Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39372e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          0vkL2z+l2vBBWUeCtIJF1hri3n/vlVz1Mw5RE3dndeQ=
Subject key identifier:   27:D2:66:43:D2:3E:6F:7C:27:B5:75:F0:B5:23:3B:B6:D7:EE:CF:11
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       738B5999CEA1EA3F09B782652997512308F5A1B3
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:26 +0000
ROA not before:           Mon 11 Dec 2023 14:00:26 +0000
ROA not after:            Mon 09 Dec 2024 14:05:26 +0000
asID:                     264137
IP address blocks:        138.97.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8b:59:99:ce:a1:ea:3f:09:b7:82:65:29:97:51:23:08:f5:a1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:26 2023 GMT
            Not After : Dec  9 14:05:26 2024 GMT
        Subject: CN=27D26643D23E6F7C27B575F0B5233BB6D7EECF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:f1:11:1d:29:ad:97:61:23:98:05:7a:c2:
                    0e:40:44:ea:40:28:df:a0:de:59:ed:27:43:90:7d:
                    84:97:40:86:11:28:80:95:de:31:dd:b6:96:dc:b8:
                    f3:5b:68:4d:9b:e6:3f:fc:4c:4f:59:ae:35:7b:45:
                    4a:bf:8b:6d:90:cb:57:35:bd:e7:1b:fe:8b:ae:68:
                    96:0e:57:c5:f2:1c:df:51:8d:90:80:b3:07:c2:a5:
                    dc:19:c5:bd:78:c1:dd:c9:1c:9c:44:5d:81:05:a4:
                    36:67:a4:12:58:9f:fc:bc:26:2f:f7:e5:ed:af:58:
                    1c:e2:a1:c7:c9:86:74:50:2f:17:6b:d6:c7:63:4e:
                    a7:64:e9:2a:7c:23:b3:36:37:3d:8d:00:d5:5b:75:
                    7a:04:f4:cb:46:83:fa:63:ed:bc:b0:ab:b1:c6:8b:
                    6c:b3:04:b9:f5:95:12:79:81:8a:29:5c:f7:de:d7:
                    78:80:00:4f:c3:37:7a:1d:13:67:42:98:d2:ff:05:
                    2b:2e:5a:0f:f1:07:c1:08:67:8b:4b:cb:6b:b2:99:
                    df:e6:31:64:e2:2c:97:20:ac:5e:98:c6:d1:17:9a:
                    7d:a9:52:15:3c:2b:c8:64:76:d2:8d:85:a1:7a:92:
                    7b:21:b9:29:00:5b:9d:f3:6f:92:94:d4:cf:83:96:
                    bb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:66:43:D2:3E:6F:7C:27:B5:75:F0:B5:23:3B:B6:D7:EE:CF:11
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39372e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:96:eb:14:9b:41:9f:e0:dc:c7:40:40:23:a0:0b:2d:14:aa:
         cf:18:d3:e4:91:85:25:e9:34:7e:ba:4b:76:4f:e0:92:d6:c7:
         dd:fe:63:f5:fe:2c:df:ee:0f:dc:41:73:27:04:36:53:6d:e0:
         5f:02:df:7f:b0:91:0f:59:ad:d8:bd:f5:1f:4f:ef:e5:0e:9d:
         9a:93:5c:51:72:71:df:2c:7f:55:4e:60:72:68:8a:cb:c6:ae:
         15:93:f5:58:09:99:e2:77:40:9a:16:90:4f:bd:0d:83:ab:f2:
         58:3e:6b:52:fa:05:2a:28:a2:d6:47:20:50:5a:13:02:72:05:
         af:71:bc:37:bb:1a:38:cb:8d:a2:71:92:ea:66:f0:34:47:5f:
         a1:6a:e7:79:1c:8b:f8:c0:f4:61:2f:77:ce:57:a8:2e:fc:ac:
         ea:21:00:f1:fd:9f:a8:5b:7e:ae:f9:a2:9d:c1:9b:4a:e8:88:
         47:3f:2d:b3:23:f8:8e:ea:f5:2f:d9:28:4f:cb:2a:99:b0:c9:
         41:07:57:5b:5c:21:70:fe:c8:5d:94:42:42:76:f6:66:ee:29:
         66:c7:8c:ed:53:82:73:9c:98:bb:eb:32:a1:45:98:93:e5:06:
         1f:b9:6a:d7:d5:1e:a0:1e:db:65:9c:92:54:d8:40:0d:65:94:
         2a:9d:25:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org