Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
File:                     3133382e39372e36382e302f32322d3234203d3e20323634313437.roa (raw, json)
Hash identifier:          ugO0mfbJ+m1RdIV3esFk68he63mgZCLkAS3rsHzn+qA=
Subject key identifier:   1E:CC:7F:98:C9:AD:53:9D:70:68:FB:74:CB:85:5D:50:B7:24:A0:3D
Certificate issuer:       /CN=5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59
Certificate serial:       64A0EA9C090DC8C69F4B1C001D4205F0E0F895F9
Authority key identifier: 5A:85:BC:AE:6B:36:13:02:1A:13:B7:CC:3E:6F:5F:17:CA:22:CA:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa
Signing time:             Tue 19 Dec 2023 17:32:57 +0000
ROA not before:           Tue 19 Dec 2023 17:27:57 +0000
ROA not after:            Tue 17 Dec 2024 17:32:57 +0000
asID:                     264147
IP address blocks:        138.97.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a0:ea:9c:09:0d:c8:c6:9f:4b:1c:00:1d:42:05:f0:e0:f8:95:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59
        Validity
            Not Before: Dec 19 17:27:57 2023 GMT
            Not After : Dec 17 17:32:57 2024 GMT
        Subject: CN=1ECC7F98C9AD539D7068FB74CB855D50B724A03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:a1:a6:83:20:cb:22:cb:a7:38:3b:da:0c:
                    ae:29:b6:f0:40:05:0d:c7:45:49:6e:20:8d:88:96:
                    28:a9:7e:b4:4c:51:25:0a:f4:f0:df:d9:a9:5c:2a:
                    c2:42:40:7d:10:82:03:ee:22:d5:e8:1a:74:94:c2:
                    2c:c1:79:d4:0d:b8:f3:61:8b:98:d0:06:05:fb:88:
                    6c:09:99:72:5d:91:17:18:3c:7e:f1:44:b7:cc:b7:
                    7d:1c:44:a1:e0:32:f0:f7:82:d6:1a:ea:7b:19:c0:
                    28:21:54:a1:51:bd:41:f4:57:b8:40:4e:68:7f:bf:
                    1a:f7:5e:f7:f8:b8:0d:a7:2d:41:47:fc:82:32:fb:
                    b5:7f:7f:84:43:a7:77:d1:cf:b7:5a:bd:19:6a:32:
                    50:5c:ff:c7:9a:b1:80:3f:0f:47:50:85:79:43:f2:
                    46:97:3e:e5:8a:8e:76:d3:5c:d3:e3:d4:3d:91:44:
                    77:d3:16:6e:02:66:22:fe:ff:90:c9:1f:20:14:6d:
                    36:f0:2a:aa:ef:57:43:c6:ad:57:30:c9:5f:00:3d:
                    c2:9c:ae:c3:db:f9:96:1c:43:24:b6:42:c3:5b:07:
                    fe:77:a2:ed:52:4c:fe:1e:63:01:42:a4:a5:25:a1:
                    74:48:32:23:31:46:35:42:16:71:33:df:d0:fb:e4:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:CC:7F:98:C9:AD:53:9D:70:68:FB:74:CB:85:5D:50:B7:24:A0:3D
            X509v3 Authority Key Identifier:
                keyid:5A:85:BC:AE:6B:36:13:02:1A:13:B7:CC:3E:6F:5F:17:CA:22:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A85BCAE6B3613021A13B7CC3E6F5F17CA22CA59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6pHVdiTXxFxtTaxbPTr74ArtFrbxUDB9oKQKmBcnb14Q/0/3133382e39372e36382e302f32322d3234203d3e20323634313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:b7:4f:7f:e5:c8:92:46:4e:de:64:68:82:1f:0e:9a:93:
         83:2c:33:97:d5:0d:93:6d:7c:05:03:f8:61:5d:e9:a7:7d:e0:
         39:a7:12:65:6a:be:5a:b4:d4:97:92:eb:bc:0d:e4:0a:1a:b6:
         af:9b:d7:d8:31:15:a5:c5:63:c2:ae:46:1b:9d:5e:86:3f:90:
         d8:7c:1f:2f:9c:b3:88:e2:0d:c5:07:22:0f:43:2a:f6:21:a0:
         76:d5:dc:84:ee:25:f4:6e:f7:71:81:e1:5d:0f:34:af:1c:34:
         7a:22:5a:6c:f8:dc:ee:a0:83:56:38:27:e7:b5:e2:a5:52:df:
         8b:5e:5e:2f:77:fe:d8:d2:63:25:3e:53:b2:a5:c0:8a:0a:cc:
         21:f2:20:23:e7:fa:53:8c:cf:a3:af:2f:77:e3:ec:30:82:52:
         70:4c:10:a0:e5:59:63:2d:8d:ea:40:cb:2f:ff:4b:de:98:b7:
         9f:fa:f7:15:e4:83:f5:2a:07:9f:41:47:04:df:33:15:33:59:
         fe:0c:d7:22:f7:56:d0:8a:5b:1d:f7:6c:1b:a2:9b:cb:08:b6:
         70:49:f2:20:5e:b5:73:d0:3a:16:8d:90:83:32:e6:3c:ee:10:
         3c:7d:3f:ac:9e:1c:b1:ae:26:4d:c9:8f:99:fe:f8:24:db:c4:
         c7:14:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org