Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
File:                     3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa (raw, json)
Hash identifier:          bkt+kZ3H/gFAz0Cgpd6rQklX4Aq3vbWrGbxkGTnwZD8=
Subject key identifier:   3B:F1:64:6B:55:29:99:CB:C6:0F:DB:CF:ED:72:B6:C8:A9:04:AF:0D
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       53D9C7EBA84F0FA5699389303E71128E96AA50F7
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:34 +0000
ROA not before:           Mon 29 Jan 2024 13:43:34 +0000
ROA not after:            Mon 27 Jan 2025 13:48:34 +0000
asID:                     263897
IP address blocks:        138.204.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:c7:eb:a8:4f:0f:a5:69:93:89:30:3e:71:12:8e:96:aa:50:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:34 2024 GMT
            Not After : Jan 27 13:48:34 2025 GMT
        Subject: CN=3BF1646B552999CBC60FDBCFED72B6C8A904AF0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:ce:59:71:d6:57:be:97:99:f8:63:e0:57:
                    44:08:11:72:5c:d2:89:fe:85:61:e3:3f:0e:e6:a3:
                    4c:4c:1d:f7:54:6c:8d:09:25:90:1d:65:15:61:05:
                    94:03:f9:fd:86:ce:c6:84:78:90:29:9e:39:8b:18:
                    9b:08:09:64:d0:2c:ac:66:22:82:d5:eb:35:d7:de:
                    c2:d8:b0:87:b4:cb:79:79:19:ee:2b:52:40:a5:e7:
                    d5:1e:06:af:8d:4c:cb:99:8f:d8:bd:21:2d:0f:5a:
                    9a:7a:19:05:ca:4f:d6:fe:ec:47:1e:0e:be:2d:5c:
                    2f:e1:74:4f:37:43:2a:68:7b:0e:b5:f7:b0:8e:16:
                    e5:77:f5:ab:6a:30:fc:39:6d:ed:3e:a1:15:7d:10:
                    05:4e:46:29:43:ab:27:75:93:9d:16:8f:1d:b0:a1:
                    cb:f4:e4:8d:46:91:57:fe:ce:4a:d9:1e:a0:18:f5:
                    63:c9:b1:8b:85:c0:28:92:39:cc:c3:c9:22:52:12:
                    b1:da:5f:6e:ee:e2:c7:ff:21:31:ac:1f:d4:c3:67:
                    0b:c0:49:43:8f:83:aa:17:9c:1b:b7:cd:83:cf:d4:
                    ec:b3:f4:b1:47:fe:1b:30:10:c6:51:a0:66:2c:52:
                    49:31:49:5b:3a:72:c2:be:24:5b:ea:e3:91:1e:e4:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:64:6B:55:29:99:CB:C6:0F:DB:CF:ED:72:B6:C8:A9:04:AF:0D
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131322e302f32322d3232203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:03:79:4e:ab:b2:80:99:4a:30:a7:1c:1a:2d:6b:1d:70:
         94:70:5b:78:b3:62:29:8a:cb:c0:06:c0:ed:7f:96:a1:9e:0e:
         32:09:8f:57:2b:07:7c:c1:83:90:ee:c1:a5:5a:96:91:82:d7:
         ea:26:a9:90:06:41:b5:af:70:5c:b6:63:d5:04:6b:6e:cc:ca:
         db:06:b5:4c:d4:3c:76:25:d2:95:31:de:46:2a:03:12:d2:29:
         88:b8:14:cf:d3:5d:27:0c:de:a8:b8:2f:75:7d:72:f8:ef:37:
         b3:43:72:c2:7a:6b:89:60:52:b0:6c:bf:3c:f4:4c:77:e3:24:
         48:7e:8d:85:cb:67:eb:a9:20:bd:d7:01:36:3b:e4:b2:02:a9:
         56:10:66:fe:ac:3f:56:5e:da:42:a3:00:cc:dc:50:7b:b1:f9:
         b0:1a:6f:75:20:27:0c:80:02:2e:f6:6f:d3:bc:89:4b:5e:29:
         6c:d2:a2:e8:8d:96:e3:87:c7:50:b3:ad:45:a8:80:9f:c0:3c:
         cd:57:27:16:45:ee:df:cb:18:8e:04:c4:59:e8:af:d4:9c:0b:
         69:7e:ea:d4:0a:34:1d:4b:e1:9a:c8:e8:e2:99:da:7e:4d:1e:
         9e:b7:19:17:05:33:3d:80:53:ce:ff:f4:94:b7:dc:6f:cf:ac:
         31:b2:17:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org