Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32342d3234203d3e20323634323036.roa
File:                     3133382e39372e3138322e302f32342d3234203d3e20323634323036.roa (raw, json)
Hash identifier:          STI/Ln6yTDvgm6Sj0Va3afOQ1/m+heut/ILNdXHJY6o=
Subject key identifier:   7E:39:BC:82:78:F4:EA:EB:20:E8:28:99:D1:C5:79:7D:33:C1:17:38
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       5B84C05D0AB8A5D6BBC63E31D78C4CF78F68EF57
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32342d3234203d3e20323634323036.roa
Signing time:             Fri 08 Sep 2023 00:22:38 +0000
ROA not before:           Fri 08 Sep 2023 00:17:38 +0000
ROA not after:            Fri 06 Sep 2024 00:22:38 +0000
asID:                     264206
IP address blocks:        138.97.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:84:c0:5d:0a:b8:a5:d6:bb:c6:3e:31:d7:8c:4c:f7:8f:68:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Sep  8 00:17:38 2023 GMT
            Not After : Sep  6 00:22:38 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b9:d7:2d:a8:18:5a:ad:8a:d5:a5:6a:95:de:
                    a5:ad:a5:5d:2b:56:45:03:69:4d:b7:ff:0f:6a:b7:
                    96:4a:09:a3:fb:de:4d:6a:02:e1:8b:2b:a9:82:36:
                    c1:44:69:81:9e:68:e2:9f:54:c9:6f:50:27:99:55:
                    4a:ae:43:0b:5d:2d:fc:6a:94:8c:2d:77:f1:0a:cb:
                    41:d6:d8:14:50:84:f9:6a:d2:cb:7d:1f:94:0c:a8:
                    a9:22:f6:d8:be:b7:25:98:d3:f2:8e:88:06:76:d5:
                    3d:58:03:5c:c2:33:5e:68:dd:4a:98:e5:69:88:2a:
                    a3:51:c5:98:25:50:a5:c1:dd:2c:fe:85:ad:1c:22:
                    59:ae:a1:c3:b5:b5:02:16:a0:46:ed:d0:e1:ce:0c:
                    f2:16:c9:8b:cb:95:2a:01:c2:e9:c3:48:ba:d5:06:
                    c0:21:8f:05:d4:ca:ba:54:df:59:ae:82:e9:59:28:
                    5e:54:82:e2:32:f0:a0:61:97:9a:29:71:3a:9b:fd:
                    b8:b6:10:7c:94:3f:94:be:41:0e:69:9d:41:7e:81:
                    a3:8a:f6:65:05:dd:2f:42:c6:a6:e3:69:17:8a:1e:
                    f0:7a:ff:fe:d7:61:d4:93:96:f8:1f:ec:95:b2:3f:
                    4d:99:4f:7a:b0:d2:91:ea:c5:da:13:9d:e4:a8:d0:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:BC:82:78:F4:EA:EB:20:E8:28:99:D1:C5:79:7D:33:C1:17:38
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138322e302f32342d3234203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:09:09:98:e3:a0:92:c1:dc:9e:3b:15:27:7a:55:46:10:
         06:24:1f:84:d1:6e:0d:9e:84:3a:32:b5:98:a8:46:63:48:50:
         61:87:c8:6f:48:38:95:ec:b0:d9:ed:1e:f8:0f:48:1c:d9:56:
         6d:e2:85:5d:e4:f6:75:f8:86:54:d8:55:b9:6b:fd:68:65:a4:
         0d:80:28:1d:99:2a:52:39:b9:5c:34:16:eb:bc:11:d7:4c:d2:
         f2:9c:6f:38:3c:ca:5b:ee:a4:3c:96:a4:66:00:03:58:34:0a:
         7c:fa:64:0b:a5:9b:6a:31:7c:85:ef:a8:86:2b:a4:91:df:18:
         87:2d:05:4c:60:f7:57:61:6d:59:cc:33:a4:b4:59:57:c9:1b:
         36:1e:05:2f:4a:35:72:4a:1d:83:28:7d:23:a3:da:e8:7c:93:
         54:f4:00:f9:d1:8f:90:cc:41:b6:0d:c0:df:9e:63:b0:6f:c0:
         0f:39:f3:04:96:6a:7d:f9:13:95:06:36:07:cf:f5:c5:b5:ca:
         81:1a:24:39:12:c2:f4:e3:de:8f:c0:c1:8d:8d:67:03:2f:73:
         33:49:73:e1:a9:4f:e9:46:78:5f:05:81:dd:84:bd:5a:92:58:
         20:52:5b:40:1a:be:30:be:8e:8a:42:fe:6f:e3:65:59:f0:0f:
         f2:3f:b6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org