Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa
File:                     3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          eXHiFqF0nenHlUTqZJGTKm+8FjVAQ11H70EwxO+NDPE=
Subject key identifier:   3C:00:81:8D:97:13:FD:C3:46:8E:2A:03:42:1B:6E:EB:02:68:BE:A5
Certificate issuer:       /CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
Certificate serial:       1AFC8D007CED29F5C6F6283E745DA2CE91117A47
Authority key identifier: D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa
Signing time:             Thu 10 Nov 2022 18:22:11 +0000
ROA not before:           Thu 10 Nov 2022 18:17:11 +0000
ROA not after:            Thu 09 Nov 2023 18:22:11 +0000
asID:                     264181
IP address blocks:        138.97.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:fc:8d:00:7c:ed:29:f5:c6:f6:28:3e:74:5d:a2:ce:91:11:7a:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4E46057588C9F820FD3FB9C6E42B274D67E7041
        Validity
            Not Before: Nov 10 18:17:11 2022 GMT
            Not After : Nov  9 18:22:11 2023 GMT
        Subject: CN=3C00818D9713FDC3468E2A03421B6EEB0268BEA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:6d:bb:9f:6a:c8:53:65:e8:5a:2d:86:68:
                    6d:82:a3:8b:39:cd:fa:ac:6f:4d:d2:65:21:11:47:
                    4d:27:26:43:57:68:0b:44:9f:94:0c:8a:b2:ea:5f:
                    48:ab:34:74:9b:0d:26:85:4f:1f:90:eb:01:03:d8:
                    7d:bf:2e:9f:22:07:9e:72:08:e4:f6:79:a8:f8:bb:
                    7d:1a:a9:99:84:a1:81:f9:7b:4f:35:64:10:10:08:
                    02:dc:50:57:fd:84:8a:02:23:14:4a:90:d9:48:56:
                    be:b9:36:4a:4a:d8:f0:c7:95:95:b2:b8:84:52:c5:
                    d3:57:e8:89:ba:d0:17:91:b7:d2:7d:da:87:74:83:
                    0d:b1:0e:ae:22:d4:bc:84:06:90:8d:38:8d:83:d3:
                    2d:80:a8:c0:c9:44:84:45:d9:cb:14:fa:50:da:d8:
                    f7:4f:1a:49:6e:6f:55:0b:76:db:d9:4c:3c:82:38:
                    58:bf:45:43:37:e6:dc:4e:28:b7:ca:9e:69:31:48:
                    5a:89:3e:bf:06:d5:80:8a:fe:26:d0:c3:ac:62:1d:
                    e2:2d:44:4f:03:fe:cd:37:f1:c2:3f:a8:93:b0:78:
                    7a:91:d4:28:bc:53:ff:38:64:9d:bc:ef:d7:ad:d9:
                    ec:65:a2:d9:05:44:64:a4:78:fe:cf:83:e2:20:2e:
                    bc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:00:81:8D:97:13:FD:C3:46:8E:2A:03:42:1B:6E:EB:02:68:BE:A5
            X509v3 Authority Key Identifier:
                keyid:D4:E4:60:57:58:8C:9F:82:0F:D3:FB:9C:6E:42:B2:74:D6:7E:70:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4E46057588C9F820FD3FB9C6E42B274D67E7041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/0/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:14:ae:f6:7b:fe:c5:70:be:77:77:f9:da:11:61:5b:44:47:
         44:15:ce:36:16:2f:cb:5b:71:ee:6a:61:2a:6f:c0:11:d2:7a:
         4c:33:96:fd:d3:7a:c4:8e:fe:76:9d:98:a5:bc:16:1c:1f:87:
         af:02:c6:bb:e8:70:42:25:af:5c:da:e0:78:33:50:fb:83:8a:
         20:f3:0b:28:b3:b9:32:d8:a3:b1:98:cf:59:aa:33:e1:d4:d5:
         53:b7:3d:a6:9e:a4:cf:ac:e8:80:e0:0b:0c:be:fc:84:1a:ad:
         80:23:27:ac:49:f7:13:d9:00:93:a7:2c:b9:3d:86:85:e7:80:
         15:33:a4:c0:af:a4:d4:45:0c:28:9c:96:ba:4a:bd:ac:f6:f6:
         f3:5b:80:d7:10:50:0c:96:3f:0f:51:b9:d3:95:93:3f:09:9a:
         e0:e4:0e:1a:91:c5:67:1e:1e:54:93:42:2b:25:b0:66:b4:5c:
         73:89:92:6f:bd:e8:da:78:f3:36:8f:f8:f7:e3:9b:a4:c9:10:
         41:d6:22:81:0e:fd:e8:9b:7a:56:c3:69:85:a6:29:53:06:9c:
         a9:a3:ae:00:79:80:f6:80:08:fe:e4:1a:c4:27:75:be:c2:67:
         67:5c:78:41:44:4d:e9:7b:60:33:3a:f3:92:b4:42:4c:53:fd:
         68:bb:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org