Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa
File:                     3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa (raw, json)
Hash identifier:          KI3HJkNBdKypMe/q4I03GNW/yZNT8uCBbOb6dzfojRg=
Subject key identifier:   AE:FF:8D:A6:34:48:0A:A5:43:8B:5C:93:73:D7:35:10:3A:39:B0:6E
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       1E47F38A4AFD3D434820FA6F4B6F696A7F438D22
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.224.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:f3:8a:4a:fd:3d:43:48:20:fa:6f:4b:6f:69:6a:7f:43:8d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=AEFF8DA634480AA5438B5C9373D735103A39B06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8d:39:03:fa:b7:9e:41:09:c0:de:e9:0c:cc:
                    c2:92:74:f3:d8:75:a6:23:49:9a:02:5f:35:0e:f4:
                    e7:d7:9e:e1:1f:b4:5a:6c:7d:a8:69:94:ba:1b:43:
                    44:43:59:72:bf:ba:0e:ed:e0:eb:0a:3b:83:fc:f3:
                    77:aa:74:8c:01:4d:2c:31:5b:c6:b2:fe:6d:ba:b0:
                    11:f1:a8:84:dd:2a:b3:89:1c:74:d5:cb:c3:02:47:
                    34:98:48:95:70:cd:95:dd:bd:ec:23:cc:07:97:37:
                    30:b4:18:e8:0c:65:f2:2c:5a:4e:16:62:16:56:9c:
                    58:8c:d5:31:f0:bb:27:af:b2:a2:5f:b5:63:7b:88:
                    50:75:02:9f:60:30:44:b7:08:36:25:6b:9f:01:a2:
                    01:68:fe:52:bc:07:de:e4:fa:30:ce:76:73:6a:fa:
                    ca:74:b1:05:29:15:ec:90:c5:2e:98:01:df:d5:9c:
                    4b:4c:30:af:03:0d:a2:5f:ab:d0:a1:d9:c0:81:71:
                    6c:db:62:7a:98:34:56:bb:3a:fe:dd:69:3e:43:fd:
                    56:b2:4e:9d:42:77:76:3b:53:2d:00:d4:76:68:db:
                    8b:ee:c3:4b:c4:fe:49:32:c9:85:a8:e7:60:39:1f:
                    39:ba:38:b7:00:4d:8f:c9:2e:b4:67:ba:95:a6:ec:
                    14:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FF:8D:A6:34:48:0A:A5:43:8B:5C:93:73:D7:35:10:3A:39:B0:6E
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32332d3233203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:07:60:9e:7f:63:70:ec:41:c2:96:b8:5a:ae:02:70:1e:7e:
         78:65:0c:19:9a:dc:dc:b1:59:8e:a1:dd:cf:a0:b1:ff:b9:b6:
         1f:8b:03:ef:44:b2:d1:72:1a:95:1f:95:a0:71:d7:67:86:6f:
         c9:83:26:6a:db:6b:60:6a:74:48:07:37:16:83:ed:b5:92:7b:
         61:65:e1:f0:53:d6:fe:8a:7e:ba:d4:c6:6a:45:29:77:0f:f4:
         a2:b6:f5:4c:a6:e2:bf:fd:7f:23:41:03:77:d2:e5:84:3b:8e:
         00:9a:c7:6a:19:55:0f:06:af:af:b9:b5:bd:de:50:83:c8:ab:
         c4:d4:d4:21:ed:5e:82:37:e8:f4:9a:3a:2b:b6:0a:d4:23:e7:
         e4:c4:3e:10:b9:a8:17:1d:22:98:0c:01:fb:e4:f0:04:94:8f:
         aa:d9:f8:7f:75:95:c4:39:13:d9:87:cc:39:77:32:04:8e:2b:
         b2:ef:2c:b7:5f:78:10:8c:e8:6b:5e:17:14:89:c2:c0:51:9f:
         47:db:1d:fc:48:6f:e6:a7:6f:d4:e3:89:42:9a:b8:40:27:42:
         43:03:fc:2d:61:b6:32:33:3d:90:30:73:9e:d9:b9:c3:58:48:
         e9:58:40:87:e8:55:a2:0f:bd:d0:8e:48:65:57:fa:24:fd:98:
         49:7b:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org