Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36322e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          1bET3S844KxpBmi2+sV+HEyoS6Db/oWYb+ZJdHuJKks=
Subject key identifier:   AB:68:D5:9F:3F:61:B1:59:4B:79:6D:5F:FC:32:07:BE:1C:6C:1B:24
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       42474F3E204BCDD431C3AE55B612E9D22E5FFECC
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:28 +0000
ROA not before:           Thu 21 Mar 2024 17:07:28 +0000
ROA not after:            Thu 20 Mar 2025 17:12:28 +0000
asID:                     264130
IP address blocks:        138.97.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:47:4f:3e:20:4b:cd:d4:31:c3:ae:55:b6:12:e9:d2:2e:5f:fe:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:28 2024 GMT
            Not After : Mar 20 17:12:28 2025 GMT
        Subject: CN=AB68D59F3F61B1594B796D5FFC3207BE1C6C1B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f1:3d:bf:d6:5b:74:53:d1:52:4e:b4:f9:96:
                    6a:a2:0e:fb:89:a9:86:5f:10:79:fe:4b:17:ad:be:
                    27:55:3b:47:82:0b:fb:b8:3b:76:28:dc:ef:48:2a:
                    3a:2c:8d:61:24:0d:38:7a:d2:98:9a:3f:37:8d:20:
                    1b:c2:57:15:6c:df:1c:5e:d3:61:9e:d4:94:a6:ac:
                    c6:e2:5d:81:ca:11:06:fb:e2:f7:4e:33:d5:71:51:
                    6f:52:1c:df:c8:24:10:39:ea:6c:11:a8:8e:14:25:
                    13:28:a5:7d:8a:53:eb:f3:69:d4:84:7a:d7:84:99:
                    80:e9:f0:5a:80:62:a6:42:5b:de:20:09:f7:93:85:
                    a1:5f:84:bb:99:15:13:be:26:8c:ef:24:0e:64:22:
                    17:a5:1b:91:11:11:a4:e1:a3:3b:aa:ce:aa:82:8d:
                    b9:67:88:7c:4c:06:ba:56:58:97:44:97:23:1a:7b:
                    91:29:5d:df:68:f5:c9:1b:e5:01:34:0b:c6:3a:9b:
                    e2:b1:17:36:43:34:5b:6a:4c:1a:47:ca:a2:98:dd:
                    73:da:63:bd:a5:f0:97:8b:ba:a6:3b:68:ed:24:58:
                    be:de:67:77:92:e0:b9:b2:fe:8b:cf:db:c8:e5:ce:
                    ba:28:48:ca:4c:51:56:dc:82:79:37:4e:ee:90:50:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:68:D5:9F:3F:61:B1:59:4B:79:6D:5F:FC:32:07:BE:1C:6C:1B:24
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:9c:38:75:13:6e:77:3e:65:c7:5c:18:91:ef:c6:9c:25:e5:
         06:98:41:2b:c9:9d:3a:3b:05:4c:b6:a4:29:30:65:a8:f9:b2:
         3b:61:70:0b:ef:44:90:cd:c9:e1:56:24:10:9e:a5:9a:b2:f4:
         45:d9:8e:92:84:84:e2:95:1d:4b:96:9c:92:de:f3:33:eb:8b:
         8f:87:63:14:aa:73:7a:8c:46:62:16:0c:2d:7e:60:16:9b:2d:
         ea:56:0d:e7:b7:6b:72:fe:40:f0:a4:08:fe:93:b1:a1:70:0e:
         66:fa:f9:23:a0:53:85:35:0a:e3:08:51:bd:e1:c6:83:d6:30:
         86:cc:f5:f3:3a:52:c9:82:3f:57:3d:d4:4b:75:9a:86:37:ea:
         e2:44:8c:1f:95:6c:39:29:c9:21:b4:3b:c6:37:9b:fc:85:e8:
         8e:13:9a:f3:ba:53:99:4f:bf:38:a0:6b:ec:dd:7d:f1:b6:ad:
         ac:33:c8:8f:53:14:1a:17:20:dc:32:64:20:63:61:e0:87:9e:
         14:fa:0d:78:28:12:1f:33:ab:4b:a3:65:ec:88:b1:ce:34:9c:
         8f:e5:89:cb:ac:02:6b:1a:5d:17:7e:db:ff:98:60:e6:f5:0f:
         98:3a:b5:46:66:92:96:1b:32:9a:5a:79:48:0d:9c:05:ac:b2:
         bc:ef:51:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQkdPPiBLzdQxw65VthLp0i5f/swwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1MEE0Mzg4MTM0M0UwRUY1QTQ2Mjk2OTY2MkY4RjM4
RjMyRUNCODAeFw0yNDAzMjExNzA3MjhaFw0yNTAzMjAxNzEyMjhaMDMxMTAvBgNV
BAMTKEFCNjhENTlGM0Y2MUIxNTk0Qjc5NkQ1RkZDMzIwN0JFMUM2QzFCMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ8T2/1lt0U9FSTrT5lmqiDvuJ
qYZfEHn+SxetvidVO0eCC/u4O3Yo3O9IKjosjWEkDTh60piaPzeNIBvCVxVs3xxe
02Ge1JSmrMbiXYHKEQb74vdOM9VxUW9SHN/IJBA56mwRqI4UJRMopX2KU+vzadSE
eteEmYDp8FqAYqZCW94gCfeThaFfhLuZFRO+JozvJA5kIhelG5EREaThozuqzqqC
jblniHxMBrpWWJdElyMae5EpXd9o9ckb5QE0C8Y6m+KxFzZDNFtqTBpHyqKY3XPa
Y72l8JeLuqY7aO0kWL7eZ3eS4Lmy/ovP28jlzrooSMpMUVbcgnk3Tu6QUCjzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq2jVnz9hsVlLeW1f/DIHvhxsGyQwHwYDVR0j
BBgwFoAUL1CkOIE0Pg71pGKWlmL4848y7LgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC8yRjUwQTQzODgxMzQzRTBFRjVBNDYyOTY5NjYyRjhGMzhGMzJFQ0I4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGNTBBNDM4ODEzNDNFMEVG
NUE0NjI5Njk2NjJGOEYzOEYzMkVDQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimE+MA0GCSqGSIb3DQEBCwUAA4IBAQAUnDh1E253
PmXHXBiR78acJeUGmEEryZ06OwVMtqQpMGWo+bI7YXAL70SQzcnhViQQnqWasvRF
2Y6ShITilR1LlpyS3vMz64uPh2MUqnN6jEZiFgwtfmAWmy3qVg3nt2ty/kDwpAj+
k7GhcA5m+vkjoFOFNQrjCFG94caD1jCGzPXzOlLJgj9XPdRLdZqGN+riRIwflWw5
KckhtDvGN5v8heiOE5rzulOZT784oGvs3X3xtq2sM8iPUxQaFyDcMmQgY2Hgh54U
+g14KBIfM6tLo2XsiLHONJyP5YnLrAJrGl0Xftv/mGDm9Q+YOrVGZpKWGzKaWnlI
DZwFrLK871Fg
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org