Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          qjSfNNrHbGbQ3Kq4ivxSNUMrck+EWPK8oozgP8EPGJc=
Subject key identifier:   35:76:4F:F9:D1:D7:85:62:59:A8:2B:E7:49:AA:0E:C7:52:3E:1E:B1
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       617EC0F9CFA596BB61E59D11CD68820F9C59A9C4
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa
Signing time:             Thu 08 Feb 2024 22:57:25 +0000
ROA not before:           Thu 08 Feb 2024 22:52:25 +0000
ROA not after:            Thu 06 Feb 2025 22:57:25 +0000
asID:                     264126
IP address blocks:        138.59.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:c0:f9:cf:a5:96:bb:61:e5:9d:11:cd:68:82:0f:9c:59:a9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Feb  8 22:52:25 2024 GMT
            Not After : Feb  6 22:57:25 2025 GMT
        Subject: CN=35764FF9D1D7856259A82BE749AA0EC7523E1EB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:07:f7:ea:a1:7a:f0:6d:f9:50:ba:8d:8d:
                    c9:21:2e:bf:2b:c4:fb:3e:b2:d0:8a:c0:c1:ea:97:
                    e6:d6:10:e0:d4:ab:6a:4f:9c:90:45:87:f2:34:5b:
                    3a:ae:c8:20:35:ce:81:cd:0c:9f:24:de:94:e0:83:
                    57:94:6d:05:7a:ff:86:ef:bc:97:ae:ef:d2:b9:c9:
                    9f:48:bb:ff:59:e0:cc:0a:ad:f0:6c:e8:fb:1c:b7:
                    e2:a4:33:84:cc:36:46:3a:9d:55:67:77:f4:37:ce:
                    8c:10:c2:21:76:86:da:b6:5f:fd:83:ff:ad:29:95:
                    29:ab:58:00:d6:0c:23:18:95:69:d5:40:09:e8:81:
                    e2:80:c0:1f:c3:5f:78:ca:6a:6a:36:01:a2:07:07:
                    89:ce:be:97:72:7f:72:26:e2:92:a2:9d:1e:77:5b:
                    d7:ad:a4:1f:2b:ba:8b:41:fc:3d:ba:39:2c:88:ca:
                    e0:9c:3d:7d:f8:3a:cc:65:4d:de:78:55:a6:c3:e0:
                    6b:31:3e:db:7b:cd:33:b7:1b:05:15:19:c4:e0:0a:
                    f8:65:9a:15:4e:c0:d1:b4:aa:85:ff:19:b2:7b:14:
                    d6:44:15:ba:f2:b0:05:ef:c3:52:22:ad:e4:59:5e:
                    5d:50:af:ac:e2:57:a9:5c:07:4a:da:1e:13:78:33:
                    de:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:76:4F:F9:D1:D7:85:62:59:A8:2B:E7:49:AA:0E:C7:52:3E:1E:B1
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230302e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:ee:4e:64:ab:8a:93:94:8b:25:53:15:5a:2e:e9:b3:68:77:
         6c:a7:18:c8:44:c1:f2:df:05:e0:ae:39:44:a2:98:87:0a:4e:
         7b:43:56:88:75:88:9f:83:89:6f:b2:06:c4:2f:16:d9:59:7a:
         ac:b2:aa:37:45:03:a9:fb:cb:bb:a2:cd:3b:12:25:aa:50:5f:
         b5:85:74:a2:72:69:62:ec:dd:48:54:7c:db:0b:56:54:5c:88:
         82:b4:48:9d:18:80:82:8f:8f:d4:83:7b:13:17:a7:e8:b9:63:
         4f:90:05:37:21:a3:5d:fa:5f:47:d0:8d:0b:2d:95:0e:94:b6:
         1f:de:54:09:a6:51:f5:c5:6c:6c:27:57:30:5d:88:da:f0:f0:
         63:cd:57:3e:15:b6:fa:a3:15:59:30:3d:8e:05:9d:66:dc:d0:
         c9:2b:db:e0:e1:8a:0a:4a:63:14:e6:34:7f:68:10:c6:85:4b:
         08:72:02:d6:f7:1b:30:25:8f:67:99:ba:3d:e1:10:81:10:17:
         2d:db:26:01:95:ea:6e:b8:fb:5a:a7:56:8a:40:a0:12:fe:87:
         84:00:ba:a1:66:51:5e:66:34:d2:2a:f2:5e:28:bc:e4:75:72:
         52:db:25:3c:e1:85:bb:a5:56:7c:f2:cf:75:c4:e3:c8:75:c7:
         ee:95:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org