Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa
File:                     3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa (raw, json)
Hash identifier:          2YWI/drk4eSDsmc3xixqlqz8EFXfBXd3NxAI4SR7pWA=
Subject key identifier:   82:42:C1:60:31:C6:39:46:EC:97:24:5C:DE:A1:46:06:0F:AB:06:1A
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       20977EA1C6BB32A4C5428C18CD95977EF22BFDC5
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:42 +0000
ROA not before:           Mon 08 Apr 2024 20:05:42 +0000
ROA not after:            Mon 07 Apr 2025 20:10:42 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:97:7e:a1:c6:bb:32:a4:c5:42:8c:18:cd:95:97:7e:f2:2b:fd:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:42 2024 GMT
            Not After : Apr  7 20:10:42 2025 GMT
        Subject: CN=8242C16031C63946EC97245CDEA146060FAB061A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:fb:7e:89:ca:07:1f:c5:c1:35:7b:9a:c4:
                    19:ae:06:d8:97:dc:f4:ab:64:97:46:f0:eb:e8:07:
                    d8:df:58:67:73:8e:83:92:76:a2:01:16:e9:32:ca:
                    77:ee:f4:79:89:7a:ca:75:d4:e5:68:d4:b2:e8:b5:
                    57:e3:21:63:01:0b:fa:d1:ea:fc:5d:09:f0:75:fb:
                    e7:77:b5:3e:c3:f0:87:38:49:d4:c8:48:f3:65:5d:
                    32:fe:ab:ed:52:ec:78:a5:66:4e:ec:36:95:f7:2a:
                    49:3b:25:2f:81:0d:6d:1c:90:16:a4:38:4d:fd:26:
                    06:c7:20:24:de:d5:92:e7:ee:11:f2:7f:dd:bc:1c:
                    a9:1f:a9:5b:49:ee:8b:7f:f0:40:7f:b7:3f:34:31:
                    8f:9e:32:00:ac:b2:3f:03:76:eb:5b:37:c5:a9:14:
                    71:15:5c:40:a1:40:3c:d7:06:4a:53:92:67:76:58:
                    fa:d3:63:35:6c:6f:dc:e5:71:8e:74:8c:a7:ea:39:
                    ce:88:ae:42:90:c2:a5:96:4d:9c:d4:b7:eb:9d:51:
                    6f:9b:e8:c7:58:95:bb:b4:26:a5:51:0b:af:26:f3:
                    48:e4:e0:64:b7:6c:f1:9b:42:87:aa:11:ec:6b:67:
                    7e:6c:00:05:ee:a1:8a:7d:5a:d1:fc:d2:2f:9f:b4:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:C1:60:31:C6:39:46:EC:97:24:5C:DE:A1:46:06:0F:AB:06:1A
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32322d3232203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:94:f0:ed:b9:61:c2:2c:4f:51:54:59:c6:34:36:77:ac:08:
         21:cd:10:56:9c:e3:15:f0:5c:22:b5:e4:d1:24:07:6d:56:18:
         eb:a7:53:51:ba:2e:00:90:fe:9a:ca:0e:05:34:c2:3a:b3:e1:
         03:ed:df:09:e9:97:16:a5:39:21:ff:6b:32:22:93:cd:89:77:
         8d:01:d5:67:21:24:71:1f:01:44:16:7c:db:2b:f9:33:e3:cf:
         11:4b:14:6d:ef:8e:e3:7e:1b:3b:dd:b2:83:49:4b:6b:22:bd:
         b5:eb:77:d3:c4:56:a2:da:09:a3:d1:2c:4a:0f:fe:1d:70:7f:
         df:74:02:c3:1a:63:55:18:94:a3:0e:c3:7b:1d:73:f7:b6:57:
         01:3e:74:67:76:8b:c2:58:23:c2:57:1a:43:d1:b1:18:da:7e:
         eb:29:4b:81:1b:03:81:74:48:c7:03:b4:97:48:f3:79:15:48:
         64:b0:24:eb:8e:b2:14:0e:04:2e:e7:6f:54:35:ea:1c:05:38:
         51:0e:4e:04:60:ff:36:1c:19:07:5d:f0:e4:1c:12:b6:4c:7d:
         67:4a:20:40:6b:10:d5:f2:f5:8a:08:b6:95:dc:3a:3d:23:b3:
         a2:f5:cf:b9:36:6c:36:71:0b:95:bd:1e:e7:ed:6e:04:10:91:
         54:2a:3d:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIJd+oca7MqTFQowYzZWXfvIr/cUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE2M0RDQUE1QUYxMTE5Q0M4QjRDREFFNkE3MjJFMEEy
OEREQzFDRTAeFw0yNDA0MDgyMDA1NDJaFw0yNTA0MDcyMDEwNDJaMDMxMTAvBgNV
BAMTKDgyNDJDMTYwMzFDNjM5NDZFQzk3MjQ1Q0RFQTE0NjA2MEZBQjA2MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa1Pt+icoHH8XBNXuaxBmuBtiX
3PSrZJdG8OvoB9jfWGdzjoOSdqIBFukyynfu9HmJesp11OVo1LLotVfjIWMBC/rR
6vxdCfB1++d3tT7D8Ic4SdTISPNlXTL+q+1S7HilZk7sNpX3Kkk7JS+BDW0ckBak
OE39JgbHICTe1ZLn7hHyf928HKkfqVtJ7ot/8EB/tz80MY+eMgCssj8DdutbN8Wp
FHEVXEChQDzXBkpTkmd2WPrTYzVsb9zlcY50jKfqOc6IrkKQwqWWTZzUt+udUW+b
6MdYlbu0JqVRC68m80jk4GS3bPGbQoeqEexrZ35sAAXuoYp9WtH80i+ftKCpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgkLBYDHGOUbslyRc3qFGBg+rBhowHwYDVR0j
BBgwFoAUamPcqlrxEZzItM2uanIuCijdwc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMS82QTYzRENBQTVBRjExMTlDQzhCNENEQUU2QTcyMkUwQTI4RERDMUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBNjNEQ0FBNUFGMTExOUND
OEI0Q0RBRTZBNzIyRTBBMjhEREMxQ0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/2DANBgkqhkiG9w0BAQsFAAOCAQEAJZTw
7blhwixPUVRZxjQ2d6wIIc0QVpzjFfBcIrXk0SQHbVYY66dTUbouAJD+msoOBTTC
OrPhA+3fCemXFqU5If9rMiKTzYl3jQHVZyEkcR8BRBZ82yv5M+PPEUsUbe+O434b
O92yg0lLayK9tet308RWotoJo9EsSg/+HXB/33QCwxpjVRiUow7Dex1z97ZXAT50
Z3aLwlgjwlcaQ9GxGNp+6ylLgRsDgXRIxwO0l0jzeRVIZLAk646yFA4ELudvVDXq
HAU4UQ5OBGD/NhwZB13w5BwStkx9Z0ogQGsQ1fL1igi2ldw6PSOzovXPuTZsNnEL
lb0e5+1uBBCRVCo9MQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:03 2024 by rpki-client on console-fra.rpki-client.org