Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa
File:                     3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa (raw, json)
Hash identifier:          Nw08HnlVigtV/Lpfr8TCBBESwOlMwK7+kjbFr8BJZGI=
Subject key identifier:   C6:AE:D4:3B:67:C5:1D:25:F9:96:95:9F:79:AD:9A:FC:78:3B:CD:DD
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       441C48683CCC8B0B8D326E3D59DD58E3D34478D2
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa
Signing time:             Thu 10 Nov 2022 18:22:00 +0000
ROA not before:           Thu 10 Nov 2022 18:17:00 +0000
ROA not after:            Thu 09 Nov 2023 18:22:00 +0000
asID:                     264181
IP address blocks:        138.97.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1c:48:68:3c:cc:8b:0b:8d:32:6e:3d:59:dd:58:e3:d3:44:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Nov 10 18:17:00 2022 GMT
            Not After : Nov  9 18:22:00 2023 GMT
        Subject: CN=C6AED43B67C51D25F996959F79AD9AFC783BCDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:62:c4:b0:92:5f:92:8e:4e:b2:f8:4f:19:
                    bd:2c:1f:c1:14:2e:63:e0:f0:1b:d8:32:8f:be:57:
                    62:7c:46:f0:db:4b:1f:41:91:80:00:84:d2:8a:88:
                    16:ca:b4:14:26:fe:df:49:1a:cd:7a:94:8e:85:2b:
                    89:04:16:f3:4c:1e:38:9f:d1:49:5a:1b:16:a0:03:
                    f2:f0:59:e1:44:0d:7c:29:49:9a:41:f8:56:56:c4:
                    93:9c:c9:b8:fb:cf:f2:05:29:95:03:28:bf:4f:ea:
                    bc:3b:ba:c8:af:3e:9a:48:2b:61:f1:a2:b9:b3:d7:
                    85:d3:d0:1a:d8:40:ad:d6:c8:c4:d6:b7:10:fe:c5:
                    7d:ab:d4:c5:ad:65:2e:5b:47:d4:2a:84:3c:7c:26:
                    98:e7:24:7b:85:88:49:2a:fd:76:15:ee:7f:5f:4b:
                    28:a7:ad:2d:e5:ae:b0:07:8b:5f:d8:4d:bc:59:d9:
                    f2:8a:1e:ba:c0:a2:0e:63:b1:89:6f:51:52:80:b0:
                    24:5b:1d:a8:c2:cb:a4:4f:04:4a:c8:fa:e9:be:19:
                    30:e3:ea:f6:e4:0f:c6:37:cb:e1:1c:6b:4c:47:f4:
                    29:b8:68:40:05:47:b5:f5:51:9c:bf:6f:39:67:ec:
                    79:d8:44:dc:bd:08:46:8b:13:f4:fe:8e:4a:90:12:
                    3b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AE:D4:3B:67:C5:1D:25:F9:96:95:9F:79:AD:9A:FC:78:3B:CD:DD
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:4b:74:47:4d:93:40:d7:cb:0f:f6:91:eb:3d:8c:a2:cc:65:
         21:8e:75:a9:67:6f:b5:b0:f1:98:53:7e:86:d7:39:a0:c4:4c:
         67:c2:71:8c:30:96:8c:78:05:3d:47:63:8a:35:83:e0:ee:bb:
         14:20:cb:fc:63:4a:07:44:80:b9:16:c6:8a:45:02:9c:10:1a:
         e9:df:46:9b:fb:55:b3:5b:e0:74:46:89:7e:e3:e0:89:a3:8f:
         23:ad:cd:36:c3:b8:8f:d2:64:20:74:40:95:f5:d9:91:a6:ef:
         70:02:6c:46:a8:62:40:79:c6:4d:cf:04:32:93:ee:42:cd:9d:
         04:1c:01:11:55:a8:76:97:72:f7:cd:cc:37:02:72:8d:83:53:
         8d:68:7f:8e:73:17:e7:33:79:61:53:20:89:ba:6a:fd:5e:09:
         4b:a6:c6:ae:bf:f8:00:ff:75:84:dc:10:a1:9c:2c:72:a5:54:
         1f:7e:9f:eb:ee:2c:05:fa:cf:aa:8f:f3:82:f0:1c:5b:28:15:
         af:df:84:70:bf:bf:fb:16:a9:0f:49:47:8c:11:9b:7b:1a:69:
         84:ae:a0:5e:76:5f:56:92:04:f4:c0:1f:63:62:bd:bc:71:d4:
         8c:5d:a0:16:b5:ee:52:dc:4b:40:5c:e4:0e:0c:2d:8b:0d:67:
         c5:49:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org