Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa
File:                     3133382e39372e36322e302f32332d3233203d3e20323634313330.roa (raw, json)
Hash identifier:          AHPzwAWCSrvW5r4OclvifiOAf2iB0mm/wll4dkZfYjk=
Subject key identifier:   08:37:F5:83:19:99:29:1D:B9:F0:89:FB:35:3A:F1:AB:67:C1:4B:CF
Certificate issuer:       /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial:       758A31802D309A2DE518A15381B6930F9F645F49
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 13:00:04 +0000
ROA not before:           Wed 22 Jan 2025 12:55:04 +0000
ROA not after:            Wed 21 Jan 2026 13:00:04 +0000
asID:                     264130
IP address blocks:        138.97.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:31:80:2d:30:9a:2d:e5:18:a1:53:81:b6:93:0f:9f:64:5f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
        Validity
            Not Before: Jan 22 12:55:04 2025 GMT
            Not After : Jan 21 13:00:04 2026 GMT
        Subject: CN=0837F5831999291DB9F089FB353AF1AB67C14BCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:a0:03:7d:a6:44:03:70:8e:44:05:dd:7f:
                    9f:18:bc:5d:ba:7c:d9:7a:e4:b1:e0:12:4a:1f:ac:
                    74:30:23:de:4e:c3:7f:7d:40:01:3a:c6:11:8d:1c:
                    83:34:b3:c0:f0:73:cf:87:8d:46:bf:d9:5b:e3:29:
                    0d:af:ea:30:00:0c:23:45:9a:05:b3:31:0f:d1:4b:
                    61:6a:d5:3f:45:50:42:8b:b2:09:f5:96:09:08:1a:
                    39:d1:de:24:d8:ed:b3:7c:d2:5f:be:7d:55:54:06:
                    4b:2a:dd:23:53:a4:1e:4c:d9:cc:d2:36:32:e0:f9:
                    00:21:34:b8:91:49:8b:38:e3:91:0d:d6:74:51:73:
                    ea:af:c9:68:88:20:29:ff:7a:af:19:12:91:86:a3:
                    ca:30:5e:5e:4b:18:e4:39:d7:60:db:5f:22:39:8f:
                    fc:b9:4f:43:22:b7:bb:55:bc:94:67:d7:16:ef:85:
                    87:32:2d:c3:17:99:9e:57:af:52:e4:ec:8d:ce:3d:
                    30:f1:1c:16:8e:c0:29:eb:d4:9a:a4:c9:15:f1:95:
                    5c:7b:f8:f4:cb:16:aa:24:af:49:d3:8f:e1:76:a1:
                    d3:ef:f1:6a:e8:17:76:61:e4:b0:47:d5:a1:43:ec:
                    a7:05:c6:7b:d7:6b:8b:20:59:e6:dc:86:4e:d6:ca:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:37:F5:83:19:99:29:1D:B9:F0:89:FB:35:3A:F1:AB:67:C1:4B:CF
            X509v3 Authority Key Identifier:
                keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36322e302f32332d3233203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:97:2b:b0:27:b5:98:42:15:8e:4a:d8:0e:0b:2a:ae:82:c8:
