Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
File:                     3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa (raw, json)
Hash identifier:          C5LvohRGUaYbaN61Oc2DSq0Q+Bh8D11pgXLMQ4fubR4=
Subject key identifier:   B9:8D:72:58:47:D0:56:A8:0D:48:F7:15:7F:70:E3:FE:6A:0B:B8:B4
Certificate issuer:       /CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
Certificate serial:       07EFE00076EDF2DCB9029EF8DC71ED9F78DA5B51
Authority key identifier: 7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa
Signing time:             Mon 29 Jan 2024 13:48:33 +0000
ROA not before:           Mon 29 Jan 2024 13:43:33 +0000
ROA not after:            Mon 27 Jan 2025 13:48:33 +0000
asID:                     263897
IP address blocks:        138.204.115.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ef:e0:00:76:ed:f2:dc:b9:02:9e:f8:dc:71:ed:9f:78:da:5b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EED30292A9C9E1294DDA31D52BC97D7775EE9EC
        Validity
            Not Before: Jan 29 13:43:33 2024 GMT
            Not After : Jan 27 13:48:33 2025 GMT
        Subject: CN=B98D725847D056A80D48F7157F70E3FE6A0BB8B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:c0:79:61:33:f9:42:2b:2a:ee:85:7e:6e:
                    c8:69:bf:58:68:7a:60:b9:94:15:aa:6d:77:6a:f7:
                    d0:4e:6c:9e:e6:e1:8a:eb:3e:33:54:f2:38:bd:4e:
                    48:6b:35:db:5f:62:6e:84:81:44:32:86:dc:27:0e:
                    46:b8:12:0f:c8:94:50:c8:97:97:be:fc:48:74:f5:
                    14:1c:27:fe:af:f7:bc:78:b8:50:e6:ca:3f:f2:3b:
                    fb:d8:6f:37:7a:d5:f5:91:49:9b:12:0e:6a:cd:7e:
                    6e:c4:1f:8a:77:c8:8f:2f:e4:2a:f8:c4:57:68:0a:
                    fa:78:08:23:4a:22:d8:bc:5c:37:d9:b7:02:c5:4d:
                    fa:f5:b1:50:30:7b:de:db:ad:c8:eb:d3:21:63:fe:
                    d5:ed:88:6b:6f:c0:5c:07:2f:6f:4d:9d:ad:b9:9d:
                    95:86:66:fe:d8:aa:1c:74:1c:b0:c3:37:ce:7d:f9:
                    e3:b7:7a:f3:9e:33:f3:1d:b8:97:fe:72:c5:6c:c2:
                    7f:be:4f:c8:af:59:6d:c6:97:3a:24:c4:00:c3:2b:
                    ed:2c:ae:61:2d:a4:69:7f:88:f7:a8:1f:82:c7:4d:
                    f0:1b:ff:12:43:62:d8:01:ac:e2:0d:f4:fd:2a:20:
                    06:ed:c7:5b:d1:4a:8d:63:4b:91:ff:ed:49:75:34:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:72:58:47:D0:56:A8:0D:48:F7:15:7F:70:E3:FE:6A:0B:B8:B4
            X509v3 Authority Key Identifier:
                keyid:7E:ED:30:29:2A:9C:9E:12:94:DD:A3:1D:52:BC:97:D7:77:5E:E9:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7EED30292A9C9E1294DDA31D52BC97D7775EE9EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BeS4RpdPuVH8sAPzifgaH71VbGVFTUfsvrKnqDLnkvm7/0/3133382e3230342e3131352e302f32342d3234203d3e20323633383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:85:54:ad:34:cb:1d:01:4f:cb:08:c0:89:99:7b:2b:58:23:
         16:71:3b:eb:ca:10:58:2c:c3:10:5f:ce:7b:29:c1:38:d9:f0:
         ca:50:49:aa:a2:9f:df:2e:21:9b:05:2c:eb:3b:39:d8:0b:7c:
         79:84:e3:fe:ea:d7:98:d3:17:ce:b9:a7:53:fe:42:41:ec:55:
         f3:fa:1a:4d:08:b4:af:53:76:43:af:6e:e5:68:3e:0f:b2:3c:
         45:8f:ff:bd:45:86:76:7c:47:11:f3:a0:98:d2:48:2c:15:09:
         1f:42:d1:86:70:11:d4:74:ec:7e:f2:88:c9:71:fd:ab:87:c9:
         88:79:15:68:89:c1:21:08:d2:fd:4b:7a:db:fa:aa:87:df:c6:
         5b:eb:e8:29:89:d9:b0:0a:d9:ff:92:14:54:08:92:25:68:8d:
         1b:01:6b:16:ad:0b:64:cb:89:09:18:fa:ba:75:35:83:37:eb:
         e6:d7:8b:1f:33:7d:cf:9e:0a:fd:14:d7:81:58:84:15:79:68:
         33:6a:90:6d:ba:32:ad:ce:63:e3:a0:5f:1c:2f:11:84:74:ab:
         21:a2:d9:81:34:83:30:f6:bb:ba:8e:26:76:75:f3:ba:53:1a:
         db:a5:18:3a:23:2c:3e:07:f5:46:87:7f:e6:50:33:14:ca:3d:
         e9:9e:f1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:57 2024 by rpki-client on console-ams.rpki-client.org