Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232372e302f32342d3234203d3e20323634323038.roa
File:                     3133382e39372e3232372e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier:          Ej0aAxm2SmPxsYdLJmBldWYPF31ggW9XTlmq3YI4rJ0=
Subject key identifier:   B2:03:8D:45:7D:F0:0F:DC:5F:81:5E:88:50:96:36:46:34:7C:43:5C
Certificate issuer:       /CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
Certificate serial:       463054864048F09764A5C585FF821EA07A9021F6
Authority key identifier: CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232372e302f32342d3234203d3e20323634323038.roa
Signing time:             Sat 30 Mar 2024 00:41:05 +0000
ROA not before:           Sat 30 Mar 2024 00:36:05 +0000
ROA not after:            Sat 29 Mar 2025 00:41:05 +0000
asID:                     264208
IP address blocks:        138.97.227.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:30:54:86:40:48:f0:97:64:a5:c5:85:ff:82:1e:a0:7a:90:21:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA230167CDE901C71120C1F72B8414F772B2EDD7
        Validity
            Not Before: Mar 30 00:36:05 2024 GMT
            Not After : Mar 29 00:41:05 2025 GMT
        Subject: CN=B2038D457DF00FDC5F815E8850963646347C435C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:75:19:4e:1f:fc:1f:d3:a8:fb:87:aa:9d:
                    97:40:60:62:b8:0c:ef:4f:f2:1e:9b:2a:55:50:75:
                    99:e3:73:3c:6c:37:91:04:5b:a7:f1:66:0e:4f:23:
                    8a:c3:33:76:56:cb:b2:65:04:3c:5b:36:cc:84:d2:
                    57:9d:f8:da:b3:d2:b8:82:15:21:b9:57:53:f5:6d:
                    fc:66:2c:33:aa:1c:82:8e:35:20:7b:8a:d9:19:b0:
                    d0:de:08:b0:23:01:38:4d:71:90:54:ba:c6:bb:f1:
                    f6:5b:77:16:da:39:0f:b3:6e:92:65:61:b2:e8:7c:
                    70:08:d9:f8:20:f9:3b:de:08:42:90:42:2e:ae:48:
                    c6:5d:2b:05:0d:e0:7c:af:35:5f:89:1f:02:fc:6a:
                    ec:3d:b4:85:93:ae:a3:f6:a2:29:9e:24:62:d7:f7:
                    c5:0b:6a:d6:55:da:02:d4:e8:52:9e:26:3a:eb:83:
                    6f:be:4f:36:d6:6e:73:e7:e9:cb:f2:6a:1f:01:82:
                    da:e8:fa:b1:75:31:81:90:99:11:ef:e6:ef:08:63:
                    dd:bf:5f:38:91:80:e8:32:ba:32:28:36:1e:9e:c6:
                    e4:15:c0:cc:f7:7d:8f:e4:1d:01:a2:49:fb:05:74:
                    0d:5a:aa:b9:e3:0f:a8:68:14:dd:28:0f:fb:6f:fc:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:8D:45:7D:F0:0F:DC:5F:81:5E:88:50:96:36:46:34:7C:43:5C
            X509v3 Authority Key Identifier:
                keyid:CA:23:01:67:CD:E9:01:C7:11:20:C1:F7:2B:84:14:F7:72:B2:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA230167CDE901C71120C1F72B8414F772B2EDD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/0/3133382e39372e3232372e302f32342d3234203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:f0:ef:ce:5d:32:ea:67:8a:62:0f:4f:3a:f7:ad:a7:e4:c7:
         b8:1d:56:a9:c5:ab:39:85:4c:5d:60:b8:4f:ea:e2:8e:0c:9f:
         ab:1e:f4:91:90:71:6a:44:9c:28:51:9c:37:e0:b7:2d:78:f1:
         1e:ff:c4:b3:25:7c:b1:5c:ee:73:5c:82:94:43:44:b6:ae:60:
         fb:3f:ac:4f:7b:84:f3:d3:74:c2:7d:14:53:57:73:14:76:17:
         3a:d0:4b:68:82:fa:1a:a2:d7:6d:b8:03:e3:96:d5:35:6c:b1:
         2f:a3:f9:e2:54:c2:52:63:5d:3b:70:20:9a:41:c1:1d:fc:b5:
         c8:f4:3e:9f:b1:51:72:c2:c8:da:d0:b5:76:ca:3a:50:c3:38:
         56:53:95:03:cb:37:69:40:65:5f:04:78:1e:d8:ad:6d:b7:6e:
         f6:54:70:f8:53:3f:cb:7b:a0:36:ea:76:3c:5d:fa:86:20:be:
         28:a9:5e:0e:3d:a6:f5:6b:25:32:81:15:90:ea:9b:c7:35:5b:
         97:97:d5:5c:9c:28:2a:44:5f:18:01:81:b4:12:22:fe:c6:4c:
         9e:9e:ff:b6:f7:05:ff:7e:e4:dc:ec:1d:d0:3e:39:fb:78:df:
         28:6d:69:d0:2d:5d:39:85:09:60:3a:a3:ac:f7:ea:83:30:f9:
         44:88:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org