Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa
File:                     3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa (raw, json)
Hash identifier:          fZOzyUi8R8MtlZOxz74/w7igirEX2RAkrURY2EpGiMY=
Subject key identifier:   F6:2F:F2:BA:BD:CC:CC:D8:04:FA:AE:3C:03:72:D7:4C:C5:45:17:1E
Certificate issuer:       /CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
Certificate serial:       7864A777B6DA273F3F5AF947D709FFF06B6C8FF0
Authority key identifier: D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa
Signing time:             Tue 16 May 2023 15:14:22 +0000
ROA not before:           Tue 16 May 2023 15:09:22 +0000
ROA not after:            Tue 14 May 2024 15:14:22 +0000
asID:                     264181
IP address blocks:        138.97.102.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:64:a7:77:b6:da:27:3f:3f:5a:f9:47:d7:09:ff:f0:6b:6c:8f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Validity
            Not Before: May 16 15:09:22 2023 GMT
            Not After : May 14 15:14:22 2024 GMT
        Subject: CN=F62FF2BABDCCCCD804FAAE3C0372D74CC545171E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:fb:ed:73:e1:fc:f7:f8:f9:f5:e6:a6:4d:
                    72:75:8e:b4:83:20:42:67:ff:1d:b0:19:3f:45:3f:
                    99:26:97:1b:1e:67:f6:ed:c4:f4:7c:13:6f:cc:25:
                    18:84:73:18:45:bd:71:6e:38:20:1d:44:75:65:4c:
                    de:b2:4d:6a:38:b1:15:20:b5:a0:58:0a:b7:7e:31:
                    1a:8c:55:14:5c:80:8b:ba:69:71:63:52:b2:be:1e:
                    91:a6:7f:97:66:53:d8:7f:c5:33:c1:bb:c1:bb:f5:
                    76:4a:1c:e2:a7:c9:c8:3f:9c:20:f5:8e:99:05:ba:
                    bd:87:5c:74:57:d4:8a:ee:29:4d:6f:9b:e4:33:ca:
                    df:b8:5d:55:ed:71:fa:27:28:b5:b6:14:db:5a:0d:
                    59:2b:f3:3f:88:6c:52:31:47:e2:6f:18:61:04:bd:
                    2d:b3:77:b5:85:cf:c7:f0:61:0c:fc:92:f3:2f:3b:
                    4b:79:67:84:a6:ee:d0:1f:4b:7e:86:66:dd:8a:ff:
                    88:9d:ad:27:30:e4:bf:f1:cf:5e:3b:de:8b:12:25:
                    e1:09:f6:31:e3:11:08:01:d2:fb:e1:d1:8b:d9:24:
                    61:c0:c4:5f:2a:cc:62:9c:2d:c6:a8:aa:87:ed:36:
                    80:53:9e:eb:e5:9c:b5:95:54:aa:cc:47:5b:65:01:
                    e9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:F2:BA:BD:CC:CC:D8:04:FA:AE:3C:03:72:D7:4C:C5:45:17:1E
            X509v3 Authority Key Identifier:
                keyid:D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32332d3233203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:c3:ec:c8:9f:8f:82:f2:74:35:0e:91:fc:0a:d5:63:90:
