Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa
File:                     3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa (raw, json)
Hash identifier:          tCYCyu9tmlOWtps7RQs1q/JYNlQgBVqslqdX1OuwFBU=
Subject key identifier:   25:E2:25:52:45:89:8C:C1:EE:A5:09:5E:44:13:E7:62:63:41:CD:E0
Certificate issuer:       /CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
Certificate serial:       25DAE932EA302D13D45675BC901A418B17AD6A9B
Authority key identifier: C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa
Signing time:             Thu 04 Apr 2024 22:13:29 +0000
ROA not before:           Thu 04 Apr 2024 22:08:29 +0000
ROA not after:            Thu 03 Apr 2025 22:13:29 +0000
asID:                     264208
IP address blocks:        138.97.226.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:da:e9:32:ea:30:2d:13:d4:56:75:bc:90:1a:41:8b:17:ad:6a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7DC1B24AD54C5A941093FBA50F385A50A175975
        Validity
            Not Before: Apr  4 22:08:29 2024 GMT
            Not After : Apr  3 22:13:29 2025 GMT
        Subject: CN=25E2255245898CC1EEA5095E4413E7626341CDE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:9f:87:ab:fe:40:05:3f:78:da:7d:14:16:
                    47:bb:9f:86:c7:d7:9d:d8:c5:45:77:3b:93:61:55:
                    9e:02:a3:e2:a5:a4:44:eb:de:4a:06:e7:19:4a:77:
                    4f:dc:0b:f6:67:1d:ce:e8:15:b3:d3:01:1c:e1:e7:
                    05:67:2c:95:2d:6d:44:77:aa:df:ed:95:85:12:bd:
                    d4:29:86:6a:dd:50:55:80:e5:3d:28:7b:84:73:3a:
                    86:a8:7e:4f:ff:60:7f:b0:90:9d:22:47:24:2c:56:
                    41:e1:c0:48:97:aa:c6:3e:56:02:b3:83:e9:af:9e:
                    17:5a:6c:68:ac:30:2d:c7:9d:9b:3f:98:72:2d:e8:
                    17:11:5f:e1:8e:1b:cd:90:14:3d:15:3e:31:84:9b:
                    12:b4:4a:ea:52:34:0d:a9:2a:a2:34:9c:e1:1a:f6:
                    96:1d:58:a2:e4:6f:ea:1f:67:37:1f:c6:1a:f3:41:
                    d0:91:f7:5b:d6:e8:7d:b0:ae:ea:39:f1:48:0d:3e:
                    c6:30:30:b5:b6:e0:30:f2:42:7a:83:48:98:52:ea:
                    a6:a1:db:6b:82:27:ae:4a:8c:18:a3:25:2a:fc:9c:
                    7a:9a:52:28:71:c0:d7:88:e3:fa:57:90:f6:6b:39:
                    6f:7a:f0:ef:c8:b8:02:c4:37:04:2a:e3:8b:a6:54:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:25:52:45:89:8C:C1:EE:A5:09:5E:44:13:E7:62:63:41:CD:E0
            X509v3 Authority Key Identifier:
                keyid:C7:DC:1B:24:AD:54:C5:A9:41:09:3F:BA:50:F3:85:A5:0A:17:59:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C7DC1B24AD54C5A941093FBA50F385A50A175975.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSK3Kdf4ockVXgFm4LG5kP5zU4xRSg4M3ENB3L8QkM7U/1/3133382e39372e3232362e302f32342d3234203d3e20323634323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:56:f8:c0:28:65:60:8a:e0:e2:2a:75:d3:b2:47:50:e1:8b:
         5b:15:9d:50:36:7e:d7:d9:39:d7:63:7d:0e:24:b9:3e:7f:04:
         34:ad:43:47:5e:92:61:0c:f5:55:c8:d3:2c:2b:b4:b7:d8:fb:
         52:53:0f:cd:1a:dd:4d:89:a8:e6:4d:8c:a1:cb:27:ec:0f:47:
         07:90:d5:51:18:35:22:70:8f:d2:e1:75:c7:28:9e:6e:13:a1:
         be:86:54:b2:2e:c6:b6:8b:f4:66:82:e5:bf:b3:7e:a3:7c:fe:
         68:6b:6d:20:b9:01:35:4a:d4:10:27:8d:f0:53:c0:7e:05:5f:
         9f:ad:74:f7:ef:04:73:0e:e8:9c:96:99:94:f5:bf:d6:18:b5:
         e2:a5:c3:4e:ed:bb:aa:1e:78:c5:81:3e:89:f6:62:49:21:64:
         14:0c:18:f9:98:04:49:8f:67:59:cd:68:11:91:3f:98:fb:32:
         b7:32:1c:30:24:f5:2c:bd:db:30:73:cb:cf:2a:ec:3a:9e:f1:
         c1:02:45:4b:8b:a1:a7:9a:88:3d:b3:9b:e1:d5:fa:ff:33:3e:
         e4:f6:d2:5f:37:e3:7f:1d:35:8a:74:21:9c:b2:7b:31:4f:b2:
         7f:96:bb:17:e2:e8:06:a4:a9:b0:e3:be:70:b9:2a:91:5f:75:
         cf:97:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org