Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
File:                     3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier:          3vFsG8VspvvHUE3cRAMeE9BrliGY82hhTZGD3MBTjgI=
Subject key identifier:   B0:5F:98:2D:89:20:CE:55:21:AC:61:C6:A0:D2:F9:2B:C0:03:51:22
Certificate issuer:       /CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
Certificate serial:       34436E9EC24A5639F4D3A4FBEE206333C0ACA30C
Authority key identifier: 7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
Signing time:             Fri 22 Mar 2024 19:06:23 +0000
ROA not before:           Fri 22 Mar 2024 19:01:23 +0000
ROA not after:            Fri 21 Mar 2025 19:06:23 +0000
asID:                     264404
IP address blocks:        138.255.16.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:43:6e:9e:c2:4a:56:39:f4:d3:a4:fb:ee:20:63:33:c0:ac:a3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229
        Validity
            Not Before: Mar 22 19:01:23 2024 GMT
            Not After : Mar 21 19:06:23 2025 GMT
        Subject: CN=B05F982D8920CE5521AC61C6A0D2F92BC0035122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:75:97:b5:e7:c9:9a:45:ed:5b:0c:ce:80:
                    eb:53:6f:ce:1b:29:d5:07:04:ff:20:20:23:cd:0c:
                    67:86:b1:90:9d:3c:68:34:37:72:08:9d:da:f1:7f:
                    9e:55:e9:a1:12:06:a0:cc:33:6c:5d:7b:66:f4:8a:
                    ff:88:a0:9c:73:e9:ab:4f:75:52:02:05:86:16:e9:
                    b0:43:cc:3c:c1:2a:19:d6:8f:34:e8:ef:30:46:ac:
                    93:a3:02:8f:bd:85:4e:51:ae:27:0b:47:8c:b4:08:
                    43:ec:5a:0c:67:6f:23:f2:55:ca:5e:6b:b0:01:b1:
                    dc:c4:37:d4:5c:29:b9:00:d1:1f:6e:3e:41:eb:35:
                    50:40:d7:85:90:95:fd:0c:a0:7e:77:e9:71:1b:ac:
                    bd:49:e9:64:f2:b2:95:e3:e2:e5:8c:1c:cd:40:26:
                    d7:f1:4c:4b:aa:a5:c2:13:8e:74:e3:cd:aa:22:90:
                    66:ae:a0:a2:7f:2f:a2:32:fa:10:66:f5:b0:e3:2e:
                    ef:95:49:1f:39:35:d1:9f:05:2b:4b:02:4d:5d:ff:
                    c6:d2:bd:4f:e2:59:82:2d:d3:a6:6a:cc:6c:7b:f9:
                    ea:f2:1d:13:9a:06:45:6f:14:40:93:03:c0:dc:f8:
                    e3:6a:e1:b2:f5:4d:51:14:bc:e4:a5:dd:71:f5:81:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5F:98:2D:89:20:CE:55:21:AC:61:C6:A0:D2:F9:2B:C0:03:51:22
            X509v3 Authority Key Identifier:
                keyid:7A:7B:FD:21:EA:E2:D0:E0:F9:46:4F:A2:63:AC:6E:47:AC:D7:C2:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A7BFD21EAE2D0E0F9464FA263AC6E47ACD7C229.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:a4:00:00:10:11:0b:eb:77:0a:f6:f2:0c:80:21:57:22:
         b6:ca:33:ad:03:e2:ea:6e:f4:15:23:db:a6:ef:07:57:58:e3:
         fe:ec:5e:ff:9e:28:ca:54:b4:d6:ea:6c:aa:8e:dc:66:bf:3a:
         66:13:e3:4a:9b:3c:95:02:1f:97:d1:2e:f5:63:4d:70:fd:cf:
         01:93:70:16:12:51:b5:53:3d:f3:1b:b7:08:fc:80:5a:d0:4d:
         9a:12:a4:e9:e5:08:ec:fe:d0:be:8a:47:e1:eb:64:a7:ff:cb:
         31:2e:26:6d:c9:dc:ac:76:1e:1b:15:ce:ab:ce:fd:5d:56:e8:
         7f:a3:24:81:81:2b:69:62:92:9e:fd:09:62:5e:3d:00:de:a9:
         d4:68:67:1f:3f:f8:62:f7:02:1b:6b:84:38:5c:fd:07:a6:ce:
         74:0f:61:b1:a4:12:bb:13:1c:71:f2:29:28:c9:fe:14:f8:24:
         39:9b:21:bd:df:9d:71:04:01:b3:b2:eb:22:fc:91:e6:fe:ae:
         54:b8:26:e8:7a:62:db:73:11:33:77:f6:82:bc:71:fb:86:c1:
         7d:b8:4b:43:cf:18:5e:05:2e:63:de:ed:4a:3d:f2:6c:19:f8:
         71:05:51:c2:1b:53:30:ea:28:cd:57:a8:8a:b9:95:c5:21:a5:
         23:7c:b9:e5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNENunsJKVjn006T77iBjM8CsowwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E3QkZEMjFFQUUyRDBFMEY5NDY0RkEyNjNBQzZFNDdB
Q0Q3QzIyOTAeFw0yNDAzMjIxOTAxMjNaFw0yNTAzMjExOTA2MjNaMDMxMTAvBgNV
BAMTKEIwNUY5ODJEODkyMENFNTUyMUFDNjFDNkEwRDJGOTJCQzAwMzUxMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVXWXtefJmkXtWwzOgOtTb84b
KdUHBP8gICPNDGeGsZCdPGg0N3IIndrxf55V6aESBqDMM2xde2b0iv+IoJxz6atP
dVICBYYW6bBDzDzBKhnWjzTo7zBGrJOjAo+9hU5RricLR4y0CEPsWgxnbyPyVcpe
a7ABsdzEN9RcKbkA0R9uPkHrNVBA14WQlf0MoH536XEbrL1J6WTyspXj4uWMHM1A
JtfxTEuqpcITjnTjzaoikGauoKJ/L6Iy+hBm9bDjLu+VSR85NdGfBStLAk1d/8bS
vU/iWYIt06ZqzGx7+eryHROaBkVvFECTA8Dc+ONq4bL1TVEUvOSl3XH1gU6jAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsF+YLYkgzlUhrGHGoNL5K8ADUSIwHwYDVR0j
BBgwFoAUenv9Ieri0OD5Rk+iY6xuR6zXwikwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWE3aHNraTFmU3drVnBnRGNqeVpCUHNBNU5ZZ1lHTG44Vzlza3lDNXc1
aUIvMC83QTdCRkQyMUVBRTJEMEUwRjk0NjRGQTI2M0FDNkU0N0FDRDdDMjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBN0JGRDIxRUFFMkQwRTBG
OTQ2NEZBMjYzQUM2RTQ3QUNEN0MyMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FhN2hza2kxZlN3a1ZwZ0RjanlaQlBzQTVOWWdZR0xuOFc5c2t5QzV3NWlCLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzNDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK/xAwDQYJKoZIhvcNAQELBQADggEBAFuFpAAA
EBEL63cK9vIMgCFXIrbKM60D4upu9BUj26bvB1dY4/7sXv+eKMpUtNbqbKqO3Ga/
OmYT40qbPJUCH5fRLvVjTXD9zwGTcBYSUbVTPfMbtwj8gFrQTZoSpOnlCOz+0L6K
R+HrZKf/yzEuJm3J3Kx2HhsVzqvO/V1W6H+jJIGBK2likp79CWJePQDeqdRoZx8/
+GL3AhtrhDhc/QemznQPYbGkErsTHHHyKSjJ/hT4JDmbIb3fnXEEAbOy6yL8keb+
rlS4Juh6YttzETN39oK8cfuGwX24S0PPGF4FLmPe7Uo98mwZ+HEFUcIbUzDqKM1X
qIq5lcUhpSN8ueU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org