         58:8b:64:96:31:e3:01:00:f6:d4:54:be:3a:6e:32:d9:5e:e5:
         ff:9e:d1:f2:58:ab:7a:62:8e:78:4e:21:b1:4c:7e:ae:7f:8d:
         cf:6d:ed:31:5a:a4:9e:dd:f4:a7:27:dc:da:0f:ff:31:d8:65:
         40:e4:d3:ae:17:f5:ea:39:bb:52:a1:75:69:3a:fb:85:2f:fe:
         ed:f2:c2:b4:59:c6:ac:ac:b2:2f:8a:b3:dc:ee:4f:61:8c:1d:
         55:a0:6e:0a:52:83:5e:ab:70:2e:d7:34:cf:67:59:89:b4:1e:
         f0:10:03:66:b0:64:5c:2e:4f:3e:db:fb:28:11:3a:9a:10:4e:
         ff:0d:45:71:23:7a:e5:37:82:42:7e:1a:40:4f:31:72:fc:b3:
         c6:1e:cf:9e:89:08:58:41:10:f0:f3:b5:43:dd:75:43:43:d4:
         8b:d4:4f:69:62:62:57:f7:4c:af:d8:90:c6:e6:37:f7:95:a4:
         03:d3:07:19:6a:fc:39:6a:9d:26:8a:2b:8e:6c:b9:9a:44:84:
         28:0b:32:27:4f:72:e1:eb:27:fe:3c:5b:44:03:3b:3d:cd:c3:
         08:4f:57:a8:ae:36:81:6d:91:a1:fa:0f:98:9a:58:c0:cf:ca:
         ff:a3:0e:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeGSnd7baJz8/WvlH1wn/8Gtsj/AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBMjk2RTc2MzdCNTBBQjZBNUExQjQ2MjFFMTE0NzQw
Qjk4QjUzQjAeFw0yMzA1MTYxNTA5MjJaFw0yNDA1MTQxNTE0MjJaMDMxMTAvBgNV
BAMTKEY2MkZGMkJBQkRDQ0NDRDgwNEZBQUUzQzAzNzJENzRDQzU0NTE3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+/vtc+H89/j59eamTXJ1jrSD
IEJn/x2wGT9FP5kmlxseZ/btxPR8E2/MJRiEcxhFvXFuOCAdRHVlTN6yTWo4sRUg
taBYCrd+MRqMVRRcgIu6aXFjUrK+HpGmf5dmU9h/xTPBu8G79XZKHOKnycg/nCD1
jpkFur2HXHRX1IruKU1vm+Qzyt+4XVXtcfonKLW2FNtaDVkr8z+IbFIxR+JvGGEE
vS2zd7WFz8fwYQz8kvMvO0t5Z4Sm7tAfS36GZt2K/4idrScw5L/xz1473osSJeEJ
9jHjEQgB0vvh0YvZJGHAxF8qzGKcLcaoqoftNoBTnuvlnLWVVKrMR1tlAelvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9i/yur3MzNgE+q48A3LXTMVFFx4wHwYDVR0j
BBgwFoAU1aKW52N7UKtqWhtGIeEUdAuYtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVdKUVM5TXJOZzF2ckRKZEhxVU1IVGJ5VEhnSjl4eHJLUVZETDlvazhz
d1MvMS9ENUEyOTZFNzYzN0I1MEFCNkE1QTFCNDYyMUUxMTQ3NDBCOThCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1QTI5NkU3NjM3QjUwQUI2
QTVBMUI0NjIxRTExNDc0MEI5OEI1M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXSlFTOU1yTmcxdnJESmRIcVVNSFRieVRIZ0o5eHhyS1FWREw5b2s4c3dTLzEv
MzEzMzM4MmUzOTM3MmUzMTMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKYWYwDQYJKoZIhvcNAQELBQADggEBAKzjw+zI
n4+C8nQ1DpH8CtVjkFiLZJYx4wEA9tRUvjpuMtle5f+e0fJYq3pijnhOIbFMfq5/
jc9t7TFapJ7d9Kcn3NoP/zHYZUDk064X9eo5u1KhdWk6+4Uv/u3ywrRZxqyssi+K
s9zuT2GMHVWgbgpSg16rcC7XNM9nWYm0HvAQA2awZFwuTz7b+ygROpoQTv8NRXEj
euU3gkJ+GkBPMXL8s8Yez56JCFhBEPDztUPddUND1IvUT2liYlf3TK/YkMbmN/eV
pAPTBxlq/DlqnSaKK45suZpEhCgLMidPcuHrJ/48W0QDOz3NwwhPV6iuNoFtkaH6
D5iaWMDPyv+jDrU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org