         1e:aa:d4:d9:c5:ec:eb:dc:f9:e1:04:fd:33:13:39:d9:3c:d2:
         90:99:51:af:1f:ee:f3:7a:ef:7a:e4:7d:c7:fc:22:44:31:b8:
         29:72:21:41:a1:ca:77:c4:d3:99:d5:5e:0c:48:a0:46:60:03:
         a1:a3:14:cd:c3:86:8c:bc:14:72:55:4c:34:bb:3a:48:d2:4e:
         ab:a8:43:e3:58:8c:16:01:28:4b:73:38:cf:13:a1:8c:dc:ab:
         08:1f:50:7e:f2:c1:74:f3:fd:65:15:9d:20:01:9e:da:0b:97:
         00:e9:99:d4:f6:8c:cd:ed:c1:20:b0:81:50:f0:6c:2f:e1:bf:
         c1:66:a6:13:3c:91:11:49:56:bc:6c:dc:1e:e3:ad:d3:1b:ef:
         16:03:b4:e7:48:c6:2a:9d:4d:57:2f:34:80:45:62:93:81:b9:
         c5:dc:1f:3c:80:0a:7a:c8:ae:f5:db:85:1d:02:15:56:97:86:
         49:dc:ea:f8:e0:11:67:6f:02:e8:11:d0:0f:f5:06:d2:76:64:
         4e:0e:63:5e:67:93:ac:fa:0c:91:cc:10:05:90:30:db:b6:90:
         c2:f9:1a:be:90:24:f1:2b:4d:21:9e:2d:a3:fd:30:fd:e9:6e:
         56:71:c8:f5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdYoxgC0wmi3lGKFTgbaTD59kX0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI0Mjg5OTJBOEJBQTE1M0IzNjMyMkE4N0JEMTVGNTk2
Q0U4RjBDQjAeFw0yNTAxMjIxMjU1MDRaFw0yNjAxMjExMzAwMDRaMDMxMTAvBgNV
BAMTKDA4MzdGNTgzMTk5OTI5MURCOUYwODlGQjM1M0FGMUFCNjdDMTRCQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNKADfaZEA3CORAXdf58YvF26
fNl65LHgEkofrHQwI95Ow399QAE6xhGNHIM0s8Dwc8+HjUa/2VvjKQ2v6jAADCNF
mgWzMQ/RS2Fq1T9FUEKLsgn1lgkIGjnR3iTY7bN80l++fVVUBksq3SNTpB5M2czS
NjLg+QAhNLiRSYs445EN1nRRc+qvyWiIICn/eq8ZEpGGo8owXl5LGOQ512DbXyI5
j/y5T0Mit7tVvJRn1xbvhYcyLcMXmZ5Xr1Lk7I3OPTDxHBaOwCnr1JqkyRXxlVx7
+PTLFqokr0nTj+F2odPv8WroF3Zh5LBH1aFD7KcFxnvXa4sgWebchk7Wym0nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCDf1gxmZKR258In7NTrxq2fBS88wHwYDVR0j
BBgwFoAUi0KJkqi6oVOzYyKoe9FfWWzo8MswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUxyb1dvS3BMQ2tkanc3TjhENVVCc0J5OU45RzU1akpuZWZBVXdodVNq
N04vMC84QjQyODk5MkE4QkFBMTUzQjM2MzIyQTg3QkQxNUY1OTZDRThGMENCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCNDI4OTkyQThCQUExNTNC
MzYzMjJBODdCRDE1RjU5NkNFOEYwQ0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VMcm9Xb0twTENrZGp3N044RDVVQnNCeTlOOUc1NWpKbmVmQVV3aHVTajdOLzAv
MzEzMzM4MmUzOTM3MmUzNjMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimE+MA0GCSqGSIb3DQEBCwUAA4IBAQBflyuwJ7WY
QhWOStgOCyqugsgeqtTZxezr3PnhBP0zEznZPNKQmVGvH+7zeu965H3H/CJEMbgp
ciFBocp3xNOZ1V4MSKBGYAOhoxTNw4aMvBRyVUw0uzpI0k6rqEPjWIwWAShLczjP
E6GM3KsIH1B+8sF08/1lFZ0gAZ7aC5cA6ZnU9ozN7cEgsIFQ8Gwv4b/BZqYTPJER
SVa8bNwe463TG+8WA7TnSMYqnU1XLzSARWKTgbnF3B88gAp6yK7124UdAhVWl4ZJ
3Or44BFnbwLoEdAP9QbSdmRODmNeZ5Os+gyRzBAFkDDbtpDC+Rq+kCTxK00hni2j
/TD96W5Wccj1
-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net