Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa
File:                     3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa (raw, json)
Hash identifier:          9bbsShAbBBLRgW3KxLje2bWWBVn2yeiAakGhcGqec2Y=
Subject key identifier:   6D:18:59:BD:AC:6B:1A:6C:04:C7:7B:6C:43:85:2A:65:F4:12:98:39
Certificate issuer:       /CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
Certificate serial:       4C510AE8227B74B406DB9816042B4727B3CB2070
Authority key identifier: 47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa
Signing time:             Tue 09 Jan 2024 14:40:25 +0000
ROA not before:           Tue 09 Jan 2024 14:35:25 +0000
ROA not after:            Tue 07 Jan 2025 14:40:25 +0000
asID:                     52821
IP address blocks:        138.121.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:51:0a:e8:22:7b:74:b4:06:db:98:16:04:2b:47:27:b3:cb:20:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3
        Validity
            Not Before: Jan  9 14:35:25 2024 GMT
            Not After : Jan  7 14:40:25 2025 GMT
        Subject: CN=6D1859BDAC6B1A6C04C77B6C43852A65F4129839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8b:76:e2:82:83:dc:4c:47:12:f7:c1:55:d0:
                    e9:4f:14:7f:fe:c0:75:5b:ea:80:e1:28:f1:02:e7:
                    b1:7b:8c:2e:a1:6f:04:28:79:d8:a8:f3:1a:1d:36:
                    53:98:17:32:8d:6c:73:9f:68:37:57:40:67:ca:8d:
                    80:ac:c3:96:cf:ec:4e:3c:f4:ce:a8:4f:7c:49:5b:
                    83:65:67:fd:6d:df:f5:d7:c4:f8:ff:a7:2c:0a:39:
                    fd:85:0e:08:7c:ef:8f:77:0b:c3:ee:2e:b4:4b:44:
                    c9:2b:2b:73:b5:af:55:cb:00:b2:2e:54:29:14:02:
                    49:f0:c3:b3:ba:76:d6:b2:b1:d6:c6:33:d3:dc:c7:
                    ab:01:50:2c:27:de:3e:d5:2a:67:28:94:b9:15:4e:
                    7a:b3:4b:4e:af:68:3f:74:fb:56:b9:c5:5b:3b:33:
                    b9:1d:fb:10:55:ad:ff:45:73:40:be:af:5c:0b:1f:
                    83:2e:38:d0:15:96:3b:0a:95:c9:93:57:a2:87:f7:
                    e1:09:0f:fe:65:98:27:e8:3c:a0:6c:b8:db:76:51:
                    f7:72:70:92:1f:dc:08:67:63:da:cf:72:55:6a:51:
                    f0:a4:89:20:b4:83:9a:50:cd:49:12:c1:e3:de:45:
                    4a:23:71:3c:69:93:ea:b4:de:a7:09:bc:e8:59:c0:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:59:BD:AC:6B:1A:6C:04:C7:7B:6C:43:85:2A:65:F4:12:98:39
            X509v3 Authority Key Identifier:
                keyid:47:E7:DC:55:F4:FB:A4:DD:E2:B6:BD:A8:3D:31:03:59:39:43:A8:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47E7DC55F4FBA4DDE2B6BDA83D3103593943A8E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6SgDY1iXVkUZDktuBhM6eShxCKLGrtTeV61gcCbRqbJe/0/3133382e3132312e3134342e302f32322d3332203d3e203532383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:f0:92:df:7b:bd:07:7f:d6:81:8c:3e:c3:2b:2e:4c:7e:
