Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa
File:                     3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa (raw, json)
Hash identifier:          shoZWkSHK4NBZCmRdqxupm5mkkF8xtz4OmftgBihaXg=
Subject key identifier:   35:19:31:2B:D2:4C:14:24:66:46:41:94:2E:90:D8:AC:2A:56:5A:FD
Certificate issuer:       /CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
Certificate serial:       62B9BC085F60EDDCBA49555F7D81B4A5BE355920
Authority key identifier: D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa
Signing time:             Tue 16 May 2023 15:13:05 +0000
ROA not before:           Tue 16 May 2023 15:08:05 +0000
ROA not after:            Tue 14 May 2024 15:13:05 +0000
asID:                     264181
IP address blocks:        138.97.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b9:bc:08:5f:60:ed:dc:ba:49:55:5f:7d:81:b4:a5:be:35:59:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Validity
            Not Before: May 16 15:08:05 2023 GMT
            Not After : May 14 15:13:05 2024 GMT
        Subject: CN=3519312BD24C1424664641942E90D8AC2A565AFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:af:ad:26:4b:01:cf:e8:8a:73:b8:72:29:
                    48:43:d9:67:ec:01:92:6f:96:e5:5e:ff:26:34:90:
                    c3:5c:2c:89:7d:c6:df:1e:a9:b8:2f:d2:6d:d9:0f:
                    77:6d:9a:43:f9:74:57:7d:a6:70:75:97:25:6c:0a:
                    3a:61:07:38:5d:bd:f5:3a:3e:cf:07:37:38:e0:38:
                    85:bc:16:84:6d:3a:73:62:a7:ac:9e:a5:38:75:07:
                    47:4e:23:b2:5f:7b:12:2c:ba:41:3b:f4:ab:58:dc:
                    a1:5f:cf:6b:04:53:ef:8d:f4:b7:22:c0:14:3f:3e:
                    7c:7a:59:c0:2d:c1:79:51:e6:33:a9:54:df:a7:18:
                    0f:0d:46:a5:29:b7:cb:47:14:78:0f:d6:02:b3:b5:
                    39:51:98:1e:27:23:69:a4:4e:ad:08:77:4e:7e:b6:
                    e5:17:94:92:15:dc:71:e6:8a:93:ef:74:bb:17:30:
                    81:93:31:1b:c2:f2:0a:90:ec:cb:fd:89:48:67:bd:
                    c9:7c:54:68:e6:01:41:c0:3a:06:61:dc:a8:8a:0b:
                    18:a5:12:9e:36:c2:ee:d5:ab:81:c5:d9:62:12:21:
                    a1:c3:2f:19:84:29:5c:97:4a:53:0d:1e:79:d9:e9:
                    bf:b9:7d:37:34:6c:9d:65:e0:79:10:d9:d7:d2:1a:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:19:31:2B:D2:4C:14:24:66:46:41:94:2E:90:D8:AC:2A:56:5A:FD
            X509v3 Authority Key Identifier:
                keyid:D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32322d3232203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:10:ff:35:bd:6a:79:31:c3:e0:81:3d:95:04:fd:9d:f4:e0:
         9a:b9:a4:1b:32:10:97:39:5a:f9:3b:8c:bf:d0:cd:0c:43:32:
         cc:b6:d0:3d:8c:81:23:13:25:02:bc:73:70:49:c2:69:06:19:
         f4:93:88:ef:ab:8a:99:60:27:cd:05:d1:14:5f:78:00:81:a1:
         32:fe:36:42:79:10:b7:37:22:b4:13:84:b2:95:e6:61:aa:9c:
         38:85:f1:6a:93:b7:df:aa:ed:de:e1:88:07:c0:c4:91:d2:d0:
         bd:79:fc:02:15:c9:5b:52:8a:c0:12:e9:7a:e5:7b:16:4a:1a:
         67:05:0e:da:62:fc:40:05:66:98:e8:74:d3:bf:28:32:2a:a6:
         04:d2:ea:c8:8d:04:d9:51:ed:58:cf:66:5d:79:a5:d3:76:40:
         0f:1b:9a:05:8c:09:c1:cc:e4:de:17:ac:e9:a5:4a:9d:17:21:
         79:e6:75:45:64:bc:17:46:35:0d:90:d1:33:98:82:d8:fd:90:
         a0:10:a8:39:28:83:50:b6:fe:67:f5:92:8b:24:a6:62:ea:37:
         38:e9:1f:0b:0d:3a:5b:34:57:eb:3b:6b:94:6b:3a:19:ee:30:
         2e:84:26:43:77:12:48:7b:10:e2:45:70:1a:2a:20:e8:9d:f4:
         0f:6f:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org