Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
File:                     3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          bCUwMArwnBqsL2eh++Eb61BOkl2etggCFuukVsNR+hk=
Subject key identifier:   69:B7:6D:95:C8:7A:3A:5C:A0:E7:2B:DA:02:B2:88:35:D6:8B:24:10
Certificate issuer:       /CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
Certificate serial:       71AB3E39E291A7ED3C3DB21DB0E6578CBC0E4F49
Authority key identifier: 58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
Signing time:             Fri 01 Mar 2024 10:59:46 +0000
ROA not before:           Fri 01 Mar 2024 10:54:46 +0000
ROA not after:            Fri 28 Feb 2025 10:59:46 +0000
asID:                     264117
IP address blocks:        138.97.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ab:3e:39:e2:91:a7:ed:3c:3d:b2:1d:b0:e6:57:8c:bc:0e:4f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
        Validity
            Not Before: Mar  1 10:54:46 2024 GMT
            Not After : Feb 28 10:59:46 2025 GMT
        Subject: CN=69B76D95C87A3A5CA0E72BDA02B28835D68B2410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:65:f9:68:83:90:69:69:f9:0d:2e:d0:8c:
                    76:f2:e3:25:c3:48:be:04:14:f4:de:04:26:9f:9c:
                    8a:06:49:e9:3d:da:d9:c0:66:8c:77:e6:47:7b:3e:
                    89:b2:c2:a2:81:a9:4d:25:80:80:68:b1:b6:16:0e:
                    17:0d:56:64:17:e1:12:a9:e0:71:6e:e4:0e:ce:7f:
                    ba:90:3c:43:1d:3f:bc:64:c7:c7:04:a0:2d:8f:82:
                    ea:f9:ef:a4:47:d0:0b:79:9d:e1:a8:11:d2:c7:2d:
                    f4:da:ee:89:e2:81:b3:fb:d1:77:07:1c:4a:77:dd:
                    ea:3b:53:2f:22:c9:46:cf:7e:83:57:cb:32:a0:aa:
                    cf:4d:4e:ab:8d:72:bd:41:43:48:f4:52:9f:c2:73:
                    c2:a7:cc:93:75:b7:d6:9b:f3:da:73:66:5b:d5:38:
                    e4:59:42:4f:cf:32:3a:79:cf:49:1a:3f:1f:c5:fc:
                    b7:f4:9b:68:88:93:23:6c:2f:8f:be:99:b1:97:05:
                    ac:12:ae:4e:0c:38:1d:57:76:aa:89:12:39:15:1b:
                    ba:ee:26:7d:15:8d:3e:28:aa:ac:b5:08:97:95:c5:
                    fd:95:36:1f:ee:b4:04:3c:d3:f5:cb:a4:35:82:1c:
                    88:8a:2c:dc:98:bd:61:db:1f:c7:28:e8:91:fe:dc:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B7:6D:95:C8:7A:3A:5C:A0:E7:2B:DA:02:B2:88:35:D6:8B:24:10
            X509v3 Authority Key Identifier:
                keyid:58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:43:66:53:98:57:da:18:ac:07:8a:3f:27:e5:33:52:6f:
         47:0b:84:9d:b0:2a:58:cd:b1:f2:f1:9e:e6:14:2c:6b:07:59:
         0c:a7:09:cc:88:5b:21:e2:a2:9e:20:66:da:55:98:99:16:43:
         f0:0e:92:e8:0a:b3:2c:ba:36:03:71:32:b4:19:ef:e2:75:35:
         3a:bc:9e:fe:c7:42:cc:b5:2c:ac:c8:1b:8a:16:9e:ef:a3:5e:
         a8:35:1f:ec:24:11:51:19:75:54:00:89:f4:7d:30:40:ba:22:
         76:59:d7:84:ec:45:69:b6:ef:e4:08:69:24:74:0c:a6:58:c2:
         3a:81:ba:e2:56:89:e0:97:3e:2e:1a:88:e8:a8:67:8b:e4:37:
         61:37:c9:dc:05:8e:0f:07:8d:4c:fe:72:af:cc:de:21:98:b5:
         cb:b9:3e:0b:ff:1d:c1:09:13:d5:1f:f5:3f:d4:94:c8:61:53:
         9d:87:99:e0:ab:4a:aa:26:0e:5e:a3:3d:35:dd:81:60:8c:b0:
         a8:1b:f3:0b:b0:6e:e2:78:06:4b:18:19:3e:90:bd:bf:38:05:
         83:c5:4e:c1:1e:31:e3:fb:61:43:6f:54:fb:ae:f8:d7:c6:f4:
         60:e7:e3:f0:26:cb:98:64:96:bd:f4:9d:88:e2:8f:e9:5a:5c:
         1a:36:6e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org