Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36332e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          T6eVEzXBQEN0NNkk5Zf4fae9eTI62wZFungW8TldFzo=
Subject key identifier:   D4:EB:CD:04:C1:18:E9:3B:8A:CB:36:EA:01:26:63:21:74:F1:4B:0B
Certificate issuer:       /CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
Certificate serial:       606DAA97845E32C720B15C8F474B77B5E26A7C31
Authority key identifier: 2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
Signing time:             Thu 21 Mar 2024 17:12:28 +0000
ROA not before:           Thu 21 Mar 2024 17:07:28 +0000
ROA not after:            Thu 20 Mar 2025 17:12:28 +0000
asID:                     264130
IP address blocks:        138.97.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6d:aa:97:84:5e:32:c7:20:b1:5c:8f:47:4b:77:b5:e2:6a:7c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F50A43881343E0EF5A462969662F8F38F32ECB8
        Validity
            Not Before: Mar 21 17:07:28 2024 GMT
            Not After : Mar 20 17:12:28 2025 GMT
        Subject: CN=D4EBCD04C118E93B8ACB36EA0126632174F14B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:46:38:bf:f6:35:1f:a7:e0:2b:54:54:30:0b:
                    86:c6:92:cb:14:39:27:6a:4b:7e:d1:b0:54:d5:f2:
                    90:4d:a2:2c:2a:25:d4:62:10:ed:0b:64:b1:dc:a6:
                    d2:4e:c6:d9:ae:71:bf:25:72:ec:ce:33:77:f5:85:
                    4d:9e:c0:ed:24:85:3b:11:b5:9c:a2:65:18:b3:20:
                    04:a2:24:d2:c7:c3:ea:0f:b3:c1:5b:96:22:fd:0d:
                    6a:c8:e7:c8:9d:a9:c8:97:66:78:bd:22:ce:81:d6:
                    d7:ab:bb:f4:0e:f9:72:8f:f5:49:4a:77:ea:fe:11:
                    58:37:dc:22:3d:d8:ab:e8:49:24:5f:a4:4d:cb:80:
                    ac:9e:a1:ae:63:e3:06:d2:ab:b9:66:bb:3f:31:1e:
                    96:d2:c6:fa:19:ba:7e:74:84:8f:69:38:e0:99:a9:
                    5a:a0:da:bf:80:e6:99:e5:33:79:20:5d:3a:df:de:
                    47:aa:2e:bf:6b:f4:03:7e:57:1c:60:bf:da:d2:27:
                    2c:22:4e:23:c3:13:ca:cf:d9:55:54:15:ff:e3:59:
                    82:70:f6:39:d6:5d:11:d2:d3:ff:df:ab:18:d4:49:
                    39:8d:36:ae:46:14:6a:38:1b:86:cb:09:80:5c:59:
                    60:39:12:c4:eb:d9:18:07:9e:00:04:50:5c:f4:35:
                    aa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EB:CD:04:C1:18:E9:3B:8A:CB:36:EA:01:26:63:21:74:F1:4B:0B
            X509v3 Authority Key Identifier:
                keyid:2F:50:A4:38:81:34:3E:0E:F5:A4:62:96:96:62:F8:F3:8F:32:EC:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F50A43881343E0EF5A462969662F8F38F32ECB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:b7:9d:22:b2:45:9e:c4:84:d1:fb:8b:41:97:d9:af:52:34:
         51:d4:06:f1:4e:2b:28:17:f3:4a:9c:96:56:96:ee:da:a5:37:
         87:1d:f9:77:56:a2:88:56:e5:de:74:c1:1c:85:79:d3:2b:8d:
         a1:b7:33:c6:85:23:6f:59:92:15:70:9c:5b:b4:fc:61:bb:0a:
         31:0c:13:4a:f5:05:e9:1f:43:ba:e9:11:dd:f6:72:eb:71:2a:
         23:5c:c4:21:8d:e3:7b:6e:b8:c4:5b:55:0a:2f:87:a2:b0:6f:
         5c:d3:e7:18:c9:c5:96:b4:06:7c:81:02:75:cc:cc:ee:b1:a0:
         b4:3a:8d:28:63:52:fa:ee:5a:20:a4:d9:1e:f8:fe:6c:bf:b9:
         6c:9e:04:63:8e:21:75:c7:f2:e5:67:a3:6d:d3:95:22:ff:17:
         c9:8f:a8:e5:92:c1:ba:da:83:c3:e5:cf:c8:27:4b:9a:6a:f2:
         56:38:2f:2d:8f:d0:8b:2c:b8:3c:ba:db:ac:f9:86:ba:1e:7e:
         e5:ff:a4:98:f0:69:ca:d6:54:ac:07:24:51:8c:fe:7b:49:68:
         2b:a1:8d:4c:f4:43:26:76:e5:f1:de:86:3b:af:79:5c:99:84:
         d7:1a:24:3a:9d:85:64:ef:4d:82:60:17:0b:40:3e:00:5e:0b:
         05:60:88:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYG2ql4ReMscgsVyPR0t3teJqfDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkY1MEE0Mzg4MTM0M0UwRUY1QTQ2Mjk2OTY2MkY4RjM4
RjMyRUNCODAeFw0yNDAzMjExNzA3MjhaFw0yNTAzMjAxNzEyMjhaMDMxMTAvBgNV
BAMTKEQ0RUJDRDA0QzExOEU5M0I4QUNCMzZFQTAxMjY2MzIxNzRGMTRCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfRji/9jUfp+ArVFQwC4bGkssU
OSdqS37RsFTV8pBNoiwqJdRiEO0LZLHcptJOxtmucb8lcuzOM3f1hU2ewO0khTsR
tZyiZRizIASiJNLHw+oPs8FbliL9DWrI58idqciXZni9Is6B1teru/QO+XKP9UlK
d+r+EVg33CI92KvoSSRfpE3LgKyeoa5j4wbSq7lmuz8xHpbSxvoZun50hI9pOOCZ
qVqg2r+A5pnlM3kgXTrf3keqLr9r9AN+Vxxgv9rSJywiTiPDE8rP2VVUFf/jWYJw
9jnWXRHS0//fqxjUSTmNNq5GFGo4G4bLCYBcWWA5EsTr2RgHngAEUFz0NaqfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1OvNBMEY6TuKyzbqASZjIXTxSwswHwYDVR0j
BBgwFoAUL1CkOIE0Pg71pGKWlmL4848y7LgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC8yRjUwQTQzODgxMzQzRTBFRjVBNDYyOTY5NjYyRjhGMzhGMzJFQ0I4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJGNTBBNDM4ODEzNDNFMEVG
NUE0NjI5Njk2NjJGOEYzOEYzMkVDQjguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimE/MA0GCSqGSIb3DQEBCwUAA4IBAQAot50iskWe
xITR+4tBl9mvUjRR1AbxTisoF/NKnJZWlu7apTeHHfl3VqKIVuXedMEchXnTK42h
tzPGhSNvWZIVcJxbtPxhuwoxDBNK9QXpH0O66RHd9nLrcSojXMQhjeN7brjEW1UK
L4eisG9c0+cYycWWtAZ8gQJ1zMzusaC0Oo0oY1L67logpNke+P5sv7lsngRjjiF1
x/LlZ6Nt05Ui/xfJj6jlksG62oPD5c/IJ0uaavJWOC8tj9CLLLg8utus+Ya6Hn7l
/6SY8GnK1lSsByRRjP57SWgroY1M9EMmduXx3oY7r3lcmYTXGiQ6nYVk702CYBcL
QD4AXgsFYIgt
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org