Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
File:                     3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (raw, json)
Hash identifier:          bJ59EZq4yy29+bz7tESdPVIfEzNNbW4jApQS0L9kSWY=
Subject key identifier:   D5:7C:DC:39:E1:C8:68:D4:5A:EA:F9:74:99:52:32:FE:20:8C:2E:CF
Certificate issuer:       /CN=33699CF3A1A5B6B2E3A60A2EA3F96019106FD530
Certificate serial:       61274D1391D57A8AD61ABF5CDC5598F64BA22C09
Authority key identifier: 33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
Signing time:             Fri 08 Dec 2023 20:14:45 +0000
ROA not before:           Fri 08 Dec 2023 20:09:45 +0000
ROA not after:            Fri 06 Dec 2024 20:14:45 +0000
asID:                     264202
IP address blocks:        138.97.216.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:27:4d:13:91:d5:7a:8a:d6:1a:bf:5c:dc:55:98:f6:4b:a2:2c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33699CF3A1A5B6B2E3A60A2EA3F96019106FD530
        Validity
            Not Before: Dec  8 20:09:45 2023 GMT
            Not After : Dec  6 20:14:45 2024 GMT
        Subject: CN=D57CDC39E1C868D45AEAF974995232FE208C2ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:09:0a:6a:5e:90:3b:9e:e4:ad:fc:85:b9:
                    64:a7:ba:73:61:19:f5:d0:fc:28:ed:1d:e3:bc:9d:
                    68:a2:78:a2:bc:55:e8:2f:90:5d:ab:15:08:f7:a5:
                    ef:06:7f:db:37:92:3d:00:56:eb:eb:07:04:c8:d2:
                    4c:d7:cc:3e:0f:4d:59:38:1b:05:e9:10:9d:fa:a3:
                    09:34:18:b3:79:5c:6d:04:d1:15:97:38:af:de:9c:
                    6c:8f:1f:ec:8a:76:36:c3:9d:22:91:2b:9c:85:1d:
                    d2:61:7d:9f:d0:2e:fa:91:ff:63:0a:23:d9:f0:ce:
                    d7:a4:71:b5:5b:a6:db:ef:56:65:0d:75:96:2e:f0:
                    d6:b0:9d:da:fe:68:a2:61:79:b6:ee:58:2d:66:02:
                    0d:75:bb:7f:c2:64:86:ce:c5:a3:b5:a1:c8:ce:da:
                    d5:15:2c:46:26:ed:b5:47:29:77:ed:fc:21:8d:e7:
                    00:10:a4:40:b1:fd:a5:19:95:b9:b1:e9:d8:9d:c7:
                    19:f4:6d:6a:78:93:24:90:c6:5b:89:ce:62:da:fb:
                    00:6c:c5:67:eb:b8:16:24:17:e1:b8:5e:08:70:a7:
                    b3:25:d8:56:7d:d7:c1:28:c8:c2:2c:cc:72:cf:f3:
                    be:5e:81:96:e2:15:57:9d:2c:f3:8d:b6:79:1e:d3:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:DC:39:E1:C8:68:D4:5A:EA:F9:74:99:52:32:FE:20:8C:2E:CF
            X509v3 Authority Key Identifier:
                keyid:33:69:9C:F3:A1:A5:B6:B2:E3:A6:0A:2E:A3:F9:60:19:10:6F:D5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33699CF3A1A5B6B2E3A60A2EA3F96019106FD530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/1/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:e5:ff:05:74:21:47:93:5e:40:9a:28:71:ad:cc:a9:3a:26:
         13:5e:dd:26:12:d6:94:6f:75:d1:8c:94:32:e3:84:34:e5:d4:
         2e:54:32:a0:21:33:3e:20:59:f3:92:91:29:ea:89:7e:be:85:
         f3:a6:d4:8f:5e:b6:9d:63:2f:a2:7d:9e:f4:80:2a:f9:b9:13:
         47:53:21:bd:cf:30:19:21:37:1c:40:6e:a3:97:9c:3e:7c:19:
         b7:68:ba:12:8c:31:7c:9e:ae:40:d9:04:df:a4:7b:2c:7b:72:
         31:48:32:11:45:20:61:10:1c:49:f7:0c:66:22:32:b7:69:8d:
         06:01:b4:6b:c7:55:f8:43:54:c0:e3:35:a4:32:7d:b7:6c:f6:
         69:15:b4:45:7d:8f:0f:c2:84:c0:9d:f7:75:f2:5b:e8:40:40:
         79:09:c9:65:a2:d8:15:00:0a:af:2a:a6:4f:17:87:4d:b8:31:
         ab:d4:9d:ea:d3:e0:ea:38:29:86:20:87:dc:4a:51:97:90:e7:
         a1:5a:71:0f:69:cc:70:64:00:48:df:bb:8e:7b:9f:7a:42:f6:
         e9:ce:44:85:71:bf:52:b5:f5:b6:01:37:48:7b:9b:37:2a:ce:
         fa:d4:25:b8:75:0c:86:c8:87:ba:4b:d2:45:a0:f2:99:50:09:
         8a:06:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org