Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
File:                     3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa (raw, json)
Hash identifier:          E1f9oP4UiZALsi3ERVo1FTLMw8tcXw/eSFcKbKz2jAA=
Subject key identifier:   E3:09:18:96:26:E1:CE:B6:33:8B:C2:56:66:8C:C9:2F:0C:4D:02:47
Certificate issuer:       /CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
Certificate serial:       0B5B12C089359077B38C43241F8281078756CC1F
Authority key identifier: 6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa
Signing time:             Wed 25 Oct 2023 12:20:58 +0000
ROA not before:           Wed 25 Oct 2023 12:15:58 +0000
ROA not after:            Fri 25 Oct 2024 12:20:58 +0000
asID:                     264201
IP address blocks:        138.97.208.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5b:12:c0:89:35:90:77:b3:8c:43:24:1f:82:81:07:87:56:cc:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862
        Validity
            Not Before: Oct 25 12:15:58 2023 GMT
            Not After : Oct 25 12:20:58 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:7e:ea:65:aa:b5:bd:af:77:d1:c5:68:e2:
                    7e:7f:66:22:cf:d8:f7:3b:62:4c:76:bd:07:61:8c:
                    6d:74:89:5b:5d:57:d1:36:93:60:6f:ce:de:8f:cc:
                    50:39:4f:af:cb:14:0e:5c:25:cd:d3:bf:f0:44:bc:
                    37:7b:2a:87:f7:18:6c:aa:f9:08:be:98:60:d6:27:
                    71:11:f5:bf:6b:59:f4:80:21:09:db:24:d6:c1:c7:
                    1f:64:55:13:17:72:a6:83:92:7c:ed:35:e6:f5:62:
                    ad:87:6a:3c:fd:0b:77:34:02:ee:19:63:c9:2d:77:
                    e1:4c:d9:6c:d1:c5:b3:c3:43:3e:bc:5a:0c:85:67:
                    27:79:58:cc:c9:9d:39:41:72:c4:9d:5e:ce:bf:54:
                    7c:20:16:56:62:f3:58:da:63:15:25:47:f6:30:b9:
                    bb:8b:84:b0:72:67:0a:7b:7c:c8:ea:21:e5:a4:f8:
                    db:da:4e:c7:76:87:ef:6a:50:d5:a4:e7:27:2f:00:
                    98:52:5f:64:70:4b:3a:bc:b9:e7:32:e8:0f:12:9f:
                    6a:06:a0:71:2f:2d:73:2c:4f:ff:c3:a8:34:5c:25:
                    f2:ae:e0:0f:80:f4:b4:af:9a:e0:b1:ef:90:c3:ea:
                    15:e4:41:77:7b:08:08:85:d8:64:b4:c8:62:7f:a1:
                    bc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:09:18:96:26:E1:CE:B6:33:8B:C2:56:66:8C:C9:2F:0C:4D:02:47
            X509v3 Authority Key Identifier:
                keyid:6A:23:AA:2A:FC:E2:E3:27:B2:ED:F3:EF:40:EB:D1:22:CC:BA:88:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A23AA2AFCE2E327B2EDF3EF40EBD122CCBA8862.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2XGnt8sGUQNXJCxqjHh3stMcMw4qmdZnAyjEXCcQSDAF/0/3133382e39372e3230382e302f32322d3332203d3e20323634323031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:40:65:bb:3c:13:67:7e:a4:73:c8:53:18:cb:23:fe:3e:
         d2:dd:8e:0d:ed:75:92:b5:95:e8:a8:73:f4:a1:14:53:e4:c4:
         0d:3b:f5:ad:ef:fb:cf:2f:1e:c8:c3:d0:3d:ab:87:d6:d0:09:
         72:e3:2b:f6:4a:79:d8:c0:d5:85:28:7c:ac:43:4e:02:4b:60:
         42:aa:5c:2d:42:ac:e9:ae:d3:5c:22:1e:53:b4:95:e1:e6:68:
         f7:d1:3d:a7:97:86:bd:ab:ac:4c:57:24:a6:b1:e7:c9:08:4c:
         da:ad:f7:a7:af:37:cd:d1:c5:48:49:4b:f2:bb:26:79:03:29:
         2d:1c:2c:66:a0:2a:1c:3c:a1:a6:b8:cd:ac:36:dd:d6:00:1b:
         1c:90:99:8b:b5:f2:1f:55:f8:d7:50:93:23:87:93:e7:f0:1b:
         a7:15:dc:c5:b4:e9:5e:77:59:a5:52:78:77:22:6a:85:a9:39:
         a2:99:52:a7:fc:72:31:2e:c3:fd:30:ff:be:40:e8:0a:61:bf:
         d7:4c:3e:0f:15:13:98:d5:a3:75:59:32:5d:0f:34:6e:f2:a4:
         ce:22:d4:21:bf:55:1b:df:74:a7:65:47:d5:94:b9:06:0d:97:
         b6:ad:f2:69:7b:f2:4c:8b:aa:d7:5a:09:a7:de:90:6b:60:ed:
         82:65:d7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org