Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
File:                     3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          tDA5N2r1VZljWz5zThZWNbHKT0oLpOI8T6DEcLIO88o=
Subject key identifier:   99:21:88:67:2C:49:6D:51:7D:9E:3A:84:33:E9:64:B1:A5:19:C6:B9
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       5EBC50795A77EA6272322C28EEEE03CF7432C3A3
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     28270
IP address blocks:        138.122.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:bc:50:79:5a:77:ea:62:72:32:2c:28:ee:ee:03:cf:74:32:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=992188672C496D517D9E3A8433E964B1A519C6B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:4b:56:7b:cc:96:24:4b:81:41:18:d6:37:
                    79:43:d9:04:eb:1c:d7:e1:db:ca:82:bd:55:69:70:
                    6a:65:15:15:b6:d9:b7:71:88:fb:1e:72:88:69:31:
                    73:f1:a2:bf:21:1a:45:b5:e9:10:65:f7:c8:20:b8:
                    20:9b:50:7f:06:3f:7a:18:cd:0d:06:e7:c5:c0:32:
                    0d:90:d0:2e:56:e8:dc:95:f4:d7:d1:99:7e:da:4c:
                    f3:74:5e:42:0b:fa:6e:2b:a3:01:96:ef:40:b0:6f:
                    ef:94:9e:a1:32:36:a6:8d:9e:78:52:6b:2d:a6:95:
                    18:c5:da:95:8e:d7:cc:92:08:54:d8:f6:52:a3:da:
                    3d:81:73:f0:c4:f3:18:25:73:28:51:a7:25:d3:93:
                    1b:03:2d:39:d5:7d:94:53:72:bd:e0:0e:1c:1f:25:
                    fc:19:74:64:a9:ff:28:1f:8a:e7:1b:c1:cb:26:49:
                    cd:e0:d1:12:51:8f:71:b2:a1:5e:5f:1d:ca:18:8e:
                    bf:f3:f2:ed:f9:f2:3a:f2:64:93:5b:ee:26:2e:34:
                    2f:7f:2b:94:2c:aa:d4:f9:47:cc:93:24:c9:8f:16:
                    00:9e:eb:ad:a7:f7:5a:31:e6:11:b6:bf:ad:bf:a7:
                    0d:63:a0:1a:fc:f5:19:3e:ae:ad:f4:8f:10:28:c1:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:21:88:67:2C:49:6D:51:7D:9E:3A:84:33:E9:64:B1:A5:19:C6:B9
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132322e3233372e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:9f:04:87:55:4d:ad:c6:f1:e5:29:f9:0f:c9:64:fa:af:
         fd:48:b8:58:04:1b:c6:34:f8:ed:d2:df:33:cb:95:b2:6e:be:
         68:a9:e1:04:28:93:0d:1b:28:aa:98:a9:b0:f0:26:bd:c5:e9:
         52:97:a2:66:dc:f2:d9:19:01:5c:c1:8a:40:c9:01:d6:ed:c8:
         91:a0:2f:45:16:ee:dd:cf:db:07:df:b7:1a:4c:13:ff:19:3b:
         18:6e:a8:a2:23:0c:63:23:0e:bf:1f:c5:0d:eb:08:96:e3:5d:
         6e:7f:99:1e:cd:a6:6e:1f:c3:5d:4e:ec:8e:83:1a:c0:b5:ef:
         09:a1:cf:3c:3d:cd:58:6a:28:a4:96:51:ed:d8:3e:89:e8:9a:
         11:72:13:49:52:02:65:68:6e:88:fd:07:7b:fc:03:fb:cb:3d:
         a4:14:f8:09:57:f7:10:d1:09:96:19:ae:23:aa:de:66:7a:52:
         9f:ea:d4:e4:48:56:f7:84:b3:16:25:ac:fd:46:64:a2:ab:88:
         4b:c4:bb:5d:8e:87:75:4f:8a:bb:23:e3:24:cd:56:9f:87:24:
         44:75:e6:74:12:21:26:30:eb:f1:41:92:88:a7:f2:14:4e:66:
         87:1d:d8:13:f1:e8:25:8d:84:42:64:4a:53:85:11:87:68:32:
         05:0a:b4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net