Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
File:                     3133382e39372e32382e302f32322d3234203d3e20323634313137.roa (raw, json)
Hash identifier:          6N7UlPKxr9nei1km8MiYR5TtMrTqNwZg/F6kbZ3yXwk=
Subject key identifier:   46:1D:28:8A:C8:35:6B:A3:A8:8D:53:0E:9E:3E:9A:D5:51:27:D5:30
Certificate issuer:       /CN=3527BFBEBA965103D54B88A498C218A6600C1596
Certificate serial:       4DAD525C31167AE07B985DB3B20BEC860D0B8C74
Authority key identifier: 35:27:BF:BE:BA:96:51:03:D5:4B:88:A4:98:C2:18:A6:60:0C:15:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3527BFBEBA965103D54B88A498C218A6600C1596.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa
Signing time:             Thu 15 Jun 2023 11:09:10 +0000
ROA not before:           Thu 15 Jun 2023 11:04:10 +0000
ROA not after:            Thu 13 Jun 2024 11:09:10 +0000
asID:                     264117
IP address blocks:        138.97.28.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ad:52:5c:31:16:7a:e0:7b:98:5d:b3:b2:0b:ec:86:0d:0b:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3527BFBEBA965103D54B88A498C218A6600C1596
        Validity
            Not Before: Jun 15 11:04:10 2023 GMT
            Not After : Jun 13 11:09:10 2024 GMT
        Subject: CN=461D288AC8356BA3A88D530E9E3E9AD55127D530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:ae:74:43:a6:33:33:43:f7:2d:e0:fa:93:
                    5f:af:ef:36:d3:2e:6b:89:11:56:51:de:d7:0c:cb:
                    ef:be:1f:5a:34:fe:68:e6:a1:5e:9c:03:2b:3f:1a:
                    71:90:59:e3:de:e6:dc:82:9c:7c:06:2e:43:69:de:
                    89:31:9a:fc:f5:5f:76:2c:0f:dd:e9:06:e4:1b:b7:
                    fc:5c:eb:f5:e8:2d:07:f4:e6:9e:11:96:f0:e3:da:
                    37:5a:91:6e:79:50:32:3e:0c:d2:14:f9:41:7b:b7:
                    8a:c2:5b:fe:84:0a:fc:65:c3:6e:50:44:86:21:d3:
                    25:6f:5f:d5:32:4d:22:02:86:7e:f4:9e:4d:22:bd:
                    03:77:5b:dc:d7:4c:f1:df:6c:13:98:fc:97:ce:47:
                    8a:ae:2a:cd:5c:c4:2a:d0:3c:6c:05:34:ef:6a:29:
                    9e:ea:db:b4:03:29:66:c3:63:13:7c:a2:c0:4c:de:
                    dd:67:a9:e2:dd:43:91:f8:1f:27:8c:aa:d3:27:1d:
                    0c:93:97:42:65:ce:ec:24:3b:bc:9e:d8:53:22:47:
                    c8:a1:64:09:76:94:7d:d6:d8:31:1b:11:6d:23:0b:
                    e9:17:a6:88:23:76:85:4f:c4:03:4b:8e:60:92:54:
                    d0:b8:49:10:87:69:76:59:eb:5c:be:1e:6e:59:76:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1D:28:8A:C8:35:6B:A3:A8:8D:53:0E:9E:3E:9A:D5:51:27:D5:30
            X509v3 Authority Key Identifier:
                keyid:35:27:BF:BE:BA:96:51:03:D5:4B:88:A4:98:C2:18:A6:60:0C:15:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3527BFBEBA965103D54B88A498C218A6600C1596.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3527BFBEBA965103D54B88A498C218A6600C1596.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/1/3133382e39372e32382e302f32322d3234203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:4e:9b:5d:0c:1f:a8:0a:c1:47:67:58:93:bd:38:23:91:09:
         19:b3:0f:f3:24:b6:6e:b1:14:05:40:b7:ce:4a:92:10:5e:77:
         db:0a:63:f1:ab:1a:be:a6:0a:b7:c6:f1:12:35:49:dc:87:21:
         02:7e:8e:a7:2c:6b:58:7b:93:07:3f:62:53:c7:9b:3b:19:7c:
         90:95:24:67:bb:43:c0:30:91:fe:1b:83:6e:d8:2a:ea:44:62:
         ea:ed:f7:a4:a6:4b:11:0c:51:9e:5b:bf:c3:e9:cd:35:3c:5f:
         c1:4f:98:6d:37:d5:ad:c9:ba:ce:c3:0b:8b:02:b0:5c:72:43:
         f1:d8:cd:57:eb:ab:67:ab:ef:a1:ff:96:d6:42:e1:aa:40:19:
         70:7a:c8:18:64:a2:78:d3:79:4b:b0:03:72:d9:8b:4e:4c:f2:
         57:79:88:7c:df:2d:30:c8:88:ae:fb:d6:07:93:20:dd:41:65:
         20:c7:28:9b:47:24:71:fc:9d:08:a6:15:1c:96:9d:96:9f:eb:
         e4:af:05:42:d2:b6:a0:d2:7f:19:59:7d:b2:50:bb:98:83:19:
         5b:e1:06:69:89:e2:7b:a5:58:fd:b5:8c:b7:dd:83:25:a4:07:
         76:76:51:9e:35:27:28:88:b9:65:92:e0:47:00:77:09:a8:fe:
         8c:d0:59:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org