Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37352e302f32342d3234203d3e20323634313738.roa
File:                     3133382e39392e37352e302f32342d3234203d3e20323634313738.roa (raw, json)
Hash identifier:          s/FfIt6ems0kYjQZrSitOrAbs/e/V44M1nXozwEJqLE=
Subject key identifier:   65:34:B1:15:C3:A6:21:2D:6B:0B:8C:A4:89:7C:F3:43:A2:D5:DF:21
Certificate issuer:       /CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
Certificate serial:       4320EED2F74F756DBF3F140E7A2D2599048F678D
Authority key identifier: 9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37352e302f32342d3234203d3e20323634313738.roa
Signing time:             Sat 10 Dec 2022 12:00:03 +0000
ROA not before:           Sat 10 Dec 2022 11:55:03 +0000
ROA not after:            Sat 09 Dec 2023 12:00:03 +0000
asID:                     264178
IP address blocks:        138.99.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:20:ee:d2:f7:4f:75:6d:bf:3f:14:0e:7a:2d:25:99:04:8f:67:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Validity
            Not Before: Dec 10 11:55:03 2022 GMT
            Not After : Dec  9 12:00:03 2023 GMT
        Subject: CN=6534B115C3A6212D6B0B8CA4897CF343A2D5DF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:ce:38:01:93:ae:79:92:7e:4b:1f:b3:07:
                    b4:39:87:f4:17:ba:3e:e7:38:49:08:43:2e:4b:c7:
                    c2:df:c0:dc:5a:f4:74:d3:c1:88:96:ca:35:61:0f:
                    08:00:9c:3c:52:1b:c5:bb:28:fc:59:f8:09:8f:43:
                    fd:05:a9:c7:d2:62:22:1f:1c:66:99:6d:83:bf:b7:
                    11:f9:d6:7d:57:2c:40:22:2e:b6:e1:3a:32:ee:e8:
                    61:7d:04:67:dd:0b:2c:84:19:25:9e:4c:ae:4f:53:
                    d0:a5:1c:95:2e:10:83:0f:d0:48:dd:d0:56:b8:d3:
                    18:c8:ba:57:d9:95:48:4b:df:22:d3:2d:fb:f6:3f:
                    41:6b:1d:cc:36:d7:f6:bb:24:fa:50:4e:5c:fc:e9:
                    c4:6d:d2:b9:e5:b5:12:f6:7b:e3:6e:21:30:01:b4:
                    f1:00:aa:b5:a6:00:24:b1:0b:fd:a9:ed:ce:dd:b8:
                    90:04:4a:97:ab:bc:32:0e:26:e5:ac:e8:ad:e8:c1:
                    16:b0:b3:29:21:c5:4e:83:49:c5:4a:2b:f3:42:9d:
                    b0:f3:9e:80:54:b6:b6:21:cf:fc:44:e0:f0:f4:65:
                    ad:3a:e4:70:72:42:36:40:69:a3:ab:f4:1c:7b:01:
                    88:63:2f:d9:4f:90:5e:f4:45:36:8b:51:7e:dc:60:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:B1:15:C3:A6:21:2D:6B:0B:8C:A4:89:7C:F3:43:A2:D5:DF:21
            X509v3 Authority Key Identifier:
                keyid:9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37352e302f32342d3234203d3e20323634313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:f4:fa:a1:97:38:0f:8d:7f:45:e4:61:84:b7:73:5a:7c:
         eb:84:c4:8a:f0:90:32:f0:25:e4:c7:c5:dd:56:d7:d9:96:28:
         b4:50:bb:0b:91:49:38:6f:9a:d3:07:63:04:c6:e5:7b:62:bf:
         f9:34:2c:e0:e1:30:17:f0:48:60:b4:6b:45:b3:ce:55:c2:1c:
         2a:d2:0a:26:80:1b:ea:6c:5b:63:99:0f:f3:d1:f9:40:4e:f4:
         d5:f1:db:01:11:7b:ef:af:65:df:86:a1:d4:9d:c7:5f:04:60:
         16:7e:d9:e3:e2:dc:c9:62:26:94:13:32:da:b8:1f:82:f4:98:
         56:3b:f2:48:8c:e5:77:50:cc:fc:b2:db:eb:35:d7:78:89:3b:
         f7:77:48:39:ae:86:36:bd:6d:72:26:e1:6a:33:72:2a:98:28:
         58:1d:d7:57:59:b4:1a:a3:d4:8e:70:5b:d0:b2:8d:02:1e:a9:
         b4:9c:f9:3f:49:c6:23:5e:bc:8c:be:51:c1:a8:97:cf:30:d6:
         70:6b:39:8e:5b:41:09:d0:29:78:43:28:fa:00:8a:87:5f:df:
         a7:1e:be:89:0c:5f:b8:89:c4:08:9b:ea:43:98:ff:c9:81:e8:
         42:4b:36:ec:87:85:b0:84:c2:c3:b6:4b:fd:78:39:79:09:07:
         62:e1:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org