Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa
File:                     3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier:          lENr4qB37/n5fRNMWfFm7SrldmgO38vPFLJ8uDgyB2Q=
Subject key identifier:   F7:47:E3:83:D5:CE:7C:72:A3:17:24:D3:A3:F8:E2:5F:69:14:87:41
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       4A998E164D80639FA8B6F8BBA60878BBC98DAFA2
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.224.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:8e:16:4d:80:63:9f:a8:b6:f8:bb:a6:08:78:bb:c9:8d:af:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=F747E383D5CE7C72A31724D3A3F8E25F69148741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:ff:9a:de:96:bd:3d:7c:04:21:bf:a3:5d:
                    22:a9:14:85:10:90:b8:69:19:70:de:4c:86:f3:4d:
                    ad:5d:0e:3b:3f:32:d5:07:11:80:8c:6b:2f:35:2e:
                    ae:53:89:01:d4:59:45:d1:df:87:e4:5e:18:bb:b0:
                    6a:9d:25:a4:8b:d6:1b:fc:02:19:69:96:93:68:68:
                    34:cb:57:87:ed:6a:50:64:7d:93:25:ee:a5:de:97:
                    d1:9a:db:0b:72:d5:c4:49:51:e1:b0:2f:a3:e5:b8:
                    74:fa:50:7a:d2:4c:b7:ad:dd:13:a0:7c:05:f3:fe:
                    9e:03:1b:b4:44:dc:35:6c:a5:78:43:c8:f6:67:72:
                    cc:40:b1:ce:62:4c:4a:f5:a3:ad:b3:fc:50:59:d1:
                    94:5a:5d:eb:42:93:69:65:45:b5:3b:c8:e0:48:d7:
                    3d:fd:d9:dd:13:3f:0c:2a:e5:f7:44:0c:2b:1c:ab:
                    0b:e1:3b:55:c1:fb:2d:36:5d:d4:7e:4c:86:a1:61:
                    d7:b3:e3:92:96:2e:8f:18:7c:eb:5f:3c:23:25:e6:
                    db:a9:04:c4:7a:b9:74:0d:06:1a:d7:fe:b6:88:50:
                    c4:a6:28:41:26:cc:b7:4b:3e:2b:7f:9a:71:e3:03:
                    34:4f:4a:1d:f7:60:a6:99:24:bd:98:9e:54:4a:e2:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:E3:83:D5:CE:7C:72:A3:17:24:D3:A3:F8:E2:5F:69:14:87:41
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232342e302f32342d3234203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:82:f8:a8:d5:ef:9a:96:ce:76:b5:71:61:4d:11:8f:00:ce:
         07:4e:a6:08:c1:ac:a0:f5:c1:b1:98:4f:39:a0:bb:77:b4:76:
         e9:78:d1:7d:dd:4e:8c:e5:46:ea:0f:a0:d6:7c:17:e6:f8:0d:
         8f:f4:e3:7a:e0:5e:9f:24:a9:48:e5:18:23:89:25:f0:59:1e:
         8f:ac:a4:9a:96:86:62:e2:46:02:66:af:37:1d:9a:8c:7f:b2:
         3d:1a:1b:6d:c4:f8:b6:ee:39:1a:2d:04:ac:ff:61:66:94:5e:
         3b:f4:84:2b:60:6f:a3:c0:e7:22:56:b7:3e:15:32:44:70:83:
         b2:15:92:bf:e9:49:12:bb:26:77:49:d3:49:c5:7b:80:88:e4:
         a2:c2:80:7d:55:41:15:2d:ba:89:9e:82:f4:fd:06:36:ec:51:
         85:71:ee:71:ca:29:01:71:8f:10:a5:e0:ee:2e:de:d1:29:11:
         2c:6a:ff:b1:ea:f9:49:5d:44:2c:66:a6:94:ce:85:82:7f:fa:
         6f:c0:24:b0:29:b1:ef:ba:25:08:aa:b5:9b:73:cd:86:4e:75:
         84:b1:e5:13:8d:7b:ba:a6:aa:12:e2:09:99:e5:21:7e:80:f2:
         97:44:53:fb:87:0c:5a:5f:53:3e:7f:2a:62:99:0c:f9:5f:d1:
         e3:dd:54:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSpmOFk2AY5+otvi7pgh4u8mNr6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdEQzFCMjRBRDU0QzVBOTQxMDkzRkJBNTBGMzg1QTUw
QTE3NTk3NTAeFw0yNDA0MDQyMjA4MjlaFw0yNTA0MDMyMjEzMjlaMDMxMTAvBgNV
BAMTKEY3NDdFMzgzRDVDRTdDNzJBMzE3MjREM0EzRjhFMjVGNjkxNDg3NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXB/+a3pa9PXwEIb+jXSKpFIUQ
kLhpGXDeTIbzTa1dDjs/MtUHEYCMay81Lq5TiQHUWUXR34fkXhi7sGqdJaSL1hv8
AhlplpNoaDTLV4ftalBkfZMl7qXel9Ga2wty1cRJUeGwL6PluHT6UHrSTLet3ROg
fAXz/p4DG7RE3DVspXhDyPZncsxAsc5iTEr1o62z/FBZ0ZRaXetCk2llRbU7yOBI
1z392d0TPwwq5fdEDCscqwvhO1XB+y02XdR+TIahYdez45KWLo8YfOtfPCMl5tup
BMR6uXQNBhrX/raIUMSmKEEmzLdLPit/mnHjAzRPSh33YKaZJL2YnlRK4kQ9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU90fjg9XOfHKjFyTTo/jiX2kUh0EwHwYDVR0j
BBgwFoAUx9wbJK1UxalBCT+6UPOFpQoXWXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNLM0tkZjRvY2tWWGdGbTRMRzVrUDV6VTR4UlNnNE0zRU5CM0w4UWtN
N1UvMS9DN0RDMUIyNEFENTRDNUE5NDEwOTNGQkE1MEYzODVBNTBBMTc1OTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3REMxQjI0QUQ1NEM1QTk0
MTA5M0ZCQTUwRjM4NUE1MEExNzU5NzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTSzNLZGY0b2NrVlhnRm00TEc1a1A1elU0eFJTZzRNM0VOQjNMOFFrTTdVLzEv
MzEzMzM4MmUzOTM3MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYeAwDQYJKoZIhvcNAQELBQADggEBAICC+KjV
75qWzna1cWFNEY8AzgdOpgjBrKD1wbGYTzmgu3e0dul40X3dTozlRuoPoNZ8F+b4
DY/043rgXp8kqUjlGCOJJfBZHo+spJqWhmLiRgJmrzcdmox/sj0aG23E+LbuORot
BKz/YWaUXjv0hCtgb6PA5yJWtz4VMkRwg7IVkr/pSRK7JndJ00nFe4CI5KLCgH1V
QRUtuomegvT9BjbsUYVx7nHKKQFxjxCl4O4u3tEpESxq/7Hq+UldRCxmppTOhYJ/
+m/AJLApse+6JQiqtZtzzYZOdYSx5RONe7qmqhLiCZnlIX6A8pdEU/uHDFpfUz5/
KmKZDPlf0ePdVE0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org