Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa (raw, json)
Hash identifier:          89ot61MWD99OCrHze51qWkg8GRT8PelljMUSNWOiHHw=
Subject key identifier:   C1:17:69:17:06:35:7A:2E:91:30:A1:C9:BD:95:DD:1A:DC:CA:1D:DE
Certificate issuer:       /CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
Certificate serial:       26A55E1F6677E2C444AB8FDF065DCB16BD83A2F3
Authority key identifier: 4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa
Signing time:             Thu 13 Jul 2023 17:54:06 +0000
ROA not before:           Thu 13 Jul 2023 17:49:06 +0000
ROA not after:            Thu 11 Jul 2024 17:54:06 +0000
asID:                     264195
IP address blocks:        138.97.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a5:5e:1f:66:77:e2:c4:44:ab:8f:df:06:5d:cb:16:bd:83:a2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5
        Validity
            Not Before: Jul 13 17:49:06 2023 GMT
            Not After : Jul 11 17:54:06 2024 GMT
        Subject: CN=C117691706357A2E9130A1C9BD95DD1ADCCA1DDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a6:a7:d9:68:52:60:91:84:1a:6a:d5:cf:b9:
                    18:43:61:1e:94:26:e9:20:d7:9e:1a:3f:18:74:af:
                    81:6f:0d:cc:1c:04:00:c7:d7:0c:58:0a:cc:9f:4d:
                    47:51:40:39:62:9a:c7:04:8e:30:3a:c4:13:d0:2f:
                    60:da:9e:c8:bb:2e:82:f9:58:74:f8:d2:41:ec:51:
                    39:25:62:f9:01:1e:a9:f1:51:f9:2e:50:5c:61:75:
                    2f:6f:86:11:9d:f5:7d:af:8e:e3:ab:20:ad:36:ea:
                    ad:5f:4f:e8:46:8f:34:f5:d2:02:ce:b4:48:83:29:
                    09:59:6e:89:e9:8d:b5:3a:e6:26:b6:3e:15:2b:a7:
                    9a:34:57:d4:9e:b8:83:78:cd:9b:56:cb:c6:48:30:
                    6c:a9:00:47:7a:f4:51:43:9b:50:1c:c6:2b:20:79:
                    8b:63:43:83:15:f7:9b:d4:f8:76:31:7a:21:31:29:
                    38:7b:29:51:57:31:e9:01:eb:06:5a:0e:18:0d:30:
                    5d:d6:5e:58:36:8c:f8:c5:da:6a:98:22:98:af:f2:
                    cb:52:37:1c:c2:26:34:7e:f8:f3:33:82:96:fe:a2:
                    0b:62:7c:c5:e5:3b:47:a0:ce:b5:bb:15:c6:58:9a:
                    c9:71:46:c4:ca:52:6d:4b:28:54:a2:e9:59:a1:ff:
                    73:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:17:69:17:06:35:7A:2E:91:30:A1:C9:BD:95:DD:1A:DC:CA:1D:DE
            X509v3 Authority Key Identifier:
                keyid:4D:BF:C3:A6:54:28:32:2E:6B:8F:B8:2B:60:B4:FC:79:7A:3F:ED:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DBFC3A65428322E6B8FB82B60B4FC797A3FEDF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/3133382e39372e3139362e302f32332d3233203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:78:08:f8:0e:19:ac:e8:2b:e3:b7:b0:30:4d:d9:b2:a0:29:
         7b:c8:eb:75:8c:52:57:f2:d5:b9:d2:cf:bb:98:b0:c6:3c:55:
         2b:e8:97:3b:20:9b:d1:93:04:a3:6b:d7:22:46:c5:e4:f8:0c:
         18:18:76:84:08:87:4c:1d:62:d8:48:10:88:5b:5b:41:2c:a3:
         db:31:a9:d1:45:e8:f7:40:61:36:d1:10:be:d4:26:67:7d:34:
         20:f4:6b:d7:e4:06:32:35:c6:41:12:ed:74:40:99:af:19:0b:
         cb:62:a4:55:46:c2:36:79:63:c9:b6:b3:79:a3:fd:68:5c:4e:
         89:0a:dc:0e:c7:2d:19:d9:04:d7:e5:1b:ca:e6:31:01:fd:8e:
         fa:09:bd:97:f3:87:1d:e9:06:47:93:b1:69:13:b0:95:be:91:
         68:81:a1:91:8f:ba:e0:3e:c0:4f:f7:b0:6e:0d:1b:d6:af:26:
         e3:64:3e:41:8b:5e:7a:34:c6:b3:8b:6a:9e:53:08:bd:c4:67:
         8b:73:45:98:be:14:9e:d9:d7:6d:39:d7:6a:1d:d3:17:12:20:
         ad:97:5f:10:e7:dd:ae:6a:a2:41:25:dd:64:d3:89:6a:4d:13:
         f2:ce:6e:de:99:23:62:4b:93:a6:b4:22:ef:f0:a6:8b:ed:5f:
         89:ce:64:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:56 2024 by rpki-client on console-ams.rpki-client.org