Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
File:                     3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa (raw, json)
Hash identifier:          cmvBUT0HGD8WAnABO5rwYesYpvMfKKot+InO/UHLWwE=
Subject key identifier:   6C:5A:B1:04:EB:DD:9F:0B:51:4D:6F:B5:AB:CD:92:8E:41:F9:39:43
Certificate issuer:       /CN=033609031B0420779371AF91BEBAD9539C676491
Certificate serial:       0E8F3ABAB057B76B534B9133E5DA9E0108E241F5
Authority key identifier: 03:36:09:03:1B:04:20:77:93:71:AF:91:BE:BA:D9:53:9C:67:64:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033609031B0420779371AF91BEBAD9539C676491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa
Signing time:             Fri 12 Jan 2024 01:55:44 +0000
ROA not before:           Fri 12 Jan 2024 01:50:44 +0000
ROA not after:            Fri 10 Jan 2025 01:55:44 +0000
asID:                     264200
IP address blocks:        138.97.192.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8f:3a:ba:b0:57:b7:6b:53:4b:91:33:e5:da:9e:01:08:e2:41:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033609031B0420779371AF91BEBAD9539C676491
        Validity
            Not Before: Jan 12 01:50:44 2024 GMT
            Not After : Jan 10 01:55:44 2025 GMT
        Subject: CN=6C5AB104EBDD9F0B514D6FB5ABCD928E41F93943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:64:fd:fd:a1:27:60:5e:1d:57:68:0f:cd:00:
                    27:bf:25:5e:9c:57:1d:aa:33:d0:cc:5a:a4:91:ba:
                    cd:8f:bd:b4:c0:4e:c0:31:ff:4e:3f:41:cc:c4:34:
                    94:a0:42:a1:38:d8:6a:6b:66:cc:bc:9d:fe:f5:b5:
                    47:59:d4:31:72:d9:ff:1c:c0:31:f2:2e:0a:a6:29:
                    52:4b:9f:3f:de:13:c2:fa:fa:a1:f3:b5:0f:5a:7a:
                    d6:31:0d:3b:a1:d4:73:28:09:16:23:d5:24:ec:37:
                    cb:3c:5e:48:ab:26:02:a7:2d:ac:1a:70:b0:40:58:
                    94:fd:b0:7a:57:22:aa:cf:2e:bd:93:26:53:f4:71:
                    4f:d2:13:fe:7e:6f:2c:8b:8d:59:ae:a3:45:c3:0d:
                    9e:73:ca:09:30:41:a5:07:e5:82:e9:52:87:3c:55:
                    e4:ba:71:dd:4e:ac:8c:11:1a:06:b6:d7:98:37:a6:
                    75:4f:92:ee:db:56:87:a7:12:c2:dc:95:10:79:98:
                    4d:20:11:b1:7f:dc:47:2a:d0:b7:df:08:59:9d:e2:
                    61:44:de:9c:5f:22:4e:7e:54:44:de:ca:a5:7d:af:
                    12:83:da:00:d2:b5:21:98:9f:a7:d2:5d:11:cb:5e:
                    63:ff:d5:b7:18:b2:01:8e:e2:a6:ee:11:3f:d8:6a:
                    2c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5A:B1:04:EB:DD:9F:0B:51:4D:6F:B5:AB:CD:92:8E:41:F9:39:43
            X509v3 Authority Key Identifier:
                keyid:03:36:09:03:1B:04:20:77:93:71:AF:91:BE:BA:D9:53:9C:67:64:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/033609031B0420779371AF91BEBAD9539C676491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033609031B0420779371AF91BEBAD9539C676491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139322e302f32322d3232203d3e20323634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:ee:51:31:f3:76:9e:67:b3:2b:1d:38:0d:32:20:04:97:78:
         13:54:7c:20:32:51:90:bf:b3:cc:74:3b:84:99:37:0c:f9:a1:
         ff:a2:f6:26:e7:96:95:c8:ba:16:58:3b:f7:eb:6c:35:38:29:
         9c:a3:71:d8:ce:38:bf:e4:da:11:a8:a5:81:08:6a:57:27:07:
         d8:ed:b3:b1:be:9b:00:ed:47:35:a4:ad:4f:2b:93:fc:cc:05:
         8d:fb:ea:09:74:b4:4b:e1:7f:5a:47:74:df:88:de:4a:30:c4:
         0a:79:9c:67:9a:4a:13:56:9c:42:72:f9:98:a1:d6:fd:21:8f:
         ff:2f:9e:5b:1f:8c:46:56:5a:a9:82:4c:7a:d4:04:40:2c:e0:
         d5:f0:9e:be:64:a1:6c:44:95:0c:75:ed:ce:d7:b3:a3:c8:d7:
         77:0a:8a:2f:c4:1f:1e:7d:c7:09:a1:be:ee:42:ac:40:88:08:
         96:d6:ba:ce:5c:a9:5e:b1:7c:93:cd:c3:21:19:15:76:f5:ea:
         5e:a1:39:a7:fe:77:2c:da:4a:16:c5:8f:85:65:e5:48:c7:6b:
         79:4e:a2:81:50:0a:84:8b:f7:d3:87:06:5a:8b:9e:04:f4:e2:
         03:01:84:23:84:65:fe:fc:e3:31:47:9d:b5:64:b1:4a:b4:0b:
         9f:55:92:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org