Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          7Fg7EK0jJ+zEXBcK7hlI35TmImBylEzMqGXAgHQNdog=
Subject key identifier:   91:7A:08:C6:5D:FA:C3:F3:02:FC:26:6B:7E:93:D2:E6:CC:72:B5:4B
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       20BBD5586341C6E5BC55DC7BF2C476F5C6125CF4
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:31 +0000
ROA not before:           Mon 29 Jan 2024 13:43:31 +0000
ROA not after:            Mon 27 Jan 2025 13:48:31 +0000
asID:                     263897
IP address blocks:        138.204.113.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:bb:d5:58:63:41:c6:e5:bc:55:dc:7b:f2:c4:76:f5:c6:12:5c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:31 2024 GMT
            Not After : Jan 27 13:48:31 2025 GMT
        Subject: CN=917A08C65DFAC3F302FC266B7E93D2E6CC72B54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:b8:ea:7e:3e:7a:82:01:e8:68:9d:54:bb:
                    7a:27:73:38:4d:a7:cb:cd:a9:74:57:4d:69:24:d0:
                    39:a3:df:ca:43:d1:7e:e6:73:14:a6:f5:ec:5b:b7:
                    8d:0d:fd:35:6f:e5:c6:20:40:60:4e:82:4f:33:99:
                    24:f2:3b:17:b3:ed:15:d2:71:e5:60:34:bc:4d:a7:
                    b5:63:73:ce:5d:ac:ea:1c:17:58:1a:74:40:fd:c5:
                    c2:e0:36:e4:64:b1:b0:d6:49:9d:90:18:57:17:d7:
                    98:87:6f:0a:86:9b:0f:d5:4c:7c:3a:c8:85:44:73:
                    fa:a3:b8:53:1a:82:88:8b:9c:8b:9b:a7:37:77:af:
                    6a:2b:ee:53:55:d2:e2:e3:d9:cd:08:65:05:12:73:
                    c7:0e:6f:4a:95:12:16:46:0e:c1:47:61:38:c4:6b:
                    08:a8:f6:67:2f:f4:b6:1a:08:b7:10:91:df:b1:23:
                    de:5d:f3:96:a8:3d:dc:9a:33:6a:a0:fe:a5:56:29:
                    ad:db:0e:de:b1:0e:eb:0d:3d:62:be:4c:97:3d:12:
                    5d:01:be:a6:fe:2f:bd:3b:77:14:13:11:5b:1e:6e:
                    28:4a:01:36:91:23:23:0f:92:14:68:21:2c:11:33:
                    f4:4e:75:fb:50:56:3f:8c:dd:8c:1c:1d:89:b8:d5:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7A:08:C6:5D:FA:C3:F3:02:FC:26:6B:7E:93:D2:E6:CC:72:B5:4B
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131332e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:8f:5e:b1:db:c8:69:36:f6:4e:93:a2:27:5f:b5:72:98:
         86:8d:98:55:5e:7c:3a:81:87:c6:4e:05:fe:76:4d:23:89:b3:
         84:bf:11:93:64:f9:f8:b3:fe:d7:f3:84:b9:75:57:2e:4f:49:
         ae:95:89:7e:f7:3c:97:c5:d9:03:0b:66:45:72:52:fe:e7:dc:
         ed:6c:6e:2b:4f:63:8b:c7:b3:7e:28:8c:fc:b0:28:aa:75:7e:
         e1:8a:1b:1a:82:70:cc:a0:91:27:c2:fe:8f:da:50:48:5b:58:
         c7:36:5f:3a:dd:92:f9:e4:cc:fe:1b:ec:b0:5c:30:30:a4:50:
         fd:6c:f2:05:e4:92:3d:dd:5c:83:51:23:f3:eb:46:06:38:2a:
         32:7f:2c:92:3e:02:77:df:58:9e:2f:f9:0b:dc:ec:ff:37:ed:
         ca:71:b7:91:ed:86:7a:10:b8:31:ca:86:66:f1:d0:0d:af:23:
         49:ba:58:0f:05:e4:bd:39:fd:3c:66:3b:c0:6b:8f:1d:50:5c:
         cb:18:0b:fa:a4:f2:6b:0e:8b:aa:63:52:8a:a5:6c:db:cd:dd:
         33:69:22:eb:04:8c:38:9d:fd:80:76:d8:94:26:08:76:25:93:
         81:10:42:a1:0f:0c:ce:97:2b:42:c6:22:1e:e4:2a:d3:f0:ae:
         10:49:49:b8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUILvVWGNBxuW8Vdx78sR29cYSXPQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VFRDMwMjkyQTlDOUUxMjk0RERBMzFENTJCQzk3RDc3
NzVFRTlFQzAeFw0yNDAxMjkxMzQzMzFaFw0yNTAxMjcxMzQ4MzFaMDMxMTAvBgNV
BAMTKDkxN0EwOEM2NURGQUMzRjMwMkZDMjY2QjdFOTNEMkU2Q0M3MkI1NEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtrjqfj56ggHoaJ1Uu3onczhN
p8vNqXRXTWkk0Dmj38pD0X7mcxSm9exbt40N/TVv5cYgQGBOgk8zmSTyOxez7RXS
ceVgNLxNp7Vjc85drOocF1gadED9xcLgNuRksbDWSZ2QGFcX15iHbwqGmw/VTHw6
yIVEc/qjuFMagoiLnIubpzd3r2or7lNV0uLj2c0IZQUSc8cOb0qVEhZGDsFHYTjE
awio9mcv9LYaCLcQkd+xI95d85aoPdyaM2qg/qVWKa3bDt6xDusNPWK+TJc9El0B
vqb+L707dxQTEVsebihKATaRIyMPkhRoISwRM/ROdftQVj+M3YwcHYm41Y95AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUkXoIxl36w/MC/CZrfpPS5sxytUswHwYDVR0j
BBgwFoAUfu0wKSqcnhKU3aMdUryX13de6ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmVTNFJwZFB1Vkg4c0FQemlmZ2FINzFWYkdWRlRVZnN2cktucURMbmt2
bTcvMC83RUVEMzAyOTJBOUM5RTEyOTREREEzMUQ1MkJDOTdENzc3NUVFOUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFRUQzMDI5MkE5QzlFMTI5
NEREQTMxRDUyQkM5N0Q3Nzc1RUU5RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JlUzRScGRQdVZIOHNBUHppZmdhSDcxVmJHVkZUVWZzdnJLbnFETG5rdm03LzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMcTANBgkqhkiG9w0BAQsFAAOCAQEAnEGP
XrHbyGk29k6ToidftXKYho2YVV58OoGHxk4F/nZNI4mzhL8Rk2T5+LP+1/OEuXVX
Lk9JrpWJfvc8l8XZAwtmRXJS/ufc7WxuK09ji8ezfiiM/LAoqnV+4YobGoJwzKCR
J8L+j9pQSFtYxzZfOt2S+eTM/hvssFwwMKRQ/WzyBeSSPd1cg1Ej8+tGBjgqMn8s
kj4Cd99Yni/5C9zs/zftynG3ke2GehC4McqGZvHQDa8jSbpYDwXkvTn9PGY7wGuP
HVBcyxgL+qTyaw6LqmNSiqVs283dM2ki6wSMOJ39gHbYlCYIdiWTgRBCoQ8Mzpcr
QsYiHuQq0/CuEElJuA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org