Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          2ufhKucedoeOV+RjJtaYPL4Smby971fEpfGbw2trijY=
Subject key identifier:   38:2A:45:DD:08:C9:BA:9A:75:78:8D:06:E8:F3:76:C3:F7:0E:64:C0
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       5283771A763D208C8E89790101A0815A238472B6
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:36 +0000
ROA not before:           Mon 29 Jan 2024 13:43:36 +0000
ROA not after:            Mon 27 Jan 2025 13:48:36 +0000
asID:                     263897
IP address blocks:        138.204.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:83:77:1a:76:3d:20:8c:8e:89:79:01:01:a0:81:5a:23:84:72:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:36 2024 GMT
            Not After : Jan 27 13:48:36 2025 GMT
        Subject: CN=382A45DD08C9BA9A75788D06E8F376C3F70E64C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:50:59:ea:fc:ee:3f:52:bf:f1:d5:c7:85:
                    6e:b4:69:0a:d5:2d:c5:f4:41:d7:a6:7a:3a:4b:b7:
                    8b:58:38:bc:80:a1:79:24:df:bb:0c:e9:20:ce:15:
                    0e:59:8f:91:d3:6b:1f:6c:ff:c1:5a:61:12:e2:3f:
                    f8:3f:27:43:63:de:72:51:74:b3:a2:81:14:ec:35:
                    6a:76:8c:85:85:81:94:b1:1f:95:4b:b7:78:c8:c4:
                    b0:eb:35:ff:1b:24:e8:c2:38:01:6f:c6:64:9a:0a:
                    e9:92:e1:28:24:39:85:db:47:5c:78:99:c9:89:8e:
                    b3:36:66:1d:27:df:71:c2:eb:4e:17:84:49:75:52:
                    e9:da:60:de:92:be:17:7f:94:3a:8a:fb:c9:e2:d3:
                    54:dd:1d:d4:02:25:7c:2b:38:48:69:83:98:98:bb:
                    ad:ae:a9:39:01:ec:5d:f9:59:23:1b:6e:bf:fb:ed:
                    a8:5b:64:39:f8:0c:64:50:11:5a:1f:42:a9:6f:d3:
                    ae:86:ca:66:4e:73:1d:8d:34:0e:21:50:a9:87:11:
                    a9:05:92:eb:b1:8b:c6:20:c3:16:8c:cd:98:2a:2e:
                    3c:a0:0b:f0:5c:09:c9:7c:79:2b:0d:ce:73:cf:ec:
                    c1:41:2c:57:a7:7f:f9:e0:a0:46:ac:3d:77:d1:9c:
                    5e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2A:45:DD:08:C9:BA:9A:75:78:8D:06:E8:F3:76:C3:F7:0E:64:C0
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131342e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ff:6b:f0:78:02:f5:4c:84:84:91:90:4f:e3:c2:fd:d1:3a:
         b2:eb:c8:02:94:4c:8c:ab:ce:77:57:08:1a:19:14:26:61:79:
         2f:95:0a:1d:ad:81:d4:67:4d:26:75:64:51:df:10:a3:c4:25:
         c1:da:3d:f0:25:d6:c3:9b:b0:07:6b:ca:c2:de:49:7c:90:bf:
         f1:f3:f2:c7:be:1c:30:19:6d:fc:80:86:cc:e5:c2:8b:74:d1:
         9d:83:14:78:ee:d8:a6:51:a0:78:21:b3:cb:e9:46:cc:fc:af:
         e0:7a:fb:fa:db:ee:34:42:dd:f5:13:d1:10:ab:63:36:4c:a4:
         c3:a1:90:49:bd:eb:ec:b3:21:f6:09:84:97:7f:df:d4:e9:db:
         3b:5e:ab:95:28:04:92:66:09:a7:e7:a2:67:80:f4:8d:0b:83:
         1b:76:9d:a3:20:6a:7a:56:b9:41:96:59:d5:8c:c5:79:86:7c:
         01:f8:16:d9:5d:81:0e:5e:87:2f:51:67:ad:d2:7c:0e:e3:d9:
         ee:f8:fa:0a:ea:1d:8c:76:8c:44:80:3d:5c:08:77:85:9c:83:
         60:ef:0a:76:6c:28:e8:aa:c9:41:3d:12:e1:2c:9e:e1:30:b8:
         49:d4:55:c2:44:c2:8d:9a:9a:8c:94:02:8d:a6:49:5d:aa:b8:
         75:e9:b9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org