Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32332d3233203d3e20323634313330.roa (raw, json)
Hash identifier:          1EMykBo3QjU4Z8TYM5UmMfnfq+UuTPEGVpNzLF378Vw=
Subject key identifier:   BA:58:A4:2C:62:79:8A:D8:25:19:73:22:43:F1:15:8C:C5:02:88:AF
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       122B0ED119353D2D86425B6968F46388BCBB35B0
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:28 +0000
ROA not before:           Thu 21 Mar 2024 17:07:28 +0000
ROA not after:            Thu 20 Mar 2025 17:12:28 +0000
asID:                     264130
IP address blocks:        138.97.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2b:0e:d1:19:35:3d:2d:86:42:5b:69:68:f4:63:88:bc:bb:35:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:28 2024 GMT
            Not After : Mar 20 17:12:28 2025 GMT
        Subject: CN=BA58A42C62798AD82519732243F1158CC50288AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:9b:a9:f1:e5:35:67:b0:82:6d:96:0c:68:
                    9a:a2:73:1f:52:e6:52:10:00:34:33:df:e4:86:91:
                    d8:c4:f2:fc:86:05:de:58:e9:67:b7:dd:9e:7e:fe:
                    c9:17:19:24:43:84:ac:e9:10:80:a5:79:a2:cd:f2:
                    f9:55:42:5f:3c:b8:52:86:cb:b9:1e:a4:b2:33:98:
                    0f:b1:4d:61:d2:2c:2c:59:00:53:dd:9d:ac:68:c0:
                    00:49:3b:0a:bc:e8:c4:a9:90:31:42:28:3a:69:6f:
                    d9:5d:33:ae:91:ce:68:79:7f:39:c8:71:78:dc:65:
                    88:3d:2a:b2:69:ab:b5:a0:7b:bb:e6:33:ef:fa:fc:
                    81:08:04:81:45:8d:f8:5c:9e:65:17:d3:fa:a1:a9:
                    05:e5:b9:37:79:d1:55:9f:af:bc:01:2a:16:48:38:
                    d1:99:3b:24:e4:c7:26:c4:27:0c:e3:14:92:f4:a0:
                    b5:ee:f1:c1:6c:fc:79:17:06:f2:13:81:e4:28:db:
                    fb:44:61:b5:78:ae:df:4f:dc:ca:2b:95:99:d0:b7:
                    cb:82:68:9d:fa:8a:df:c8:6a:80:e4:67:64:14:82:
                    48:da:30:8f:28:b3:f9:12:13:cf:23:c6:0d:15:d6:
                    13:b4:e6:da:03:cc:9b:34:8b:6f:4f:ae:1c:99:9f:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:A4:2C:62:79:8A:D8:25:19:73:22:43:F1:15:8C:C5:02:88:AF
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32332d3233203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:01:a8:27:b6:01:5d:46:93:ce:98:6d:08:35:84:33:e1:cb:
         e4:2f:5f:2e:82:d8:e3:b1:58:0b:40:c5:f4:0d:95:4b:37:57:
         c9:a4:db:22:8d:a8:1d:fc:93:f1:b9:d8:d9:67:d7:ec:7a:54:
         9b:70:ed:77:80:49:02:11:08:bb:4e:d2:d0:4b:5d:a4:a6:b7:
         3a:54:87:dd:0f:bb:b5:1e:25:0d:a2:6c:56:d3:cf:93:36:0f:
         f9:cb:85:20:de:95:e9:72:a4:52:84:b2:21:cf:57:4f:d2:f3:
         8f:bd:46:36:68:98:3a:9f:e4:5d:35:c1:36:f8:d6:84:5f:75:
         2b:3f:07:d8:83:d5:cc:13:f1:eb:69:c0:1c:8e:4e:53:4f:ab:
         a1:df:f0:cb:fc:4c:d3:ef:08:f7:da:e7:61:63:99:c7:2d:ec:
         0e:a7:fd:ad:20:ca:7d:00:02:ad:3d:3a:a1:58:d5:b1:65:cb:
         62:71:25:c9:fb:52:16:d0:7c:82:52:3c:a7:72:d8:75:21:54:
         60:d2:1c:a2:2b:0b:05:6a:e6:b3:5f:78:cb:41:5a:bc:9a:41:
         5e:be:4c:d3:7d:57:73:cb:4c:76:57:05:e6:56:81:67:ee:e0:
         d9:54:1f:c1:c5:9a:d0:bd:93:fd:7e:8e:0a:f7:ef:79:89:0c:
         b3:33:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org