Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/3133382e39372e3134372e302f32342d3234203d3e20323634313838.roa
File:                     3133382e39372e3134372e302f32342d3234203d3e20323634313838.roa (raw, json)
Hash identifier:          9MLgba5hhUc7HlkTfh92TAOiytY4DIUOxhpO5gAP0tY=
Subject key identifier:   FE:12:A6:C2:92:07:75:0C:16:F9:F2:9C:A8:5F:3E:5D:96:5B:C1:7F
Certificate issuer:       /CN=A2971BA6355B7BAE100D15C6C26222FA28140A78
Certificate serial:       478841888CDE5AF6B46FA2C764B315AFED88E3A6
Authority key identifier: A2:97:1B:A6:35:5B:7B:AE:10:0D:15:C6:C2:62:22:FA:28:14:0A:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/3133382e39372e3134372e302f32342d3234203d3e20323634313838.roa
Signing time:             Wed 09 Mar 2022 07:35:21 +0000
ROA not before:           Wed 09 Mar 2022 07:30:21 +0000
ROA not after:            Wed 08 Mar 2023 07:35:21 +0000
asID:                     264188
IP address blocks:        138.97.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:88:41:88:8c:de:5a:f6:b4:6f:a2:c7:64:b3:15:af:ed:88:e3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2971BA6355B7BAE100D15C6C26222FA28140A78
        Validity
            Not Before: Mar  9 07:30:21 2022 GMT
            Not After : Mar  8 07:35:21 2023 GMT
        Subject: CN=FE12A6C29207750C16F9F29CA85F3E5D965BC17F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:40:14:cb:42:a0:81:1e:8e:2d:96:5f:34:
                    87:47:5f:fd:5a:5d:ef:e1:28:12:b1:12:bc:cb:a1:
                    2f:9c:92:f0:6e:20:ea:68:79:33:71:2d:3f:1a:f0:
                    53:0d:89:1e:5e:ca:86:50:a0:4a:2c:c5:46:1f:22:
                    cb:7d:a5:28:36:b3:13:be:15:b4:d5:1d:94:aa:14:
                    1c:16:60:f4:70:97:31:14:42:7d:a7:4a:30:88:28:
                    b6:15:8b:d9:5f:7b:0c:d0:b8:0d:c8:b9:f2:dd:f5:
                    d8:c7:5d:eb:e7:08:a8:40:59:ec:e9:5a:c8:e0:a0:
                    4d:b6:0c:18:c4:9a:1b:15:f2:38:96:4c:8d:f9:ba:
                    03:4f:fe:30:51:8f:1c:e8:f1:9b:58:9c:07:d3:69:
                    b1:ff:d2:5c:d9:ae:d9:96:eb:ea:08:60:11:78:3e:
                    33:43:67:ce:e6:1a:6e:e6:3e:19:9c:f3:53:7d:b8:
                    f9:90:6a:07:30:8b:5e:31:4f:72:7d:98:97:1b:ab:
                    77:db:ca:da:80:f2:d9:aa:fc:64:9c:4e:0f:5c:a9:
                    db:cf:5b:b6:77:fc:43:2a:d2:62:22:2b:e1:88:34:
                    79:36:ae:c6:0a:e4:3f:57:1a:28:08:75:bf:94:e1:
                    1d:a0:69:8c:fb:af:9d:23:f1:7d:5a:f8:53:6f:47:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:12:A6:C2:92:07:75:0C:16:F9:F2:9C:A8:5F:3E:5D:96:5B:C1:7F
            X509v3 Authority Key Identifier:
                keyid:A2:97:1B:A6:35:5B:7B:AE:10:0D:15:C6:C2:62:22:FA:28:14:0A:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2971BA6355B7BAE100D15C6C26222FA28140A78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpsEnLsgS1L39P5Tr7nukZJwwt9ChqY6v9ZpJtjQg29q/0/3133382e39372e3134372e302f32342d3234203d3e20323634313838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:0f:79:eb:a8:c2:03:1f:3e:07:ad:e8:aa:12:a7:d7:c8:f8:
         15:a8:a9:07:23:49:54:04:b6:4e:c9:6c:aa:96:4b:db:12:65:
         30:2c:50:0c:3a:88:6d:5b:f4:83:a5:88:df:0e:5a:18:6e:55:
         69:8a:3d:e9:32:69:4b:ed:c5:73:d4:57:32:8b:eb:d8:3b:86:
         41:13:19:e9:6c:69:f3:4b:d3:26:98:a8:22:3f:fd:ff:37:32:
         5b:cc:a5:bf:01:f8:d8:1a:9e:98:4a:cf:25:90:86:02:c7:71:
         65:04:eb:a9:82:2c:6b:83:e4:11:be:9c:97:20:93:e1:02:e6:
         fa:c2:5f:2d:42:11:49:e1:76:9a:68:dd:b9:db:46:c0:98:77:
         7c:e2:61:2c:c5:a5:bf:43:ec:77:7c:7c:6a:4c:be:46:55:64:
         bc:50:86:a5:8d:26:9d:51:ce:ed:8f:e4:fa:7f:ae:7d:21:69:
         bc:6c:e9:a9:5b:01:aa:88:fb:5f:91:fe:9e:14:13:7a:8f:20:
         ee:17:03:c7:8b:8c:88:6d:53:8e:c0:40:43:2f:6d:04:cf:be:
         c2:31:46:3b:a1:65:ed:18:22:98:8c:22:14:e3:4b:e2:04:30:
         75:a6:80:72:26:c4:0e:3e:a3:15:d1:b7:ae:9f:d1:60:d4:18:
         9b:17:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org