Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/1/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa
File:                     3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa (raw, json)
Hash identifier:          svs4MyYRV5Xr/m6+v4mmieP1yRFMyWKHKkCZ1msiPZQ=
Subject key identifier:   61:FC:B2:11:F5:9B:78:AA:4E:DC:DB:64:C6:55:BA:9A:3D:81:A8:86
Certificate issuer:       /CN=F0937DDCAA90FF307DC066086B358E2767861A3D
Certificate serial:       41B0222B5138642FE16485DE8F7A4CACA9E1B726
Authority key identifier: F0:93:7D:DC:AA:90:FF:30:7D:C0:66:08:6B:35:8E:27:67:86:1A:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0937DDCAA90FF307DC066086B358E2767861A3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/1/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa
Signing time:             Wed 03 Apr 2024 20:47:10 +0000
ROA not before:           Wed 03 Apr 2024 20:42:10 +0000
ROA not after:            Wed 02 Apr 2025 20:47:10 +0000
asID:                     264195
IP address blocks:        138.97.196.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b0:22:2b:51:38:64:2f:e1:64:85:de:8f:7a:4c:ac:a9:e1:b7:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0937DDCAA90FF307DC066086B358E2767861A3D
        Validity
            Not Before: Apr  3 20:42:10 2024 GMT
            Not After : Apr  2 20:47:10 2025 GMT
        Subject: CN=61FCB211F59B78AA4EDCDB64C655BA9A3D81A886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:84:0a:7b:91:b5:15:08:b5:8e:3e:8b:39:17:
                    b5:d2:c8:86:2f:1c:de:23:98:e8:8b:fd:30:74:6c:
                    69:1d:91:c9:df:2e:2c:05:56:7f:4b:cc:d0:71:7e:
                    9b:2d:a4:68:ec:5e:21:1f:d8:9b:53:91:cd:6f:92:
                    03:93:f8:6d:39:1d:e0:3b:81:9d:3b:62:70:8a:77:
                    bd:11:81:37:32:a5:70:7e:ee:9d:0c:73:ca:f9:2e:
                    5f:47:51:7e:17:81:d4:3d:d7:bc:92:6e:89:0d:8e:
                    da:77:e9:b2:0b:9e:ea:73:1a:aa:70:91:34:93:c8:
                    d1:b7:a7:b5:18:ae:d7:9d:b1:1d:62:ac:57:69:d5:
                    33:31:ea:f4:c7:fc:4f:94:5d:ad:77:74:48:12:dc:
                    40:7d:19:f9:79:2f:47:b8:9f:f8:86:78:03:01:8a:
                    b6:13:7a:e2:06:ec:c4:65:c9:d5:67:a6:bb:10:19:
                    24:77:68:70:13:fb:df:f6:9f:42:fc:df:9f:f5:6b:
                    79:e9:bf:11:64:72:bf:dc:c7:b4:63:78:94:af:c4:
                    8a:85:b3:5e:a7:cb:6a:84:67:4d:db:83:36:55:6d:
                    fc:fd:8d:2d:82:ed:a2:58:e2:71:f0:f6:e7:a4:77:
                    71:a5:fa:03:0f:95:5b:ab:fd:f7:76:2d:df:03:72:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FC:B2:11:F5:9B:78:AA:4E:DC:DB:64:C6:55:BA:9A:3D:81:A8:86
            X509v3 Authority Key Identifier:
                keyid:F0:93:7D:DC:AA:90:FF:30:7D:C0:66:08:6B:35:8E:27:67:86:1A:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/1/F0937DDCAA90FF307DC066086B358E2767861A3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0937DDCAA90FF307DC066086B358E2767861A3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/1/3133382e39372e3139362e302f32322d3332203d3e20323634313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:87:8f:15:c1:a4:1c:b6:b8:98:72:cd:25:ac:ab:1a:03:d8:
         55:57:53:34:ce:43:7c:fa:1b:72:60:97:ff:bf:50:c2:b1:61:
         d3:08:2d:de:09:c3:91:b4:b4:70:df:31:45:77:6f:57:38:5e:
         49:b7:10:c9:90:87:6e:25:e5:63:7b:33:73:b2:88:96:cb:80:
         5f:58:99:a5:b0:67:3b:4a:ad:27:06:36:e6:6b:f7:68:5e:59:
         dd:da:3b:9d:d4:73:31:09:06:c6:d8:67:5f:46:c7:a5:b4:26:
         c3:99:36:1e:4b:84:5b:54:1d:18:91:96:f2:84:64:8d:19:dd:
         8e:68:2e:9a:d2:95:68:a3:34:42:f9:5e:98:37:80:97:c2:90:
         b1:c2:a7:1f:87:a7:31:23:d8:79:bd:65:7d:f5:1e:ea:c4:dc:
         f9:3d:3e:2d:bf:66:b5:31:f7:d6:3c:4c:c1:59:42:62:8e:2c:
         07:64:39:64:10:93:08:a5:4c:ff:8c:79:3f:10:ab:46:6a:c6:
         4a:26:0f:f5:f9:4e:78:aa:a5:fa:1a:a7:b3:d0:63:07:f6:e6:
         c2:cf:14:c0:2b:e7:cc:18:10:e8:12:5d:6d:78:f9:39:c8:cf:
         b7:e3:c0:79:d0:6c:4e:36:28:64:c8:42:01:9d:13:97:12:84:
         ea:2d:69:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 00:49:46 2024 by rpki-client on console-ams.rpki-client.org