Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138312e302f32342d3234203d3e20323634323036.roa
File:                     3133382e39372e3138312e302f32342d3234203d3e20323634323036.roa (raw, json)
Hash identifier:          CzonsfH4+likhChxNuRUOrX67AfpwjQ9fXX2v7u2p3M=
Subject key identifier:   55:59:47:9D:CD:7E:87:8B:9C:FE:FE:A1:1B:E4:72:36:64:CF:C2:DE
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       2EAEA8E176F2D42D086004709962D503685322E5
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138312e302f32342d3234203d3e20323634323036.roa
Signing time:             Fri 08 Sep 2023 00:23:02 +0000
ROA not before:           Fri 08 Sep 2023 00:18:02 +0000
ROA not after:            Fri 06 Sep 2024 00:23:02 +0000
asID:                     264206
IP address blocks:        138.97.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:a8:e1:76:f2:d4:2d:08:60:04:70:99:62:d5:03:68:53:22:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Sep  8 00:18:02 2023 GMT
            Not After : Sep  6 00:23:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:cd:0b:4c:70:dc:3f:11:bc:55:e1:a3:ae:
                    60:2d:37:63:65:a9:85:c9:b6:c0:ed:f5:55:f7:db:
                    67:e0:e8:d6:e6:32:5c:06:13:61:9e:f4:a5:9c:09:
                    c9:57:14:0b:cf:49:f3:df:40:e8:2e:02:10:e4:62:
                    fb:da:0f:1f:85:50:f6:f2:4a:84:2a:5f:8a:56:b2:
                    54:b8:2b:41:6d:eb:3f:ff:71:78:12:3c:c1:be:00:
                    be:8e:51:a2:b1:c4:4a:fe:1b:82:49:63:a8:27:b2:
                    94:61:dc:09:34:a8:52:2f:ac:e4:bb:22:8b:45:6b:
                    56:67:62:42:a7:3c:f1:70:c5:af:ac:ff:58:65:65:
                    67:5e:67:77:c6:05:b3:d3:d7:13:26:84:09:e7:c3:
                    90:20:26:91:18:77:b6:74:7e:46:dd:a9:90:2c:23:
                    af:87:5d:b9:59:24:e1:2c:41:54:a9:a1:7c:64:8d:
                    dc:ed:83:33:ba:3a:6b:81:67:8c:1e:49:0c:55:fd:
                    c6:8e:03:24:e5:7e:2d:a6:7e:c5:b4:b8:31:af:3f:
                    11:c4:cf:aa:f0:69:c5:c9:a0:27:ad:d8:db:f4:bb:
                    83:89:fe:3f:6e:83:13:d3:0e:aa:69:93:5c:22:28:
                    74:35:81:ee:93:eb:c0:4a:30:e9:ce:4d:00:d1:3c:
                    a9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:47:9D:CD:7E:87:8B:9C:FE:FE:A1:1B:E4:72:36:64:CF:C2:DE
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138312e302f32342d3234203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:3e:25:d2:0a:d6:e2:a4:32:9f:23:5f:a5:32:ed:8e:d4:
         df:5d:9d:1a:cd:b0:2a:e5:de:5a:02:27:e9:9e:0f:5d:ec:49:
         8f:7c:57:0c:bb:d1:8a:71:21:00:9e:59:b1:67:7a:a6:41:21:
         92:8f:c4:65:8e:16:66:58:85:73:dc:18:46:8b:1c:13:74:d6:
         45:99:b3:08:9c:cf:a5:65:74:ae:fc:ac:72:f2:04:60:9e:b5:
         54:5c:ce:1c:92:b9:f9:82:16:48:73:c1:33:50:4a:3e:2c:33:
         5b:19:18:b4:ad:38:f8:ac:5a:d3:2a:c1:80:bd:4d:1a:58:50:
         b2:5c:b7:74:c9:32:a7:18:59:a4:80:0d:25:d5:03:1f:79:4d:
