Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
File:                     3133382e39372e34302e302f32322d3234203d3e20323634313230.roa (raw, json)
Hash identifier:          6llvcFd8UDXhp1Vz+2oZJORdL0mHjxK1JfP0E3GX7MY=
Subject key identifier:   35:33:67:F4:AC:DF:A6:7E:F1:0A:38:DA:D9:A1:9F:64:BD:8F:72:91
Certificate issuer:       /CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
Certificate serial:       640A3D4DE49577EDE6EA0E66609FF51AA579B140
Authority key identifier: 32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa
Signing time:             Fri 23 Feb 2024 12:18:27 +0000
ROA not before:           Fri 23 Feb 2024 12:13:27 +0000
ROA not after:            Fri 21 Feb 2025 12:18:27 +0000
asID:                     264120
IP address blocks:        138.97.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0a:3d:4d:e4:95:77:ed:e6:ea:0e:66:60:9f:f5:1a:a5:79:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295B9AB4DA3695748C7EEA28733CEF3C4265285
        Validity
            Not Before: Feb 23 12:13:27 2024 GMT
            Not After : Feb 21 12:18:27 2025 GMT
        Subject: CN=353367F4ACDFA67EF10A38DAD9A19F64BD8F7291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:1c:fa:40:02:ed:3f:9b:8f:2a:3d:c2:c3:
                    60:d4:27:3d:58:96:66:70:19:bf:d7:c5:36:6b:bd:
                    ae:99:f0:1f:23:e0:36:13:55:5f:8b:2d:1a:59:38:
                    c1:e2:cc:33:fe:8c:fe:fa:0b:04:1c:b0:9c:80:40:
                    29:01:19:08:d3:37:c1:c9:e1:e6:5b:79:35:7e:a5:
                    22:bb:3f:78:60:00:72:0e:c9:b0:27:6f:3b:9d:33:
                    80:8e:e6:82:0b:a0:73:54:a4:18:72:ea:c4:51:c3:
                    ec:d3:d6:d3:53:76:83:0a:f7:ad:ca:b8:7a:bd:3f:
                    02:06:ef:0e:e4:c9:e8:94:a1:2b:3d:03:39:88:01:
                    a5:02:99:62:9c:d1:47:1b:b4:6d:10:fc:c4:17:ef:
                    49:a9:c5:67:06:71:e3:a5:fc:4d:92:63:a6:de:09:
                    df:d1:21:a4:e4:8c:85:a9:09:ed:25:f1:e2:0a:c9:
                    6c:2d:a9:1e:99:85:6d:e3:3d:de:24:d5:ce:bc:6b:
                    44:d1:9d:90:76:79:9b:b8:d4:02:d8:e6:ea:d1:fe:
                    e8:6a:8b:d9:f0:2c:eb:17:18:aa:b9:9a:1f:fa:08:
                    13:8e:3d:4b:7b:9f:5f:5f:67:b2:2f:4d:2d:e8:4f:
                    90:a0:38:0c:eb:a7:82:00:9c:e3:2b:7d:bd:75:d6:
                    79:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:67:F4:AC:DF:A6:7E:F1:0A:38:DA:D9:A1:9F:64:BD:8F:72:91
            X509v3 Authority Key Identifier:
                keyid:32:95:B9:AB:4D:A3:69:57:48:C7:EE:A2:87:33:CE:F3:C4:26:52:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3295B9AB4DA3695748C7EEA28733CEF3C4265285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295B9AB4DA3695748C7EEA28733CEF3C4265285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YV9GyQg2aAEp3fbGkQu3VdDvMPyty1zzVR6bmPHKCpu/1/3133382e39372e34302e302f32322d3234203d3e20323634313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:f2:69:31:21:c9:8f:ba:3b:a8:84:98:d8:75:3c:8e:fe:af:
         22:ac:93:61:0c:4a:d1:3c:f2:89:51:05:56:3c:69:58:74:61:
         e2:43:a4:b8:ae:62:df:99:5f:92:1b:36:b2:dd:46:db:f3:e9:
         3e:92:69:9c:dd:03:62:aa:0f:dd:d4:02:0d:6f:31:ce:3f:6c:
         8f:59:11:5b:04:c9:73:1a:ac:a8:32:74:9b:94:ae:eb:cd:5b:
         81:c4:eb:96:e8:4d:3f:ee:1f:74:ff:c7:9c:d1:14:06:ca:f7:
         cf:ed:0a:e7:c2:22:27:6e:8d:6b:31:4f:44:a0:8c:82:bd:21:
         94:45:33:4b:73:91:13:84:a2:38:d2:3c:5e:92:43:4c:28:33:
         5e:21:27:0e:52:9d:b9:e6:55:4d:42:26:85:e0:e2:e0:0e:c7:
         3a:f5:63:5b:9c:43:30:b4:3c:90:ff:d4:84:06:29:0c:f2:fc:
         80:6f:60:e9:79:27:f3:6e:fa:51:0a:d0:8d:52:37:2f:2d:77:
         32:5f:32:6b:9e:83:82:05:9c:ae:79:2d:70:90:3b:80:a0:ab:
         7e:24:04:83:de:dd:13:5d:d6:2d:e4:ac:28:70:00:1f:25:54:
         4f:cc:93:7a:42:c2:ce:f3:03:76:ec:51:dc:64:f4:04:fa:6a:
         07:86:21:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org