Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
File:                     3133382e39372e39392e302f32342d3234203d3e20323634313337.roa (raw, json)
Hash identifier:          dbsupTQC9v1gVPzn679aIsK5On+nfbMQFgeudRz3ZXY=
Subject key identifier:   E3:E4:29:F4:A3:2F:50:2B:C8:A1:DB:E3:61:19:75:3B:8C:D0:7B:83
Certificate issuer:       /CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
Certificate serial:       5A2D27197D1A7E88BE6EB87C4CB9DA15098AF26F
Authority key identifier: D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa
Signing time:             Mon 28 Feb 2022 19:06:15 +0000
ROA not before:           Mon 28 Feb 2022 19:01:15 +0000
ROA not after:            Mon 27 Feb 2023 19:06:15 +0000
asID:                     264137
IP address blocks:        138.97.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2d:27:19:7d:1a:7e:88:be:6e:b8:7c:4c:b9:da:15:09:8a:f2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F
        Validity
            Not Before: Feb 28 19:01:15 2022 GMT
            Not After : Feb 27 19:06:15 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:fe:ee:7f:92:f0:f7:46:54:e3:6e:85:a8:
                    e5:bd:1b:c2:eb:44:be:69:48:8b:32:bb:8c:1b:4b:
                    aa:b6:b5:9f:79:65:da:fc:b9:41:6d:1f:9f:06:9c:
                    ba:3c:5e:d9:75:7b:ec:de:e0:e1:47:a4:77:5a:4b:
                    89:8e:72:bf:d9:08:ef:57:7d:2e:77:d4:bb:40:88:
                    0b:bb:5e:3b:9b:82:ef:43:21:6b:e1:e6:09:2e:d7:
                    d1:8f:79:a4:e4:bc:bc:0d:b8:5b:7a:e3:ee:30:fb:
                    dc:07:40:6b:81:23:4a:6e:fe:c4:db:86:af:b6:61:
                    c2:97:1e:4c:50:50:3c:74:f5:a1:52:10:4b:bb:da:
                    25:e6:02:0c:b4:55:cd:2f:41:88:c5:33:95:16:eb:
                    9b:b0:88:b9:46:bf:fa:4e:97:fe:4e:7c:57:ad:55:
                    1b:41:0b:8e:9b:a2:0f:36:17:35:a1:7a:df:df:9b:
                    39:f7:ed:61:4e:60:dc:bf:5f:0c:f5:47:58:8c:52:
                    03:82:3b:1d:0f:f3:26:8e:66:db:53:7c:11:90:b6:
                    59:9c:3e:1c:37:a6:d1:07:a1:53:66:b9:be:97:84:
                    e1:fc:b0:2a:75:58:fa:7e:98:a3:5c:9a:9f:81:e9:
                    d2:71:8b:af:5c:c5:19:48:a0:e7:ef:8c:c8:5d:6c:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:29:F4:A3:2F:50:2B:C8:A1:DB:E3:61:19:75:3B:8C:D0:7B:83
            X509v3 Authority Key Identifier:
                keyid:D4:D2:D0:3B:B0:E0:D9:2A:80:10:CD:63:33:8C:3A:77:C1:FC:45:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4D2D03BB0E0D92A8010CD63338C3A77C1FC457F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39392e302f32342d3234203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:80:a8:b9:81:f9:aa:18:d7:2c:5e:e2:c3:03:c7:1b:dd:35:
         0b:3f:2b:eb:e5:5b:68:b8:1a:06:fa:29:41:16:a0:cf:75:8b:
         96:f0:bd:f9:b5:11:0b:91:e2:b7:d0:d1:c6:fe:04:7c:45:8d:
         2b:36:c6:92:67:d8:de:43:de:5b:c6:19:29:69:0e:08:2c:6d:
         ec:ca:e8:14:9c:76:31:e2:4c:2c:b8:9c:33:70:b6:13:af:91:
         57:04:8a:7f:67:38:22:79:49:11:64:ff:37:69:e8:2c:67:01:
         b9:7c:42:4d:57:6c:c1:88:24:f1:24:94:59:83:d5:5f:f6:91:
         a7:3b:c5:63:15:37:97:b5:24:da:bc:ef:8c:90:e1:40:6f:d0:
         0f:5e:41:f6:f2:84:a0:40:2a:02:6d:21:f8:fb:b9:27:c9:25:
         2c:8e:bc:df:83:a7:2e:5f:56:9e:8f:87:c7:de:43:3c:a4:a7:
         9b:00:d9:9b:7d:20:4d:59:5f:3c:e7:a7:28:d2:fe:13:62:08:
         1b:1b:bb:0b:89:c3:a3:d6:5d:27:c9:39:95:99:1d:44:99:ae:
         6f:6c:ec:91:d3:ef:f7:8a:4b:cb:94:af:73:a4:59:68:96:19:
         18:34:1b:6c:78:35:f3:b0:64:4f:05:45:17:da:01:fc:4a:d3:
         38:4a:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org