Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3234203d3e20323634353734.roa
File:                     3133382e33362e3130382e302f32322d3234203d3e20323634353734.roa (raw, json)
Hash identifier:          JQ2P+15raoIXK5mClfwPPJ1CxWfuDfEZ6u3ccxao5Iw=
Subject key identifier:   E9:DF:BF:7A:19:DE:C0:56:CE:89:05:70:80:7B:F3:5A:D6:C4:12:70
Certificate issuer:       /CN=D197131BCADC9ACC3E759E991A7593DE5FB7955F
Certificate serial:       4B51B28E003072446B26156C0366486A8B45E539
Authority key identifier: D1:97:13:1B:CA:DC:9A:CC:3E:75:9E:99:1A:75:93:DE:5F:B7:95:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3234203d3e20323634353734.roa
Signing time:             Fri 15 Dec 2023 11:32:14 +0000
ROA not before:           Fri 15 Dec 2023 11:27:14 +0000
ROA not after:            Fri 13 Dec 2024 11:32:14 +0000
asID:                     264574
IP address blocks:        138.36.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:51:b2:8e:00:30:72:44:6b:26:15:6c:03:66:48:6a:8b:45:e5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D197131BCADC9ACC3E759E991A7593DE5FB7955F
        Validity
            Not Before: Dec 15 11:27:14 2023 GMT
            Not After : Dec 13 11:32:14 2024 GMT
        Subject: CN=E9DFBF7A19DEC056CE890570807BF35AD6C41270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:93:a7:31:65:1b:35:61:13:2d:f0:50:5c:
                    9e:0c:34:0b:91:95:8f:dc:f1:23:7a:30:95:26:18:
                    8b:70:50:3b:20:27:ed:34:c4:1f:10:e2:11:27:de:
                    12:20:14:99:1c:1a:46:fd:81:fe:ca:15:60:48:2a:
                    ba:a8:d9:43:78:cd:27:1c:cc:cb:bd:54:e7:92:11:
                    31:d9:63:f1:b2:c8:67:88:1f:1e:be:c9:78:0f:f5:
                    b4:45:7e:ca:f7:68:85:b0:4d:6b:a8:87:f6:11:d1:
                    e3:bc:9f:85:bb:f2:92:2e:cc:aa:ed:81:31:dd:a6:
                    b8:60:05:3d:9f:b6:4e:68:ef:63:11:9b:e2:c0:be:
                    08:b0:cf:54:14:06:37:65:38:18:29:e4:4c:71:04:
                    dc:11:0c:74:14:90:84:38:c9:f9:a0:f1:e8:1d:11:
                    01:dd:3a:c8:a4:9e:09:de:58:0c:6d:74:3d:94:f3:
                    5d:dd:7c:01:35:b3:da:21:11:dc:32:1f:5b:20:aa:
                    0d:f3:06:da:7d:b0:11:ce:da:a3:7b:f6:65:01:de:
                    f4:5a:ec:f6:06:ec:24:59:45:43:88:41:5c:51:60:
                    0f:47:22:87:27:4c:cb:a5:d7:7c:6f:61:50:13:8b:
                    95:16:e2:2b:c8:ff:67:ed:8b:1a:b5:e8:a9:dc:9c:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:DF:BF:7A:19:DE:C0:56:CE:89:05:70:80:7B:F3:5A:D6:C4:12:70
            X509v3 Authority Key Identifier:
                keyid:D1:97:13:1B:CA:DC:9A:CC:3E:75:9E:99:1A:75:93:DE:5F:B7:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D197131BCADC9ACC3E759E991A7593DE5FB7955F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3234203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:31:ac:94:d8:50:4c:df:cb:10:b1:1a:eb:40:ba:50:17:a7:
         a4:6f:ef:eb:38:32:7a:5f:37:48:37:28:81:50:e9:2b:c0:82:
         dd:ff:0f:1c:c6:20:6b:60:2a:2b:63:a9:44:b8:bb:41:8f:a3:
         b1:6c:58:cc:7e:04:16:c1:54:b3:91:75:fc:79:eb:8c:f2:c4:
         53:9c:dd:1b:e0:96:ab:81:88:99:01:a8:6e:a4:46:d1:6b:bb:
         0e:cf:75:50:9b:8c:7a:79:c0:6b:13:f5:27:51:93:32:cb:b5:
         c7:ad:72:a9:bb:e3:83:4d:76:fd:35:72:50:f0:e5:4b:55:7c:
         2c:40:5e:33:13:20:47:0b:b4:40:b3:3b:94:b2:9b:6c:97:59:
         90:b1:0a:ea:4a:e4:b9:c7:74:0f:bf:a0:b7:b2:13:48:93:8c:
         00:5f:c8:b5:5d:2d:65:39:1a:03:f5:bd:fa:48:70:6c:45:0f:
         93:3e:86:ab:3b:33:18:b3:2c:1a:f9:50:52:d8:c6:4f:fc:78:
         ec:42:4b:cd:81:eb:5a:3e:54:0c:9f:98:1f:fb:74:86:83:b3:
         90:bf:75:f6:40:59:1a:d0:0f:31:c9:ca:3e:d8:78:2b:2d:c6:
         21:33:b3:0c:22:97:98:b9:05:d0:51:3d:f2:dc:06:0d:82:b6:
         7d:c9:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org