Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233392e302f32342d3234203d3e20323634353237.roa
File:                     3133382e3138362e3233392e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          3c13evEGXbCjbvZD7F58OexdD0XAhwCE9tR5qmIVw5U=
Subject key identifier:   85:8A:BC:4D:0B:95:07:20:4B:94:1A:AB:53:BC:57:2B:BF:A9:E8:DF
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       3B141864A5CF9EBD3F7AB36D04D00328AFD81D32
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233392e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:00 +0000
ROA not before:           Wed 29 Nov 2023 11:55:00 +0000
ROA not after:            Wed 27 Nov 2024 12:00:00 +0000
asID:                     264527
IP address blocks:        138.186.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:14:18:64:a5:cf:9e:bd:3f:7a:b3:6d:04:d0:03:28:af:d8:1d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:00 2023 GMT
            Not After : Nov 27 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:67:e9:ee:89:36:72:63:f3:47:d7:37:bc:
                    17:f3:b9:3f:26:63:65:50:02:ad:df:b6:40:e6:95:
                    ad:e6:6e:ba:c5:b1:36:eb:6e:a7:a6:4e:02:bb:6c:
                    f7:63:c6:ea:12:03:e4:cd:03:00:4d:44:c7:1b:9f:
                    67:03:31:b8:a0:f9:3a:12:8f:18:fa:a6:96:74:03:
                    57:81:e6:da:ac:2b:a5:bf:9a:c3:c2:c9:ab:5b:bb:
                    e3:9c:4f:2a:71:e8:c6:fc:d4:09:34:b2:16:1a:68:
                    db:aa:5f:e3:cd:41:be:c7:e5:9c:fe:40:70:24:32:
                    44:54:05:3f:2a:3a:02:61:79:8f:b2:f9:29:1f:eb:
                    c9:95:53:68:17:46:dc:a7:c7:ab:37:31:af:61:36:
                    87:86:a7:5f:75:01:a2:c2:79:b6:9e:9c:0d:ab:08:
                    15:af:5c:a8:a1:87:1a:23:8e:f2:0e:95:88:8e:4a:
                    55:e9:c2:34:86:66:89:e5:33:76:8f:fe:92:58:34:
                    c8:9b:2c:cc:ad:50:3d:f8:94:7b:5d:cc:48:c3:b0:
                    cb:f7:b4:ac:7c:44:27:14:49:47:c5:78:b5:71:2a:
                    e5:7e:b9:8a:6d:bd:5d:0c:0b:15:0e:3b:e0:81:63:
                    90:0b:38:10:71:1f:1c:dd:15:53:00:87:97:52:a0:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8A:BC:4D:0B:95:07:20:4B:94:1A:AB:53:BC:57:2B:BF:A9:E8:DF
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e3138362e3233392e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d3:be:24:e3:97:24:db:94:f3:d4:fc:dd:cb:ed:ed:96:15:
         3e:df:76:3d:c9:72:75:3a:2e:3e:92:7f:96:83:fd:5f:3d:10:
         2d:a5:0f:28:92:b7:52:f6:3d:f4:63:72:c0:84:30:eb:01:8e:
         9b:a1:57:c9:63:b2:07:50:8d:22:7d:2a:b2:52:79:3d:0d:f1:
         3c:ae:a4:3c:7b:c1:a3:4b:63:7a:d3:73:bc:c7:e3:16:90:6c:
         d8:7f:28:a4:00:83:2f:d3:47:a3:16:c1:e3:81:be:a2:31:14:
         23:9e:7a:c2:56:20:db:3e:6a:3c:f2:12:d7:ce:cd:ba:05:f5:
         4b:a4:66:c4:10:9c:b8:3e:f4:69:e6:ed:a1:ca:ef:af:6e:a6:
