Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36302e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          RRwfo82KCvH8yN3cfirNuDOaFFn8NKszKV3R01Udpv0=
Subject key identifier:   07:E5:9A:E7:77:F1:2F:97:B4:8E:B8:67:3A:E1:D3:B1:04:53:D3:46
Certificate issuer:       /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial:       592B3EC2D3276B03FC4184FEA4BAE72838C56F99
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 13:00:02 +0000
ROA not before:           Wed 22 Jan 2025 12:55:02 +0000
ROA not after:            Wed 21 Jan 2026 13:00:02 +0000
asID:                     264130
IP address blocks:        138.97.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:2b:3e:c2:d3:27:6b:03:fc:41:84:fe:a4:ba:e7:28:38:c5:6f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
        Validity
            Not Before: Jan 22 12:55:02 2025 GMT
            Not After : Jan 21 13:00:02 2026 GMT
        Subject: CN=07E59AE777F12F97B48EB8673AE1D3B10453D346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b4:a5:9c:ae:44:ed:cd:b8:5c:51:2e:00:40:
                    37:9f:cd:97:20:ee:80:50:57:fa:ec:56:47:9f:f4:
                    42:aa:f0:4e:1d:fb:7d:e3:e6:0e:bb:76:fa:46:f5:
                    b6:11:0f:25:48:49:a1:97:f9:6f:0e:55:17:bc:b0:
                    cc:ed:67:f3:41:9f:52:fc:7c:12:39:55:3a:2b:04:
                    24:3c:82:fb:10:d7:a5:e4:fe:b2:b3:3c:50:33:91:
                    4d:30:19:a2:5d:8c:4d:a1:be:38:48:9f:3d:d3:13:
                    40:a4:03:59:82:ae:74:32:12:6f:c9:c4:af:a3:b8:
                    7b:a9:cc:2f:3d:d8:ba:89:3a:04:7d:53:5e:d9:74:
                    64:a2:7a:76:41:40:ae:70:19:03:a5:d3:cd:6b:e3:
                    b3:2c:5e:c3:38:76:07:02:1f:67:c1:59:5a:50:4e:
                    63:00:86:d5:40:77:6d:fc:e8:bf:22:a8:f4:33:a7:
                    15:31:a9:9e:63:95:e7:39:7e:6e:f2:b1:af:36:88:
                    7b:2c:bb:29:cf:1c:64:76:bd:33:9a:fe:e8:ca:ad:
                    17:38:ac:3b:b9:7a:19:40:c7:b7:3d:6b:46:2d:0a:
                    75:56:f6:86:7b:0b:c8:cb:a0:47:f0:78:b1:26:dc:
                    b1:44:ed:b3:7d:19:6f:dd:00:0f:ad:8b:89:1d:b5:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:9A:E7:77:F1:2F:97:B4:8E:B8:67:3A:E1:D3:B1:04:53:D3:46
            X509v3 Authority Key Identifier:
                keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36302e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:a8:f6:bd:2c:9b:09:fe:3f:fd:bd:54:15:df:5b:9c:58:4e:
         1b:8d:e8:8d:8f:26:c0:d7:7f:c9:d0:48:35:15:f7:e5:80:6a:
         28:0f:24:e0:1f:0e:25:d9:78:4b:e6:e6:1e:bf:56:83:98:db:
         e1:48:c9:01:8f:1c:70:7d:fa:4b:e6:6f:cf:22:56:8f:f2:56:
         57:c5:8b:0a:a3:75:11:1a:29:d5:29:ba:83:c7:3d:f2:23:92:
         3f:85:f7:0b:87:4e:bf:d6:f0:d5:fd:af:fb:cd:2f:12:ad:5b:
         50:d8:c3:80:b5:24:b1:64:b4:c2:ef:99:52:84:c7:cc:20:ab:
         95:16:ea:51:9a:63:7b:8a:ac:a9:79:10:92:4c:90:12:f3:12:
         ac:f4:04:f9:e4:79:f7:a9:e0:4d:7d:b8:be:38:92:11:d2:35:
         99:0c:a1:8c:d0:8e:a7:ad:de:bc:e3:9a:0d:8d:53:31:c8:f9:
         c7:8d:c3:54:5a:79:16:dc:a1:1a:30:21:4b:f3:e2:37:46:63:
         21:22:e4:f9:15:03:89:5d:ff:55:3e:b8:51:46:15:08:a0:e1:
         fc:ee:83:2f:8e:4b:30:e5:af:8f:81:8d:1c:3f:0e:97:18:6c:
         f1:6d:8f:a2:cd:9f:13:6c:87:14:11:04:dc:85:c2:63:d3:f2:
         99:3d:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net