Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32332d3233203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32332d3233203d3e20323634313337.roa (raw, json)
Hash identifier:          1LE/sHK/XMorefaZkd/XOZk8VsVxaF4LwLPDI8i8b7Q=
Subject key identifier:   42:90:2B:A9:43:D0:B9:0F:6B:69:6B:C0:A7:61:74:23:10:F4:CF:E4
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       55F1A50BA870A327ABE4EF2EBC28725207B666B2
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32332d3233203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:21 +0000
ROA not before:           Mon 11 Dec 2023 14:00:21 +0000
ROA not after:            Mon 09 Dec 2024 14:05:21 +0000
asID:                     264137
IP address blocks:        138.97.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f1:a5:0b:a8:70:a3:27:ab:e4:ef:2e:bc:28:72:52:07:b6:66:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:21 2023 GMT
            Not After : Dec  9 14:05:21 2024 GMT
        Subject: CN=42902BA943D0B90F6B696BC0A761742310F4CFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:bd:3b:5f:73:a8:07:71:0a:a4:0e:fa:3b:
                    9f:8e:7b:ff:f1:6f:0d:45:59:31:a0:c2:d0:c7:2a:
                    b5:a9:95:6c:25:4c:a9:a3:65:2f:a3:66:cb:7b:4c:
                    c8:ee:1b:9f:83:cf:50:10:d7:7f:b3:b4:e0:d5:bd:
                    ed:0e:0d:39:f6:02:98:df:61:77:d5:a0:58:3e:f3:
                    a3:35:6b:8d:2d:c3:f4:30:11:3c:3d:3b:a8:42:b9:
                    86:1f:42:00:97:4e:a7:6e:c5:06:0a:39:73:7e:db:
                    9e:ee:51:fd:2a:ea:03:d6:2e:e7:7e:bf:09:37:fb:
                    7c:48:77:bf:12:9d:7a:01:1e:16:55:57:7a:97:8d:
                    82:f9:57:62:4b:33:fa:30:c6:e9:dd:fc:36:6a:e8:
                    99:4e:0e:dc:d6:db:cd:b0:1c:0b:cb:13:47:65:35:
                    4a:e5:1b:56:4e:00:58:08:80:76:89:79:9e:88:44:
                    d6:63:c8:77:c8:8c:b1:96:c5:01:28:da:66:de:93:
                    d4:b0:52:9a:dd:2d:d1:7c:fd:2b:2c:05:21:30:b4:
                    9c:6d:dc:a7:a2:21:4c:a9:1a:8b:97:22:ff:e0:a0:
                    58:4d:12:e1:65:86:39:00:39:b4:c8:72:b0:50:26:
                    04:88:a6:71:67:8b:d8:f0:99:8b:ec:75:c3:f7:7d:
                    26:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:90:2B:A9:43:D0:B9:0F:6B:69:6B:C0:A7:61:74:23:10:F4:CF:E4
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32332d3233203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:db:48:f1:9e:02:10:7c:7e:ea:83:4b:d2:64:fe:e2:67:
         c6:ad:eb:1f:6d:d9:8b:e9:1d:43:42:c7:93:7d:20:14:44:2c:
         56:6b:cd:a8:d2:1e:47:70:bd:ec:8c:7c:4e:8c:fb:ac:46:2b:
         54:2a:87:d9:c5:e0:6f:2d:18:74:77:b1:24:f6:83:af:c7:31:
         b2:3e:57:79:e2:6b:79:2d:40:e4:69:f3:90:b9:f3:f8:c1:fa:
         e2:7e:03:fa:b3:0b:e2:d7:20:e4:b0:cb:5e:94:13:95:8d:1d:
         13:4d:1f:4d:59:33:01:79:0e:7a:93:7d:07:5c:7c:ae:78:d7:
         04:2f:49:6b:8a:5c:a9:0e:80:e0:e2:38:94:a7:de:ad:fd:0f:
         9f:2a:c5:5e:aa:5d:d4:2a:54:f6:3b:c1:9e:df:00:f0:89:a1:
         24:12:dd:79:90:9b:c1:37:bc:1a:75:0e:51:1d:bd:e1:66:d8:
         1b:85:51:57:a7:bd:95:36:04:86:27:c1:3f:35:4d:56:de:95:
         bf:41:28:d8:3e:1a:f4:90:3c:ec:22:48:f5:84:f4:5a:cf:56:
         86:c3:30:bb:5d:f2:4e:73:5c:60:17:c8:b6:c8:d7:1d:ed:db:
         04:16:e8:dc:74:ae:e3:ed:ba:50:01:52:ec:da:1f:93:eb:ff:
         47:16:33:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org