Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3233203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3233203d3e20323634313935.roa (raw, json)
Hash identifier:          S6ACmLg0bWzeup7pmhbX5r8VxZfnCMf4SMQHkYQlAuc=
Subject key identifier:   BB:7F:2A:7F:5B:BB:0E:B4:50:F7:8A:72:51:E2:BA:F3:A0:FD:47:A3
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       3BD0377307BE747CD810564C2E84C4D71FF8921F
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3233203d3e20323634313935.roa
Signing time:             Mon 10 Jul 2023 23:54:58 +0000
ROA not before:           Mon 10 Jul 2023 23:49:58 +0000
ROA not after:            Mon 08 Jul 2024 23:54:58 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:d0:37:73:07:be:74:7c:d8:10:56:4c:2e:84:c4:d7:1f:f8:92:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 10 23:49:58 2023 GMT
            Not After : Jul  8 23:54:58 2024 GMT
        Subject: CN=BB7F2A7F5BBB0EB450F78A7251E2BAF3A0FD47A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:4e:e8:6c:c2:df:90:b4:3e:b9:21:22:04:
                    8c:9c:0a:60:fe:59:64:a7:14:93:91:84:80:54:29:
                    45:93:75:bc:5e:5e:48:42:15:0d:75:a1:6e:31:b6:
                    68:53:f8:74:30:12:1c:f0:be:4b:ee:23:ab:be:ae:
                    67:6a:73:90:06:93:1b:8c:50:87:e1:aa:04:cf:f8:
                    f0:2a:b1:0e:b3:c7:1f:ba:d1:e0:76:c6:ec:3c:5c:
                    5e:1e:d5:38:7b:75:1f:92:52:28:d5:6f:7f:0a:e8:
                    3e:fa:4d:6d:ae:32:b3:54:8f:28:8e:bd:86:a5:cf:
                    93:46:16:2b:49:4d:ef:31:8d:7a:93:87:af:04:45:
                    67:ed:cb:8a:1e:d3:db:3b:96:0a:ba:0f:c0:74:36:
                    1e:05:57:f6:16:d7:1e:50:4c:8b:92:e9:2d:30:3b:
                    2c:b2:f8:9b:98:b5:aa:91:47:96:89:6c:fa:5c:43:
                    08:ad:1e:82:90:ab:ef:9a:a6:23:0f:d0:a5:b5:6f:
                    6d:37:8f:4d:a7:e2:bd:9c:85:22:4e:26:85:f7:e2:
                    42:d0:88:d3:1b:ff:de:48:b8:57:44:69:d8:81:48:
                    71:b1:31:a5:22:b6:90:be:f2:b8:b7:e5:ee:c8:d4:
                    9d:c2:f8:56:ad:56:c0:5f:a0:ff:d9:fc:8c:c9:64:
                    b3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7F:2A:7F:5B:BB:0E:B4:50:F7:8A:72:51:E2:BA:F3:A0:FD:47:A3
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3233203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:32:90:07:17:99:80:70:70:c5:a2:cf:d1:4e:03:59:d3:82:
         f2:bf:49:b6:95:31:c1:5b:d7:07:71:43:fe:d0:c8:0f:65:2a:
         24:8b:97:b7:ad:e9:db:ec:73:2b:9b:4f:80:fd:4f:db:6f:7c:
         34:83:2d:72:89:27:74:3a:5b:53:40:34:11:f9:2f:82:b3:4d:
         c1:6b:60:21:f3:94:84:60:bb:61:f9:8a:1e:fa:d9:f7:bd:d9:
         cb:c2:a0:d8:27:ad:e4:21:19:42:d4:5b:5a:82:7c:09:43:f4:
         1d:61:d9:92:70:53:f8:a0:49:5b:35:bc:e8:ca:21:ef:2e:7a:
         74:5b:fc:42:c8:02:59:a0:37:99:ad:24:6b:10:ac:7e:38:6f:
         4d:20:3a:b2:af:06:27:db:8f:d8:f9:9c:2e:d9:a8:7b:1a:ef:
         6f:57:28:9c:6c:87:24:26:12:40:fe:1d:eb:45:ed:bb:2c:08:
         ef:8e:2e:af:bc:57:32:b8:0b:9d:04:0c:88:62:59:1c:7d:74:
         b4:ef:0d:24:e1:80:2d:73:f7:ea:5f:1f:2a:7f:ae:fb:bc:df:
         26:c7:1b:44:55:3c:25:94:7b:b0:71:5e:94:31:19:03:4a:e6:
         e7:f0:a4:06:4a:20:49:55:fd:fd:ea:94:e3:67:70:2d:3e:1d:
         f8:39:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org