Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139332e302f32342d3234203d3e20323634323030.roa
File:                     3133382e39372e3139332e302f32342d3234203d3e20323634323030.roa (raw, json)
Hash identifier:          MO5RPVoQcc4TVG2HLI94hjwkUdwwJrRP4UMdporlb8U=
Subject key identifier:   A2:AD:A6:6F:ED:EA:D7:DD:F1:4D:08:2F:ED:C9:08:25:22:00:28:0A
Certificate issuer:       /CN=A1D697D5F26C934F936EB51F21EE45C978C9807B
Certificate serial:       460A3B0B6D09B85B56CABAAA0EE4822EEAC699A1
Authority key identifier: A1:D6:97:D5:F2:6C:93:4F:93:6E:B5:1F:21:EE:45:C9:78:C9:80:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139332e302f32342d3234203d3e20323634323030.roa
Signing time:             Fri 28 Jul 2023 19:59:03 +0000
ROA not before:           Fri 28 Jul 2023 19:54:03 +0000
ROA not after:            Fri 26 Jul 2024 19:59:03 +0000
asID:                     264200
IP address blocks:        138.97.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0a:3b:0b:6d:09:b8:5b:56:ca:ba:aa:0e:e4:82:2e:ea:c6:99:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1D697D5F26C934F936EB51F21EE45C978C9807B
        Validity
            Not Before: Jul 28 19:54:03 2023 GMT
            Not After : Jul 26 19:59:03 2024 GMT
        Subject: CN=A2ADA66FEDEAD7DDF14D082FEDC908252200280A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:95:39:0f:22:55:a4:cc:26:ae:c0:fe:3e:
                    d4:20:93:ac:5f:84:69:15:40:a2:e8:91:c2:88:1b:
                    99:32:37:24:50:14:2d:e0:a8:d7:d6:fa:f9:92:a8:
                    2c:fa:ba:d7:a8:89:59:6c:0a:11:25:e8:46:17:be:
                    cf:fd:d0:72:0c:e7:7a:a6:b6:19:c3:5f:6e:59:86:
                    de:4c:41:3e:b3:98:a1:98:16:2a:53:07:73:17:72:
                    29:a2:38:60:2c:1b:fc:c6:d0:59:50:f7:10:c3:99:
                    0a:87:3e:58:3a:ec:af:3e:e3:15:bf:41:c6:7b:8d:
                    86:44:bd:04:88:e4:92:70:5c:cd:46:b8:06:fa:de:
                    48:04:f6:d2:72:49:56:5f:35:10:24:d8:61:12:de:
                    f8:97:e4:d1:0d:1d:f7:e5:34:8a:48:25:76:96:c8:
                    8d:d3:66:ee:31:17:8d:81:93:68:42:ef:f2:06:4c:
                    6b:42:d4:29:1f:ce:25:48:b4:a5:b2:cd:bf:52:e8:
                    38:14:0d:fd:bb:02:69:7e:ed:bf:3d:73:a4:0f:87:
                    7a:ca:9f:1c:7e:57:c1:26:0c:8f:2c:77:91:0f:c2:
                    be:9e:39:fe:5a:c2:71:1c:13:12:e0:8e:2f:2d:25:
                    a9:21:8d:f2:1e:2b:f6:38:5c:71:14:5e:bd:db:5e:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AD:A6:6F:ED:EA:D7:DD:F1:4D:08:2F:ED:C9:08:25:22:00:28:0A
            X509v3 Authority Key Identifier:
                keyid:A1:D6:97:D5:F2:6C:93:4F:93:6E:B5:1F:21:EE:45:C9:78:C9:80:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/3133382e39372e3139332e302f32342d3234203d3e20323634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:30:65:ac:15:08:0e:3e:e4:45:41:a1:53:c6:95:24:55:1c:
         41:79:18:19:d0:d4:76:73:43:b6:3f:7a:17:e2:2f:94:0c:85:
         a2:8a:a8:56:77:37:26:9c:c8:11:03:d1:b4:d6:d1:de:e8:41:
         22:6d:db:b1:ad:be:80:2b:e6:d5:57:27:9d:07:90:96:c6:c8:
         7f:dc:11:e3:e2:90:48:d3:26:c6:25:8a:0c:2d:3f:74:25:3e:
         6f:df:09:24:fa:4e:10:ca:fa:d6:e1:8e:45:c7:22:7b:56:41:
         8e:48:d6:c8:07:91:c8:89:9d:1a:0c:ee:9c:ce:ca:05:09:d7:
         96:a0:24:f5:57:3c:be:20:02:e3:c6:78:0f:08:c1:6b:7d:f1:
         e1:42:0a:4b:01:57:83:a1:b4:c0:ca:1d:b6:97:9c:dc:b9:84:
         02:3d:c4:3a:e5:43:16:b7:05:75:36:fd:2b:ec:4b:e4:44:e9:
         53:72:85:cf:30:73:6f:d1:1b:d8:a0:58:dd:d0:46:28:c6:67:
         a8:6b:73:ba:2f:9f:e9:76:61:40:38:d0:a5:f3:ca:1c:23:8f:
         f5:d0:56:7e:a2:45:c7:d1:02:fb:31:ca:a9:72:f3:09:f6:76:
         d1:d0:85:e0:bf:d8:ab:1e:03:a4:06:b3:b8:73:fd:fb:3f:ad:
         22:4c:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org