Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa
File:                     3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          H/poNK3qJmvJ1eq9w3BBfBYDt8k0h8Ic4uHGqKHPRSE=
Subject key identifier:   80:AA:95:D9:61:12:2D:E8:FA:D9:84:D3:0E:0D:92:45:36:EF:47:51
Certificate issuer:       /CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
Certificate serial:       4DB56BD1623E682F52C8E41A5352F46DCCAA81F6
Authority key identifier: D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa
Signing time:             Tue 16 May 2023 15:13:28 +0000
ROA not before:           Tue 16 May 2023 15:08:28 +0000
ROA not after:            Tue 14 May 2024 15:13:28 +0000
asID:                     264181
IP address blocks:        138.97.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b5:6b:d1:62:3e:68:2f:52:c8:e4:1a:53:52:f4:6d:cc:aa:81:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Validity
            Not Before: May 16 15:08:28 2023 GMT
            Not After : May 14 15:13:28 2024 GMT
        Subject: CN=80AA95D961122DE8FAD984D30E0D924536EF4751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:24:b0:b6:a4:b1:46:50:dd:0b:a1:20:d5:
                    ea:26:f6:dd:bc:0e:3d:87:7f:cc:a9:40:5d:8b:28:
                    46:17:29:3b:57:be:0e:0a:cb:ea:2c:89:5e:97:f0:
                    a8:84:21:53:23:3f:3a:02:30:ca:9c:5a:1b:88:b4:
                    e2:9b:83:9a:ef:1b:2f:33:98:3e:9c:1d:26:71:e8:
                    9d:17:c8:90:6f:3c:d7:93:2c:a6:46:bd:6c:78:68:
                    73:02:1c:63:a6:5f:d5:93:0a:0a:b7:fe:8d:00:a2:
                    79:4d:ad:f0:29:dd:14:83:c1:91:dc:13:34:a4:61:
                    73:fc:a2:f1:92:f5:3e:21:73:c7:2e:c1:c2:2c:b7:
                    a3:a2:ce:6c:68:49:f2:34:2c:90:de:b4:bf:e1:0f:
                    c1:e0:29:42:e2:d7:0d:84:d3:ef:34:d0:69:2c:15:
                    16:ec:98:59:ac:64:b2:2f:52:be:df:ce:91:c5:b3:
                    97:11:fd:2a:f2:8e:41:89:ca:5b:e9:05:f9:df:9b:
                    f2:6a:21:41:eb:2e:f1:96:84:92:06:b2:4c:52:72:
                    5e:37:5b:68:ae:7d:eb:20:34:3c:65:0b:52:9d:1b:
                    2c:ec:87:90:7e:ae:0b:dd:d5:aa:5a:9a:09:09:80:
                    a8:40:6a:a7:fd:18:15:9a:4d:cf:41:58:bc:b9:e7:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AA:95:D9:61:12:2D:E8:FA:D9:84:D3:0E:0D:92:45:36:EF:47:51
            X509v3 Authority Key Identifier:
                keyid:D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130322e302f32342d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:73:9c:76:f2:7a:d2:64:21:37:36:52:35:c1:6d:87:8f:
         1e:17:bf:db:01:49:b1:49:99:99:9b:0f:11:f2:ab:12:b8:fb:
         b4:b4:7c:f9:08:5f:c7:77:e4:9a:23:fc:a6:47:e1:83:a9:dd:
         9d:d2:c7:b3:e1:d6:e5:bd:2c:f3:51:13:4e:2c:9b:20:ee:a0:
         06:a6:a1:cb:93:c4:4c:d8:13:35:a6:7d:e9:c1:d6:42:eb:f8:
         c6:50:18:88:c6:36:4f:5d:16:7c:0a:ea:6c:5b:a6:80:3f:64:
         81:e0:63:58:07:84:78:9c:37:41:ec:f1:a8:41:54:25:b5:1f:
         a0:71:8b:2d:f9:2c:93:1f:4b:3a:8b:5d:fd:5e:a9:a1:52:43:
         50:79:f5:41:6b:dd:fb:51:78:61:c4:1f:b0:11:b2:d3:28:04:
         32:01:6f:a1:d3:6f:dd:19:9a:e5:a9:af:48:87:2a:62:b3:c9:
         9d:25:ce:2b:0f:07:d3:61:cf:01:00:da:4c:3c:10:b8:4f:cf:
         e4:81:01:64:79:c6:39:4f:09:02:c3:e0:1d:87:70:59:ac:25:
         66:59:52:c3:83:fb:77:35:64:d6:d6:08:97:48:62:55:16:29:
         67:c1:3a:6b:66:45:9a:ca:17:72:aa:68:44:84:68:10:64:99:
         9b:1a:45:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTbVr0WI+aC9SyOQaU1L0bcyqgfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBMjk2RTc2MzdCNTBBQjZBNUExQjQ2MjFFMTE0NzQw
Qjk4QjUzQjAeFw0yMzA1MTYxNTA4MjhaFw0yNDA1MTQxNTEzMjhaMDMxMTAvBgNV
BAMTKDgwQUE5NUQ5NjExMjJERThGQUQ5ODREMzBFMEQ5MjQ1MzZFRjQ3NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqiSwtqSxRlDdC6Eg1eom9t28
Dj2Hf8ypQF2LKEYXKTtXvg4Ky+osiV6X8KiEIVMjPzoCMMqcWhuItOKbg5rvGy8z
mD6cHSZx6J0XyJBvPNeTLKZGvWx4aHMCHGOmX9WTCgq3/o0AonlNrfAp3RSDwZHc
EzSkYXP8ovGS9T4hc8cuwcIst6OizmxoSfI0LJDetL/hD8HgKULi1w2E0+800Gks
FRbsmFmsZLIvUr7fzpHFs5cR/SryjkGJylvpBfnfm/JqIUHrLvGWhJIGskxScl43
W2iufesgNDxlC1KdGyzsh5B+rgvd1apamgkJgKhAaqf9GBWaTc9BWLy5599JAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgKqV2WESLej62YTTDg2SRTbvR1EwHwYDVR0j
BBgwFoAU1aKW52N7UKtqWhtGIeEUdAuYtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVdKUVM5TXJOZzF2ckRKZEhxVU1IVGJ5VEhnSjl4eHJLUVZETDlvazhz
d1MvMS9ENUEyOTZFNzYzN0I1MEFCNkE1QTFCNDYyMUUxMTQ3NDBCOThCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1QTI5NkU3NjM3QjUwQUI2
QTVBMUI0NjIxRTExNDc0MEI5OEI1M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXSlFTOU1yTmcxdnJESmRIcVVNSFRieVRIZ0o5eHhyS1FWREw5b2s4c3dTLzEv
MzEzMzM4MmUzOTM3MmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYWYwDQYJKoZIhvcNAQELBQADggEBAKc8c5x2
8nrSZCE3NlI1wW2Hjx4Xv9sBSbFJmZmbDxHyqxK4+7S0fPkIX8d35Joj/KZH4YOp
3Z3Sx7Ph1uW9LPNRE04smyDuoAamocuTxEzYEzWmfenB1kLr+MZQGIjGNk9dFnwK
6mxbpoA/ZIHgY1gHhHicN0Hs8ahBVCW1H6Bxiy35LJMfSzqLXf1eqaFSQ1B59UFr
3ftReGHEH7ARstMoBDIBb6HTb90ZmuWpr0iHKmKzyZ0lzisPB9NhzwEA2kw8ELhP
z+SBAWR5xjlPCQLD4B2HcFmsJWZZUsOD+3c1ZNbWCJdIYlUWKWfBOmtmRZrKF3Kq
aESEaBBkmZsaRWU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org