Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa
File:                     3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa (raw, json)
Hash identifier:          phc6b7jx5qWyyAbtB5J8rqlltFM57bRR7gTXlTgk2oQ=
Subject key identifier:   B3:0D:73:4C:F0:ED:AF:B6:10:FF:5C:40:80:7E:69:57:20:E7:B2:9B
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       2190CF51FE971C5773F0FBE416899267DE789E9F
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.224.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:90:cf:51:fe:97:1c:57:73:f0:fb:e4:16:89:92:67:de:78:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=B30D734CF0EDAFB610FF5C40807E695720E7B29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:8a:db:f5:1e:9c:1f:42:1d:20:57:2c:5c:
                    29:d6:5c:ed:bf:2d:66:56:14:b8:b5:e9:30:a2:45:
                    03:a3:a7:ca:76:d1:76:5f:19:74:09:d5:c8:38:5d:
                    1c:b5:af:b2:f2:e6:45:93:c4:45:35:86:b2:97:e7:
                    f3:76:26:25:6b:82:28:c8:7f:f5:95:46:c8:43:1d:
                    8a:8a:c3:7c:ae:dc:c7:98:73:42:d3:99:bd:18:a9:
                    2f:29:c4:79:d0:fe:77:36:2a:5f:ac:5b:1f:51:fc:
                    48:16:98:9f:82:e5:2f:24:ad:e1:36:da:19:8e:8c:
                    50:7b:10:38:0b:b8:b9:8e:77:75:b6:4b:c7:80:2f:
                    e0:e3:01:63:99:bd:73:2d:cb:4c:c8:9a:ac:e0:32:
                    8a:18:bc:fb:0f:74:ec:d6:4c:39:b0:3e:a3:6c:b1:
                    a9:d1:76:98:b0:2c:bf:3b:83:96:86:f1:ee:ce:d6:
                    72:8f:7c:dd:0f:df:c4:ae:8d:a2:8d:35:23:0e:28:
                    08:f2:a9:54:8f:17:be:bb:44:41:ee:a2:d4:8b:0c:
                    ff:1a:a0:45:2d:4a:ed:14:f5:8c:4e:46:6c:a8:16:
                    c5:36:ae:aa:4a:78:eb:d6:3f:1c:9f:ab:74:30:b1:
                    ba:4e:75:0c:2e:de:b4:4b:0b:d0:02:5d:c9:62:c5:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:73:4C:F0:ED:AF:B6:10:FF:5C:40:80:7E:69:57:20:E7:B2:9B
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32322d3232203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:35:2b:68:06:9b:de:4a:71:94:78:01:1e:84:1d:48:14:
         c3:e5:5e:55:fd:58:fc:3a:e5:7c:0b:11:b3:1b:f1:9a:ed:ba:
         1d:14:03:76:2b:0a:f3:b6:18:ad:01:5f:4a:0d:e0:60:91:03:
         57:30:10:66:34:78:78:4c:23:44:c4:f9:b1:8d:87:6c:1d:07:
         d4:42:b4:d8:f7:65:32:ea:38:9c:1b:69:a1:07:73:4b:d1:d5:
         c0:1c:1a:a6:c9:79:ea:6b:7b:88:35:11:67:c0:fd:d6:f9:e2:
         aa:44:29:d4:82:ec:d0:cf:5a:15:54:f3:5c:75:14:f8:18:de:
         25:39:49:d3:d3:44:5a:cf:ca:40:7b:b2:25:e2:b3:34:87:b1:
         73:c3:03:4c:15:f3:d4:75:37:81:cd:16:51:32:42:3b:6c:6a:
         08:3f:37:62:08:3a:4d:d0:2b:dc:af:39:86:cc:1b:f6:36:44:
         fd:39:42:b1:9c:ab:9f:32:8f:1c:19:25:c4:71:2d:65:7e:e5:
         e5:15:18:54:dd:d8:c4:1d:ec:55:73:bf:1c:b4:88:20:f1:07:
         49:10:48:65:b1:5a:60:23:9f:12:1b:4c:c6:d6:5c:cf:27:11:
         b2:cb:5a:7b:47:c4:49:f0:9e:de:34:9d:f9:77:52:0b:34:5e:
         f1:73:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org