Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32342d3234203d3e20323634323036.roa
File:                     3133382e39372e3138302e302f32342d3234203d3e20323634323036.roa (raw, json)
Hash identifier:          wmdmCCPoaZlkoHO06Ohk4diZ37wIrw7LQ7dYLrtROKk=
Subject key identifier:   56:51:7C:E9:BC:2C:CD:4D:D0:26:FA:B9:DB:6A:75:DD:D3:17:BC:53
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       52F8101E225F06CD01C28C503449C5769B4249AE
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32342d3234203d3e20323634323036.roa
Signing time:             Fri 08 Sep 2023 00:23:30 +0000
ROA not before:           Fri 08 Sep 2023 00:18:30 +0000
ROA not after:            Fri 06 Sep 2024 00:23:30 +0000
asID:                     264206
IP address blocks:        138.97.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f8:10:1e:22:5f:06:cd:01:c2:8c:50:34:49:c5:76:9b:42:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Sep  8 00:18:30 2023 GMT
            Not After : Sep  6 00:23:30 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:e6:49:e8:f8:f0:14:1c:a8:69:4d:05:27:
                    f9:aa:9c:71:d4:e8:f6:0f:38:1e:e4:81:8b:82:2b:
                    b9:83:d0:e6:ac:08:08:09:29:dd:7d:ab:13:d6:12:
                    b3:47:ed:0a:dd:40:98:7d:4b:86:a6:a1:ca:56:d5:
                    ae:d6:fd:89:57:85:4b:99:0b:b7:3d:a9:24:04:e3:
                    39:1f:0a:fa:47:60:0f:9d:b4:b1:91:55:2d:03:28:
                    65:ca:44:64:2b:aa:9c:c5:ae:63:8a:5c:e6:dd:3f:
                    94:4f:06:a4:86:60:4f:ba:fd:95:d0:fb:ff:0c:ae:
                    34:20:65:55:50:ee:f8:90:2e:2f:79:3a:ba:e2:ba:
                    82:bb:df:b3:73:a1:54:cf:a9:0a:b4:d1:3f:9c:ec:
                    f4:74:63:d8:fd:4e:51:8c:be:50:4d:2f:41:ba:32:
                    a3:ec:6a:05:1a:a2:56:6c:16:f6:24:3f:d2:50:ba:
                    c7:1a:47:19:10:42:8e:b6:89:2a:bf:89:71:03:a8:
                    c3:46:dd:b3:37:e3:c4:65:06:15:9b:2b:05:bc:15:
                    9d:2c:13:ac:98:b1:43:96:ee:d6:27:fc:77:ba:b0:
                    cb:f3:7e:b8:58:be:1f:cd:f6:20:c9:40:ba:94:32:
                    3f:0e:5c:fb:77:aa:41:9d:d4:49:5f:36:0c:bb:37:
                    ab:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:51:7C:E9:BC:2C:CD:4D:D0:26:FA:B9:DB:6A:75:DD:D3:17:BC:53
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32342d3234203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d4:62:49:90:77:73:97:32:40:32:ed:72:a7:9c:d8:a7:42:
         cd:45:b7:5e:3d:2a:62:b4:16:b6:7c:1e:34:1a:58:e9:7c:ca:
         f0:a7:b0:f7:51:fa:71:ce:67:8a:9c:d5:53:69:4f:88:d1:0f:
         47:cf:a4:8b:9e:8c:30:f7:4e:00:de:31:c1:c6:45:15:b1:ed:
         97:d1:3e:8e:e4:7a:73:44:4e:9f:2b:2c:87:44:05:98:f3:1e:
         8c:22:bf:f7:ac:25:c4:83:4c:d2:f2:b5:11:ce:48:a1:3f:32:
         fd:7b:34:c1:f3:2a:a2:3d:58:84:f1:d1:c7:c2:bb:b6:02:f3:
         11:44:2a:94:8f:b0:14:79:d4:7b:6d:26:57:26:89:1e:71:8e:
         dd:50:14:a0:14:46:8d:ec:1e:8e:c0:fd:2a:88:eb:e4:ee:d7:
         2a:9b:b5:ba:87:95:00:fd:95:76:3a:37:6c:5d:56:18:37:cf:
         82:eb:cf:58:26:b5:bb:58:c1:4a:29:04:ad:29:4a:d2:c3:59:
         42:4b:b3:f7:29:af:cb:4b:34:b6:1b:57:20:ae:4d:e7:ea:72:
         19:80:e2:8d:0d:74:44:66:03:44:de:61:3b:cf:3c:f7:c2:1e:
         db:02:7b:ab:bf:bb:02:db:c4:7e:83:35:2d:a7:82:a3:25:d7:
         27:a7:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org