Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230362e302f32342d3234203d3e20323634313936.roa
File:                     3133382e39372e3230362e302f32342d3234203d3e20323634313936.roa (raw, json)
Hash identifier:          wXgj9vOJcGRkcmTphavgJ8gYaa4FTMXmZ1qh1m5mWLw=
Subject key identifier:   1D:0C:FD:40:93:D6:A1:5E:BF:23:92:31:66:DA:07:9E:CD:2D:CA:11
Certificate issuer:       /CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Certificate serial:       18D01BBF66B8D9B87C148EB4924FBE5515C9584D
Authority key identifier: 3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230362e302f32342d3234203d3e20323634313936.roa
Signing time:             Fri 27 Jan 2023 02:34:28 +0000
ROA not before:           Fri 27 Jan 2023 02:29:28 +0000
ROA not after:            Fri 26 Jan 2024 02:34:28 +0000
asID:                     264196
IP address blocks:        138.97.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d0:1b:bf:66:b8:d9:b8:7c:14:8e:b4:92:4f:be:55:15:c9:58:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
        Validity
            Not Before: Jan 27 02:29:28 2023 GMT
            Not After : Jan 26 02:34:28 2024 GMT
        Subject: CN=1D0CFD4093D6A15EBF23923166DA079ECD2DCA11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:21:e8:e6:78:4b:77:cc:26:61:02:d3:b0:54:
                    b5:f3:44:0f:d2:57:4b:a5:10:c2:1a:dc:fe:37:c4:
                    8d:8c:f6:75:49:c1:ea:bd:1c:a9:5c:ce:ee:ea:25:
                    32:27:77:97:b3:2c:7e:75:9f:62:af:b1:1c:c0:b5:
                    60:47:55:8c:0a:22:25:53:dc:b8:bb:76:09:71:de:
                    22:25:39:29:c6:d8:87:76:f4:d1:f3:b2:6c:ea:7e:
                    d4:6b:18:89:b1:ff:11:ee:83:b2:71:08:08:f5:fa:
                    50:da:ef:ad:bc:a3:3e:54:06:11:b5:a4:76:20:54:
                    e9:fc:3f:cb:c7:9c:00:0c:f5:c7:54:ee:3a:9e:b5:
                    72:50:95:bc:4c:ed:d1:75:80:e0:db:7d:48:75:5f:
                    01:89:10:95:e3:de:44:41:39:c6:e4:7e:40:fa:89:
                    01:e3:38:53:ae:10:39:6d:72:0d:95:1e:12:33:ad:
                    54:74:20:77:9f:c5:7a:03:1d:d9:9e:d4:b1:30:ab:
                    20:f1:8e:05:14:60:db:eb:0a:7a:3f:ea:ea:2a:b9:
                    75:ec:5d:91:19:b0:08:3f:c8:cf:f2:bc:63:f5:7f:
                    a6:ce:74:48:d2:e6:f1:56:0e:27:e0:bb:de:88:7d:
                    af:09:2f:05:da:25:cf:89:a4:7e:14:f5:c8:bf:7e:
                    a7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:FD:40:93:D6:A1:5E:BF:23:92:31:66:DA:07:9E:CD:2D:CA:11
            X509v3 Authority Key Identifier:
                keyid:3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230362e302f32342d3234203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:99:1f:0c:8d:a2:d0:38:d9:d5:36:df:ca:34:62:41:e8:1a:
         1f:fa:e5:c2:94:2c:b1:70:58:91:4f:59:cb:a4:fe:04:b7:aa:
         76:73:52:ea:10:1b:d1:0a:3e:0c:af:16:dc:56:11:d6:2f:7e:
         d9:9d:75:ee:eb:7d:a5:2f:83:c4:5d:9c:71:67:ae:a3:80:41:
         ef:7b:82:5b:ec:56:d1:dc:80:fe:06:5c:28:b9:58:41:19:fa:
         3b:f2:ce:a9:ea:39:50:42:3d:3b:df:13:5b:7b:c8:76:06:1f:
         bd:68:ae:25:85:3b:31:8d:17:23:df:b1:71:e2:97:3f:05:0e:
         1c:e6:81:3e:1a:4a:1a:c9:64:4f:67:bd:c4:69:d3:09:9e:18:
         77:50:00:64:9b:21:bb:7c:72:bc:1f:e9:cb:36:14:26:71:59:
         5e:19:83:29:1e:8e:bb:4b:b3:cb:de:2e:04:3c:c1:5f:09:b1:
         67:88:4b:67:14:88:bc:60:cb:bd:00:eb:3e:a5:47:11:2c:64:
         4e:1c:21:e9:ea:fa:58:80:7a:eb:29:d5:35:fb:d9:b2:8c:fd:
         f0:2d:aa:ee:20:d1:64:96:3a:e7:5b:58:fd:4b:1f:4f:74:a5:
         34:c5:42:06:78:c3:f7:86:ed:89:65:b1:fe:b4:7d:ef:36:34:
         f8:3b:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org