Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          IKEdYA3fF0+b0L7XQfJgV7t6RsPGMg43QJp+SvKesLk=
Subject key identifier:   90:87:7C:C9:AD:5C:A0:F1:A5:3C:DC:2C:28:5B:F4:AB:E0:74:B8:97
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       230BFBF601191E778934A5DED3B66DA1623CD551
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:24 +0000
ROA not before:           Mon 11 Dec 2023 14:00:24 +0000
ROA not after:            Mon 09 Dec 2024 14:05:24 +0000
asID:                     264137
IP address blocks:        138.97.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0b:fb:f6:01:19:1e:77:89:34:a5:de:d3:b6:6d:a1:62:3c:d5:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:24 2023 GMT
            Not After : Dec  9 14:05:24 2024 GMT
        Subject: CN=90877CC9AD5CA0F1A53CDC2C285BF4ABE074B897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:8e:5e:9c:16:5d:43:0d:ca:81:52:9e:c3:
                    e3:54:83:6c:9d:1e:a8:07:2a:87:56:d2:fc:24:89:
                    db:01:43:a2:4b:cf:82:42:dc:a4:fe:7e:5e:99:29:
                    b5:aa:3c:63:57:d2:d7:d1:d3:dd:91:a0:ce:5e:ee:
                    9d:c6:71:82:8a:ee:d0:25:e0:28:71:f6:9a:50:35:
                    4b:0e:44:cd:33:48:21:26:ce:bc:9c:d5:d4:41:fe:
                    89:47:4c:0f:51:8e:1d:0d:ff:16:5d:5a:02:bc:9e:
                    19:11:4c:99:6f:b6:f3:76:5a:37:c5:e0:02:ff:1c:
                    48:23:ca:3f:59:27:25:4e:4a:e4:09:fa:86:db:d7:
                    66:0c:ae:18:6f:98:a2:f6:84:e2:16:bc:2c:a1:18:
                    79:a6:7c:ea:13:63:aa:1d:ce:f9:4a:6b:79:7c:14:
                    5f:c7:27:80:d6:18:e2:6e:12:9a:1a:60:91:05:2d:
                    2e:f7:af:37:8d:26:0e:40:39:d5:53:8f:ca:a1:c3:
                    86:45:e8:ee:8f:f2:19:51:8c:6f:2a:88:45:5b:e2:
                    ff:6f:fd:c1:a1:43:23:a6:d0:b2:b7:fb:2c:23:70:
                    2e:d2:63:44:8e:5f:05:2b:3b:54:56:da:8e:61:ea:
                    a3:55:4d:7f:ca:05:33:57:95:f9:5e:9e:b9:af:d3:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:7C:C9:AD:5C:A0:F1:A5:3C:DC:2C:28:5B:F4:AB:E0:74:B8:97
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:5e:49:34:3b:ff:3f:4e:1e:bb:7d:6a:3c:9f:11:bb:0c:
         5c:2f:f6:06:64:00:a9:a4:e7:88:4f:3c:b0:d5:0b:0b:c6:0f:
         54:be:df:ac:c8:d7:6f:d9:ea:c2:9f:84:18:55:6e:69:48:0b:
         74:01:eb:42:e7:9e:57:ef:cc:8d:f4:b7:64:35:31:87:e5:b0:
         d2:62:d6:f8:9c:d5:e0:32:47:68:d4:a0:31:96:cb:39:8f:31:
         89:c1:8c:f1:4e:9e:ae:32:b6:ac:e5:25:57:51:61:bb:4d:29:
         cd:77:9a:f7:d4:a8:d2:e0:b6:c4:6a:03:98:ba:ea:3f:41:66:
         d9:e3:17:82:95:e4:c9:4a:57:0c:aa:0c:81:8e:69:3f:10:52:
         90:57:75:6f:3e:31:9d:95:4e:3c:e3:b6:98:f6:1c:e9:78:ea:
         0f:6f:21:52:81:b0:36:a8:25:75:b8:db:85:0f:3d:c6:8c:5c:
         51:2c:cd:15:65:75:35:e2:80:09:fd:fe:12:4d:8e:1d:c3:2d:
         c1:b5:16:15:86:ae:cf:05:88:1a:a3:96:98:48:7f:37:1a:ab:
         55:0f:c0:05:a8:15:4b:6a:ba:df:77:ef:39:51:ac:6d:11:2b:
         d9:31:ee:57:9c:aa:be:41:36:9f:a7:a8:91:72:49:7a:01:98:
         fe:4d:4d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org