Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
File:                     3133382e39372e36332e302f32342d3234203d3e20323634313330.roa (raw, json)
Hash identifier:          Mu86e5W2yDxg9CHALky+nBzpFFkLBqdCsTw2Bjz9WNg=
Subject key identifier:   4E:6D:24:28:8A:1C:7C:EB:66:53:80:40:11:BB:17:07:32:CD:69:91
Certificate issuer:       /CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
Certificate serial:       19B5CD629AEFBE580AFDA4F8D77E64836A556EB7
Authority key identifier: 8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa
Signing time:             Wed 22 Jan 2025 13:00:07 +0000
ROA not before:           Wed 22 Jan 2025 12:55:07 +0000
ROA not after:            Wed 21 Jan 2026 13:00:07 +0000
asID:                     264130
IP address blocks:        138.97.63.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b5:cd:62:9a:ef:be:58:0a:fd:a4:f8:d7:7e:64:83:6a:55:6e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B428992A8BAA153B36322A87BD15F596CE8F0CB
        Validity
            Not Before: Jan 22 12:55:07 2025 GMT
            Not After : Jan 21 13:00:07 2026 GMT
        Subject: CN=4E6D24288A1C7CEB6653804011BB170732CD6991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:26:aa:f7:7e:43:80:66:21:80:a8:fd:0b:
                    36:da:ab:41:a3:68:39:8d:b3:57:81:a5:f5:8d:08:
                    96:02:e3:f1:d5:3d:dc:ee:f1:94:3b:af:5d:d7:d3:
                    45:df:f9:4e:8d:f6:a2:2f:f5:7e:3b:61:95:5d:13:
                    05:72:01:1f:29:c3:00:e4:df:a6:a2:93:1a:cd:41:
                    e3:5d:b9:80:54:5f:8a:4e:bb:bd:e1:ce:2a:ed:46:
                    99:0f:f0:6a:56:08:de:62:44:9d:a1:a2:d9:87:c5:
                    5c:22:0d:7b:59:8b:8c:70:c0:9c:b7:48:cd:22:34:
                    9c:2d:6c:51:1a:99:f5:ac:4d:79:84:27:ab:db:b7:
                    ac:87:0a:0d:e8:e0:02:45:45:21:2c:a6:1f:82:5d:
                    f1:eb:5e:ab:52:8c:d1:b6:f3:ee:d8:8b:0e:10:5f:
                    41:8c:b9:47:10:48:fe:6b:19:09:78:d4:6c:83:6e:
                    79:18:b6:d5:10:41:23:2f:72:c4:97:d1:c3:d9:4b:
                    f1:dd:55:55:d8:39:36:dc:ee:5d:4d:24:73:15:8e:
                    01:2c:3a:68:8a:46:7c:f2:89:37:10:d7:f8:2b:11:
                    47:f9:fc:c2:e1:4a:88:ef:3a:5e:5a:84:a8:d3:fa:
                    46:12:ee:3e:5d:cd:64:46:45:64:5a:e8:f7:04:4b:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:24:28:8A:1C:7C:EB:66:53:80:40:11:BB:17:07:32:CD:69:91
            X509v3 Authority Key Identifier:
                keyid:8B:42:89:92:A8:BA:A1:53:B3:63:22:A8:7B:D1:5F:59:6C:E8:F0:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/8B428992A8BAA153B36322A87BD15F596CE8F0CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B428992A8BAA153B36322A87BD15F596CE8F0CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELroWoKpLCkdjw7N8D5UBsBy9N9G55jJnefAUwhuSj7N/0/3133382e39372e36332e302f32342d3234203d3e20323634313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:8a:a9:8a:5f:fd:c7:b7:a6:9d:e8:bd:4a:dc:c5:82:84:
         9e:69:2f:ea:0a:d8:c2:ec:fc:09:95:68:ae:72:f2:08:c5:12:
         f0:5a:33:b9:cf:64:ef:79:ca:07:71:41:0e:e2:de:55:f6:0a:
         5d:12:3a:0b:35:7d:a4:26:53:9c:57:08:28:6a:ed:80:4c:21:
         81:06:07:64:c8:15:21:39:e3:62:d3:16:c3:02:e4:66:b6:60:
         06:e8:9c:a0:a5:17:59:1c:6c:22:08:04:dc:21:0e:6b:24:80:
         75:e8:23:eb:c6:dc:88:8d:19:bb:b2:9e:90:43:f2:f0:fb:3e:
         96:b3:87:77:c9:5a:ee:f6:67:17:f0:96:e7:f2:f1:33:dd:a7:
         25:7a:c3:02:df:f2:d6:e3:a4:d2:4f:46:0c:25:b5:2c:6f:a3:
         f6:29:fe:00:77:45:2a:e7:4b:b1:d9:21:16:1d:a1:32:5b:81:
         d1:c9:52:9b:b8:a0:e7:b3:b6:27:06:a9:8a:84:d8:17:f7:89:
         72:fe:d7:9e:36:33:ee:8b:17:66:52:20:e2:41:5a:1d:d4:a2:
         ee:1d:f6:8b:b3:61:06:30:50:2f:82:9d:cc:e8:62:21:33:5e:
         dd:f6:17:3d:ec:43:93:2e:cd:09:51:db:fa:55:d9:f2:7e:03:
         de:6a:11:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:47 2025 by rpki-client on console.sobornost.net