Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa
File:                     3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa (raw, json)
Hash identifier:          qAAO0zOQ/6IBBWlJJx6j/rHeWgD4Z3H7pZv6Wnr+u3Y=
Subject key identifier:   D1:0A:8D:05:CF:3F:6B:A3:60:5C:D8:6B:B7:1A:FA:5B:77:78:6F:F3
Certificate issuer:       /CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
Certificate serial:       67E32FF63B89AF0A433A7300EFFD13835097677F
Authority key identifier: 74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa
Signing time:             Mon 18 Dec 2023 11:59:53 +0000
ROA not before:           Mon 18 Dec 2023 11:54:53 +0000
ROA not after:            Mon 16 Dec 2024 11:59:53 +0000
asID:                     264192
IP address blocks:        138.97.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e3:2f:f6:3b:89:af:0a:43:3a:73:00:ef:fd:13:83:50:97:67:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
        Validity
            Not Before: Dec 18 11:54:53 2023 GMT
            Not After : Dec 16 11:59:53 2024 GMT
        Subject: CN=D10A8D05CF3F6BA3605CD86BB71AFA5B77786FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:14:f4:59:69:f2:14:a9:e4:33:69:e9:92:af:
                    3a:ac:4b:64:54:9c:da:79:f2:a7:30:f8:56:d5:c9:
                    ea:3e:df:5f:b0:db:d7:08:fe:9a:52:f0:b1:39:49:
                    6e:00:61:77:98:ab:15:ac:f0:e8:ec:06:56:2c:ec:
                    39:dd:61:78:38:3c:b5:cc:99:5a:53:69:fe:47:00:
                    27:43:83:57:ef:a4:a2:86:56:58:de:ed:96:da:1b:
                    74:29:e5:ea:a9:af:56:e5:f6:93:17:aa:89:6c:05:
                    a5:8b:84:58:c3:a4:e9:41:64:4a:15:0e:f5:8f:08:
                    d3:b6:56:c5:b1:d7:76:97:8b:35:a9:a0:ac:22:32:
                    39:a9:49:37:9f:03:2e:65:bf:a0:ac:21:8a:31:b3:
                    5d:68:0d:26:28:86:f7:b0:d2:8f:10:40:92:47:b1:
                    5c:af:2f:34:26:11:b1:45:38:af:ad:c5:eb:90:dc:
                    d4:2d:4e:3d:15:4e:36:f1:cd:6a:31:f8:e2:59:0b:
                    e0:bd:7a:53:bf:92:e4:2a:4f:3c:42:bb:0d:6c:3e:
                    18:7e:ee:cc:c2:6c:a4:e8:9f:77:ab:33:13:5c:bf:
                    b1:28:7c:5d:5c:8b:84:cb:a7:8f:d9:91:f0:43:f2:
                    43:93:c3:0d:58:2c:7e:ee:fc:1e:74:c2:3a:24:1c:
                    07:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0A:8D:05:CF:3F:6B:A3:60:5C:D8:6B:B7:1A:FA:5B:77:78:6F:F3
            X509v3 Authority Key Identifier:
                keyid:74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/3133382e39372e3135322e302f32322d3234203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:41:4e:27:9a:eb:7a:04:80:cf:71:22:5b:8f:e8:0e:42:0c:
         50:e8:8c:c3:1b:a1:74:3a:f8:f3:1c:48:19:35:ef:7b:6c:38:
         94:8a:de:d7:96:05:db:f1:c8:95:c0:67:f7:2f:cf:88:65:72:
         f4:43:3a:a2:7b:27:b3:d5:d1:f7:41:6f:b9:d4:71:db:ec:a3:
         c2:ce:50:f0:1e:89:f2:cd:e0:76:17:1a:35:21:ba:64:4d:e4:
         82:63:19:2b:6a:49:c7:77:d9:dc:70:20:cd:d0:e5:0f:50:9f:
         50:2d:cf:f6:74:25:95:cc:fc:f1:dd:29:f2:1f:33:ec:30:ed:
         2b:09:0c:fa:30:bc:b7:53:8d:b6:2f:eb:9e:6a:b3:12:0e:96:
         9a:08:70:7e:02:08:4c:71:44:11:4f:e5:fd:ba:20:54:f1:e9:
         e7:ba:c7:8a:37:ee:c5:c4:30:fd:ca:d8:94:61:96:98:56:48:
         c6:ef:4e:98:d3:fe:91:04:00:5a:fa:12:82:6d:a3:b4:74:ae:
         3c:a7:3b:ef:e7:a6:35:0b:12:46:70:e1:f7:b4:77:36:83:c5:
         54:9b:a2:d9:ff:17:22:75:90:4c:cc:4a:c1:89:a3:ef:9f:2b:
         54:7c:34:c3:37:72:a6:e6:e0:42:98:2a:40:f3:52:3b:50:2e:
         52:f0:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org