Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32322d3232203d3e20323634313330.roa (raw, json)
Hash identifier:          PNrbRKJ1pbgo76PWzklTSBIfZM+2iulsAJ71sDKjLMY=
Subject key identifier:   F2:81:BD:5C:E1:62:C4:85:B9:AC:D5:E5:E4:62:F0:D3:A6:59:3A:CE
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       212C40003C5A3931541F376BE135BE2CFEC07B96
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:29 +0000
ROA not before:           Thu 21 Mar 2024 17:07:29 +0000
ROA not after:            Thu 20 Mar 2025 17:12:29 +0000
asID:                     264130
IP address blocks:        138.97.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2c:40:00:3c:5a:39:31:54:1f:37:6b:e1:35:be:2c:fe:c0:7b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:29 2024 GMT
            Not After : Mar 20 17:12:29 2025 GMT
        Subject: CN=F281BD5CE162C485B9ACD5E5E462F0D3A6593ACE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d4:71:f0:a6:a7:72:77:01:2a:cc:c0:25:51:
                    6c:d6:c6:15:0d:8d:92:3d:1e:52:b1:e0:79:58:a1:
                    6d:67:3b:37:31:77:45:39:fd:c2:77:1d:f0:f2:94:
                    12:67:85:5b:62:38:f7:b2:53:a4:7a:3f:b2:d7:18:
                    ce:82:99:bf:17:fb:71:df:64:3a:91:7a:4d:8f:43:
                    a2:46:af:77:3b:58:13:bc:23:74:17:3d:c3:15:d4:
                    6c:0f:2e:77:81:98:7d:79:63:33:50:17:2c:ae:29:
                    e9:fd:f3:22:5c:b9:2e:69:8a:7a:3e:42:71:72:4d:
                    fc:18:82:a4:ca:9e:d7:b1:c8:ea:67:e8:69:15:8e:
                    a0:eb:76:de:f9:23:0e:8e:23:bf:f4:87:aa:87:85:
                    95:6b:b2:77:1d:07:c4:f1:3b:3a:74:66:6a:8f:4c:
                    c6:b6:7b:cc:db:ed:f5:2b:b2:e1:1f:e3:94:a7:17:
                    59:b8:bc:4a:92:04:5e:d8:30:c2:5b:df:91:7e:48:
                    3f:d3:55:ad:60:ca:e3:1e:e5:db:b4:5f:5a:2a:9b:
                    fc:09:44:59:98:8a:bf:13:55:c9:eb:94:bf:72:9a:
                    40:a7:8f:7a:0e:16:a5:48:da:15:e5:0d:8b:3b:77:
                    1b:16:a6:bb:26:ed:60:84:1b:a4:c1:91:4f:9a:bf:
                    7c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:BD:5C:E1:62:C4:85:B9:AC:D5:E5:E4:62:F0:D3:A6:59:3A:CE
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32322d3232203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:73:e9:a9:b3:1e:76:87:b4:1b:90:03:a0:d2:3d:38:c6:
         7b:39:84:d0:05:e5:6e:59:fe:33:c2:8a:53:98:29:99:c5:2a:
         2d:a1:1d:0b:6b:42:7b:ff:72:d2:e6:b1:85:15:08:84:99:3b:
         f9:0a:e7:66:71:3a:fb:ad:cd:4c:35:e9:81:c5:cc:2a:6a:ca:
         ad:cf:0c:fb:82:09:4d:c0:90:f5:5f:8f:7b:f4:ee:6a:1f:37:
         6e:b7:91:77:fe:b7:f5:67:6a:71:59:85:c0:58:12:05:31:7e:
         56:83:c4:d9:3e:e0:b8:33:6d:70:6f:df:c5:e9:bc:8a:4f:0f:
         ec:9e:68:f7:54:25:96:14:06:c4:80:6c:3d:f7:06:a1:a8:a8:
         64:57:ff:52:76:36:53:be:32:b0:90:7d:61:10:38:89:22:2f:
         0a:59:dd:e6:da:98:84:e8:f9:f5:3e:6f:ad:5c:c3:e5:65:a4:
         18:90:c1:d6:98:74:e0:35:c0:e7:61:31:1b:68:66:69:17:10:
         04:66:2f:5d:53:3e:06:1d:28:c7:68:0e:42:83:91:a9:97:78:
         00:c1:4c:03:b2:12:b8:9a:8b:da:38:18:60:9f:1c:9f:31:8f:
         05:1b:e8:6b:75:b6:73:9a:b4:45:93:d8:34:37:54:ff:95:14:
         e7:46:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org