Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37342e302f32332d3233203d3e20323634313738.roa
File:                     3133382e39392e37342e302f32332d3233203d3e20323634313738.roa (raw, json)
Hash identifier:          ZG5VwEJc+qIKzLsMDCsCI3jGywB1lk7h4l+BB5kglyI=
Subject key identifier:   4F:20:6F:73:1F:C8:1F:22:4A:CC:BB:3E:71:A8:99:52:A6:DE:75:72
Certificate issuer:       /CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
Certificate serial:       6242AEBC4E89A0EACBB639161D596B630E9DAA2D
Authority key identifier: 9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37342e302f32332d3233203d3e20323634313738.roa
Signing time:             Sat 10 Dec 2022 12:00:00 +0000
ROA not before:           Sat 10 Dec 2022 11:55:00 +0000
ROA not after:            Sat 09 Dec 2023 12:00:00 +0000
asID:                     264178
IP address blocks:        138.99.74.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:42:ae:bc:4e:89:a0:ea:cb:b6:39:16:1d:59:6b:63:0e:9d:aa:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Validity
            Not Before: Dec 10 11:55:00 2022 GMT
            Not After : Dec  9 12:00:00 2023 GMT
        Subject: CN=4F206F731FC81F224ACCBB3E71A89952A6DE7572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:be:09:23:bd:34:19:d2:78:8a:90:74:5e:
                    4c:fe:e5:3e:af:47:d5:57:17:58:1c:c2:9c:30:9c:
                    67:4c:61:9e:77:da:14:b3:88:7a:8f:52:59:1a:df:
                    5e:c0:d9:37:a3:d9:61:54:0a:ce:c6:fe:f6:8a:b1:
                    0a:06:fe:92:d8:e2:45:fb:93:4d:fb:02:07:08:c4:
                    cc:b8:c9:84:49:71:59:96:d0:59:d7:ae:07:00:ab:
                    13:2a:5f:8a:f8:04:f2:48:dc:f9:1a:05:ad:41:f7:
                    50:58:38:cc:b4:e4:8f:9e:f4:49:39:c8:25:23:31:
                    f9:2d:14:63:d9:4f:48:da:c7:4a:ac:50:43:d1:9e:
                    da:98:9f:9d:d3:c2:ee:f1:ff:bd:28:19:17:41:05:
                    20:e0:d0:48:c7:07:4b:2b:6c:ab:4e:4f:7d:8b:1a:
                    5b:e2:30:95:17:d9:99:42:9f:11:ac:9d:a2:6d:07:
                    8b:5d:6d:ef:67:c9:36:1c:0e:16:2e:ff:fb:76:42:
                    f0:51:9e:86:a9:ff:02:20:7f:c5:46:cb:07:ec:ab:
                    81:3f:cb:c1:fe:b7:5c:48:48:42:6a:ae:63:4d:5d:
                    da:1b:cf:27:89:c3:34:6e:9c:0e:bd:d4:83:59:fb:
                    b2:4d:f5:07:7c:e1:18:6e:d8:e4:fb:ff:9c:a8:c1:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:20:6F:73:1F:C8:1F:22:4A:CC:BB:3E:71:A8:99:52:A6:DE:75:72
            X509v3 Authority Key Identifier:
                keyid:9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37342e302f32332d3233203d3e20323634313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:2a:5a:50:90:19:58:5f:6e:53:02:58:a1:f7:13:08:40:
         79:20:9f:67:1b:b8:4a:b7:e8:83:47:70:e8:10:d7:b8:dd:f8:
         2d:e8:42:2b:fc:86:72:aa:0e:91:ef:ad:6a:b4:86:0b:45:92:
         61:52:7d:98:37:51:50:a0:99:f7:7c:ff:19:a2:94:a6:5b:38:
         98:d8:96:a2:96:ac:f3:f5:22:08:5d:8d:af:6a:db:4b:35:12:
         fc:a5:83:63:51:a3:07:00:c5:52:60:ba:74:b3:e9:0e:92:6f:
         ab:6d:6a:ee:63:67:5a:66:f8:14:09:79:61:33:ef:19:eb:b7:
         d1:45:ea:98:b9:9c:81:d3:66:2d:97:ec:89:5b:07:e4:47:b1:
         40:ed:4c:d9:6c:f5:6e:ac:91:e3:cc:dc:c9:08:f5:c2:d3:7f:
         21:2e:6b:ce:ce:ae:20:ac:2e:45:6f:98:36:cd:1e:c3:d3:d1:
         81:5a:49:f3:44:93:80:bf:9b:ce:d1:41:12:dd:11:92:93:82:
         4c:3c:fe:29:c9:e8:38:e0:05:18:c1:de:fe:88:eb:7c:ed:9e:
         ba:5d:e6:b7:28:50:40:e1:07:0b:37:86:31:2b:da:78:66:26:
         8f:3a:00:62:90:4a:28:59:ca:d2:25:c9:9f:47:a0:b7:90:a8:
         68:00:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org