Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
File:                     3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa (raw, json)
Hash identifier:          K4ASlRlpj1tDHqFQaHMY1INZnc0jGPu2tnxtaRNkycM=
Subject key identifier:   31:7D:09:CB:CC:D8:5B:69:03:B9:35:9A:31:D7:E1:62:48:DB:39:C7
Certificate issuer:       /CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
Certificate serial:       3E8AD1BF3C069B10C8EA8396B6EF7AFD48262AF9
Authority key identifier: 12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa
Signing time:             Thu 28 Sep 2023 19:41:35 +0000
ROA not before:           Thu 28 Sep 2023 19:36:35 +0000
ROA not after:            Thu 26 Sep 2024 19:41:35 +0000
asID:                     264209
IP address blocks:        138.97.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:8a:d1:bf:3c:06:9b:10:c8:ea:83:96:b6:ef:7a:fd:48:26:2a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12C8B7A2CD944B93D0FB21B771B0F25ACA52F800
        Validity
            Not Before: Sep 28 19:36:35 2023 GMT
            Not After : Sep 26 19:41:35 2024 GMT
        Subject: CN=317D09CBCCD85B6903B9359A31D7E16248DB39C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:5b:47:63:14:15:de:43:b1:11:20:6f:97:
                    32:e7:e3:b9:22:ac:0a:6b:a2:17:1c:3c:98:19:5a:
                    35:10:b3:d7:8b:9a:46:1d:db:30:86:21:02:a2:b6:
                    a8:ae:0f:d5:43:5d:6e:9d:9d:49:cb:14:67:74:90:
                    7a:41:03:16:d9:a0:70:ca:10:35:d9:55:4f:b4:cb:
                    17:50:20:04:51:c4:f2:06:a5:4c:64:44:05:60:72:
                    03:33:4b:dc:13:9d:31:08:bc:6f:2c:65:4f:87:13:
                    3b:fd:84:ff:c4:b9:ee:1b:57:06:cf:5f:af:f1:c6:
                    b2:50:33:bb:74:de:76:2c:1a:8d:b1:6c:2a:39:b0:
                    9f:69:36:8f:36:c4:2d:2e:a7:4e:4c:c4:d2:77:a8:
                    9c:e3:98:d4:fe:90:22:ee:fb:bf:29:90:a3:52:1b:
                    1d:64:16:b2:b9:09:c7:71:85:00:6d:a7:40:d6:e0:
                    25:39:92:c9:c5:dc:80:3c:af:6a:63:79:d0:77:d7:
                    be:6d:ed:7e:82:bc:91:f4:a8:94:8c:c0:a4:b3:9e:
                    05:75:9f:37:f3:27:3a:00:49:e5:46:08:2a:c6:72:
                    ca:1a:88:17:5c:b6:2a:63:1f:ae:47:bc:1b:77:1c:
                    45:db:5c:15:dd:31:aa:3a:e7:61:80:86:bc:f3:6c:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7D:09:CB:CC:D8:5B:69:03:B9:35:9A:31:D7:E1:62:48:DB:39:C7
            X509v3 Authority Key Identifier:
                keyid:12:C8:B7:A2:CD:94:4B:93:D0:FB:21:B7:71:B0:F2:5A:CA:52:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/12C8B7A2CD944B93D0FB21B771B0F25ACA52F800.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F6TeQCytDbQdcUn3YTymE7jZBAVHAjs1AjeRsqn8d3DJ/0/3133382e39372e3232302e302f32322d3234203d3e20323634323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:df:cd:c7:41:a5:1d:21:dd:dc:fe:93:d6:5a:36:b7:ba:c9:
         9d:17:d7:b9:43:7a:98:1a:f9:e1:24:15:ca:cf:80:59:5d:2f:
         11:3b:d5:bd:c1:10:81:48:89:1d:0c:a5:59:6c:b3:e1:dc:15:
         80:ec:12:e9:98:af:48:eb:ac:fa:f3:e5:6b:58:15:12:21:6c:
         9e:ed:b8:83:a9:52:35:fb:de:ee:0e:4f:ac:df:45:29:c6:20:
         78:68:92:94:16:22:bb:14:f9:94:c2:d2:f5:d8:bb:a1:39:c1:
         a2:aa:a2:fa:f6:34:2f:31:2b:3f:68:52:27:17:38:ef:fb:f3:
         50:79:39:1b:8d:a0:5f:f5:8d:d4:98:76:3b:82:96:34:56:6b:
         0b:cf:9c:d2:d8:6f:57:40:c0:bd:96:72:6c:bd:6a:39:87:79:
         91:9d:6c:ed:53:d5:7a:29:92:80:1a:89:6d:2f:9c:bf:5f:24:
         ac:af:1c:f3:7d:b1:f8:b2:92:1b:0b:48:f6:04:72:3a:28:c4:
         94:38:a0:a0:f7:08:51:d3:be:0b:4b:ce:27:44:b3:5b:5d:17:
         08:5e:bd:3f:17:b6:97:ce:f9:db:4a:c2:e9:16:8f:7c:10:94:
         9e:66:c5:82:4e:10:e6:00:ee:e8:5f:52:ac:4a:e0:de:df:8b:
         8e:77:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org