Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa
File:                     3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier:          zOtpUB/MxwT6n6RvJ069j+P1a4tCCtk5NperwHiFjS8=
Subject key identifier:   36:06:E3:C9:30:BF:00:74:9E:7C:16:65:11:54:8B:D5:CD:92:10:28
Certificate issuer:       /CN=9F89116D43866DC49358C8871BDCAA64A5740808
Certificate serial:       1C103B7C9452E52F62A051864BF49C4361676700
Authority key identifier: 9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa
Signing time:             Thu 20 Apr 2023 14:14:28 +0000
ROA not before:           Thu 20 Apr 2023 14:09:28 +0000
ROA not after:            Thu 18 Apr 2024 14:14:28 +0000
asID:                     264215
IP address blocks:        138.99.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:10:3b:7c:94:52:e5:2f:62:a0:51:86:4b:f4:9c:43:61:67:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F89116D43866DC49358C8871BDCAA64A5740808
        Validity
            Not Before: Apr 20 14:09:28 2023 GMT
            Not After : Apr 18 14:14:28 2024 GMT
        Subject: CN=3606E3C930BF00749E7C166511548BD5CD921028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:61:e4:3f:88:64:8b:05:14:57:71:c9:2b:
                    72:71:a3:6e:73:a1:21:44:78:89:af:21:cf:3e:9c:
                    23:51:8e:e8:cc:58:af:7c:1f:98:93:51:f8:d3:6a:
                    01:af:08:74:83:f4:71:b4:53:35:9d:32:54:69:52:
                    91:1e:8e:ea:92:72:43:16:95:3d:53:e2:51:60:db:
                    fd:4a:99:6f:bc:e8:69:ba:84:85:56:e6:65:4f:48:
                    db:74:36:fd:5d:ad:e6:30:63:fb:4b:f6:1e:90:1a:
                    e1:f1:df:fd:50:2b:43:7a:1f:4e:0f:8e:8f:04:b4:
                    c0:60:55:98:6a:43:8f:cf:55:85:c9:b5:c5:67:40:
                    2b:f2:a9:25:b7:4e:43:7e:72:f3:67:9f:a0:a5:61:
                    21:f5:7e:f6:3c:78:9a:3c:3b:fc:54:96:0b:40:9f:
                    50:14:ee:8f:33:a1:91:ba:9f:71:8b:24:22:fe:c3:
                    de:0d:68:b3:d7:07:f1:43:40:53:cc:dc:1a:2a:ec:
                    e3:ae:14:0b:f5:a8:43:2e:f4:4e:1c:4d:30:80:7b:
                    0b:fc:0a:32:f3:42:1b:d3:84:24:c1:f8:4c:35:17:
                    63:34:92:91:41:47:35:96:f1:8f:6a:2c:74:01:fb:
                    b7:f2:e5:36:57:30:fc:52:30:08:c9:50:ca:7e:f9:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:06:E3:C9:30:BF:00:74:9E:7C:16:65:11:54:8B:D5:CD:92:10:28
            X509v3 Authority Key Identifier:
                keyid:9F:89:11:6D:43:86:6D:C4:93:58:C8:87:1B:DC:AA:64:A5:74:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/9F89116D43866DC49358C8871BDCAA64A5740808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F89116D43866DC49358C8871BDCAA64A5740808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/1/3133382e39392e3133352e302f32342d3234203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:19:5c:64:92:0a:33:c0:c0:41:6a:45:a6:c6:b3:e9:31:84:
         f4:f8:c9:34:ae:84:7e:d9:5b:84:8c:3e:64:3e:a9:d2:44:15:
         06:d6:4b:50:99:3a:61:0e:98:27:bf:07:8a:0c:c7:dc:59:5e:
         1a:36:e1:12:5f:08:fc:4b:db:85:24:e6:31:02:46:86:e2:0d:
         a9:89:b9:d9:bf:66:9d:71:1d:46:44:3e:8c:81:cb:9b:9a:c5:
         87:02:3a:77:1b:07:c7:fa:01:c1:87:1e:68:60:86:3d:c8:72:
         07:28:54:64:c8:6f:82:bc:39:df:69:85:95:e2:b9:37:a7:d5:
         93:09:ee:e2:9c:d9:d1:06:95:32:6a:92:76:f4:75:90:ab:25:
         77:fc:b3:84:f6:77:45:3b:b8:94:d4:d2:0b:9e:a1:ab:05:f4:
         60:30:94:96:cf:2b:39:53:c4:cb:93:40:3d:7b:8e:17:5c:6e:
         b6:54:1c:7d:bf:15:df:24:bf:f8:e4:18:59:52:69:a0:38:4b:
         5c:4c:f0:6a:88:2e:26:1f:fc:40:c1:86:c8:94:5b:ba:18:fa:
         6e:9e:57:64:c3:b1:29:38:5b:8a:ab:6a:ef:89:da:2a:1e:0e:
         49:7b:29:59:5f:09:9a:f4:f3:26:31:00:70:1a:64:36:65:23:
         f8:e2:6b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org