Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/3133382e39372e38342e302f32322d3234203d3e20323634313338.roa
File:                     3133382e39372e38342e302f32322d3234203d3e20323634313338.roa (raw, json)
Hash identifier:          7a8MuXLKF0wXgrD+NL5vskI+aMkjfK/kDSgmPiDuJMw=
Subject key identifier:   7E:F9:C9:99:BD:5D:40:93:D8:37:06:02:03:6F:F1:F7:79:45:CF:35
Certificate issuer:       /CN=E888AE22F26E58E48489B85354DE954F749C9280
Certificate serial:       4BCE59E6B254BB53C02EAAFCACAB97752C402374
Authority key identifier: E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E888AE22F26E58E48489B85354DE954F749C9280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/3133382e39372e38342e302f32322d3234203d3e20323634313338.roa
Signing time:             Fri 12 Apr 2024 13:11:32 +0000
ROA not before:           Fri 12 Apr 2024 13:06:32 +0000
ROA not after:            Sat 12 Apr 2025 13:11:32 +0000
asID:                     264138
IP address blocks:        138.97.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ce:59:e6:b2:54:bb:53:c0:2e:aa:fc:ac:ab:97:75:2c:40:23:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E888AE22F26E58E48489B85354DE954F749C9280
        Validity
            Not Before: Apr 12 13:06:32 2024 GMT
            Not After : Apr 12 13:11:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d1:5d:14:1d:62:ef:92:54:91:51:87:50:b9:
                    c7:29:f3:44:7d:8d:b2:75:09:e3:3b:80:e8:84:11:
                    81:64:b5:c9:22:a3:51:ee:af:19:0e:0a:38:79:75:
                    7c:44:d9:d8:b3:66:44:e4:e5:0c:92:b2:7d:e4:af:
                    42:55:96:f8:c4:df:ab:62:04:0c:6a:cf:59:e8:78:
                    6c:13:ed:36:90:84:e5:86:ac:95:ed:e3:b0:00:c1:
                    b7:75:7b:73:16:0e:3f:47:08:9b:b7:b5:42:fb:ac:
                    d2:63:01:b9:7c:28:27:77:72:3d:5d:7e:60:30:25:
                    1c:ea:0a:1d:b8:f8:d1:ef:56:87:ba:fe:67:63:fb:
                    73:9f:31:89:e5:bf:94:96:ca:0c:c2:57:64:3b:95:
                    45:bf:10:97:3d:e9:07:ed:89:08:2f:73:01:d4:a3:
                    92:74:6e:5f:f3:83:4f:16:61:37:2c:66:05:35:a7:
                    ca:05:82:d6:ae:da:8d:03:1e:39:03:0a:9b:02:e6:
                    a3:ab:a5:74:bd:4a:13:b3:ca:6d:ec:25:fa:b9:0d:
                    04:c4:c2:26:9d:34:d9:1f:d3:b2:a8:06:90:09:e2:
                    51:05:76:de:39:da:94:cd:1a:fd:c9:2a:1f:93:f4:
                    6a:7c:80:b6:c7:25:51:3f:ac:e8:ae:fc:0f:92:54:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:C9:99:BD:5D:40:93:D8:37:06:02:03:6F:F1:F7:79:45:CF:35
            X509v3 Authority Key Identifier:
                keyid:E8:88:AE:22:F2:6E:58:E4:84:89:B8:53:54:DE:95:4F:74:9C:92:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/E888AE22F26E58E48489B85354DE954F749C9280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E888AE22F26E58E48489B85354DE954F749C9280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63MNzjiMyBtgq1ft2Aapq3YcjjwnWKskZBLH1jvBrSDv/1/3133382e39372e38342e302f32322d3234203d3e20323634313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:e9:1e:a6:8b:62:5d:17:e5:4d:9f:1c:a0:7d:8f:44:c8:98:
         50:e5:b3:30:ba:e9:c1:dc:82:37:59:6b:0c:7f:70:ca:75:4f:
         b1:97:a3:93:9c:c8:bd:77:26:70:8f:97:a4:76:f8:22:b1:60:
         59:86:76:05:86:22:f1:96:fc:28:0e:61:2b:0e:e0:e5:ce:e8:
         28:ea:97:b0:fb:3d:1f:29:15:46:9c:2d:89:a9:08:d4:b4:7c:
         91:34:f7:48:84:d5:50:69:c8:3b:f1:b6:ff:26:a5:86:45:5c:
         f8:fd:03:f9:d5:9e:98:f0:1b:68:36:cd:2c:59:19:a4:57:6e:
         ca:a3:be:11:4a:95:ac:e8:3a:1b:cd:3f:3f:7d:0a:eb:b3:5d:
         8c:4a:18:3b:b2:53:32:41:da:94:6a:a5:45:1e:47:64:2d:71:
         68:26:99:19:aa:ad:3c:c3:88:30:9d:f4:d8:f2:41:4f:ea:45:
         5a:9d:10:ce:fc:0a:46:72:af:da:6f:d4:0c:1b:c8:68:a9:a1:
         e5:6e:47:31:bb:b8:b9:ef:5a:9e:00:d8:dc:b8:8b:6c:d7:7c:
         74:cc:5a:7e:55:69:8f:2e:95:29:e3:b5:b8:d7:a6:e6:f9:93:
         68:86:dd:ae:87:0d:76:a0:3a:16:09:24:c8:8a:ba:21:27:80:
         f6:3a:d5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:04 2024 by rpki-client on console-ams.rpki-client.org