Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230372e302f32342d3234203d3e20323634313936.roa
File:                     3133382e39372e3230372e302f32342d3234203d3e20323634313936.roa (raw, json)
Hash identifier:          CtDb6Q5Th7N6qAbepuSYs0xcTjrq7UW1W+BHTubfyV4=
Subject key identifier:   69:F0:F6:78:83:A9:62:E5:5E:DA:CF:50:B2:D9:C6:4A:55:E5:D0:39
Certificate issuer:       /CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
Certificate serial:       79FAD7250E37008B6AAC68068FD1F6D63C8EBFAD
Authority key identifier: 3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230372e302f32342d3234203d3e20323634313936.roa
Signing time:             Fri 27 Jan 2023 22:19:12 +0000
ROA not before:           Fri 27 Jan 2023 22:14:12 +0000
ROA not after:            Fri 26 Jan 2024 22:19:12 +0000
asID:                     264196
IP address blocks:        138.97.207.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fa:d7:25:0e:37:00:8b:6a:ac:68:06:8f:d1:f6:d6:3c:8e:bf:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B31579236031B51D9879A8F65CEC0B7421FD60C
        Validity
            Not Before: Jan 27 22:14:12 2023 GMT
            Not After : Jan 26 22:19:12 2024 GMT
        Subject: CN=69F0F67883A962E55EDACF50B2D9C64A55E5D039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:08:95:65:7d:3b:f5:15:de:bd:f9:d5:d9:a8:
                    e9:9f:3c:45:51:10:45:e8:77:95:78:4d:eb:16:84:
                    4e:e6:f9:9b:ae:0e:b4:1e:61:d1:50:72:cf:b6:ff:
                    ec:59:2d:eb:45:93:69:96:db:79:71:3c:39:2f:ad:
                    fe:f6:25:bd:eb:b2:46:f5:ad:38:bf:bd:ab:75:cc:
                    2c:ce:fe:c8:e2:f4:86:c3:e8:02:ce:b8:63:88:a3:
                    36:f9:e6:fd:16:ea:ad:22:1d:45:0c:e7:22:56:80:
                    d9:f5:7c:b6:d6:8e:01:25:c6:59:1b:26:7d:2d:66:
                    be:9e:df:1b:52:78:bc:2d:13:23:aa:78:d4:98:95:
                    33:4e:13:74:42:dd:e7:27:ba:0e:40:55:66:40:46:
                    19:3b:6f:1a:a4:41:c9:45:ae:ee:18:d8:a2:94:56:
                    b2:48:28:6c:98:0c:40:10:db:c2:82:89:a3:e1:65:
                    a0:a2:db:f6:c9:8f:74:45:9b:53:2d:e8:48:13:ec:
                    98:0e:be:20:56:cd:ef:55:65:12:a5:d3:16:a4:02:
                    6b:2b:e7:2c:52:ca:10:89:4a:9c:bb:15:ca:56:8a:
                    d7:a1:00:05:f5:7c:0e:c5:63:20:92:b4:8c:e0:81:
                    9c:88:23:63:97:9d:db:df:1b:f1:1b:9e:5a:88:27:
                    21:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F0:F6:78:83:A9:62:E5:5E:DA:CF:50:B2:D9:C6:4A:55:E5:D0:39
            X509v3 Authority Key Identifier:
                keyid:3B:31:57:92:36:03:1B:51:D9:87:9A:8F:65:CE:C0:B7:42:1F:D6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B31579236031B51D9879A8F65CEC0B7421FD60C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hh8LK8FZqkFMnwaTa9hgvFJQNcH8hQExPjebk4xeZCkg/0/3133382e39372e3230372e302f32342d3234203d3e20323634313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:89:92:73:8f:b1:e2:da:82:48:92:9e:2c:9e:93:7b:69:c0:
         69:06:09:15:89:79:41:18:93:03:34:a4:20:1d:95:b7:27:5a:
         eb:1b:a3:ef:db:4b:8e:f2:51:cb:44:fa:a6:59:6a:26:90:58:
         10:5d:23:8e:6b:af:cd:d9:5b:ff:a9:d6:46:61:fa:db:3c:db:
         85:57:9d:57:b3:6e:02:4b:24:34:ce:b0:0e:bf:ff:9b:ef:5f:
         7b:aa:24:e6:19:ec:33:ae:42:17:8f:e1:46:bd:1f:9f:6f:d9:
         1d:dd:a9:10:6d:04:cc:26:e3:84:4f:95:79:10:20:2d:09:90:
         57:29:d1:4d:37:f3:3a:11:25:78:f7:01:cf:4c:fa:2b:2a:8f:
         26:9f:50:cd:0b:7a:4d:9e:ff:f3:cc:92:0f:de:f6:0f:71:c7:
         5e:a7:3b:1a:4a:9b:69:9d:45:f1:e6:1a:97:f2:fc:60:ce:ee:
         7a:09:21:ed:50:e3:44:37:22:e8:3a:30:65:f3:d2:0f:0c:cb:
         cf:6c:58:8c:d7:94:73:ed:b8:a8:ff:80:d5:38:e0:a8:ba:71:
         2b:4a:0a:10:18:8b:01:50:be:f4:0a:8e:df:21:de:12:5c:ec:
         1e:51:b0:39:0a:23:3b:5d:ec:29:69:c2:fa:aa:45:a4:50:2f:
         ed:6e:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org