Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36312e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          M/x4tlVgrgxtdzvSe9SY4mrgycz+Jjb+q9DmKHwQGzM=
Subject key identifier:   0A:59:F0:4A:E4:0A:C9:7F:F3:36:18:05:CB:F8:91:47:AE:E0:0B:5A
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       2594523B3AF5C661255F0C86D5213A57B2F955C7
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:29 +0000
ROA not before:           Thu 21 Mar 2024 17:07:29 +0000
ROA not after:            Thu 20 Mar 2025 17:12:29 +0000
asID:                     264130
IP address blocks:        138.97.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:94:52:3b:3a:f5:c6:61:25:5f:0c:86:d5:21:3a:57:b2:f9:55:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:29 2024 GMT
            Not After : Mar 20 17:12:29 2025 GMT
        Subject: CN=0A59F04AE40AC97FF3361805CBF89147AEE00B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:31:03:b0:f4:24:6f:af:60:9b:81:20:9f:
                    42:fe:4f:f7:9c:b9:78:9d:83:61:dc:0f:5a:a7:24:
                    e6:6a:10:7c:0b:28:ac:18:44:03:5f:2d:f5:81:7c:
                    dc:97:10:9d:95:bc:5a:1c:01:d5:ae:d8:12:8f:da:
                    79:1d:a6:9d:7d:80:e2:c8:8e:fb:23:d0:3d:32:f4:
                    b5:9f:f0:47:fe:42:d1:5c:ea:89:b1:df:14:8a:55:
                    66:64:ff:39:40:ec:36:d7:fa:9d:a8:f5:31:b4:2b:
                    46:17:94:08:bb:a8:cb:31:1e:b8:0a:12:fb:60:ce:
                    9f:e5:29:52:b6:b3:34:35:60:26:e5:8e:6f:f3:12:
                    0b:2f:35:cd:c2:43:36:bd:69:e6:b0:dd:a9:33:22:
                    68:64:31:ac:de:14:a6:fa:0a:6a:38:3d:f1:66:8e:
                    9c:ce:e0:11:8f:ce:bc:05:19:ac:b4:85:4b:67:70:
                    b7:5b:b6:f5:fd:e0:7e:a1:fa:25:18:50:be:0b:cb:
                    a3:59:7f:73:5e:8f:59:2d:4f:c6:6b:44:28:8e:53:
                    52:40:99:11:bb:54:00:3f:5e:c7:cc:b1:43:3b:4e:
                    5c:55:c6:73:b7:03:bd:2b:5a:c3:b3:7c:12:74:88:
                    f9:f0:38:b6:22:7f:20:da:e8:6c:f0:06:9a:70:0c:
                    48:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:59:F0:4A:E4:0A:C9:7F:F3:36:18:05:CB:F8:91:47:AE:E0:0B:5A
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:72:f2:da:63:30:7c:f9:6c:79:13:37:21:95:8e:af:89:
         a0:6b:9b:3e:95:73:6b:a1:8c:45:99:72:98:61:fe:d3:dd:48:
         18:c1:51:5f:12:03:07:d4:44:4b:de:bc:1b:ad:05:9c:86:da:
         81:9c:b4:3d:21:b9:fc:e9:ca:f7:91:43:f1:02:d3:2b:72:46:
         6d:70:f9:f2:9e:dc:e0:2a:6c:ae:82:f6:34:9f:0f:4e:4a:c8:
         24:5e:24:4b:49:51:6f:07:ec:bf:58:36:e2:ea:f5:29:89:46:
         dd:e4:c1:4b:d8:17:33:46:f6:5b:f4:3d:23:f6:06:8c:0c:28:
         f6:79:b3:a2:18:57:78:b6:46:40:2b:89:0d:7b:6f:a3:b9:8d:
         be:f2:c2:fb:d0:95:3b:4b:1f:b3:c2:2b:97:a6:d3:5a:6a:60:
         b3:7c:50:a0:bc:ad:e6:d6:b4:15:b5:38:1e:b4:42:22:c4:63:
         7a:a9:31:f7:61:b0:e8:c5:d9:81:d2:5e:10:c4:a7:78:d8:d7:
         02:1b:9c:7a:66:bf:ec:b6:d0:59:13:4f:a7:b6:08:1e:9c:77:
         df:2e:95:9b:bf:a1:1f:09:7d:48:f5:cb:38:90:c7:6f:1e:f5:
         61:fa:d6:5e:6c:14:c7:f9:46:2d:eb:25:7e:0f:4e:b3:0d:62:
         b5:66:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org