Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32332d3233203d3e20323634313831.roa
File:                     3133382e39372e3130302e302f32332d3233203d3e20323634313831.roa (raw, json)
Hash identifier:          /vFSHDzXV1X4FvCTZID+UdEaI3qDazpKmI8txElQtn0=
Subject key identifier:   0C:66:EA:65:8D:BE:DD:A3:51:95:3C:85:3B:AD:10:04:3A:53:2B:97
Certificate issuer:       /CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
Certificate serial:       43B38A53F853E8D55A62F7F859EE8FDE5712402A
Authority key identifier: D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32332d3233203d3e20323634313831.roa
Signing time:             Tue 16 May 2023 15:13:49 +0000
ROA not before:           Tue 16 May 2023 15:08:49 +0000
ROA not after:            Tue 14 May 2024 15:13:49 +0000
asID:                     264181
IP address blocks:        138.97.100.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b3:8a:53:f8:53:e8:d5:5a:62:f7:f8:59:ee:8f:de:57:12:40:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Validity
            Not Before: May 16 15:08:49 2023 GMT
            Not After : May 14 15:13:49 2024 GMT
        Subject: CN=0C66EA658DBEDDA351953C853BAD10043A532B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:06:42:56:3d:e8:ed:52:70:13:87:28:f7:
                    77:cb:ba:cd:1d:31:3a:a2:c3:fb:ca:9d:04:be:d8:
                    4c:ee:c0:4c:54:33:4f:fb:f2:e4:b2:01:fb:67:19:
                    49:54:f5:4b:97:b3:40:77:1a:96:82:b9:4d:69:10:
                    fe:df:db:b8:96:10:2a:a9:6b:8e:3b:0f:86:b4:9d:
                    d5:8a:2a:4c:ed:29:f9:52:1c:9b:7f:dd:ce:70:5a:
                    e6:8d:ac:77:e8:07:5b:5c:4c:dd:57:4b:fa:6e:5a:
                    68:e2:aa:95:c3:06:10:10:a2:36:54:84:51:5c:d5:
                    09:1f:79:91:a6:87:f6:ce:66:91:80:ec:b0:40:de:
                    e5:ba:ed:13:1a:eb:f6:82:bc:04:c1:15:0f:c9:10:
                    3b:84:b1:cd:d3:d1:b2:9c:bf:2a:59:72:73:d4:c5:
                    58:e7:2a:58:9b:d6:bc:bd:b6:e8:22:ca:c3:48:a9:
                    72:d8:ff:d7:6f:58:db:0e:53:71:37:58:75:02:99:
                    87:0a:32:15:1c:d7:a5:53:2b:c3:13:48:1f:45:49:
                    30:4c:20:31:0b:78:97:8d:51:34:a8:11:e6:b1:19:
                    81:e2:e0:bf:cd:ed:72:17:8a:5d:ff:2d:a0:0c:8c:
                    cb:a3:56:71:fe:87:f0:af:13:f7:5e:d1:eb:da:f6:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:EA:65:8D:BE:DD:A3:51:95:3C:85:3B:AD:10:04:3A:53:2B:97
            X509v3 Authority Key Identifier:
                keyid:D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130302e302f32332d3233203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:fd:f3:6c:b2:1c:2f:88:9a:0d:f2:5b:00:0f:da:89:40:69:
         dc:23:6f:77:20:d9:99:87:51:f5:5e:9e:5e:42:ea:d7:45:60:
         2f:fc:00:5b:cc:2b:2b:bb:9a:66:e2:01:80:94:25:0e:47:8e:
         ad:36:15:af:01:b7:a4:3a:81:35:23:d2:0d:cf:b2:dc:12:69:
         1c:36:52:a9:08:3d:ec:b5:32:24:5c:9b:7e:78:28:20:79:dc:
         05:8b:0c:23:7b:75:cd:76:33:f1:9e:0c:f1:bf:25:cc:ec:53:
         9f:3f:bc:f8:79:de:e7:62:db:ae:05:3f:42:6c:43:c9:4b:dd:
         b2:54:d5:a7:d3:53:c0:2a:b5:56:26:80:32:43:d0:9c:2a:98:
         43:6c:a6:d9:29:7e:44:5b:9e:a8:a1:21:ac:77:ac:f3:6a:b7:
         58:0f:7d:d0:60:1f:f1:fe:4f:38:34:4b:72:93:ed:29:c5:0e:
         5e:9b:ec:31:57:ef:39:b4:a2:03:9e:f3:81:1c:a1:50:19:e0:
         f7:29:fb:ad:a6:d9:12:bd:e7:3c:49:33:41:cf:3b:10:60:04:
         79:26:95:8f:4f:32:7c:49:bd:a3:6e:e8:bc:f6:4c:9f:da:7a:
         0b:67:19:ad:d9:ec:2b:47:5f:c1:da:f3:d7:aa:13:b9:94:89:
         04:ec:b4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org