Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/1/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa
File:                     3133382e39372e32302e302f32322d3234203d3e20323634313132.roa (raw, json)
Hash identifier:          SFOTynELzDmiQgFbNugCQ89ZRIi+qTnWo8AqBo0ESzY=
Subject key identifier:   CE:8D:40:EF:AB:F6:1E:60:73:51:D8:6A:D7:4F:80:56:5B:41:73:E6
Certificate issuer:       /CN=9099FE7707B602EDB0EFE93AA7C5538F1031C0A3
Certificate serial:       27C84A0EEB1EFE480AB0B9496005C9C5651F1712
Authority key identifier: 90:99:FE:77:07:B6:02:ED:B0:EF:E9:3A:A7:C5:53:8F:10:31:C0:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9099FE7707B602EDB0EFE93AA7C5538F1031C0A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/1/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa
Signing time:             Thu 04 Apr 2024 15:35:42 +0000
ROA not before:           Thu 04 Apr 2024 15:30:42 +0000
ROA not after:            Thu 03 Apr 2025 15:35:42 +0000
asID:                     264112
IP address blocks:        138.97.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:c8:4a:0e:eb:1e:fe:48:0a:b0:b9:49:60:05:c9:c5:65:1f:17:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9099FE7707B602EDB0EFE93AA7C5538F1031C0A3
        Validity
            Not Before: Apr  4 15:30:42 2024 GMT
            Not After : Apr  3 15:35:42 2025 GMT
        Subject: CN=CE8D40EFABF61E607351D86AD74F80565B4173E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:c9:37:fe:d2:1b:c9:3f:e5:2b:0a:75:fc:
                    3a:df:88:49:f6:df:f0:25:21:ad:4b:0a:7c:cf:9e:
                    21:45:75:a5:f1:89:4c:95:91:4f:a1:35:b0:24:c9:
                    74:b1:6b:98:97:0d:ee:4e:e4:61:0f:0c:a1:c7:40:
                    df:28:e8:68:ca:a4:d5:49:3a:a3:37:4f:fc:0f:a1:
                    ac:7c:55:e8:d9:3a:b9:39:57:69:18:b7:97:b8:cb:
                    42:87:74:0d:4b:1c:83:a7:a9:e8:1d:68:89:17:dd:
                    8a:fd:3d:87:e3:ee:98:00:b4:22:10:01:1e:17:c4:
                    30:3d:05:a2:5f:a0:f7:fc:ac:8f:a5:fb:1a:e9:c2:
                    d3:4a:c5:29:ec:a5:c6:3a:fa:81:c1:32:5a:81:30:
                    ef:ab:33:ff:43:6b:f0:6d:c5:df:da:82:88:0f:a3:
                    e7:1a:1c:1d:9b:e9:7b:71:98:1a:9a:47:8e:ad:d8:
                    7f:77:59:1e:91:2f:b9:72:47:bb:fb:db:92:6a:a5:
                    d5:8c:c9:87:cf:e5:68:df:14:db:db:32:6f:61:b1:
                    85:49:b9:82:56:ed:9f:68:3b:3a:fd:17:54:0e:23:
                    a2:17:de:22:a8:53:c2:e5:10:05:5a:94:c5:7d:74:
                    65:98:42:51:7d:b5:68:50:c7:99:75:c3:2a:8f:5c:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:40:EF:AB:F6:1E:60:73:51:D8:6A:D7:4F:80:56:5B:41:73:E6
            X509v3 Authority Key Identifier:
                keyid:90:99:FE:77:07:B6:02:ED:B0:EF:E9:3A:A7:C5:53:8F:10:31:C0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/1/9099FE7707B602EDB0EFE93AA7C5538F1031C0A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9099FE7707B602EDB0EFE93AA7C5538F1031C0A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MsNDpeAhvv8wdjWHgj4yHttVDcVM8PXyydtzYT9irUP/1/3133382e39372e32302e302f32322d3234203d3e20323634313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:87:01:78:cd:ce:c2:80:ff:24:fc:54:6d:34:b0:84:26:42:
         e3:3b:d3:ed:67:81:08:e3:f2:f6:98:bf:6c:c3:3a:e7:a8:79:
         88:35:be:f3:c2:f4:0a:71:90:4f:44:ae:27:49:5c:eb:23:d4:
         68:9d:c2:dd:93:5d:c8:59:8a:26:b9:90:76:ed:15:2f:d2:1f:
         08:80:b4:e6:48:77:dd:1c:9f:5a:99:a2:7c:55:44:6d:64:d8:
         72:64:18:f9:9a:85:13:66:e1:6f:7f:42:d1:cf:a0:63:72:da:
         e3:d3:58:0c:ec:cc:56:74:8e:72:fd:43:d8:32:cf:cb:54:a8:
         e9:ec:bb:8e:10:2c:dd:49:ca:50:48:ca:96:cb:9d:16:61:c3:
         65:36:2b:8d:25:ee:96:85:6c:b4:a0:61:c7:cb:e5:5d:fc:1c:
         0e:de:58:15:e8:76:5e:1c:7a:72:9d:74:21:3a:3b:d9:57:2d:
         5e:87:57:4a:f9:89:40:24:fc:ad:6c:8d:e4:e3:fc:d6:88:17:
         71:47:27:d0:dd:5e:8c:42:b0:ff:c4:46:91:3c:89:63:94:27:
         28:80:5a:1b:46:8e:d0:9b:fc:54:92:d5:b4:05:84:c7:74:c9:
         34:2b:5d:d0:82:c3:03:6b:42:78:c8:1e:87:39:13:6d:47:56:
         e0:f4:35:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 16:56:25 2024 by rpki-client on console-fra.rpki-client.org