Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa (raw, json)
Hash identifier:          bZPlk8dYivppd6/GBOWow/DZ5e9Sa7nazWiLTUVgqkU=
Subject key identifier:   97:FB:5A:E6:6E:C7:68:F8:EB:8E:72:57:74:8C:A3:07:24:A0:3E:14
Certificate issuer:       /CN=C64C749CDDED82B52D268A701AC64F5932801E3C
Certificate serial:       443AD65C4DB30E41353EA4BF0E69ADD2D83162AB
Authority key identifier: C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C64C749CDDED82B52D268A701AC64F5932801E3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa
Signing time:             Fri 20 Jan 2023 19:32:06 +0000
ROA not before:           Fri 20 Jan 2023 19:27:06 +0000
ROA not after:            Fri 19 Jan 2024 19:32:06 +0000
asID:                     52873
IP address blocks:        138.219.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3a:d6:5c:4d:b3:0e:41:35:3e:a4:bf:0e:69:ad:d2:d8:31:62:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C64C749CDDED82B52D268A701AC64F5932801E3C
        Validity
            Not Before: Jan 20 19:27:06 2023 GMT
            Not After : Jan 19 19:32:06 2024 GMT
        Subject: CN=97FB5AE66EC768F8EB8E7257748CA30724A03E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:54:13:c8:3a:4f:43:70:a7:ed:ea:99:ef:
                    22:65:ec:ab:71:ad:a6:55:46:56:3f:34:0f:b7:8d:
                    3f:15:f2:7a:9b:53:ad:a7:bb:8d:be:cf:84:38:aa:
                    69:f3:5e:1e:7c:5a:61:4a:4a:a9:49:81:55:93:39:
                    34:02:2a:4e:c3:32:24:70:04:35:4f:46:af:8d:bf:
                    34:66:b0:38:6d:70:39:20:25:3d:e7:29:7d:5a:33:
                    fa:bc:e6:af:88:e0:3d:d3:1d:dd:04:c3:1a:c6:9e:
                    c6:71:40:94:65:97:69:26:75:29:a5:39:f7:20:b4:
                    73:38:b9:41:ea:50:8e:0d:85:a7:a5:cf:ff:e8:56:
                    1a:d5:9d:29:5f:29:05:78:2b:10:70:f3:5c:e9:40:
                    5d:87:0d:9a:32:93:6f:af:a3:9c:3d:27:12:73:b9:
                    1a:c7:39:8a:b9:91:1a:30:67:1a:b8:f5:4b:f7:03:
                    12:73:4f:08:61:08:26:36:d9:1c:12:79:4a:c2:e5:
                    17:28:f0:34:42:1d:04:37:af:ae:37:b3:63:73:c9:
                    6d:30:a7:ca:10:c3:0e:66:70:d9:47:2f:6d:70:a9:
                    5a:26:07:80:b8:58:cf:c0:6f:fe:01:0b:ae:38:aa:
                    f6:8b:a8:ef:36:b6:f9:d4:04:c3:0c:96:4d:6d:55:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FB:5A:E6:6E:C7:68:F8:EB:8E:72:57:74:8C:A3:07:24:A0:3E:14
            X509v3 Authority Key Identifier:
                keyid:C6:4C:74:9C:DD:ED:82:B5:2D:26:8A:70:1A:C6:4F:59:32:80:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/C64C749CDDED82B52D268A701AC64F5932801E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C64C749CDDED82B52D268A701AC64F5932801E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32322d3232203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:72:00:c0:ae:30:4a:04:9a:6b:52:42:88:92:01:19:ac:6f:
         d7:73:63:47:84:d7:12:10:e5:77:eb:6d:ae:26:35:47:2c:61:
         41:e3:40:00:12:9f:85:01:7c:ee:92:b4:9a:c5:f9:39:ed:62:
         f0:6f:eb:09:80:9f:61:be:4d:ff:a0:00:bf:91:f5:a8:58:34:
         b9:c4:5d:63:bc:98:da:17:fe:65:4f:9b:ca:7c:43:8d:45:13:
         7a:a5:eb:92:2e:53:d2:73:43:80:e8:f3:50:fe:47:64:dc:4f:
         24:ba:fc:e3:b7:31:37:cb:d4:ce:d1:86:4e:78:d8:8c:ef:2a:
         f9:05:a3:66:0c:c5:8b:11:51:ca:ba:68:dc:22:ce:41:44:c0:
         6e:a2:b4:9f:6a:11:56:8f:e0:79:dc:8c:1e:05:29:d2:ab:72:
         af:91:8a:fe:1a:c4:e5:f3:fd:a8:7a:37:97:f1:9f:10:a0:e1:
         7d:cc:ee:85:ef:bf:9e:e5:ea:4a:95:11:e2:0a:96:b4:dc:56:
         b9:3b:0a:1e:5c:a4:20:92:95:e3:91:55:3b:95:e7:68:3a:1b:
         af:e6:d3:45:45:31:9b:cb:af:22:d0:3b:82:ff:f3:0c:9a:d2:
         ea:62:22:2f:4c:02:63:3a:22:34:7a:1e:12:24:7d:b5:41:62:
         29:32:43:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net