Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
File:                     3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          hYwHyJb4DzfltRV2IaLaRydAsxVgXIjxP1/SZgfyg/0=
Subject key identifier:   09:C5:D6:6C:39:53:A0:25:32:C8:BE:A8:97:A5:66:55:FF:B3:89:6F
Certificate issuer:       /CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
Certificate serial:       5A334DFDEFDC5784F34084E0A54BCE6E6B6734E7
Authority key identifier: DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa
Signing time:             Wed 14 Feb 2024 20:29:17 +0000
ROA not before:           Wed 14 Feb 2024 20:24:17 +0000
ROA not after:            Wed 12 Feb 2025 20:29:17 +0000
asID:                     264193
IP address blocks:        138.97.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:33:4d:fd:ef:dc:57:84:f3:40:84:e0:a5:4b:ce:6e:6b:67:34:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC13A6C4AE68B902CF647C91547B88EF9E2B6738
        Validity
            Not Before: Feb 14 20:24:17 2024 GMT
            Not After : Feb 12 20:29:17 2025 GMT
        Subject: CN=09C5D66C3953A02532C8BEA897A56655FFB3896F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7f:7a:a2:a1:15:74:0a:90:2f:d7:db:3b:9b:
                    85:73:7e:8e:66:c7:74:c6:26:5f:60:f0:48:39:ce:
                    6b:a4:1a:97:5a:34:e4:5d:6c:90:b4:73:24:3f:5f:
                    3b:ad:95:fc:74:37:d7:c7:e9:ea:9b:be:9f:c4:f0:
                    f6:5d:62:05:db:9b:b2:9e:f9:1a:e1:c2:63:c2:1a:
                    85:2d:cd:05:32:7e:4a:75:3b:00:41:7a:02:85:e1:
                    2c:8a:a3:72:43:a9:01:d7:31:6c:6b:43:a6:36:3f:
                    d0:74:58:7b:70:d8:ad:63:45:eb:2c:b3:6b:c8:6d:
                    57:67:af:0c:d8:7c:2d:52:1d:32:8c:32:83:ef:9c:
                    80:61:16:a0:85:f0:c6:d1:c7:35:91:1d:37:b6:89:
                    9b:56:33:d6:12:f9:13:75:3f:bc:8c:6a:55:d4:c3:
                    00:73:07:2e:58:6a:fc:9b:eb:ea:b3:58:64:43:a9:
                    a4:ca:83:49:23:8e:44:60:91:ea:e4:c5:7c:44:0a:
                    9d:b5:48:b9:98:17:51:23:63:9f:48:72:98:72:c1:
                    be:c9:9f:0b:2b:26:7d:77:07:d9:77:e9:1c:b6:ce:
                    58:4f:c5:fb:9f:e8:0c:94:70:2a:16:ef:18:b5:eb:
                    79:84:37:9e:4d:b0:af:96:9c:73:f4:ab:db:30:bf:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C5:D6:6C:39:53:A0:25:32:C8:BE:A8:97:A5:66:55:FF:B3:89:6F
            X509v3 Authority Key Identifier:
                keyid:DC:13:A6:C4:AE:68:B9:02:CF:64:7C:91:54:7B:88:EF:9E:2B:67:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC13A6C4AE68B902CF647C91547B88EF9E2B6738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138342e302f32322d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:86:4d:64:3c:93:44:ad:05:2f:9b:6d:4b:5b:1e:f1:26:
         1b:57:94:98:77:1d:68:8c:bc:d9:73:92:9a:c9:93:63:8e:de:
         87:6b:6c:0c:f5:e0:8b:7b:66:c5:b8:ed:af:9f:5e:95:c7:2d:
         02:40:ba:31:e2:62:0c:cb:af:b5:75:a5:eb:0e:a5:42:79:a0:
         52:8a:3e:a0:73:75:4d:e3:26:f0:a5:ff:d6:8d:08:a3:f2:f8:
         fa:0d:f2:7f:bf:5c:f3:b5:e8:95:9a:cb:cc:e7:a5:6d:34:4a:
         f6:a5:5c:6d:85:e5:2f:22:d4:ca:7b:45:6a:54:40:b8:18:5c:
         91:a6:cd:dd:03:c7:18:1a:c2:61:68:dc:9c:27:42:75:c9:fe:
         46:07:77:f7:66:bc:1e:2f:79:19:e2:ef:43:08:4e:c8:59:d1:
         73:3d:25:a5:33:46:67:c8:15:84:0e:a0:3f:4f:db:0a:a1:46:
         48:cc:7e:8f:35:92:a8:5a:45:f3:7a:18:bd:76:7c:56:79:c1:
         b5:c1:b2:1b:6b:66:32:76:40:1b:7f:fa:91:81:8e:37:3f:c7:
         0d:5f:6f:63:19:fc:ca:27:09:bc:2e:05:c1:90:72:37:23:4c:
         7b:61:44:d5:a0:01:d0:9e:b2:4a:45:51:ee:3d:e9:cd:21:e8:
         27:49:14:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:37 2025 by rpki-client