Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa
File:                     3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa (raw, json)
Hash identifier:          Lr8qgZsQgFfVWaj5Mrbilx/XLpbJFm5QOPVFcJ/SSYg=
Subject key identifier:   AE:BC:75:C0:7B:B5:0A:5B:DE:3E:8A:09:8E:CA:96:A3:6A:5F:5D:81
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       1617675ABF453FBA3CDE677F413BF37B95AE6640
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa
Signing time:             Tue 02 Apr 2024 23:25:08 +0000
ROA not before:           Tue 02 Apr 2024 23:20:08 +0000
ROA not after:            Tue 01 Apr 2025 23:25:08 +0000
asID:                     262354
IP address blocks:        138.186.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:17:67:5a:bf:45:3f:ba:3c:de:67:7f:41:3b:f3:7b:95:ae:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Apr  2 23:20:08 2024 GMT
            Not After : Apr  1 23:25:08 2025 GMT
        Subject: CN=AEBC75C07BB50A5BDE3E8A098ECA96A36A5F5D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:8f:74:e2:4d:ed:7f:7c:76:cc:17:7f:76:
                    e2:89:93:fd:af:24:ed:89:64:2f:d0:8b:01:0c:3c:
                    bb:9b:5f:b0:0d:43:11:23:32:32:8d:64:88:fa:5f:
                    cc:2e:66:98:bc:1c:45:42:fe:07:b8:d9:08:8b:8a:
                    fe:45:32:46:11:14:65:f7:ff:9c:d5:2a:16:7c:e2:
                    3e:ef:72:fa:9d:2f:22:94:0f:67:43:8b:12:7c:0f:
                    e0:42:df:aa:37:21:27:1d:01:39:98:25:15:fa:23:
                    57:25:37:0c:77:09:3d:4c:c6:a1:88:1a:72:5f:b2:
                    ec:ec:10:b5:77:9e:ea:23:9d:63:3b:17:0b:c9:0b:
                    4c:94:76:34:f5:72:e0:7e:ed:a2:62:8d:e4:b7:86:
                    00:8b:b0:14:58:2b:ba:df:42:cd:7e:cf:64:0d:ea:
                    c3:55:4f:0d:82:0e:4d:c6:d3:b0:9e:7b:34:2e:c1:
                    18:9d:c8:65:cb:64:94:ba:6a:28:e8:48:c8:51:24:
                    a7:d8:9a:45:b7:0d:01:69:91:66:0d:3e:7d:6f:ab:
                    b2:c1:4c:d8:5b:a2:62:8c:13:ad:91:60:fd:96:84:
                    75:45:3c:5e:54:29:1e:54:e0:0b:5a:c8:83:ea:20:
                    9f:6e:0c:37:7c:ee:f7:df:d0:12:df:f6:3f:ee:06:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BC:75:C0:7B:B5:0A:5B:DE:3E:8A:09:8E:CA:96:A3:6A:5F:5D:81
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32322d3234203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:87:52:41:00:68:58:25:51:af:e3:41:e3:2c:ae:e2:55:
         f7:c9:b2:c9:d9:d2:a8:ed:40:1f:b0:d4:37:2b:47:5d:02:2d:
         af:f6:a8:a0:ab:82:62:ae:71:2d:2b:20:01:c6:ce:56:dd:85:
         5c:bc:a5:5f:f8:6b:3e:be:9b:6c:80:18:52:51:cf:3c:86:b2:
         ac:73:93:0c:80:b1:fa:57:07:54:06:32:5a:0d:86:3e:d8:83:
         51:82:d8:5d:ac:80:c8:fc:75:57:d8:fa:0b:de:6b:d4:ed:b7:
         74:72:91:b1:1b:88:2b:45:20:9e:4e:76:6d:eb:c2:95:3c:69:
         8d:18:9c:7c:c7:f5:e3:35:f4:3b:c0:15:50:dc:50:e4:c3:2d:
         7c:c0:2c:7b:8c:46:e9:95:eb:96:0a:de:56:b3:9e:5b:51:22:
         c1:82:fa:d6:e4:8a:22:3e:6b:00:bd:89:fb:4c:5c:12:2c:51:
         47:04:86:de:98:90:d2:69:04:32:5e:bb:fc:47:90:83:81:8f:
         67:0f:73:ed:bf:e5:8b:ce:14:fb:d9:5d:ce:22:ef:04:10:3b:
         3b:59:8f:47:a5:f1:e1:14:20:97:ed:8d:cc:e3:f8:ac:b1:27:
         bd:1c:81:69:24:5d:60:2f:b6:95:dc:d5:ef:85:f8:0a:b7:f9:
         1b:8a:01:81
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFhdnWr9FP7o83md/QTvze5WuZkAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDA0MDIyMzIwMDhaFw0yNTA0MDEyMzI1MDhaMDMxMTAvBgNV
BAMTKEFFQkM3NUMwN0JCNTBBNUJERTNFOEEwOThFQ0E5NkEzNkE1RjVEODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3CY904k3tf3x2zBd/duKJk/2v
JO2JZC/QiwEMPLubX7ANQxEjMjKNZIj6X8wuZpi8HEVC/ge42QiLiv5FMkYRFGX3
/5zVKhZ84j7vcvqdLyKUD2dDixJ8D+BC36o3IScdATmYJRX6I1clNwx3CT1MxqGI
GnJfsuzsELV3nuojnWM7FwvJC0yUdjT1cuB+7aJijeS3hgCLsBRYK7rfQs1+z2QN
6sNVTw2CDk3G07CeezQuwRidyGXLZJS6aijoSMhRJKfYmkW3DQFpkWYNPn1vq7LB
TNhbomKME62RYP2WhHVFPF5UKR5U4AtayIPqIJ9uDDd87vff0BLf9j/uBuGBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrrx1wHu1ClvePooJjsqWo2pfXYEwHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoq6bDANBgkqhkiG9w0BAQsFAAOCAQEAoYOH
UkEAaFglUa/jQeMsruJV98myydnSqO1AH7DUNytHXQItr/aooKuCYq5xLSsgAcbO
Vt2FXLylX/hrPr6bbIAYUlHPPIayrHOTDICx+lcHVAYyWg2GPtiDUYLYXayAyPx1
V9j6C95r1O23dHKRsRuIK0Ugnk52bevClTxpjRicfMf14zX0O8AVUNxQ5MMtfMAs
e4xG6ZXrlgreVrOeW1EiwYL61uSKIj5rAL2J+0xcEixRRwSG3piQ0mkEMl67/EeQ
g4GPZw9z7b/li84U+9ldziLvBBA7O1mPR6Xx4RQgl+2NzOP4rLEnvRyBaSRdYC+2
ldzV74X4Crf5G4oBgQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:45 2024 by rpki-client on console-fra.rpki-client.org