Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa (raw, json)
Hash identifier:          JlKzdSKd8uKS1DN0m9GhVExdATHSFbFr9cJ8kKwROpI=
Subject key identifier:   3D:A6:68:A8:0B:D9:55:0D:0C:5E:34:EC:E9:38:DF:B1:00:07:9E:B8
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       3D47574033C77C828D029EE3E7F9F84F4DD4B6D3
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa
Signing time:             Thu 25 May 2023 20:50:28 +0000
ROA not before:           Thu 25 May 2023 20:45:28 +0000
ROA not after:            Thu 23 May 2024 20:50:28 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:47:57:40:33:c7:7c:82:8d:02:9e:e3:e7:f9:f8:4f:4d:d4:b6:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: May 25 20:45:28 2023 GMT
            Not After : May 23 20:50:28 2024 GMT
        Subject: CN=3DA668A80BD9550D0C5E34ECE938DFB100079EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:84:de:5c:89:3e:e8:ec:52:03:58:04:71:3b:
                    3a:26:ef:68:e0:80:56:e6:bc:b3:0c:1c:22:b4:3a:
                    16:16:6d:8b:8d:e0:b7:cb:ab:32:23:68:ad:81:3d:
                    04:d7:cf:f0:17:0d:3d:3a:93:02:9a:ef:7c:b3:49:
                    6d:b4:8e:ec:97:ca:a7:05:db:f9:ea:70:a7:86:c5:
                    1d:9c:64:a9:57:89:f0:7e:61:57:4b:b6:7e:d5:4d:
                    ef:fd:0e:65:21:57:42:bf:e1:d3:42:cf:c2:8c:c2:
                    ed:a8:25:ce:8f:ec:2a:60:44:cd:40:e2:d0:4b:f9:
                    b2:19:f2:86:11:b7:c4:29:90:80:64:f9:34:a8:fd:
                    96:df:c6:36:c2:f1:07:2c:2c:dc:01:53:f7:27:54:
                    ed:8f:fd:76:ab:69:7d:80:d3:f7:30:c5:e0:11:e6:
                    0c:f1:98:43:e5:f8:75:c0:5f:a4:0b:24:64:e4:9b:
                    81:9c:b7:e6:68:b3:19:49:cb:da:ab:4c:a4:5e:07:
                    1a:5a:95:12:ef:ac:c2:83:a4:ae:7b:4b:22:2a:07:
                    38:31:3f:c1:e7:3e:bc:81:37:bb:7b:87:b3:1e:1d:
                    3f:be:32:03:93:67:e0:e0:4b:f6:af:73:be:f8:24:
                    4d:9e:cb:58:92:27:e0:e0:de:7a:83:06:82:0e:ea:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A6:68:A8:0B:D9:55:0D:0C:5E:34:EC:E9:38:DF:B1:00:07:9E:B8
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3232203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:2b:5b:e5:bd:a6:4e:a1:96:56:7a:de:2e:25:c6:2d:7a:
         b5:9b:51:d0:2b:da:9e:d0:8f:72:be:b6:93:4d:1c:90:d7:26:
         da:95:17:c8:bf:99:e2:ff:bf:97:45:92:f1:c6:0c:56:81:72:
         50:8c:68:bf:0a:42:b1:c8:3e:25:cb:50:04:3c:d6:04:11:8d:
         95:e3:d9:ec:cb:97:61:c2:a9:76:12:79:6d:c6:03:3c:ed:69:
         2e:12:23:00:42:c0:7c:3b:a2:52:2e:f0:13:fd:f7:20:d9:8f:
         31:40:a1:b4:37:73:c8:54:8d:ce:c7:41:16:5a:c2:6c:c5:20:
         d4:e2:1a:4c:61:dd:fa:5e:26:51:da:6a:dd:da:fd:0b:ef:eb:
         e8:a0:d9:04:02:eb:4e:08:2e:70:5c:ad:29:08:35:14:35:c2:
         82:82:46:73:71:e4:b4:d3:e9:46:01:9b:3f:92:23:0b:fb:8f:
         4d:31:0b:da:47:bf:b6:d1:5c:20:f6:97:39:64:7b:8b:74:ee:
         8e:ed:38:fa:0a:9d:20:7e:e5:33:37:0e:12:c1:43:be:f0:cc:
         ff:89:d7:7e:f6:cf:f7:ec:11:b4:d4:ee:db:87:52:3b:e9:9f:
         98:48:48:06:5a:66:dd:07:07:fc:b7:cb:02:b9:28:de:c6:e2:
         97:5c:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org