Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa
File:                     3133382e39372e36322e302f32332d3233203d3e20323634313330.roa (raw, json)
Hash identifier:          3BVhdO7nYttBvj9k48X+shC+4cEP+P7v/4JJ5CuTVDg=
Subject key identifier:   32:83:D3:6F:AE:6F:D2:30:C0:F6:5E:60:A4:97:B3:B3:C8:43:B5:FC
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       123F9683923E7FBCAF48F5865B691AB3A3B2D1D9
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:28 +0000
ROA not before:           Thu 21 Mar 2024 17:07:28 +0000
ROA not after:            Thu 20 Mar 2025 17:12:28 +0000
asID:                     264130
IP address blocks:        138.97.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3f:96:83:92:3e:7f:bc:af:48:f5:86:5b:69:1a:b3:a3:b2:d1:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:28 2024 GMT
            Not After : Mar 20 17:12:28 2025 GMT
        Subject: CN=3283D36FAE6FD230C0F65E60A497B3B3C843B5FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:06:a3:ff:06:59:5c:c2:c1:f8:84:a3:a0:
                    ac:fa:f6:50:bc:99:60:6d:49:eb:56:cd:0e:21:42:
                    60:14:23:2e:58:93:62:8b:cd:43:25:18:c2:24:21:
                    e5:77:34:71:46:e9:de:37:e7:2f:a8:8d:a1:5d:10:
                    25:da:7c:2b:1b:51:bc:bf:89:bf:6c:a7:11:00:7b:
                    12:4e:65:fc:cc:dc:18:b5:33:f2:5c:5a:c1:55:36:
                    2d:b8:78:ce:55:f2:c6:ad:eb:2f:35:cf:34:a7:85:
                    e6:43:a7:62:df:e0:d0:a1:c0:c0:1b:6f:38:b3:84:
                    93:75:40:e2:e3:d9:79:64:3a:7f:76:b9:e1:50:39:
                    2e:f0:fc:93:7a:df:86:ff:93:e1:70:8b:c7:5d:e0:
                    6b:f0:1a:0f:1d:55:55:da:36:79:c4:b8:92:c6:c9:
                    18:50:9c:ef:ee:c7:e5:d1:fd:95:28:c2:a6:00:c3:
                    6b:7e:59:1a:46:f8:8d:bc:c3:d1:1c:f8:dc:1e:34:
                    a4:f5:34:9a:6d:e6:f3:94:50:52:e4:b9:90:24:cd:
                    93:82:ed:48:cd:44:7b:96:5c:c4:9c:33:4b:e7:9a:
                    01:f4:33:c2:7b:04:6b:45:6c:f5:b9:91:5e:72:a2:
                    bb:44:8d:1c:0d:6d:a5:88:30:be:2b:0f:89:05:ab:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:83:D3:6F:AE:6F:D2:30:C0:F6:5E:60:A4:97:B3:B3:C8:43:B5:FC
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:c5:81:17:5c:61:e3:78:97:2f:82:c8:26:4c:81:2c:08:18:
         71:8d:44:3a:0a:53:53:cb:7f:bc:7a:67:e4:d6:b0:5f:a0:cc:
         9d:d2:e6:72:1d:c9:c3:d4:bf:b1:0e:f8:25:8e:ae:2c:b9:66:
         fb:8a:70:57:f2:3f:e1:f4:d9:dc:e7:d1:d5:7f:e4:cf:cf:24:
         70:d5:ad:e1:52:9a:a0:3f:61:49:7a:1e:c2:94:c5:f3:82:f4:
         60:ef:c4:e0:72:0a:42:ea:af:41:ae:fd:03:57:2d:8b:91:a1:
         03:30:21:19:d7:f3:27:94:43:c0:ed:a4:ce:14:88:2a:1a:36:
         4f:54:dc:1b:3c:61:4c:9d:ea:c8:6a:b9:ba:9f:6d:95:58:3e:
         94:14:04:e3:e9:20:22:2d:0e:14:b3:bd:fb:e2:70:d9:6d:32:
         c4:d4:bf:ea:9b:18:e7:0f:aa:66:84:93:db:7b:b1:d9:78:8a:
         df:05:9f:b1:a3:0c:3d:17:bd:84:6f:b9:47:e7:e7:52:26:63:
         75:1b:2f:cc:7a:c3:69:34:36:51:a4:b1:40:49:f4:63:24:bc:
         e2:c5:dd:17:85:52:4b:6c:8a:2f:85:fe:71:b7:50:47:b5:5a:
         94:31:27:73:c4:58:b6:67:83:2d:07:13:92:90:2e:34:c3:e0:
         2c:c9:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org