Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa
File:                     3133382e39372e3130372e302f32342d3234203d3e203533313037.roa (raw, json)
Hash identifier:          KJvmoah7f7emWASsvswj/ZmG0OV4L75jubNqxo17ODU=
Subject key identifier:   05:7E:46:DF:08:F9:D7:7E:CE:DE:70:15:F8:73:3D:E3:53:74:5C:60
Certificate issuer:       /CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
Certificate serial:       5C5BB7214BDD8F9E8F3728D8BBAA85B93225EE1A
Authority key identifier: B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa
Signing time:             Wed 03 Apr 2024 18:37:21 +0000
ROA not before:           Wed 03 Apr 2024 18:32:21 +0000
ROA not after:            Wed 02 Apr 2025 18:37:21 +0000
asID:                     53107
IP address blocks:        138.97.107.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5b:b7:21:4b:dd:8f:9e:8f:37:28:d8:bb:aa:85:b9:32:25:ee:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B56D6521DB20BD772608B2AE7C8674DEA8A5598F
        Validity
            Not Before: Apr  3 18:32:21 2024 GMT
            Not After : Apr  2 18:37:21 2025 GMT
        Subject: CN=057E46DF08F9D77ECEDE7015F8733DE353745C60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:10:4a:59:5c:53:03:35:86:7f:f9:4e:ff:fa:
                    0e:9c:71:ca:9d:0c:72:d6:50:cf:0c:46:71:b1:1f:
                    fb:fc:4f:06:d9:a1:84:a9:2a:16:48:7d:6d:53:c2:
                    de:8c:90:ac:91:f8:60:08:ff:41:eb:8a:6a:a2:60:
                    97:98:eb:26:bb:7e:35:48:0b:ba:9a:10:23:00:e6:
                    f7:e1:60:16:ed:a1:f2:cd:93:22:84:57:71:44:a7:
                    75:f2:70:bf:90:fa:6b:10:e4:8e:a4:d6:76:ff:d2:
                    bb:a6:15:7f:31:7d:0e:0a:84:c4:47:3e:5e:e8:00:
                    83:91:86:a2:db:05:9c:45:c5:98:31:78:e4:a0:60:
                    01:49:56:bf:2d:d9:91:69:ac:5c:af:9f:c8:c8:d8:
                    6c:23:13:d6:df:27:ea:2e:3c:31:e0:6e:50:73:30:
                    b6:22:d6:10:ec:05:8d:c9:35:b3:ae:da:99:b0:36:
                    6c:dd:a9:97:b5:b8:cf:d5:ab:1a:92:1a:5d:32:2a:
                    1f:a5:69:15:7c:94:cc:86:b9:02:90:7d:1d:f5:03:
                    5e:4c:7a:2d:ed:59:fa:93:44:7e:50:98:3d:32:70:
                    5b:01:2d:90:44:c7:eb:3e:a5:8e:c7:c7:e7:7e:5b:
                    91:19:75:75:ab:7e:af:68:cd:53:ea:5c:23:2a:8e:
                    34:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7E:46:DF:08:F9:D7:7E:CE:DE:70:15:F8:73:3D:E3:53:74:5C:60
            X509v3 Authority Key Identifier:
                keyid:B5:6D:65:21:DB:20:BD:77:26:08:B2:AE:7C:86:74:DE:A8:A5:59:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B56D6521DB20BD772608B2AE7C8674DEA8A5598F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HHgJqxodZtnu2KirThR8sp7KQvDCriXQJEfPfFC5TbzK/0/3133382e39372e3130372e302f32342d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:cd:46:83:bf:86:e6:df:d1:5b:1b:f4:35:f9:6f:4c:d2:18:
         ca:08:3d:b8:7b:9d:e2:5c:2b:fc:c3:e8:49:60:76:51:28:db:
         2e:34:a6:21:38:91:a9:01:c0:e5:b0:23:03:29:66:6e:2c:09:
         b6:76:68:78:da:40:6c:66:65:54:48:15:2a:8a:ce:b8:81:32:
         9d:50:cf:cb:a9:5e:95:d4:34:67:9f:6e:b1:57:a7:34:22:c5:
         20:3f:1a:28:90:cf:a2:da:26:0a:05:58:16:a0:ae:56:f4:de:
         0e:53:af:08:d6:8a:7d:d3:62:57:90:22:99:77:23:45:14:fb:
         77:b6:cb:d2:32:8d:b1:16:c9:dc:3b:dc:e9:f6:c2:d0:3f:a3:
         bf:ee:b9:e1:71:e0:45:88:da:29:27:a1:b8:a1:d3:6b:27:6e:
         57:2c:3b:df:d6:50:83:c9:0d:ab:90:a5:a8:3a:a4:93:1a:90:
         de:ed:f1:6a:dc:44:a1:fb:2e:53:e7:2d:95:9b:52:4e:f7:0f:
         82:a0:aa:1a:09:96:1a:e7:c0:bf:5e:bf:dc:6e:ad:d7:e9:2f:
         2f:d6:43:15:17:d9:54:16:59:88:a0:4a:33:9c:21:f3:cf:1f:
         c9:19:56:12:52:f8:2e:16:21:e5:1b:30:ae:80:01:e7:05:bb:
         51:19:fb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:11 2024 by rpki-client on console-fra.rpki-client.org