Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130312e302f32342d3234203d3e20323634313831.roa
File:                     3133382e39372e3130312e302f32342d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          w2yAPn9R99YQ3ygk29Gc+UfQxitkeOJa3TemtIy0Cw0=
Subject key identifier:   74:62:DF:C5:E6:BE:97:C9:92:73:F5:12:56:7A:C2:57:5F:DC:5D:0F
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       2F62ED596E30B01093B903FF884BF5440E9A4F82
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130312e302f32342d3234203d3e20323634313831.roa
Signing time:             Thu 10 Nov 2022 18:21:55 +0000
ROA not before:           Thu 10 Nov 2022 18:16:55 +0000
ROA not after:            Thu 09 Nov 2023 18:21:55 +0000
asID:                     264181
IP address blocks:        138.97.101.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:62:ed:59:6e:30:b0:10:93:b9:03:ff:88:4b:f5:44:0e:9a:4f:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Nov 10 18:16:55 2022 GMT
            Not After : Nov  9 18:21:55 2023 GMT
        Subject: CN=7462DFC5E6BE97C99273F512567AC2575FDC5D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:51:7f:0d:a4:33:5e:2f:15:a8:a2:28:0d:
                    48:cc:76:a3:b5:dd:68:e9:c8:75:ef:3c:da:bb:96:
                    81:0f:9c:69:f2:b8:44:8c:f6:bc:6f:45:c3:b1:62:
                    50:6b:b0:dd:88:b5:49:e0:47:93:be:ea:4c:47:c5:
                    a6:f6:d8:f2:63:7b:1e:59:42:d7:37:d0:3c:5c:c2:
                    50:c9:8b:c5:8e:56:74:0c:f0:ef:09:a4:f3:49:a6:
                    19:16:56:97:e1:86:91:0c:b5:ea:c5:ec:a0:74:fe:
                    e8:33:9b:cb:3a:78:68:46:a7:76:b2:b8:c4:d7:20:
                    81:a7:a6:ca:c2:73:1d:17:13:e7:a4:c5:c7:7e:3c:
                    2b:2e:91:65:46:16:f6:39:48:8a:4c:43:ac:ae:c9:
                    72:14:7d:4a:73:c9:06:46:81:f2:cd:d8:b3:43:3a:
                    16:0f:53:94:15:35:60:62:0f:03:57:bb:98:9b:a0:
                    d7:b9:7b:69:1e:05:59:8f:df:0a:be:12:3a:eb:d7:
                    b7:8a:15:93:ab:5f:30:74:8b:16:7a:42:b6:bf:2d:
                    a0:b3:66:6b:7d:b1:b1:bf:8e:20:24:94:86:5c:ec:
                    d2:62:1f:e5:28:29:2d:a8:1a:0f:a6:b0:a4:d8:fc:
                    3e:4e:3c:ef:f1:11:f9:e1:36:fe:cc:64:83:37:93:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:DF:C5:E6:BE:97:C9:92:73:F5:12:56:7A:C2:57:5F:DC:5D:0F
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130312e302f32342d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:6c:8b:b6:f0:bd:d5:50:06:22:cd:41:e8:d2:ac:9a:d5:
         4d:c2:99:a3:ae:50:a0:56:bd:b1:a4:47:a5:9a:63:8a:df:55:
         d1:8e:2f:76:74:e8:21:49:b7:c7:0c:df:ec:c5:7e:7f:ff:3f:
         8b:57:7d:1a:2f:cd:71:c3:3c:23:9f:3b:a5:b0:fd:a5:13:f9:
         7b:00:7b:3d:51:7f:cc:b5:46:86:c8:e7:9c:62:fc:cf:9d:35:
         83:e6:24:7d:8e:12:cd:57:f7:38:9d:34:eb:23:ac:8e:02:9a:
         67:7e:29:5b:e6:92:a9:35:ec:b1:c7:7c:41:e0:eb:91:91:ae:
         fe:ba:b7:6c:5e:e1:d4:cd:ea:3a:5f:68:eb:cc:db:e8:66:03:
         a1:1a:1d:cb:f8:8c:b0:84:ba:c8:7d:84:10:7d:21:02:4d:5d:
         7b:fe:0d:f9:c0:5e:5a:9f:18:83:13:1f:76:23:7c:15:e2:d7:
         b5:fd:b9:63:9f:13:2c:89:c7:f3:89:68:aa:bb:b3:d7:99:35:
         36:c3:83:a5:ee:27:9f:fb:7c:74:f4:74:6c:bb:ae:e6:0c:a6:
         75:22:99:14:1e:bb:f6:5c:90:96:56:35:7b:e0:1f:c1:56:dc:
         b6:d7:b9:ef:23:16:0c:ec:dc:8b:2a:e5:69:3b:34:bc:f2:67:
         84:bf:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org