Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
File:                     3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa (raw, json)
Hash identifier:          d9Km20xYvgBiyymVn077apj/hVLHQ/D/P3BGrKk+WYo=
Subject key identifier:   10:E4:63:93:28:04:F5:22:D9:5F:88:5D:4E:CA:6B:82:41:E8:C8:4A
Certificate issuer:       /CN=4C5E4BEB7398912F161523952333D01C9BF59452
Certificate serial:       5AAC8CF6EB08ADA5F750187FB6AEFF614D8D82A0
Authority key identifier: 4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa
Signing time:             Thu 23 Nov 2023 23:25:28 +0000
ROA not before:           Thu 23 Nov 2023 23:20:28 +0000
ROA not after:            Thu 21 Nov 2024 23:25:28 +0000
asID:                     262645
IP address blocks:        138.97.132.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ac:8c:f6:eb:08:ad:a5:f7:50:18:7f:b6:ae:ff:61:4d:8d:82:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C5E4BEB7398912F161523952333D01C9BF59452
        Validity
            Not Before: Nov 23 23:20:28 2023 GMT
            Not After : Nov 21 23:25:28 2024 GMT
        Subject: CN=10E463932804F522D95F885D4ECA6B8241E8C84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:14:51:64:6a:15:ed:50:38:89:54:7d:0b:
                    2a:8e:36:b4:21:7d:6b:16:00:dd:c7:a6:03:f4:d5:
                    7c:fb:26:27:6e:33:e1:dc:3f:9c:6e:b5:ef:71:11:
                    42:75:f9:3b:0f:69:0e:ee:97:b7:1d:b8:c5:6e:6c:
                    93:85:9f:e4:db:01:af:1f:16:f9:be:b4:30:50:fa:
                    4b:69:a6:20:45:6b:48:2f:30:5f:bd:d9:b9:1d:ea:
                    17:41:ec:d7:cc:0f:34:a9:ea:73:51:ca:43:d8:f1:
                    c8:f7:30:7d:85:e3:fc:73:c5:82:84:68:38:f5:cf:
                    8f:a1:6c:c9:6c:b2:d7:6a:4e:46:3c:c7:04:fd:82:
                    44:62:5c:14:9c:d8:e6:fe:ae:80:13:7e:06:67:39:
                    70:08:01:24:04:6c:96:47:06:65:ac:c7:0c:85:aa:
                    e8:5e:c0:1f:27:aa:7c:b9:e7:91:dd:ec:de:96:cc:
                    18:45:ec:ea:50:46:20:de:e2:77:46:91:80:b5:b1:
                    02:d9:e7:3f:52:fb:97:7b:53:04:8a:f6:53:2f:ad:
                    39:3b:89:1d:d6:19:90:89:a3:87:4c:e1:74:4c:d8:
                    bb:c6:04:b9:ce:d0:64:03:d8:d7:eb:1f:e8:59:89:
                    c7:3f:39:9e:2e:5c:f4:d8:2f:ee:3f:93:57:50:7f:
                    20:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:63:93:28:04:F5:22:D9:5F:88:5D:4E:CA:6B:82:41:E8:C8:4A
            X509v3 Authority Key Identifier:
                keyid:4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/3133382e39372e3133322e302f32322d3234203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:e2:cb:89:34:c9:c3:ca:c3:86:6e:84:e5:5d:ce:f6:32:ad:
         06:5e:7c:e3:0a:30:87:df:04:f8:6a:49:ca:65:2f:f7:dc:45:
         8f:5b:32:b1:ea:e9:87:69:85:75:b5:19:03:84:d8:e4:2a:c9:
         d9:70:5e:b7:09:df:1e:59:0d:5d:ac:d9:a9:c3:8f:f4:f7:43:
         2f:e0:5a:ec:69:24:14:69:b3:1a:5b:8e:48:bf:8a:a4:ee:0f:
         53:fe:55:74:72:d2:15:84:dd:03:b1:e3:3e:9c:e8:f6:9e:9c:
         ba:1d:50:63:bf:81:09:93:29:0d:8e:44:b7:9a:51:eb:04:1a:
         30:e1:ee:05:e6:c0:9a:35:b4:6f:be:11:38:37:3a:2a:fe:99:
         26:be:84:35:b7:83:a6:24:1b:72:ed:0c:84:82:82:a2:4d:66:
         f1:d0:8f:c0:04:84:fd:98:e0:fc:d2:d8:4c:24:aa:3a:9e:b9:
         45:bf:68:99:9d:fe:82:cb:0c:09:3f:cc:e7:99:fc:25:47:e6:
         5c:bc:13:31:70:a6:af:25:ca:d8:c4:4f:66:cf:9a:ce:13:50:
         d6:57:28:97:a5:65:95:eb:ff:f8:94:44:08:34:ae:25:9d:60:
         c5:ec:62:e8:17:90:c7:65:d8:36:94:0b:81:b3:fb:89:51:5c:
         10:c7:bb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org