Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa
File:                     3133382e39372e38382e302f32332d3234203d3e20323634313436.roa (raw, json)
Hash identifier:          vX8UDMPs6MLD4JkWNFemvMggZu9+MQantXzVK8OsgB4=
Subject key identifier:   8C:D7:A1:08:9D:5D:6C:9B:25:8B:D8:1B:67:96:CB:78:A4:F9:EF:64
Certificate issuer:       /CN=03CB08C60808A4C85337447A986A83078CD3CC42
Certificate serial:       035ECAFFB0F7DD53712FC3998F48443EA25E376A
Authority key identifier: 03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa
Signing time:             Thu 22 Feb 2024 17:49:04 +0000
ROA not before:           Thu 22 Feb 2024 17:44:04 +0000
ROA not after:            Thu 20 Feb 2025 17:49:04 +0000
asID:                     264146
IP address blocks:        138.97.88.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:ca:ff:b0:f7:dd:53:71:2f:c3:99:8f:48:44:3e:a2:5e:37:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03CB08C60808A4C85337447A986A83078CD3CC42
        Validity
            Not Before: Feb 22 17:44:04 2024 GMT
            Not After : Feb 20 17:49:04 2025 GMT
        Subject: CN=8CD7A1089D5D6C9B258BD81B6796CB78A4F9EF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:d5:c8:9a:a2:34:e6:f8:11:e6:f8:3c:c9:
                    ad:a7:84:3f:3f:f8:dd:ec:f2:f8:9c:8b:11:48:4f:
                    c8:31:72:30:64:4b:b3:14:8b:25:8b:26:fb:b7:0a:
                    84:25:89:a0:c8:32:c2:bb:d9:92:90:63:a9:1a:53:
                    1b:b2:d8:fa:04:6c:de:e8:36:d3:5d:d6:c6:97:69:
                    fc:a9:ac:4f:03:52:8e:7e:3f:a0:d3:9f:15:69:f9:
                    8d:7f:a4:2c:f4:16:1c:2d:8c:3c:48:f2:f2:8c:66:
                    20:67:80:20:eb:96:1b:c9:db:91:58:be:c8:0f:d4:
                    75:a2:1f:79:a1:a6:76:eb:31:59:db:58:bf:90:21:
                    61:e0:7c:86:2c:b0:97:a1:d9:fd:7c:4c:77:b4:a7:
                    27:22:15:67:6c:15:7e:83:80:7c:6e:b5:cd:10:49:
                    86:08:bb:f0:e6:4b:95:37:60:37:e0:d3:4a:37:87:
                    29:88:28:3f:e9:df:f0:14:ef:3e:f2:e7:d8:ff:56:
                    dd:46:eb:bb:bf:9d:37:e5:23:a3:25:4f:f5:b9:07:
                    02:44:70:46:83:95:0a:d0:9f:b9:b1:2d:aa:eb:08:
                    69:25:48:03:ec:90:f2:26:ad:8a:8e:9c:5a:73:b0:
                    4c:e7:8d:7a:8e:7b:a2:8c:6e:f4:1c:6e:46:f0:02:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:A1:08:9D:5D:6C:9B:25:8B:D8:1B:67:96:CB:78:A4:F9:EF:64
            X509v3 Authority Key Identifier:
                keyid:03:CB:08:C6:08:08:A4:C8:53:37:44:7A:98:6A:83:07:8C:D3:CC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/03CB08C60808A4C85337447A986A83078CD3CC42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03CB08C60808A4C85337447A986A83078CD3CC42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5H1FT2my4MpiREG6xUNNuLKvFEVZvx51gz3JhGurhYWi/0/3133382e39372e38382e302f32332d3234203d3e20323634313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:5e:1f:fc:76:27:48:5c:f4:e8:69:30:ed:24:f8:5d:d6:
         e5:ac:97:55:26:46:ea:8b:75:e4:78:42:74:7f:d2:ce:ee:41:
         1c:ae:ca:6a:e0:52:f4:bc:62:28:f1:ae:c1:ce:28:06:53:d4:
         fd:1c:29:26:25:af:4b:6d:e3:e0:22:63:cd:f9:79:fe:bc:5c:
         a3:13:e5:68:a6:42:93:25:69:ef:fa:5a:92:11:bb:39:7b:f6:
         53:59:3c:ae:33:1d:4c:6b:6e:58:b7:f0:2d:66:e8:d7:a8:51:
         70:5d:a5:3f:7a:79:61:3b:17:62:81:ea:f7:79:35:eb:9e:c8:
         66:70:f7:36:fe:b0:c9:c6:89:32:86:1e:4b:ed:d1:c9:07:03:
         07:0c:3b:a2:78:42:27:7b:95:b8:43:e0:5f:a3:22:61:ef:3c:
         77:6c:a6:bb:19:af:0b:84:dc:95:5d:9b:1c:52:fd:71:97:65:
         51:90:b6:a6:36:62:85:bf:66:29:3b:19:fd:4b:49:8f:4a:9c:
         6a:2d:3f:49:49:d1:9b:22:3f:07:79:98:ec:4e:50:7a:e6:ac:
         3c:7d:0f:53:9f:ca:92:ad:03:96:75:d2:7e:d3:2e:c5:f1:60:
         25:f5:b0:66:69:36:2a:36:76:e1:4a:d8:21:fa:73:10:9f:b2:
         79:c9:d8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org