         6e:b7:2c:15:3c:88:8a:4c:bf:d3:57:62:d8:bb:62:e6:d8:2a:
         0a:a0:96:b5:a9:e3:b6:b2:0b:fc:6c:f2:7a:00:50:90:51:7a:
         e3:c6:40:76:27:76:a0:13:90:a3:53:cf:ae:e2:e1:b9:ab:76:
         b8:44:3c:39:53:3f:68:f4:40:ef:be:0d:8a:c1:e0:40:72:76:
         2a:cf:29:65:e2:9d:ab:86:7d:8c:b2:ae:0e:81:a7:a9:0b:3f:
         fa:65:7b:9d:60:10:f0:06:e7:ea:6c:34:a7:63:21:05:2d:39:
         a5:81:f2:d7
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUOxQYZKXPnr0/erNtBNADKK/YHTIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMEYzMUJDNDU2ODdFRjZCQTgyQjdDMEI3OUVGNDIy
MjQ4RjYxNjAeFw0yMzExMjkxMTU1MDBaFw0yNDExMjcxMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTA1OTY3RTlFRTg5MzY3MjYz
RjM0N0Q3MzdCQzE3RjNCOTNGMjY2MzY1NTAwMkFEREZCNjQwRTY5NUFERTY2RUJB
QzVCMTM2RUI2RUE3QTY0RTAyQkI2Q0Y3NjNDNkVBMTIwM0U0Q0QwMzAwNEQ0NEM3
MUI5RjY3MDMzMUI4QTBGOTNBMTI4RjE4RkFBNjk2NzQwMzU3ODFFNkRBQUMyQkE1
QkY5QUMzQzJDOUFCNUJCQkUzOUM0RjJBNzFFOEM2RkNENDA5MzRCMjE2MUE2OERC
QUE1RkUzQ0Q0MUJFQzdFNTlDRkU0MDcwMjQzMjQ0NTQwNTNGMkEzQTAyNjE3OThG
QjJGOTI5MUZFQkM5OTU1MzY4MTc0NkRDQTdDN0FCMzczMUFGNjEzNjg3ODZBNzVG
NzUwMUEyQzI3OUI2OUU5QzBEQUIwODE1QUY1Q0E4QTE4NzFBMjM4RUYyMEU5NTg4
OEU0QTU1RTlDMjM0ODY2Njg5RTUzMzc2OEZGRTkyNTgzNEM4OUIyQ0NDQUQ1MDNE
Rjg5NDdCNURDQzQ4QzNCMENCRjdCNEFDN0M0NDI3MTQ0OTQ3QzU3OEI1NzEyQUU1
N0VCOThBNkRCRDVEMEMwQjE1MEUzQkUwODE2MzkwMEIzODEwNzExRjFDREQxNTUz
MDA4Nzk3NTJBMEIxQUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4Fln6e6JNnJj80fXN7wX87k/JmNlUAKt37ZA5pWt5m66xbE2626n
pk4Cu2z3Y8bqEgPkzQMATUTHG59nAzG4oPk6Eo8Y+qaWdANXgebarCulv5rDwsmr
W7vjnE8qcejG/NQJNLIWGmjbql/jzUG+x+Wc/kBwJDJEVAU/KjoCYXmPsvkpH+vJ
lVNoF0bcp8erNzGvYTaHhqdfdQGiwnm2npwNqwgVr1yooYcaI47yDpWIjkpV6cI0
hmaJ5TN2j/6SWDTImyzMrVA9+JR7XcxIw7DL97SsfEQnFElHxXi1cSrlfrmKbb1d
DAsVDjvggWOQCzgQcR8c3RVTAIeXUqCxrwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIWKvE0LlQcgS5Qaq1O8Vyu/qejfMB8GA1UdIwQYMBaAFIwA8xvEVofva6grfAt5
70IiSPYWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F1ZHI3b2szRDFhcEJD
VExKcDRTS2NrQ1NBSk5NQXFjZExLekdZSFBmTkZ5LzAvOEMwMEYzMUJDNDU2ODdF
RjZCQTgyQjdDMEI3OUVGNDIyMjQ4RjYxNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QzAwRjMxQkM0NTY4N0VGNkJBODJCN0MwQjc5RUY0MjIyNDhG
NjE2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdWRyN29rM0QxYXBCQ1RMSnA0
U0tja0NTQUpOTUFxY2RMS3pHWUhQZk5GeS8wLzMxMzMzODJlMzEzODM2MmUzMjMz
MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMyMzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACKuu8wDQYJKoZIhvcNAQELBQADggEBABDTviTjlyTblPPU/N3L7e2WFT7fdj3J
cnU6Lj6Sf5aD/V89EC2lDyiSt1L2PfRjcsCEMOsBjpuhV8ljsgdQjSJ9KrJSeT0N
8TyupDx7waNLY3rTc7zH4xaQbNh/KKQAgy/TR6MWweOBvqIxFCOeesJWINs+ajzy
EtfOzboF9UukZsQQnLg+9Gnm7aHK769upm63LBU8iIpMv9NXYti7YubYKgqglrWp
47ayC/xs8noAUJBReuPGQHYndqATkKNTz67i4bmrdrhEPDlTP2j0QO++DYrB4EBy
dirPKWXinauGfYyyrg6Bp6kLP/ple51gEPAG5+psNKdjIQUtOaWB8tc=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org