         90:62:1f:8d:8b:ce:0c:16:64:db:51:75:1d:bb:40:d8:cf:7d:
         0d:ef:ce:f6:4e:a5:db:8b:cd:a6:44:2c:db:11:f8:ee:c4:e3:
         86:67:84:71:c4:d2:7b:cf:b9:7d:22:79:d2:85:1f:62:4a:e8:
         cb:7a:0f:d0:4a:9e:e1:e5:47:7a:5a:5c:80:a7:df:fa:56:8b:
         dd:c8:96:da:48:b1:f5:bc:1e:3e:42:c9:d1:67:8a:36:0e:88:
         53:f7:f2:3d:89:7f:ca:35:c1:47:ea:cc:52:04:41:80:91:f4:
         c8:17:84:44
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIULq6o4Xby1C0IYARwmWLVA2hTIuUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRERjhBMUUzM0NCRTlFOTg4NDE4QjJGREJCQzNFQTcz
QzlGREVCODAeFw0yMzA5MDgwMDE4MDJaFw0yNDA5MDYwMDIzMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzlEMUNEMEI0QzcwREMzRjEx
QkM1NUUxQTNBRTYwMkQzNzYzNjVBOTg1QzlCNkMwRURGNTU1RjdEQjY3RTBFOEQ2
RTYzMjVDMDYxMzYxOUVGNEE1OUMwOUM5NTcxNDBCQ0Y0OUYzREY0MEU4MkUwMjEw
RTQ2MkZCREEwRjFGODU1MEY2RjI0QTg0MkE1RjhBNTZCMjU0QjgyQjQxNkRFQjNG
RkY3MTc4MTIzQ0MxQkUwMEJFOEU1MUEyQjFDNDRBRkUxQjgyNDk2M0E4MjdCMjk0
NjFEQzA5MzRBODUyMkZBQ0U0QkIyMjhCNDU2QjU2Njc2MjQyQTczQ0YxNzBDNUFG
QUNGRjU4NjU2NTY3NUU2Nzc3QzYwNUIzRDNENzEzMjY4NDA5RTdDMzkwMjAyNjkx
MTg3N0I2NzQ3RTQ2RERBOTkwMkMyM0FGODc1REI5NTkyNEUxMkM0MTU0QTlBMTdD
NjQ4RERDRUQ4MzMzQkEzQTZCODE2NzhDMUU0OTBDNTVGREM2OEUwMzI0RTU3RTJE
QTY3RUM1QjRCODMxQUYzRjExQzRDRkFBRjA2OUM1QzlBMDI3QUREOERCRjRCQjgz
ODlGRTNGNkU4MzEzRDMwRUFBNjk5MzVDMjIyODc0MzU4MUVFOTNFQkMwNEEzMEU5
Q0U0RDAwRDEzQ0E5QzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAydHNC0xw3D8RvFXho65gLTdjZamFybbA7fVV99tn4OjW5jJcBhNh
nvSlnAnJVxQLz0nz30DoLgIQ5GL72g8fhVD28kqEKl+KVrJUuCtBbes//3F4EjzB
vgC+jlGiscRK/huCSWOoJ7KUYdwJNKhSL6zkuyKLRWtWZ2JCpzzxcMWvrP9YZWVn
Xmd3xgWz09cTJoQJ58OQICaRGHe2dH5G3amQLCOvh125WSThLEFUqaF8ZI3c7YMz
ujprgWeMHkkMVf3GjgMk5X4tpn7FtLgxrz8RxM+q8GnFyaAnrdjb9LuDif4/boMT
0w6qaZNcIih0NYHuk+vASjDpzk0A0TypxQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FFVZR53NfoeLnP7+oRvkcjZkz8LeMB8GA1UdIwQYMBaAFLTfih4zy+npiEGLL9u8
Pqc8n964MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNeUVBdGRjaHE3Tmht
QTJhRlU1SGtudXliQlZFZGRBVENmRVlOZTdOQ3RRLzAvQjRERjhBMUUzM0NCRTlF
OTg4NDE4QjJGREJCQzNFQTczQzlGREVCOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNERGOEExRTMzQ0JFOUU5ODg0MThCMkZEQkJDM0VBNzNDOUZE
RUI4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTXlFQXRkY2hxN05obUEyYUZV
NUhrbnV5YkJWRWRkQVRDZkVZTmU3TkN0US8wLzMxMzMzODJlMzkzNzJlMzEzODMx
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzIzMDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
imG1MA0GCSqGSIb3DQEBCwUAA4IBAQCNpT4l0grW4qQynyNfpTLtjtTfXZ0azbAq
5d5aAifpng9d7EmPfFcMu9GKcSEAnlmxZ3qmQSGSj8RljhZmWIVz3BhGixwTdNZF
mbMInM+lZXSu/Kxy8gRgnrVUXM4ckrn5ghZIc8EzUEo+LDNbGRi0rTj4rFrTKsGA
vU0aWFCyXLd0yTKnGFmkgA0l1QMfeU2QYh+Ni84MFmTbUXUdu0DYz30N7872TqXb
i82mRCzbEfjuxOOGZ4RxxNJ7z7l9InnShR9iSujLeg/QSp7h5Ud6WlyAp9/6Vovd
yJbaSLH1vB4+QsnRZ4o2DohT9/I9iX/KNcFH6sxSBEGAkfTIF4RE
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:55 2024 by rpki-client on console-ams.rpki-client.org