Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130332e302f32342d3234203d3e20323634313831.roa
File:                     3133382e39372e3130332e302f32342d3234203d3e20323634313831.roa (raw, json)
Hash identifier:          qdaQoihA+7/NUzTe3HVYmhWbyoflna9HNZmOc7JGnlc=
Subject key identifier:   48:64:C8:0D:C7:42:DF:A3:46:CD:36:1B:10:C6:6C:63:C0:8F:8D:01
Certificate issuer:       /CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
Certificate serial:       09585B4C9257E9CE1E1996EF259D17D19E483BE8
Authority key identifier: D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130332e302f32342d3234203d3e20323634313831.roa
Signing time:             Tue 16 May 2023 15:13:32 +0000
ROA not before:           Tue 16 May 2023 15:08:32 +0000
ROA not after:            Tue 14 May 2024 15:13:32 +0000
asID:                     264181
IP address blocks:        138.97.103.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:58:5b:4c:92:57:e9:ce:1e:19:96:ef:25:9d:17:d1:9e:48:3b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A296E7637B50AB6A5A1B4621E114740B98B53B
        Validity
            Not Before: May 16 15:08:32 2023 GMT
            Not After : May 14 15:13:32 2024 GMT
        Subject: CN=4864C80DC742DFA346CD361B10C66C63C08F8D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:7b:2c:c8:88:43:11:91:62:5b:5e:f9:1a:
                    51:3d:01:92:e9:89:8c:1f:e8:e1:2c:d0:b8:df:53:
                    09:9b:26:bf:1b:a1:57:e0:ad:b7:f7:57:ab:ca:fb:
                    14:4e:6e:49:8c:53:5d:f4:6d:d3:fa:f6:1f:e9:16:
                    78:c1:ef:87:e8:f3:4c:a7:81:0f:86:2c:15:c4:2c:
                    d0:8c:7d:cd:99:1a:47:8c:bc:33:bf:66:54:c1:97:
                    28:20:f7:50:8b:0e:b6:43:8c:10:55:c4:d6:2e:46:
                    1e:79:29:6d:e5:f7:33:a0:2a:a6:d1:36:47:ae:79:
                    58:1f:64:7a:0d:bd:6a:b7:f7:ae:3c:84:27:99:ac:
                    34:1c:8c:2b:b6:21:39:81:e6:96:7e:2c:3a:4c:e2:
                    64:94:c9:fe:51:30:dd:41:40:aa:78:f6:1e:02:bc:
                    8e:40:6e:fd:05:e7:e2:56:ed:eb:86:81:b5:a1:61:
                    ea:29:4a:f3:d6:e4:65:21:3d:5f:40:a3:59:11:65:
                    0b:ae:75:6f:ac:9a:8d:fb:f3:f6:5e:db:e8:d5:ed:
                    4f:7c:97:56:d2:e4:81:80:cb:44:7d:4a:55:3d:a1:
                    c0:73:7a:91:01:ca:5e:be:5c:35:59:da:07:65:07:
                    af:d3:84:18:57:ed:f9:fd:f0:7b:9c:09:a7:97:36:
                    85:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:C8:0D:C7:42:DF:A3:46:CD:36:1B:10:C6:6C:63:C0:8F:8D:01
            X509v3 Authority Key Identifier:
