Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa
File:                     3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa (raw, json)
Hash identifier:          so5+KCnrYPzXkTsTzO3Uh32qDJ1QFfFIsaLhh4gu7xA=
Subject key identifier:   CE:5A:42:DB:F6:79:77:3E:48:0F:79:B1:DF:23:3F:94:B0:CB:D1:88
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       42136C2FF74CD5C5D20A6B068A0B170F097A1366
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa
Signing time:             Thu 10 Nov 2022 18:12:22 +0000
ROA not before:           Thu 10 Nov 2022 18:07:22 +0000
ROA not after:            Thu 09 Nov 2023 18:12:22 +0000
asID:                     264181
IP address blocks:        138.97.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:13:6c:2f:f7:4c:d5:c5:d2:0a:6b:06:8a:0b:17:0f:09:7a:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Nov 10 18:07:22 2022 GMT
            Not After : Nov  9 18:12:22 2023 GMT
        Subject: CN=CE5A42DBF679773E480F79B1DF233F94B0CBD188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:fa:9d:83:ae:dd:4a:5a:65:7a:f6:1d:cb:
                    73:ea:4e:6e:58:74:20:0c:84:70:81:39:e1:99:eb:
                    cf:ac:ad:ab:7c:b6:0c:29:c6:3b:76:80:ba:69:1c:
                    d6:6a:15:ae:b2:f3:9e:7b:76:8f:45:fa:7b:05:64:
                    12:7e:e0:90:4d:f4:a4:c7:bc:15:d7:5d:31:89:1e:
                    ad:a1:d2:66:13:3c:d4:4b:cf:84:4f:b4:8f:89:d8:
                    ed:a8:84:d1:0e:ba:10:40:64:7a:35:92:cf:cc:1c:
                    e5:aa:e6:6c:46:80:6b:bc:ee:18:81:26:55:f0:fa:
                    64:06:11:a1:ba:39:48:be:91:1b:5b:1d:a7:1c:48:
                    3f:18:f1:3d:be:c1:6f:11:12:20:0c:13:0e:1f:76:
                    24:d6:fb:ca:1e:33:4c:e2:04:5f:3d:a0:a1:2f:12:
                    60:bf:c6:56:11:78:ca:00:9f:1f:97:c6:d2:6a:bc:
                    d1:f9:9e:1e:98:b1:ff:ee:2c:23:94:8f:e6:94:66:
                    a8:ae:50:e9:dc:1d:0e:96:d1:3e:36:9e:8a:1b:8b:
                    67:b1:17:2f:cd:62:2b:86:7e:4d:50:cc:83:0a:31:
                    e0:34:39:b1:c4:2b:ed:03:6b:30:34:7b:70:f9:44:
                    15:3a:0f:78:6c:c0:51:52:dd:e3:3f:72:5a:d1:16:
                    e9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5A:42:DB:F6:79:77:3E:48:0F:79:B1:DF:23:3F:94:B0:CB:D1:88
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:34:8f:3c:e0:26:82:e4:ca:56:fe:26:1a:90:a7:14:03:be:
         b2:dd:9f:f6:ac:05:4c:7f:1a:4c:25:ab:50:90:f7:7c:60:30:
         7f:46:d2:97:3e:6c:f0:06:0c:a5:c6:29:2b:73:0c:46:55:fb:
         17:db:f2:57:a4:6d:0c:df:14:a1:66:de:bf:d7:a5:e3:fa:d8:
         b8:ae:9a:91:e5:6e:aa:c8:2e:c3:cc:c9:f4:aa:45:84:b6:d3:
         67:24:08:9f:fd:72:2b:15:59:d7:a4:cd:6e:18:bb:f9:06:b0:
         5d:71:7c:f9:e5:b9:3b:66:f6:6c:09:a9:4f:2a:36:6e:07:af:
         50:8e:d3:29:ce:a4:d4:10:e7:11:c3:7c:61:4a:f5:80:0c:10:
         6b:61:69:91:c2:3b:28:bb:ab:31:7e:4c:65:a5:b6:44:93:c6:
         d7:38:6e:cf:2c:6e:bf:bb:8c:6f:05:e5:1f:4a:e8:8b:ea:45:
         ef:53:d9:29:f5:e9:b4:e8:4a:9d:62:82:30:b7:40:68:64:50:
         ec:90:cc:26:63:1c:e8:4a:0f:cc:46:0a:4b:db:36:fa:da:37:
         07:f4:4c:d7:30:b7:fb:84:7f:58:ee:23:46:e1:e1:68:b0:88:
         1c:6b:cf:5d:b8:3c:81:b4:59:03:9d:c8:12:df:eb:28:9d:73:
         0d:b3:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org