Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa
File:                     3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa (raw, json)
Hash identifier:          51IUIZLbHUuYduU0fYQtuXFJLga3RTbodT3z6vPGUVw=
Subject key identifier:   C6:BC:01:38:66:E2:1F:CA:6A:39:96:7A:38:5D:5A:7F:BE:3B:14:3E
Certificate issuer:       /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial:       05E20C9AEF90A3218DB01683609B25FE3D2F704E
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa
Signing time:             Tue 24 Oct 2023 12:45:03 +0000
ROA not before:           Tue 24 Oct 2023 12:40:03 +0000
ROA not after:            Tue 22 Oct 2024 12:45:03 +0000
asID:                     61678
IP address blocks:        138.122.140.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:e2:0c:9a:ef:90:a3:21:8d:b0:16:83:60:9b:25:fe:3d:2f:70:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
        Validity
            Not Before: Oct 24 12:40:03 2023 GMT
            Not After : Oct 22 12:45:03 2024 GMT
        Subject: CN=C6BC013866E21FCA6A39967A385D5A7FBE3B143E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:90:e4:25:ed:23:9c:8f:a7:41:9d:95:73:
                    ee:49:b8:d1:2e:8a:f4:f5:e5:b8:f8:e9:4c:5a:bb:
                    50:8b:4e:68:90:05:9c:c6:13:8a:22:b2:8f:bc:02:
                    16:f3:0c:a9:46:1b:bd:1e:1b:fa:7a:f1:22:d8:21:
                    10:96:38:71:d7:72:d3:08:a6:cd:b9:63:26:75:ee:
                    6e:85:d2:e3:f6:85:c7:d0:15:6c:d3:26:f8:94:56:
                    92:70:1f:5e:38:32:df:ea:2e:3b:9d:85:94:39:8c:
                    be:42:5e:82:cf:30:10:d0:9d:42:c3:11:58:7a:33:
                    31:26:61:bd:d5:e5:0a:f0:03:4d:1f:be:ec:1e:cf:
                    a8:b4:57:a0:8e:ab:de:58:21:e7:99:08:19:98:69:
                    c2:7b:13:5f:8d:78:cf:a4:d2:c8:02:41:63:a6:c3:
                    7d:84:90:2b:17:ad:f1:3c:04:c0:22:63:ee:c8:7e:
                    4b:a6:2d:ae:8d:de:00:cd:cb:1c:70:e9:47:78:78:
                    a6:d2:d0:bf:00:cb:5f:c4:12:0a:bd:85:80:94:c4:
                    f0:16:cd:57:c2:22:2f:c3:c2:6a:3b:ff:a9:ba:84:
                    ee:a0:a4:66:82:e9:7a:09:00:66:8b:3a:f7:16:7d:
                    bd:1b:01:ee:fc:8c:1d:8c:66:1c:8f:3a:b5:5c:e7:
                    77:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:01:38:66:E2:1F:CA:6A:39:96:7A:38:5D:5A:7F:BE:3B:14:3E
            X509v3 Authority Key Identifier:
                keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/3133382e3132322e3134302e302f32332d3233203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:7b:70:86:8b:a8:a2:7d:72:df:27:6e:76:9e:70:ca:37:
