Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39382e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          WGfBkiel4RHEHr+WT5HnwIucJflRY5PmSKZpe/yHfoM=
Subject key identifier:   2C:F8:82:42:B5:97:26:54:5E:F7:2A:E9:3C:27:64:5E:39:F9:F3:99
Certificate issuer:       /CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
Certificate serial:       3CB2E1DD46DB024726D5DCAAD1B302760A41A149
Authority key identifier: D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 28 Feb 2022 19:05:48 +0000
ROA not before:           Mon 28 Feb 2022 19:00:48 +0000
ROA not after:            Mon 27 Feb 2023 19:05:48 +0000
asID:                     264137
IP address blocks:        138.97.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b2:e1:dd:46:db:02:47:26:d5:dc:aa:d1:b3:02:76:0a:41:a1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
        Validity
            Not Before: Feb 28 19:00:48 2022 GMT
            Not After : Feb 27 19:05:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:65:8e:eb:bf:79:6c:89:63:dc:1f:ea:d0:42:
                    e8:b2:e1:93:03:5b:15:00:7b:6c:3d:da:d9:89:51:
                    27:ea:b8:65:f4:24:5e:a6:56:2a:4c:39:af:87:57:
                    4b:92:ff:09:3c:2e:c2:f6:90:c5:4a:4a:73:ca:a4:
                    21:5d:82:7c:0f:8f:0d:f1:8e:c0:b6:65:05:b0:63:
                    5e:80:ab:93:6d:36:8d:c0:7b:d0:3e:7b:ef:4d:4f:
                    c7:90:f8:de:c8:8c:1e:66:f5:28:8e:bf:ba:20:6f:
                    3a:ef:dd:81:3f:bd:26:4d:a7:f5:fe:ed:b4:e9:f0:
                    fd:7e:26:1b:bc:ed:65:e8:a3:88:12:0a:83:03:09:
                    0f:24:90:65:d0:c9:cf:43:ce:bc:91:a0:90:46:d5:
                    c7:d3:f8:de:27:55:54:c4:14:91:5c:55:fe:68:82:
                    c9:a7:a0:ba:be:4a:16:ef:ea:5f:9d:ce:78:8d:15:
                    0b:1c:d5:70:52:1a:01:4d:ed:3a:85:00:4a:30:70:
                    51:dc:49:6e:24:5b:fa:2f:1c:ba:a9:1e:71:ad:cd:
                    a0:65:51:61:18:28:10:67:2b:c7:17:af:7d:2e:90:
                    94:31:28:46:e3:fb:80:08:37:ce:55:0a:e8:74:f1:
                    0c:6b:9e:4e:14:de:c3:86:2f:1c:2b:2b:a8:5c:3b:
                    b0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:82:42:B5:97:26:54:5E:F7:2A:E9:3C:27:64:5E:39:F9:F3:99
            X509v3 Authority Key Identifier:
                keyid:D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39382e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:63:6c:7a:3b:c5:af:ac:73:d7:2c:3b:c9:ef:43:15:d8:03:
         d5:b3:a1:a8:59:39:3b:d3:25:ff:68:cf:47:37:b2:28:ff:f0:
         d6:71:5d:19:0b:0a:42:50:ce:8b:7e:09:c6:77:46:d0:ba:19:
         62:c1:9b:31:0b:88:ae:70:60:56:51:9b:ba:86:65:12:1c:2e:
         19:99:a0:96:a6:49:c7:60:30:a5:47:79:e8:be:f6:0b:d1:27:
         b9:d9:44:6a:04:29:3f:2f:42:ca:20:98:f3:92:1b:3e:9b:49:
         17:80:ba:ce:3e:7c:9b:a0:c8:96:73:f7:83:80:25:df:13:08:
         f6:f4:b4:2c:69:53:00:59:0c:c7:2e:82:9c:59:96:36:e1:5a:
         e9:c0:aa:f0:13:73:a6:ac:62:49:7e:48:56:19:55:79:05:28:
         a0:6e:84:a9:e9:05:46:dc:e4:19:f6:c5:2b:ed:36:1b:fd:b4:
         66:ec:cf:38:02:c5:44:6a:43:f5:7a:15:23:88:ff:25:84:98:
         69:dd:6b:e1:57:b1:b3:48:d2:a2:ec:3c:a2:cf:ae:79:ba:9e:
         a7:2c:d0:5c:ef:91:cb:b9:e2:3e:df:f9:3d:15:fa:8d:ba:9d:
         ed:49:79:d2:a9:5e:ae:1f:44:d2:cc:de:d3:f8:f5:3f:da:74:
         04:23:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org