Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa (raw, json)
Hash identifier:          iP7f1Y5B1sial1ySSLEv84z3TEfIVhsiDJzB8T1emZY=
Subject key identifier:   31:5C:3B:08:EE:84:15:71:5C:D5:F7:D2:02:CB:F6:8A:27:AA:43:EC
Certificate issuer:       /CN=7A0953BD58B8C434DA48A1143F71B91212A5614B
Certificate serial:       2B8E022CAAE1030E46E4DF0EE0C324C9FA7EACA5
Authority key identifier: 7A:09:53:BD:58:B8:C4:34:DA:48:A1:14:3F:71:B9:12:12:A5:61:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa
Signing time:             Sun 03 Mar 2024 16:07:15 +0000
ROA not before:           Sun 03 Mar 2024 16:02:15 +0000
ROA not after:            Sun 02 Mar 2025 16:07:15 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8e:02:2c:aa:e1:03:0e:46:e4:df:0e:e0:c3:24:c9:fa:7e:ac:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A0953BD58B8C434DA48A1143F71B91212A5614B
        Validity
            Not Before: Mar  3 16:02:15 2024 GMT
            Not After : Mar  2 16:07:15 2025 GMT
        Subject: CN=315C3B08EE8415715CD5F7D202CBF68A27AA43EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f0:24:73:f7:a4:94:37:08:11:af:ea:0a:dc:
                    c5:f8:01:17:dc:4e:cb:68:c0:00:e5:74:a9:14:79:
                    3b:8e:72:2c:05:ac:6a:bf:ef:9f:ca:de:7a:27:10:
                    f2:08:bc:29:ee:ea:ed:8c:6e:42:98:a5:bf:b6:0e:
                    b8:a6:53:99:c1:a6:15:e5:33:84:2e:18:9f:58:1c:
                    e1:12:54:fc:16:3e:3b:19:90:9b:46:34:d7:37:47:
                    2a:6f:95:aa:16:8f:54:ad:03:55:af:04:74:4f:b7:
                    3d:14:b1:a6:a0:73:e5:59:e0:81:80:1f:c3:2c:63:
                    b3:5c:aa:c6:8d:9f:43:1b:28:15:af:1b:c3:75:db:
                    b1:40:1a:33:ef:0a:72:22:a4:60:e3:48:d2:3e:e1:
                    e6:53:43:6d:a1:b8:ec:6c:92:f3:b3:ee:60:25:8c:
                    80:e9:71:59:1b:66:b2:0d:d5:39:8c:11:e8:20:24:
                    18:d9:a1:83:94:0a:36:62:b8:f2:28:21:68:a5:e1:
                    9c:2e:17:1c:8d:8d:ed:ea:9f:68:88:f6:ac:b3:b6:
                    87:f2:1c:2c:09:a1:28:08:31:42:05:f5:ca:e5:0e:
                    f0:13:cd:7a:ad:ba:83:14:23:5d:82:43:39:8d:66:
                    f9:c3:55:77:09:6a:25:05:55:66:44:23:ce:25:72:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5C:3B:08:EE:84:15:71:5C:D5:F7:D2:02:CB:F6:8A:27:AA:43:EC
            X509v3 Authority Key Identifier:
                keyid:7A:09:53:BD:58:B8:C4:34:DA:48:A1:14:3F:71:B9:12:12:A5:61:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A0953BD58B8C434DA48A1143F71B91212A5614B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:47:fc:98:e0:8e:25:fd:11:96:f2:7a:a1:76:74:ef:2f:
         4c:5a:6d:07:65:76:cf:06:42:49:ed:da:c1:60:73:a4:4b:5d:
         13:7b:9b:4d:42:8c:b0:07:8c:7d:02:64:54:8a:ab:70:75:9b:
         8e:64:68:5c:9c:12:0a:a1:8f:18:6c:47:e0:23:c0:fb:00:50:
         05:cd:05:dc:85:e2:e5:db:7b:e6:85:db:38:27:02:fc:40:46:
         93:a5:e5:d6:c5:ef:87:90:09:62:71:c6:cf:99:54:01:df:45:
         0e:0d:de:44:91:9b:9f:c5:44:2e:fe:5e:91:77:d4:00:ba:94:
         6d:01:c6:b8:67:31:1b:2b:cd:71:40:52:c1:fe:35:cb:05:33:
         ee:4c:7e:bc:6f:31:f8:34:97:2a:29:48:06:58:d0:d9:e7:3c:
         3a:f8:55:54:e5:20:19:73:b9:39:7d:7d:56:d5:fb:da:d7:9b:
         80:26:9c:e9:66:e7:37:2f:d3:5f:1a:6c:fc:8e:37:4b:e8:fe:
         82:dc:a7:d7:8e:1f:ea:b1:db:06:6a:b1:9d:16:51:a5:09:0c:
         6d:a8:a5:33:69:3c:1f:6a:ae:20:5f:7a:e5:7c:7e:69:86:2d:
         f2:c9:ac:0b:94:1a:6e:d0:be:ae:a2:9d:cc:df:4d:f5:1a:2e:
         df:95:c0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org