Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32342d3234203d3e20323634313831.roa
File:                     3133382e39372e3130302e302f32342d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          ywOD/IkwFJyKPbd8rzp5xvMZKCyNtPOyYaeq3ZhDd2k=
Subject key identifier:   BF:A6:26:6A:34:9D:73:87:0D:4D:17:34:32:13:EF:69:21:A3:17:39
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       069456608B914A4B2C7BDFC188C903F42F6A1231
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32342d3234203d3e20323634313831.roa
Signing time:             Thu 10 Nov 2022 18:20:42 +0000
ROA not before:           Thu 10 Nov 2022 18:15:42 +0000
ROA not after:            Thu 09 Nov 2023 18:20:42 +0000
asID:                     264181
IP address blocks:        138.97.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:94:56:60:8b:91:4a:4b:2c:7b:df:c1:88:c9:03:f4:2f:6a:12:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Nov 10 18:15:42 2022 GMT
            Not After : Nov  9 18:20:42 2023 GMT
        Subject: CN=BFA6266A349D73870D4D17343213EF6921A31739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fd:7e:3f:f1:a1:cb:30:b1:4a:ff:da:ec:52:
                    d0:7a:c1:46:5b:e3:ee:97:5f:72:25:b1:14:b0:e0:
                    1f:21:8e:d7:97:cf:c1:0c:a3:a6:c2:3b:57:81:f3:
                    fe:ac:bd:cb:64:5e:86:9d:5f:0a:e1:80:4b:b2:ff:
                    8f:99:4b:ae:98:66:98:ae:ef:d1:e4:4f:dc:08:87:
                    9e:3c:af:fe:02:87:4a:da:85:08:0e:03:62:0d:14:
                    39:da:f1:81:14:82:0a:8f:ec:13:88:b9:bc:8a:cd:
                    c2:fc:df:57:38:e3:a7:0c:a6:77:00:88:d6:00:8b:
                    7c:78:52:2e:4b:06:aa:8c:92:26:ef:59:29:d8:6b:
                    29:5e:61:b3:5f:89:b8:47:3b:28:99:2f:81:23:3b:
                    dd:b2:bb:62:91:22:a2:f5:cd:74:d5:54:79:24:4c:
                    d4:53:ea:28:fb:ce:f1:3b:4e:9f:c0:2d:a6:a2:af:
                    c3:bc:2b:74:3b:a7:24:65:8a:5d:bb:d5:d4:3c:a4:
                    1e:fc:e0:63:ce:4f:f9:f7:76:2c:8c:8c:fd:2a:d6:
                    03:ea:2c:72:c0:22:3a:80:fd:0e:b5:ff:ba:41:ad:
                    8f:b4:31:57:69:fb:af:60:33:99:87:68:1a:61:42:
                    82:7c:e6:06:c7:a0:96:70:c2:d7:8c:31:e0:80:f1:
                    74:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A6:26:6A:34:9D:73:87:0D:4D:17:34:32:13:EF:69:21:A3:17:39
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130302e302f32342d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:2f:6b:60:b7:06:5e:54:7c:01:17:f0:d4:50:d9:ad:30:
         c9:17:a3:c9:25:4a:7e:75:19:32:43:b3:b4:48:ef:f2:e1:21:
         46:dd:97:b2:c9:05:f2:11:6c:eb:5c:a3:c6:35:10:4a:11:ef:
         7e:10:16:ac:8a:44:20:da:d7:79:cf:91:db:31:40:79:84:fd:
         02:46:2e:89:1f:41:a6:d2:76:f3:fa:2d:31:e2:50:eb:9f:59:
         55:53:2e:44:c9:76:59:17:f5:7b:8c:dd:34:e9:0d:f8:d2:f0:
         e8:67:b4:a7:39:e3:98:7a:8d:f9:27:b5:32:37:f2:74:62:c1:
         f1:ce:bc:1b:e7:cc:d8:24:3b:50:48:5f:99:d8:b2:ca:67:d0:
         c9:50:36:ab:bc:aa:fa:b0:f7:be:2b:f6:40:bb:a5:a6:81:4b:
         4c:b4:8c:a5:38:e2:b1:65:cd:5e:76:9b:f3:04:f6:7a:31:9c:
         36:46:c6:a8:4c:4c:03:54:55:15:5d:df:ea:39:4c:f6:97:11:
         51:48:8b:de:39:2f:f4:56:cf:bb:4f:e1:9f:c3:6e:bb:f7:42:
         61:27:2b:00:08:60:16:68:2e:dc:c4:d6:2e:4a:a5:29:50:fb:
         4a:da:74:c2:20:3f:c9:1a:cf:8a:86:2d:3d:d9:4b:5c:f0:71:
         76:bd:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org