         1d:5a:1e:71:8f:0b:8f:88:a8:4d:d4:8e:b0:e1:59:d6:c4:10:
         79:b0:85:ae:f8:f2:02:fb:7f:85:39:a8:7c:64:2b:07:66:9c:
         98:47:96:7f:cf:79:4b:17:da:a8:e6:15:db:c2:d6:cd:67:10:
         75:f8:69:67:0a:d6:bd:12:58:d1:09:0f:f5:07:f2:49:e2:96:
         fc:e0:bd:69:8b:2a:d1:1b:08:66:c2:2f:c3:47:52:14:13:23:
         26:54:b2:57:8e:95:bf:27:99:30:93:61:fc:42:14:d5:15:bb:
         ce:98:6a:ed:53:18:ce:a0:b9:f1:51:db:ec:17:c1:61:2b:d2:
         3a:62:73:9d:1d:77:c0:a5:1c:cc:da:b9:ff:f4:fa:ae:02:d2:
         4a:d1:4f:a1:de:d3:10:35:43:69:d3:99:a3:cd:35:74:79:4a:
         e7:ed:07:e2:1b:e1:15:7d:4e:d8:56:f9:20:07:3c:88:80:50:
         af:a1:1b:d6:e1:b3:c0:81:83:27:9c:f9:ed:74:9c:51:d8:80:
         15:bc:86:ee:88:85:a2:1a:01:87:db:1e:a9:b6:a3:3e:73:74:
         8d:89:65:50:1a:c5:d1:1b:1f:89:a1:f1:79:72:0b:85:74:e6:
         94:53:05:20
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTFEK6CJ7dLQG25gWBCtHJ7PLIHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDdFN0RDNTVGNEZCQTREREUyQjZCREE4M0QzMTAzNTkz
OTQzQThFMzAeFw0yNDAxMDkxNDM1MjVaFw0yNTAxMDcxNDQwMjVaMDMxMTAvBgNV
BAMTKDZEMTg1OUJEQUM2QjFBNkMwNEM3N0I2QzQzODUyQTY1RjQxMjk4MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi3bigoPcTEcS98FV0OlPFH/+
wHVb6oDhKPEC57F7jC6hbwQoedio8xodNlOYFzKNbHOfaDdXQGfKjYCsw5bP7E48
9M6oT3xJW4NlZ/1t3/XXxPj/pywKOf2FDgh87493C8PuLrRLRMkrK3O1r1XLALIu
VCkUAknww7O6dtaysdbGM9Pcx6sBUCwn3j7VKmcolLkVTnqzS06vaD90+1a5xVs7
M7kd+xBVrf9Fc0C+r1wLH4MuONAVljsKlcmTV6KH9+EJD/5lmCfoPKBsuNt2Ufdy
cJIf3AhnY9rPclVqUfCkiSC0g5pQzUkSwePeRUojcTxpk+q03qcJvOhZwD9pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUbRhZvaxrGmwEx3tsQ4UqZfQSmDkwHwYDVR0j
BBgwFoAUR+fcVfT7pN3itr2oPTEDWTlDqOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNlNnRFkxaVhWa1VaRGt0dUJoTTZlU2h4Q0tMR3J0VGVWNjFnY0NiUnFi
SmUvMC80N0U3REM1NUY0RkJBNERERTJCNkJEQTgzRDMxMDM1OTM5NDNBOEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3RTdEQzU1RjRGQkE0RERF
MkI2QkRBODNEMzEwMzU5Mzk0M0E4RTMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZTZ0RZMWlYVmtVWkRrdHVCaE02ZVNoeENLTEdydFRlVjYxZ2NDYlJxYkplLzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM1
MzIzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKeZAwDQYJKoZIhvcNAQELBQADggEBAAqN8JLf
e70Hf9aBjD7DKy5Mfh1aHnGPC4+IqE3UjrDhWdbEEHmwha748gL7f4U5qHxkKwdm
nJhHln/PeUsX2qjmFdvC1s1nEHX4aWcK1r0SWNEJD/UH8knilvzgvWmLKtEbCGbC
L8NHUhQTIyZUsleOlb8nmTCTYfxCFNUVu86Yau1TGM6gufFR2+wXwWEr0jpic50d
d8ClHMzauf/0+q4C0krRT6He0xA1Q2nTmaPNNXR5SuftB+Ib4RV9TthW+SAHPIiA
UK+hG9bhs8CBgyec+e10nFHYgBW8hu6IhaIaAYfbHqm2oz5zdI2JZVAaxdEbH4mh
8XlyC4V05pRTBSA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org