Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa
File:                     3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa (raw, json)
Hash identifier:          9ej+8awfeGx5ak2ASIfGmbUUIbomZ5xYiZtA7RN+3sw=
Subject key identifier:   FF:64:54:35:03:DC:08:AD:9B:E5:2D:C2:28:4C:32:52:FD:4E:64:6C
Certificate issuer:       /CN=D734736DE25120E6797606BF75F2DB44E938B286
Certificate serial:       4497AE37F9C13D4D8EED7641EA944CB206D745A1
Authority key identifier: D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa
Signing time:             Wed 12 Jul 2023 12:51:56 +0000
ROA not before:           Wed 12 Jul 2023 12:46:56 +0000
ROA not after:            Wed 10 Jul 2024 12:51:56 +0000
asID:                     264197
IP address blocks:        138.97.148.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:97:ae:37:f9:c1:3d:4d:8e:ed:76:41:ea:94:4c:b2:06:d7:45:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734736DE25120E6797606BF75F2DB44E938B286
        Validity
            Not Before: Jul 12 12:46:56 2023 GMT
            Not After : Jul 10 12:51:56 2024 GMT
        Subject: CN=FF64543503DC08AD9BE52DC2284C3252FD4E646C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:ce:34:d9:f4:d3:ea:ce:bd:23:64:ab:58:
                    f3:cc:b7:5a:20:b2:c9:e6:00:a1:16:ce:d5:3b:91:
                    07:65:93:bb:c6:98:83:fa:2b:d1:94:7c:f0:0c:b7:
                    96:18:a4:00:49:8e:37:a3:17:05:30:f1:74:6e:71:
                    ee:1c:7d:3f:a4:38:c6:f0:a1:2a:18:77:28:b8:c0:
                    83:7a:d9:99:ea:d6:22:11:86:3c:22:56:49:8e:b2:
                    d1:2d:47:d0:2f:15:ca:9f:64:2c:f2:22:5c:99:13:
                    a4:1e:26:c7:26:9f:39:84:41:9e:d0:2f:74:23:d8:
                    b6:c0:0f:d8:cd:47:17:df:96:91:37:f1:65:2c:7e:
                    f7:5a:29:73:b1:4f:2f:bf:82:59:82:40:07:bd:ed:
                    ba:94:31:79:7a:d1:fa:84:24:96:c4:d7:b8:48:19:
                    1e:0c:66:74:d3:e5:7d:3a:3e:53:e3:3b:5b:da:dc:
                    72:27:a7:34:20:83:32:16:5e:23:27:43:d4:f9:77:
                    e8:63:f4:dc:d7:7b:a8:e2:67:c9:2f:94:4e:3d:55:
                    5b:c0:52:0e:c2:5d:70:08:67:24:3b:8d:63:9e:e6:
                    28:69:0d:9b:cd:b4:8c:fd:68:ce:5d:3b:d1:70:7e:
                    a0:2d:e0:9f:d5:77:01:f9:db:c8:85:10:b8:b5:80:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:64:54:35:03:DC:08:AD:9B:E5:2D:C2:28:4C:32:52:FD:4E:64:6C
            X509v3 Authority Key Identifier:
                keyid:D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134382e302f32322d3332203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:e2:77:96:a1:7a:dd:1c:27:9c:37:05:a1:58:83:30:28:66:
         4b:a1:d2:12:40:4b:57:85:eb:2e:bd:92:64:66:8b:99:e5:c6:
         55:60:8c:08:37:3c:ca:65:69:17:b5:fa:72:7c:a4:73:ba:a3:
         77:ca:f7:b6:54:f6:4c:bf:e9:99:b3:ec:d6:fb:c7:db:e4:47:
         1e:c2:64:57:41:7b:34:11:0b:1d:fb:dd:c1:5b:a9:e1:48:20:
         65:b5:c4:13:51:cc:64:2d:01:19:6e:1c:3d:b9:e4:22:27:c5:
         ac:86:00:fe:dc:5a:af:88:30:ca:2e:53:6a:c0:83:c2:96:4d:
         b7:3f:b2:9e:e7:86:13:13:e2:98:96:04:e6:c2:36:cf:42:75:
         d6:6a:45:71:c9:d9:91:9a:66:7f:9e:bb:1d:1b:52:d6:c3:c9:
         e7:e0:58:aa:bd:81:13:96:fe:14:6c:76:94:76:65:3f:2d:3d:
         55:a7:73:21:f8:24:f5:8b:c6:28:ed:2e:b3:34:62:3f:8e:79:
         93:af:b3:6a:da:54:24:f1:d3:1e:98:0b:cb:5e:dc:1f:3c:1d:
         41:44:cd:b9:e2:4e:5d:55:9d:b0:c8:cd:cd:45:68:6b:01:81:
         60:0a:cc:4d:e8:68:79:7b:1f:c7:9f:66:2e:4d:85:06:47:c9:
         ac:48:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org