Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa
File:                     3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          Z+Sed8C348koEfLv23hfgjhVM49Uw6OYiXaqPx9xoKQ=
Subject key identifier:   CA:CA:AE:01:E3:C4:11:41:3F:7B:E3:47:10:5D:F8:F5:BD:B0:F3:0A
Certificate issuer:       /CN=F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B
Certificate serial:       456EA06A48F64DB36CD2EB1B9F65289C3F53FB7F
Authority key identifier: F0:8D:7D:CA:0A:A0:CF:F2:42:5E:59:FA:68:EC:82:88:BF:FC:65:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa
Signing time:             Tue 19 Dec 2023 20:19:40 +0000
ROA not before:           Tue 19 Dec 2023 20:14:40 +0000
ROA not after:            Tue 17 Dec 2024 20:19:40 +0000
asID:                     264181
IP address blocks:        138.97.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6e:a0:6a:48:f6:4d:b3:6c:d2:eb:1b:9f:65:28:9c:3f:53:fb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B
        Validity
            Not Before: Dec 19 20:14:40 2023 GMT
            Not After : Dec 17 20:19:40 2024 GMT
        Subject: CN=CACAAE01E3C411413F7BE347105DF8F5BDB0F30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:31:2a:87:13:d3:18:e8:7d:39:6b:d0:76:b6:
                    17:2f:e1:ba:d2:05:7b:f8:aa:40:60:8a:3d:9a:29:
                    6b:c8:22:ab:a6:bc:4d:13:8d:f9:27:af:eb:df:43:
                    62:75:26:b5:42:2e:11:94:1b:bf:89:e5:e6:51:7f:
                    dd:27:21:48:a8:d3:ea:1e:32:ee:48:52:c1:b6:43:
                    50:54:e5:d1:1b:a8:b1:04:ba:ff:fe:59:c9:89:b3:
                    31:aa:79:92:76:6a:f3:be:ef:02:3f:5f:24:76:f9:
                    fb:c8:a0:40:8f:59:77:5a:9c:60:17:c1:39:99:41:
                    11:a3:da:e3:ac:64:1c:cf:ff:e1:7a:e6:3f:d7:4d:
                    72:39:5e:a3:1c:b9:55:a7:6f:92:21:10:85:4b:73:
                    ad:f5:b5:2e:85:ef:10:2e:d0:2a:46:82:38:e8:d5:
                    d0:0d:f9:e1:ec:04:f1:23:1e:e9:72:3b:86:76:e1:
                    3f:ba:2c:6f:15:f4:4b:a0:14:38:f6:05:5b:a0:e8:
                    c1:f2:dc:f6:c2:0e:b2:a6:b3:ff:fd:70:d5:cd:95:
                    0b:d9:d7:19:6d:a5:d1:61:5b:a7:2d:d5:b7:cd:06:
                    ac:5a:d9:d6:4f:86:04:c3:04:98:83:fe:42:64:c1:
                    98:61:3d:f8:dc:3c:6d:da:d8:9b:69:7e:30:70:81:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:AE:01:E3:C4:11:41:3F:7B:E3:47:10:5D:F8:F5:BD:B0:F3:0A
            X509v3 Authority Key Identifier:
                keyid:F0:8D:7D:CA:0A:A0:CF:F2:42:5E:59:FA:68:EC:82:88:BF:FC:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F08D7DCA0AA0CFF2425E59FA68EC8288BFFC656B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32322d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:3a:5d:88:5a:c6:67:32:10:c8:3b:ee:e6:07:4c:fc:15:d4:
         51:61:1c:d6:5d:d9:6a:de:d3:3b:e8:1e:d6:69:81:86:26:a0:
         7e:16:69:12:83:b0:45:12:85:1b:21:47:02:7d:81:10:eb:db:
         b7:94:0b:06:09:42:c0:d9:d2:bd:d6:39:c7:63:0a:96:95:57:
         46:d8:c5:a2:81:47:57:7c:b0:bc:9a:e0:ca:58:6d:af:f5:0c:
         8b:50:ed:33:87:5c:6d:df:15:13:c8:d6:40:e5:30:98:20:a5:
         bc:7c:a2:00:6e:42:4e:04:6b:52:95:ed:7f:b2:4c:68:3f:f6:
         37:3f:66:b0:d8:30:e0:2c:63:f6:35:87:ab:eb:39:dc:2e:d4:
         92:60:ce:15:9b:22:9d:09:27:e3:20:a3:f5:0a:ed:78:2d:78:
         8a:5d:b3:5e:15:88:71:2a:42:bd:dd:f8:1d:02:00:42:2c:72:
         30:1d:30:12:f6:be:5e:fc:8c:0b:cd:9d:38:75:f4:9c:ef:c8:
         31:f5:26:89:92:55:c1:bc:9e:26:8e:4a:a0:12:4a:e4:51:3c:
         64:08:c6:7e:fc:40:2e:74:97:12:68:32:77:f9:cb:ea:30:05:
         85:4f:49:f1:18:fe:da:fd:24:a1:50:ca:40:a0:a2:7e:24:54:
         7f:c7:cf:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org