:ac:9a:52:74:f3:07:e0:b8:95:ea:74:
         8f:98:ca:93:a8:cd:83:47:b6:fa:f7:3c:a3:5a:99:13:f8:73:
         05:8c:0d:b7:d2:45:46:73:9b:da:b5:54:c6:93:77:f8:27:3e:
         b8:c5:59:d8:94:3b:14:11:47:f8:4e:f6:9e:13:ed:42:89:86:
         79:f6:56:19:55:db:5b:9f:e0:35:5b:7f:d3:0e:a5:ab:12:91:
         eb:92:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org