Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa
File:                     3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa (raw, json)
Hash identifier:          GyCORLJZKkEQ0yf0hg2VhdAOemRxXm9e0+kRWqy+oLA=
Subject key identifier:   4E:8F:75:B3:3A:A4:64:EB:D0:9C:6F:70:54:E2:44:B7:4E:F2:16:51
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       5DCA6534ECB8BED9E15D4D9B4F62B0904542FCF6
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.226.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ca:65:34:ec:b8:be:d9:e1:5d:4d:9b:4f:62:b0:90:45:42:fc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=4E8F75B33AA464EBD09C6F7054E244B74EF21651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:7c:83:ab:71:03:de:3e:03:41:25:b8:c5:
                    91:56:cd:65:b0:a3:bd:ba:ee:4d:bd:66:c3:99:83:
                    19:8d:36:bb:8a:49:f7:18:0a:be:74:75:9d:7a:ca:
                    2d:aa:7c:11:8b:f7:cd:bb:b2:8f:14:16:0c:22:90:
                    bd:64:a3:5b:79:3a:60:66:76:98:9c:ee:a5:c9:a3:
                    bf:35:cc:52:c5:22:6f:08:58:05:ec:2e:42:23:6d:
                    43:95:6a:f7:59:a1:fd:68:3d:e5:71:b6:5e:1b:83:
                    ec:34:31:5c:73:2b:f8:85:dc:ca:ee:e3:0b:24:c0:
                    e4:49:a8:78:c1:77:2b:b5:f0:92:78:8c:1a:f6:2c:
                    fc:29:a1:f7:35:3d:80:37:27:c9:c7:55:88:46:cd:
                    83:99:8b:fb:53:f7:b8:32:70:24:33:aa:17:24:21:
                    1f:8f:de:5b:a6:da:75:6c:da:10:1c:17:08:ba:b0:
                    19:15:d4:f8:c8:07:43:b8:6f:73:73:05:3e:1c:5a:
                    d4:e2:ab:1a:8b:83:f0:2d:9d:31:35:05:75:82:3e:
                    e0:a3:cc:16:81:12:69:6c:01:90:c5:e9:2d:44:d8:
                    8d:f9:5f:f7:1f:b1:10:26:24:60:69:1c:b3:ed:6f:
                    1d:1f:22:2e:2a:0a:70:f0:d4:48:19:93:71:9a:2b:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:8F:75:B3:3A:A4:64:EB:D0:9C:6F:70:54:E2:44:B7:4E:F2:16:51
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32332d3233203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:8e:64:99:11:df:cd:9b:09:1b:1a:23:7c:71:72:f8:66:ba:
         4b:a9:2d:00:d8:25:94:4b:bf:05:13:c3:eb:8c:fd:1e:2b:ac:
         eb:6d:89:d5:89:bc:66:d7:dd:30:4f:7a:8b:13:4c:56:5f:e3:
         ac:df:f5:a3:e7:b7:5b:bc:62:e6:f9:06:c1:d9:99:74:b7:92:
         cd:09:0b:d6:35:74:44:0e:3f:b5:80:22:4d:36:0a:04:e0:20:
         97:8c:e0:23:5d:08:f1:9d:87:d7:9a:74:7e:1c:e0:2f:e0:fc:
         e2:d9:e3:bc:0d:7f:36:d6:af:93:50:1e:e6:87:be:25:2f:a1:
         3f:5d:01:56:1e:ba:f5:77:be:00:b1:54:63:13:12:b3:0d:f8:
         10:9a:f0:3b:30:35:04:d2:32:37:98:0d:e5:a9:c8:97:61:7a:
         12:21:50:a2:15:ff:d4:9b:63:0c:d9:ea:fa:ba:70:83:2c:d7:
         b6:8f:f2:84:4d:99:3a:54:13:9c:4c:9e:63:2d:fe:27:ea:83:
         95:1f:e9:59:f9:4a:b6:84:8a:b2:00:b8:98:56:58:52:80:c8:
         51:61:4a:ab:90:ea:a5:58:b9:7f:71:72:72:57:f2:42:30:53:
         4b:67:8c:73:ca:0b:53:01:6a:fe:73:af:c2:ee:2b:85:73:6e:
         4c:e9:50:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXcplNOy4vtnhXU2bT2KwkEVC/PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdEQzFCMjRBRDU0QzVBOTQxMDkzRkJBNTBGMzg1QTUw
QTE3NTk3NTAeFw0yNDA0MDQyMjA4MjlaFw0yNTA0MDMyMjEzMjlaMDMxMTAvBgNV
BAMTKDRFOEY3NUIzM0FBNDY0RUJEMDlDNkY3MDU0RTI0NEI3NEVGMjE2NTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCg3yDq3ED3j4DQSW4xZFWzWWw
o7267k29ZsOZgxmNNruKSfcYCr50dZ16yi2qfBGL9827so8UFgwikL1ko1t5OmBm
dpic7qXJo781zFLFIm8IWAXsLkIjbUOVavdZof1oPeVxtl4bg+w0MVxzK/iF3Mru
4wskwORJqHjBdyu18JJ4jBr2LPwpofc1PYA3J8nHVYhGzYOZi/tT97gycCQzqhck
IR+P3lum2nVs2hAcFwi6sBkV1PjIB0O4b3NzBT4cWtTiqxqLg/AtnTE1BXWCPuCj
zBaBEmlsAZDF6S1E2I35X/cfsRAmJGBpHLPtbx0fIi4qCnDw1EgZk3GaK5sXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTo91szqkZOvQnG9wVOJEt07yFlEwHwYDVR0j
BBgwFoAUx9wbJK1UxalBCT+6UPOFpQoXWXUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNLM0tkZjRvY2tWWGdGbTRMRzVrUDV6VTR4UlNnNE0zRU5CM0w4UWtN
N1UvMS9DN0RDMUIyNEFENTRDNUE5NDEwOTNGQkE1MEYzODVBNTBBMTc1OTc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M3REMxQjI0QUQ1NEM1QTk0
MTA5M0ZCQTUwRjM4NUE1MEExNzU5NzUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTSzNLZGY0b2NrVlhnRm00TEc1a1A1elU0eFJTZzRNM0VOQjNMOFFrTTdVLzEv
MzEzMzM4MmUzOTM3MmUzMjMyMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKYeIwDQYJKoZIhvcNAQELBQADggEBAKuOZJkR
382bCRsaI3xxcvhmukupLQDYJZRLvwUTw+uM/R4rrOttidWJvGbX3TBPeosTTFZf
46zf9aPnt1u8Yub5BsHZmXS3ks0JC9Y1dEQOP7WAIk02CgTgIJeM4CNdCPGdh9ea
dH4c4C/g/OLZ47wNfzbWr5NQHuaHviUvoT9dAVYeuvV3vgCxVGMTErMN+BCa8Dsw
NQTSMjeYDeWpyJdhehIhUKIV/9SbYwzZ6vq6cIMs17aP8oRNmTpUE5xMnmMt/ifq
g5Uf6Vn5SraEirIAuJhWWFKAyFFhSquQ6qVYuX9xcnJX8kIwU0tnjHPKC1MBav5z
r8LuK4VzbkzpUJs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org