Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131352e302f32342d3234203d3e20323634313633.roa
File:                     3133382e39372e3131352e302f32342d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          a5UHC+ee/Hjc2exzOISJiSoRLn5oWDa1h7EeiIbjJ54=
Subject key identifier:   2B:90:AC:53:AA:00:A8:05:7C:03:2F:F3:A0:9D:D4:51:21:65:41:79
Certificate issuer:       /CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
Certificate serial:       33CA0AEC3E86139A9D02914AC5136A966D5B4435
Authority key identifier: FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131352e302f32342d3234203d3e20323634313633.roa
Signing time:             Mon 27 Mar 2023 13:10:51 +0000
ROA not before:           Mon 27 Mar 2023 13:05:51 +0000
ROA not after:            Mon 25 Mar 2024 13:10:51 +0000
asID:                     264163
IP address blocks:        138.97.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ca:0a:ec:3e:86:13:9a:9d:02:91:4a:c5:13:6a:96:6d:5b:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Validity
            Not Before: Mar 27 13:05:51 2023 GMT
            Not After : Mar 25 13:10:51 2024 GMT
        Subject: CN=2B90AC53AA00A8057C032FF3A09DD45121654179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:ea:fa:95:a3:0e:e3:db:ea:bb:64:94:d9:
                    f4:c5:8c:d4:a9:4f:71:d0:ba:7f:72:8e:d8:39:95:
                    cd:1f:1f:32:74:85:86:a0:47:bc:f1:54:82:2a:a3:
                    04:a9:9f:7d:2d:eb:c6:a4:8e:d6:02:2a:9a:57:ab:
                    42:07:7e:96:f1:b8:8f:fa:45:e2:3d:da:49:1d:1d:
                    36:a0:d6:eb:07:a1:d1:ba:2b:b0:b8:33:64:39:28:
                    7d:54:19:51:62:b9:19:00:ef:af:72:dc:47:5b:79:
                    80:cf:34:11:43:3a:9c:fc:0d:f8:31:3b:8a:d4:b4:
                    a8:6c:2e:65:2c:a2:2f:d1:16:1b:9f:55:8e:e8:d3:
                    69:88:68:b2:1e:28:cc:69:e6:02:7b:02:e1:23:eb:
                    d6:82:f8:6b:6a:dc:70:f2:0d:2a:4d:c2:63:56:14:
                    5b:14:e3:c3:2d:55:c2:72:e7:4b:18:0b:37:88:42:
                    9d:7c:cf:36:0d:25:91:5e:b2:a5:13:52:ad:52:fe:
                    a0:4f:4a:24:48:a7:04:80:a6:77:69:d8:44:30:76:
                    ee:6b:22:1a:a1:25:8b:dd:b8:75:72:ef:ea:76:37:
                    60:4a:40:6a:97:1e:37:b9:c8:88:49:85:95:28:45:
                    3a:ce:10:b8:eb:61:dc:30:5b:86:88:20:ee:10:05:
                    99:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:AC:53:AA:00:A8:05:7C:03:2F:F3:A0:9D:D4:51:21:65:41:79
            X509v3 Authority Key Identifier:
                keyid:FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131352e302f32342d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:26:04:78:59:03:c8:63:4c:50:0f:c5:3b:97:c8:fb:33:60:
         38:4b:0a:c1:d2:69:a9:d9:a0:3c:b0:5a:0c:24:2e:44:20:25:
         68:c6:90:1f:d2:14:39:50:3b:76:17:e7:b6:a6:5b:00:e3:49:
         98:68:65:0d:3a:6f:f2:33:16:bd:b6:c4:3c:36:ee:de:bd:14:
         28:fd:64:3f:f3:0a:32:93:ca:d8:14:d8:12:f4:85:ae:4b:4b:
         99:60:a6:f0:d4:ee:0e:c8:cf:6d:e2:32:bc:71:ea:a9:92:c0:
         c8:9c:6e:11:c9:26:80:36:71:aa:a2:f5:fd:c1:1b:8a:8a:f2:
         59:8c:a7:79:b4:50:7f:9d:b1:7d:3b:10:10:90:a2:a0:93:94:
         2b:98:4e:59:c0:12:c5:37:a2:08:8e:04:fb:39:e0:94:f7:fe:
         14:51:69:40:cf:1f:a6:37:15:97:67:0e:20:50:0e:14:a9:48:
         30:7e:91:5d:a1:13:7b:5a:cd:08:30:5f:d8:c9:fd:2e:19:ea:
         8b:c6:9f:56:b4:61:3b:34:01:93:9d:12:40:34:aa:7d:0c:fa:
         c1:bf:db:f8:ac:fb:d9:96:4b:bc:99:24:c4:02:0c:f7:10:52:
         19:24:76:b8:6c:7f:b6:1c:c8:71:60:21:6a:07:42:c4:c0:ae:
         40:67:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org