         17:c9:2f:4f:1a:0b:36:ef:8e:af:bd:69:ce:f9:61:2e:8d:3a:
         91:bb:c2:a5:11:f2:b1:5a:95:a9:94:7c:c8:ef:72:89:31:bd:
         da:c3:b4:96:23:00:ed:e7:3b:9a:da:93:b9:62:7b:7d:2e:7e:
         b7:6a:ff:1d:74:21:89:12:1d:cd:33:73:75:7b:a3:a5:46:89:
         f4:e7:b9:13:4f:14:0d:9a:fb:55:a9:d3:77:0a:84:10:46:08:
         cf:eb:0e:cf:d4:34:fd:66:77:6a:68:be:f5:22:3e:65:45:64:
         4c:81:71:3c:b5:6e:f2:6c:a7:43:a1:e3:2a:27:c3:84:8f:e3:
         87:01:bb:af:f9:d5:25:9a:45:f5:6b:f9:bb:2b:a4:e5:dd:ff:
         8c:a4:79:12:63:ff:5a:cf:9b:18:42:d9:09:af:ad:87:43:44:
         4d:7a:07:c2:5b:04:48:29:b8:56:1e:70:0a:6d:9d:1e:44:19:
         11:f4:ea:2f:d1:32:a4:ef:69:d5:5e:a0:41:fb:c7:35:44:e1:
         56:08:fb:ca:ec:cb:40:dc:f4:45:f6:f7:25:8c:fd:a4:cd:ff:
         22:3a:b4:42:ca:2b:85:2c:18:7c:ae:37:b3:a8:d3:1f:b0:2f:
         cf:ad:31:03
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBeIMmu+QoyGNsBaDYJsl/j0vcE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZGRjFEM0E5NDdCOEI1RkY3NURENzFGRjFDRUQ3MEQ0
RTNGQTBCNDAeFw0yMzEwMjQxMjQwMDNaFw0yNDEwMjIxMjQ1MDNaMDMxMTAvBgNV
BAMTKEM2QkMwMTM4NjZFMjFGQ0E2QTM5OTY3QTM4NUQ1QTdGQkUzQjE0M0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtV5DkJe0jnI+nQZ2Vc+5JuNEu
ivT15bj46Uxau1CLTmiQBZzGE4oiso+8AhbzDKlGG70eG/p68SLYIRCWOHHXctMI
ps25YyZ17m6F0uP2hcfQFWzTJviUVpJwH144Mt/qLjudhZQ5jL5CXoLPMBDQnULD
EVh6MzEmYb3V5QrwA00fvuwez6i0V6COq95YIeeZCBmYacJ7E1+NeM+k0sgCQWOm
w32EkCsXrfE8BMAiY+7IfkumLa6N3gDNyxxw6Ud4eKbS0L8Ay1/EEgq9hYCUxPAW
zVfCIi/Dwmo7/6m6hO6gpGaC6XoJAGaLOvcWfb0bAe78jB2MZhyPOrVc53e3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxrwBOGbiH8pqOZZ6OF1af747FD4wHwYDVR0j
BBgwFoAUX/8dOpR7i1/3Xdcf8c7XDU4/oLQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFRoeGNNVkJuekZRSml3cFdCMW1LZ01EU3p4VlI2aDYxTDkzeW1iS3Yy
azkvMC81RkZGMUQzQTk0N0I4QjVGRjc1REQ3MUZGMUNFRDcwRDRFM0ZBMEI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVGRkYxRDNBOTQ3QjhCNUZG
NzVERDcxRkYxQ0VENzBENEUzRkEwQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUaHhjTVZCbnpGUUppd3BXQjFtS2dNRFN6eFZSNmg2MUw5M3ltYkt2Mms5LzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKeowwDQYJKoZIhvcNAQELBQADggEBAGhLe3CG
i6iifXLfJ252nnDKNxfJL08aCzbvjq+9ac75YS6NOpG7wqUR8rFalamUfMjvcokx
vdrDtJYjAO3nO5rak7lie30ufrdq/x10IYkSHc0zc3V7o6VGifTnuRNPFA2a+1Wp
03cKhBBGCM/rDs/UNP1md2povvUiPmVFZEyBcTy1bvJsp0Oh4yonw4SP44cBu6/5
1SWaRfVr+bsrpOXd/4ykeRJj/1rPmxhC2QmvrYdDRE16B8JbBEgpuFYecAptnR5E
GRH06i/RMqTvadVeoEH7xzVE4VYI+8rsy0Dc9EX29yWM/aTN/yI6tELKK4UsGHyu
N7Oo0x+wL8+tMQM=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org