Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36312e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          VdiMBWBuW5UT4YjNwA/JZ4XrRGFhdFPD1lXC/2tWkSo=
Subject key identifier:   8E:BB:EB:A2:5B:BB:F1:88:6C:74:5E:2B:85:D4:EE:68:B9:9D:D8:12
Certificate issuer:       /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial:       3723F64ACC42D8123456331492ABD0651D35B4A1
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 13:00:03 +0000
ROA not before:           Wed 22 Jan 2025 12:55:03 +0000
ROA not after:            Wed 21 Jan 2026 13:00:03 +0000
asID:                     264130
IP address blocks:        138.97.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:23:f6:4a:cc:42:d8:12:34:56:33:14:92:ab:d0:65:1d:35:b4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
        Validity
            Not Before: Jan 22 12:55:03 2025 GMT
            Not After : Jan 21 13:00:03 2026 GMT
        Subject: CN=8EBBEBA25BBBF1886C745E2B85D4EE68B99DD812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:32:31:73:c9:24:8c:61:df:99:a2:d8:09:
                    b6:e4:3a:1e:24:b5:d5:bf:51:b6:ab:52:a4:bc:5f:
                    da:fc:4b:a5:13:28:c1:57:54:51:e0:c6:f7:58:d2:
                    76:e4:4e:43:79:b6:d2:37:2c:37:80:06:9b:c8:fb:
                    3c:5e:d2:7f:2f:fd:aa:d4:d7:04:3a:3d:b9:b5:74:
                    6b:69:33:a2:32:4a:35:a4:7a:92:7d:2e:85:1c:b1:
                    7c:d2:dd:fb:39:92:87:91:5c:32:68:d6:d0:f7:fa:
                    85:f8:90:d8:9c:c5:07:20:84:4f:68:f0:71:04:df:
                    74:46:c8:f2:c4:79:6a:64:6b:3a:ff:98:89:d6:d3:
                    cd:89:dd:87:e5:25:14:91:f6:fa:a1:aa:15:b8:b9:
                    1b:37:b0:09:55:92:c0:90:21:2c:04:13:50:34:3a:
                    79:0f:c3:b0:48:63:34:67:4c:6c:bb:d5:e1:70:e2:
                    f5:5f:e9:51:b5:bb:be:60:3c:eb:41:e4:d9:3f:4c:
                    44:39:9c:d7:8c:45:16:dd:6e:49:4f:18:96:0e:d9:
                    99:60:c5:da:c2:ee:d9:61:f3:10:e1:c9:a2:ec:2f:
                    97:21:44:2a:87:a7:bd:61:12:12:28:d9:97:f9:0c:
                    0f:fc:d2:bc:3f:ee:91:b7:86:37:83:e3:94:2f:35:
                    f4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BB:EB:A2:5B:BB:F1:88:6C:74:5E:2B:85:D4:EE:68:B9:9D:D8:12
            X509v3 Authority Key Identifier:
                keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36312e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:a3:39:cd:6f:06:b1:c9:a2:df:79:3d:fb:e4:6f:78:5f:b4:
         b0:ef:17:c5:56:7f:e6:81:39:cd:2d:69:07:19:4e:c7:b4:be:
         ed:8c:14:ad:08:b3:cd:65:df:4c:ab:9b:70:09:d6:47:84:0d:
         52:42:ca:ba:c4:fb:fc:15:22:2a:2a:a5:21:bb:ad:fb:50:09:
         1e:11:e2:8c:f6:60:27:a1:89:68:c1:34:ae:07:a4:cf:a0:1d:
         70:bf:fd:e8:19:d2:6a:1f:07:47:33:e0:85:05:76:fc:9b:d6:
         8a:01:60:aa:2c:88:1e:f8:69:66:8b:91:13:a6:41:73:23:61:
         41:11:3d:d8:8b:a5:b0:b5:99:bd:24:77:5a:a7:0d:cb:74:69:
         5c:29:fb:df:11:e8:86:95:42:6a:dc:b9:2d:46:4f:5d:bd:b7:
         c7:06:b1:82:85:1d:54:dc:a5:4e:d6:25:d9:7e:11:ff:b1:87:
         6a:74:75:92:d5:d0:71:d2:86:27:50:9e:13:03:75:ce:ff:7f:
         ed:89:6c:2b:c3:1b:64:98:ae:3a:fd:d7:48:56:4b:47:29:b1:
         0c:18:6b:46:56:31:99:b5:a5:83:62:de:67:4e:29:7a:0a:17:
         10:70:f9:17:b8:d9:56:04:3c:f1:e2:c8:82:a0:e5:7f:a4:f9:
         f8:dd:17:25
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNyP2SsxC2BI0VjMUkqvQZR01tKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0Mjg5OTJBOEJBQTE1M0IzNjMyMkE4N0JEMTVGNTk2
Q0U4RjBDQjAeFw0yNTAxMjIxMjU1MDNaFw0yNjAxMjExMzAwMDNaMDMxMTAvBgNV
BAMTKDhFQkJFQkEyNUJCQkYxODg2Qzc0NUUyQjg1RDRFRTY4Qjk5REQ4MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPpDIxc8kkjGHfmaLYCbbkOh4k
tdW/UbarUqS8X9r8S6UTKMFXVFHgxvdY0nbkTkN5ttI3LDeABpvI+zxe0n8v/arU
1wQ6Pbm1dGtpM6IySjWkepJ9LoUcsXzS3fs5koeRXDJo1tD3+oX4kNicxQcghE9o
8HEE33RGyPLEeWpkazr/mInW082J3YflJRSR9vqhqhW4uRs3sAlVksCQISwEE1A0
OnkPw7BIYzRnTGy71eFw4vVf6VG1u75gPOtB5Nk/TEQ5nNeMRRbdbklPGJYO2Zlg
xdrC7tlh8xDhyaLsL5chRCqHp71hEhIo2Zf5DA/80rw/7pG3hjeD45QvNfSjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjrvrolu78YhsdF4rhdTuaLmd2BIwHwYDVR0j
BBgwFoAUi0KJkqi6oVOzYyKoe9FfWWzo8MswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC84QjQyODk5MkE4QkFBMTUzQjM2MzIyQTg3QkQxNUY1OTZDRThGMENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNDI4OTkyQThCQUExNTNC
MzYzMjJBODdCRDE1RjU5NkNFOEYwQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAimE9MA0GCSqGSIb3DQEBCwUAA4IBAQBhoznNbwax
yaLfeT375G94X7Sw7xfFVn/mgTnNLWkHGU7HtL7tjBStCLPNZd9Mq5twCdZHhA1S
Qsq6xPv8FSIqKqUhu637UAkeEeKM9mAnoYlowTSuB6TPoB1wv/3oGdJqHwdHM+CF
BXb8m9aKAWCqLIge+Glmi5ETpkFzI2FBET3Yi6WwtZm9JHdapw3LdGlcKfvfEeiG
lUJq3LktRk9dvbfHBrGChR1U3KVO1iXZfhH/sYdqdHWS1dBx0oYnUJ4TA3XO/3/t
iWwrwxtkmK46/ddIVktHKbEMGGtGVjGZtaWDYt5nTil6ChcQcPkXuNlWBDzx4siC
oOV/pPn43Rcl
-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net