Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39372e302f32342d3234203d3e20323633393232.roa
File:                     3133382e3231392e39372e302f32342d3234203d3e20323633393232.roa (raw, json)
Hash identifier:          936JCFwEXpJB/Jf2EQ/17peXCMUFGdJ8pO8u1uHVOeg=
Subject key identifier:   BC:94:D9:C9:FD:50:D1:85:09:6A:89:49:8E:11:47:FF:70:6F:C2:2A
Certificate issuer:       /CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
Certificate serial:       40C986F94F5AC77B64FC1B5B23F62EC40D8DE683
Authority key identifier: A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39372e302f32342d3234203d3e20323633393232.roa
Signing time:             Sat 25 Mar 2023 21:14:06 +0000
ROA not before:           Sat 25 Mar 2023 21:09:06 +0000
ROA not after:            Sat 23 Mar 2024 21:14:06 +0000
asID:                     263922
IP address blocks:        138.219.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c9:86:f9:4f:5a:c7:7b:64:fc:1b:5b:23:f6:2e:c4:0d:8d:e6:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A430C6F3497F957E36C7EBFF788AD1BBC9896370
        Validity
            Not Before: Mar 25 21:09:06 2023 GMT
            Not After : Mar 23 21:14:06 2024 GMT
        Subject: CN=BC94D9C9FD50D185096A89498E1147FF706FC22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:b2:d2:66:af:c6:d1:09:ec:f5:9e:c4:9e:
                    42:2f:ba:19:44:8b:0b:ea:be:d4:ec:c4:b9:4e:80:
                    19:04:d4:f4:0a:54:a2:2e:bc:ab:ae:98:e5:06:2b:
                    aa:e1:89:55:39:f1:16:23:32:ca:3a:51:d8:18:40:
                    73:dd:d6:69:d0:9d:a8:65:85:e2:af:d3:d2:20:7c:
                    d5:e0:ee:11:46:8d:52:95:46:ff:ee:ec:b1:d2:0b:
                    d1:a7:e8:c1:3f:4a:dd:9d:2f:72:d3:45:39:6a:34:
                    9f:82:fc:90:94:fb:74:db:1e:11:de:f5:e1:65:6a:
                    04:28:96:53:0d:b9:a7:87:10:ba:fa:f2:6a:09:09:
                    47:82:a9:f0:6c:e1:e6:c1:56:1e:08:86:c8:19:fa:
                    d8:3e:c5:d0:bb:08:cb:1f:4e:e8:50:01:a3:cb:8d:
                    e2:2c:4f:57:fc:e2:8a:82:e0:43:74:b8:ed:8a:be:
                    d8:9d:33:60:6a:e3:fd:28:49:1d:6f:09:38:aa:57:
                    89:bd:1d:50:09:c4:98:b6:84:d6:15:a9:f1:57:f6:
                    ac:ab:1b:15:69:e0:b2:7c:7c:13:5f:a7:4a:46:f6:
                    53:f0:b9:59:b9:92:74:8a:19:67:a6:44:9e:ea:9d:
                    e3:38:75:4e:9a:ef:dd:50:06:9b:2f:b1:ff:b4:1a:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:94:D9:C9:FD:50:D1:85:09:6A:89:49:8E:11:47:FF:70:6F:C2:2A
            X509v3 Authority Key Identifier:
                keyid:A4:30:C6:F3:49:7F:95:7E:36:C7:EB:FF:78:8A:D1:BB:C9:89:63:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A430C6F3497F957E36C7EBFF788AD1BBC9896370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3133382e3231392e39372e302f32342d3234203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:b2:c4:7d:c1:38:1e:a7:db:32:cf:e2:6d:2e:77:44:40:a9:
         0f:93:65:58:a4:0f:f0:30:dc:f1:b2:f7:e0:bc:ed:45:87:a6:
         70:47:20:b9:e3:b6:e4:b4:70:8f:51:f5:26:46:80:05:ad:1a:
         a0:d0:83:80:83:0f:2a:4a:da:f7:78:74:34:24:46:0e:e5:17:
         cb:ab:b0:78:b1:c7:76:1b:9b:26:38:48:71:26:13:9c:00:e3:
         96:83:d5:d1:49:d0:61:39:2b:47:0b:0f:e8:9b:8b:74:b8:16:
         4e:54:57:7c:ca:00:3b:a1:e1:20:34:d0:85:f7:3a:cd:88:e2:
         f0:ed:8e:ea:64:32:02:7a:1f:fa:90:08:d9:05:6a:41:ec:3b:
         67:23:80:99:1f:49:1f:0a:bf:9e:02:0a:e5:db:8d:9e:ea:f9:
         1c:c3:19:dc:23:36:fd:2a:50:a7:7a:1e:bf:5c:a2:05:7e:33:
         6e:df:c5:55:7e:d9:23:93:d0:5d:e7:c4:48:92:47:fc:54:63:
         8a:0a:5f:2b:ed:59:78:35:04:6c:79:35:60:ca:19:fe:5f:1f:
         ae:2f:44:c0:af:ef:42:eb:28:31:c1:d9:9c:17:be:23:59:e5:
         1c:f9:c9:6d:47:a2:fa:af:ab:aa:ff:ea:94:96:b5:a7:48:06:
         6e:20:10:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org