Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232352e302f32342d3234203d3e20323634323038.roa
File:                     3133382e39372e3232352e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier:          3HIqRDmH2Xy3A8a3BR9TPN925YYmEuA8KcdkwhT3ItE=
Subject key identifier:   FC:36:FF:0A:C2:B6:20:89:E1:3A:E9:FC:9A:81:0F:F3:85:BF:47:2C
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       55D77646120DDC22A5B123941D3047B16FAAD610
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232352e302f32342d3234203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d7:76:46:12:0d:dc:22:a5:b1:23:94:1d:30:47:b1:6f:aa:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=FC36FF0AC2B62089E13AE9FC9A810FF385BF472C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b8:3f:e9:36:e5:b5:f5:e3:c0:b5:b8:c3:81:
                    e3:57:50:e7:03:c9:70:21:7c:72:13:91:e4:18:67:
                    78:2c:f9:8a:3d:17:65:a2:e7:1a:5b:8a:c4:36:57:
                    00:f3:51:20:90:bc:87:ec:a6:d0:41:28:48:3b:d3:
                    22:95:5d:b8:c4:12:8e:63:d7:16:99:d7:1e:e7:ee:
                    81:b4:61:4c:f1:90:0e:b6:cc:47:17:9b:64:4f:2c:
                    67:28:bb:ee:62:f9:58:aa:a1:67:ac:09:b0:54:e7:
                    ee:17:a1:f2:2a:10:ba:40:e0:c1:9d:9c:ed:96:85:
                    99:5d:c7:05:00:09:c5:d0:57:c8:98:56:d2:d4:4f:
                    ca:4d:32:51:27:d1:c5:53:ca:4f:2f:37:d4:c1:fb:
                    62:66:61:e2:e6:19:fc:a6:ec:f4:87:52:d0:69:83:
                    46:0a:eb:e0:52:f2:ef:cb:cc:09:18:58:e0:95:1f:
                    1c:f3:d4:b3:7a:cc:e0:89:cd:fb:83:bf:65:a2:b2:
                    be:16:96:e9:ff:e8:34:05:10:ee:45:78:98:2d:f6:
                    f0:0a:76:b6:09:d1:27:ac:e3:da:6c:f3:83:dd:0b:
                    a7:a1:77:93:ad:52:71:1e:0a:5e:89:e0:07:2e:ee:
                    29:50:05:fd:79:50:97:e7:ff:f5:b2:75:83:89:ea:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:36:FF:0A:C2:B6:20:89:E1:3A:E9:FC:9A:81:0F:F3:85:BF:47:2C
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232352e302f32342d3234203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:42:32:26:b5:f4:1a:c7:5b:ca:7d:a2:94:07:e5:9c:88:04:
         49:3e:1c:3e:36:e1:67:51:14:c0:41:63:14:70:ae:a8:44:1a:
         e1:36:f0:79:ec:ee:99:50:35:b1:33:2d:e3:de:5b:8a:a6:4b:
         9d:ab:cd:27:0a:da:64:77:7d:ef:40:64:bd:7f:c3:89:9b:fe:
         fa:8b:d5:31:31:3a:94:e7:fc:6a:54:6e:f7:0f:62:02:65:dd:
         a8:8d:7e:b9:fc:ea:94:ff:99:b8:26:ac:7b:9f:a0:85:ac:da:
         80:a0:b6:b0:88:a3:97:16:3b:31:c5:24:5f:ab:a6:6c:93:bf:
         ee:86:01:51:dd:4d:bd:a9:f6:a2:c8:6e:56:14:4b:7b:61:d8:
         51:6b:67:35:1f:2f:56:b3:1f:53:6b:02:da:88:76:85:56:8e:
         25:f7:b2:9f:d8:c8:81:31:37:d5:cf:c4:24:26:51:1b:97:c3:
         86:69:a3:33:54:ff:05:fc:a0:43:40:70:3d:bb:3c:3b:01:03:
         48:0e:01:f3:68:7b:b7:90:99:a2:17:dc:4b:07:66:73:21:1f:
         5c:84:1e:82:6b:82:87:20:df:f6:de:e4:c1:af:7c:9b:bb:9b:
         3a:fd:08:1e:66:1a:fa:3e:5d:6c:5e:02:35:17:e6:c8:f1:33:
         b3:9e:f5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org