Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3332203d3e20323634313632.roa
File:                     3133382e39372e3131362e302f32322d3332203d3e20323634313632.roa (raw, json)
Hash identifier:          WlNRsv0C1SPvx357we5JnxR7MvQ43+jvDowoewL7Emw=
Subject key identifier:   3C:69:CE:55:10:3A:F9:11:7C:D7:92:E4:76:99:E0:53:A8:3C:8F:41
Certificate issuer:       /CN=574500A1D4795583CC49317322D2ACF95685FAD9
Certificate serial:       23808EEFD1B77C552E09BD513B080A75D16BFFB3
Authority key identifier: 57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574500A1D4795583CC49317322D2ACF95685FAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3332203d3e20323634313632.roa
Signing time:             Wed 26 Jun 2024 20:36:58 +0000
ROA not before:           Wed 26 Jun 2024 20:31:58 +0000
ROA not after:            Wed 25 Jun 2025 20:36:58 +0000
asID:                     264162
IP address blocks:        138.97.116.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:80:8e:ef:d1:b7:7c:55:2e:09:bd:51:3b:08:0a:75:d1:6b:ff:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574500A1D4795583CC49317322D2ACF95685FAD9
        Validity
            Not Before: Jun 26 20:31:58 2024 GMT
            Not After : Jun 25 20:36:58 2025 GMT
        Subject: CN=3C69CE55103AF9117CD792E47699E053A83C8F41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:df:ab:d3:9b:53:3d:92:8f:0e:e5:db:3f:
                    f8:e5:e1:8e:54:b5:27:77:72:38:31:10:87:8f:bb:
                    fe:6c:59:02:da:ee:a6:e5:14:ee:77:aa:f9:f7:52:
                    cf:8a:54:c3:d6:bc:0c:c6:52:52:0f:70:0e:df:d6:
                    55:fa:90:04:0b:58:a2:50:ce:b8:a2:59:a6:19:e6:
                    67:b3:26:d1:11:be:5c:da:7b:74:46:ab:df:8f:d8:
                    5c:68:84:54:16:3c:cc:cb:c3:49:f1:c6:3a:7a:4d:
                    93:6f:49:3a:28:a1:82:82:b4:4e:d9:83:2f:d6:c1:
                    88:99:02:9c:f1:46:ca:25:e1:b9:1b:c5:91:7a:d5:
                    94:47:7d:35:8a:b0:76:a1:4b:7a:4b:66:d3:32:f3:
                    99:20:a1:61:73:8f:80:84:d8:11:97:53:f4:21:f2:
                    e0:6c:93:8e:db:3c:d4:3e:2f:81:31:67:ff:e6:29:
                    a8:7a:66:91:52:89:ec:2e:a7:7e:a7:c7:20:2b:68:
                    d0:9c:c1:97:84:a3:bf:02:1b:b5:20:4e:60:09:85:
                    48:45:a2:bd:7c:05:8a:64:bc:25:f9:a2:e5:71:bf:
                    14:f6:0e:a0:1e:fe:7d:b7:19:38:b9:8e:f2:69:65:
                    69:6b:7d:da:e1:07:89:34:4a:82:36:6e:75:a0:03:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:CE:55:10:3A:F9:11:7C:D7:92:E4:76:99:E0:53:A8:3C:8F:41
            X509v3 Authority Key Identifier:
                keyid:57:45:00:A1:D4:79:55:83:CC:49:31:73:22:D2:AC:F9:56:85:FA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/574500A1D4795583CC49317322D2ACF95685FAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/574500A1D4795583CC49317322D2ACF95685FAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2drmp2dpj2VKzvG9fedgCxk7VnJrifgLqA1B8br6gCSR/0/3133382e39372e3131362e302f32322d3332203d3e20323634313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:3f:9d:43:a5:c4:51:bf:09:64:60:db:79:2c:77:71:58:62:
         c3:d0:cf:ba:12:5e:a2:2b:f2:3f:04:3d:3c:69:2c:a9:b0:bb:
         98:0c:f5:0c:95:9a:7d:40:78:37:44:91:13:f1:9d:74:ab:1b:
         ad:dd:2b:44:a6:bd:c8:9b:0f:1a:3d:85:15:e6:99:8f:61:d8:
         ff:7a:07:ae:29:ef:14:00:4c:2b:55:58:31:b1:cf:f9:a3:f3:
         42:ea:9b:5f:47:9d:38:cb:79:51:89:8f:5c:38:8c:31:01:f4:
         91:06:ce:3c:68:f3:b5:58:c0:d3:1d:39:ab:ef:e7:ed:58:c4:
         c2:9c:54:75:e8:74:ec:34:21:37:13:53:47:7a:43:58:ad:09:
         2f:d6:24:80:76:e2:0c:da:fd:f5:d1:51:ff:4b:90:53:e5:66:
         1e:85:4d:1d:31:53:9f:cb:7e:aa:04:b0:42:06:26:d5:60:a4:
         09:e6:a5:e8:02:ab:dc:0e:16:ce:46:d8:b6:04:ad:6d:d4:0e:
         32:e2:97:23:2d:6a:3c:0a:38:fb:88:1b:42:b5:c0:d2:16:08:
         3a:81:c0:cd:13:64:45:d2:2c:18:de:a6:62:4e:be:bd:60:ec:
         3f:24:86:7f:71:db:e9:34:b8:b7:28:8e:13:72:10:6b:65:56:
         fe:86:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:21:25 2024 by rpki-client on console-ams.rpki-client.org