Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32322d3232203d3e20323634313936.roa
File:                     3133382e39372e3230342e302f32322d3232203d3e20323634313936.roa (raw, json)
Hash identifier:          EVLN2LNA9FpLgXEcB+jvqBi/q/5yzrMUN4eY4Z+mqOY=
Subject key identifier:   86:0D:FF:CC:49:BC:4D:F4:E6:5B:EC:B5:26:5F:C4:07:64:81:CF:6C
Certificate issuer:       /CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Certificate serial:       5D220E6B99BF5B942674E7E798E66CFF09F6FDEA
Authority key identifier: 3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32322d3232203d3e20323634313936.roa
Signing time:             Fri 27 Jan 2023 02:34:28 +0000
ROA not before:           Fri 27 Jan 2023 02:29:28 +0000
ROA not after:            Fri 26 Jan 2024 02:34:28 +0000
asID:                     264196
IP address blocks:        138.97.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:22:0e:6b:99:bf:5b:94:26:74:e7:e7:98:e6:6c:ff:09:f6:fd:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
        Validity
            Not Before: Jan 27 02:29:28 2023 GMT
            Not After : Jan 26 02:34:28 2024 GMT
        Subject: CN=860DFFCC49BC4DF4E65BECB5265FC4076481CF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:7a:1c:c2:a1:c3:88:f9:2d:22:7a:1f:e1:
                    57:e3:15:8a:0d:3b:6c:cd:ab:41:79:2b:df:2d:84:
                    2e:c3:45:c1:2a:f4:93:f4:68:34:f9:89:79:36:22:
                    bb:d9:df:61:d0:6c:3f:b6:32:14:9d:87:48:1e:b8:
                    55:bd:f2:e4:3f:0c:06:b8:50:6c:1c:3c:94:07:18:
                    21:2c:19:27:2f:9f:32:2a:c4:2f:3e:08:a6:ba:41:
                    77:39:5e:a6:38:c8:04:e5:09:43:78:23:11:e8:3f:
                    08:ad:6a:7c:63:d4:76:bc:92:ff:08:9a:0c:0b:f7:
                    f3:d3:24:55:8d:c4:57:4e:bc:90:5b:0a:b8:68:9f:
                    63:c2:2e:29:8f:1f:7f:f5:fa:d5:be:e6:88:e4:4d:
                    ae:d6:dc:47:06:d7:4e:65:54:6b:d0:98:d7:06:8b:
                    30:b1:45:57:b9:04:c5:be:76:0f:69:fa:0f:8f:31:
                    e7:6a:69:6b:8e:7c:d0:05:17:6c:2c:b8:ae:ce:7c:
                    73:d1:bd:40:66:ca:80:89:ea:3c:eb:43:b2:1c:2b:
                    e4:e2:8b:01:37:e4:08:c4:cd:18:b8:c1:fa:2c:60:
                    fd:d1:9e:a7:21:db:df:98:13:50:5a:5a:52:e6:9c:
                    98:cf:0f:d5:59:79:ad:b4:13:bf:37:50:6c:b8:43:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:FF:CC:49:BC:4D:F4:E6:5B:EC:B5:26:5F:C4:07:64:81:CF:6C
            X509v3 Authority Key Identifier:
                keyid:3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230342e302f32322d3232203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:1e:98:38:e4:c4:d9:02:3b:f0:7e:45:80:75:18:10:a1:9e:
         e9:3f:d9:c5:ac:45:bf:a7:3f:b1:0e:db:c8:8d:61:15:f3:de:
         80:60:cb:c7:3f:38:d4:f5:d1:e9:08:74:72:72:79:13:a0:2c:
         2b:8a:0b:4e:ce:d2:24:e5:ad:e7:e3:09:dd:83:61:77:01:45:
         6b:39:f3:99:43:d1:93:da:e7:b5:cb:2f:05:77:31:c0:6c:28:
         a2:ec:d5:b9:e0:e5:47:d2:8b:3c:83:21:8a:38:ff:bd:1e:d3:
         15:96:42:de:ef:90:31:02:19:da:53:9a:b4:04:20:04:8f:a7:
         9a:36:7d:6b:a2:ca:84:47:72:00:ec:34:76:5c:a8:21:f2:be:
         6e:5c:e0:d7:05:3d:49:38:cc:ae:79:35:4b:9d:3d:b4:bb:9c:
         08:82:a3:71:e2:fa:11:84:61:fa:58:70:7e:3f:77:25:16:10:
         7c:49:a3:54:06:4c:ee:e5:d0:01:36:2b:b1:ca:d2:63:e5:8b:
         09:0c:bd:3e:7b:ca:54:d6:19:7b:b1:bd:28:71:e8:03:1e:b7:
         d6:c5:d1:5f:ec:28:7e:d4:26:d4:ba:aa:4a:05:1f:38:18:37:
         62:f1:d4:2c:f8:78:50:2e:7b:46:50:c2:ef:53:e0:4f:7c:fa:
         cc:38:9c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org