                keyid:D5:A2:96:E7:63:7B:50:AB:6A:5A:1B:46:21:E1:14:74:0B:98:B5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/D5A296E7637B50AB6A5A1B4621E114740B98B53B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5A296E7637B50AB6A5A1B4621E114740B98B53B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9WJQS9MrNg1vrDJdHqUMHTbyTHgJ9xxrKQVDL9ok8swS/1/3133382e39372e3130332e302f32342d3234203d3e20323634313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:5f:92:20:5f:e6:87:80:38:3d:54:d2:9e:0f:19:11:74:
         6a:f9:e2:c6:4a:64:8f:3c:15:8f:43:86:93:2a:b0:66:36:e5:
         cb:63:f7:c0:68:d1:8d:02:b1:4b:ed:6b:9c:5f:23:96:bf:f6:
         a2:c2:72:69:0f:ea:a2:e4:d1:1f:ee:a8:4a:82:44:89:75:31:
         e0:6d:9f:9a:4c:f3:b7:75:ed:c1:83:d3:43:86:b4:c0:c3:7d:
         21:62:95:3c:20:a6:9f:1c:4f:96:b7:6e:7b:c3:13:79:2b:f0:
         8e:02:81:c0:40:fc:65:dc:97:ee:d7:ff:7f:c6:41:30:1b:75:
         79:db:a1:d2:16:e5:1d:76:f2:f9:76:8f:49:e3:e9:9a:d7:e9:
         d8:67:64:ed:55:7f:3b:89:21:17:a5:3a:78:7d:73:ef:e5:e8:
         0a:86:31:ce:b1:55:36:d4:0d:54:cb:89:4f:69:1b:b8:16:af:
         7e:29:92:d5:52:10:3b:69:20:68:5d:e2:db:f9:19:69:ff:f9:
         8c:cf:73:65:4d:08:4b:19:e1:f6:99:ba:35:5e:e6:79:8c:36:
         59:c3:89:33:2e:60:4e:cc:8e:ae:72:79:47:b8:fd:36:fa:ba:
         7c:8a:63:4d:e2:92:f6:f7:d3:2e:d6:de:a4:5d:e5:fb:fd:00:
         a7:18:94:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCVhbTJJX6c4eGZbvJZ0X0Z5IO+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDVBMjk2RTc2MzdCNTBBQjZBNUExQjQ2MjFFMTE0NzQw
Qjk4QjUzQjAeFw0yMzA1MTYxNTA4MzJaFw0yNDA1MTQxNTEzMzJaMDMxMTAvBgNV
BAMTKDQ4NjRDODBEQzc0MkRGQTM0NkNEMzYxQjEwQzY2QzYzQzA4RjhEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtz3ssyIhDEZFiW175GlE9AZLp
iYwf6OEs0LjfUwmbJr8boVfgrbf3V6vK+xRObkmMU130bdP69h/pFnjB74fo80yn
gQ+GLBXELNCMfc2ZGkeMvDO/ZlTBlygg91CLDrZDjBBVxNYuRh55KW3l9zOgKqbR
NkeueVgfZHoNvWq39648hCeZrDQcjCu2ITmB5pZ+LDpM4mSUyf5RMN1BQKp49h4C
vI5Abv0F5+JW7euGgbWhYeopSvPW5GUhPV9Ao1kRZQuudW+smo378/Ze2+jV7U98
l1bS5IGAy0R9SlU9ocBzepEByl6+XDVZ2gdlB6/ThBhX7fn98HucCaeXNoUFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSGTIDcdC36NGzTYbEMZsY8CPjQEwHwYDVR0j
BBgwFoAU1aKW52N7UKtqWhtGIeEUdAuYtTswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVdKUVM5TXJOZzF2ckRKZEhxVU1IVGJ5VEhnSjl4eHJLUVZETDlvazhz
d1MvMS9ENUEyOTZFNzYzN0I1MEFCNkE1QTFCNDYyMUUxMTQ3NDBCOThCNTNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1QTI5NkU3NjM3QjUwQUI2
QTVBMUI0NjIxRTExNDc0MEI5OEI1M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXSlFTOU1yTmcxdnJESmRIcVVNSFRieVRIZ0o5eHhyS1FWREw5b2s4c3dTLzEv
MzEzMzM4MmUzOTM3MmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYWcwDQYJKoZIhvcNAQELBQADggEBAAbwX5Ig
X+aHgDg9VNKeDxkRdGr54sZKZI88FY9DhpMqsGY25ctj98Bo0Y0CsUvta5xfI5a/
9qLCcmkP6qLk0R/uqEqCRIl1MeBtn5pM87d17cGD00OGtMDDfSFilTwgpp8cT5a3
bnvDE3kr8I4CgcBA/GXcl+7X/3/GQTAbdXnbodIW5R128vl2j0nj6ZrX6dhnZO1V
fzuJIRelOnh9c+/l6AqGMc6xVTbUDVTLiU9pG7gWr34pktVSEDtpIGhd4tv5GWn/
+YzPc2VNCEsZ4faZujVe5nmMNlnDiTMuYE7Mjq5yeUe4/Tb6unyKY03ikvb30y7W
3qRd5fv9AKcYlKA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org