Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32322d3232203d3e20323634353234.roa
File:                     3133382e302e302e302f32322d3232203d3e20323634353234.roa (raw, json)
Hash identifier:          83u9DpsWTGZfjoSwa6OtR0oWyBGrQUTRcFPXreiwSZA=
Subject key identifier:   36:5C:97:03:85:AC:78:57:DB:03:C4:4B:20:14:80:C5:41:CF:41:E2
Certificate issuer:       /CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
Certificate serial:       233688F5AEB38E7E1BF413B04DAE410956FF5810
Authority key identifier: D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32322d3232203d3e20323634353234.roa
Signing time:             Mon 04 Mar 2024 19:26:12 +0000
ROA not before:           Mon 04 Mar 2024 19:21:12 +0000
ROA not after:            Mon 03 Mar 2025 19:26:12 +0000
asID:                     264524
IP address blocks:        138.0.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:36:88:f5:ae:b3:8e:7e:1b:f4:13:b0:4d:ae:41:09:56:ff:58:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Validity
            Not Before: Mar  4 19:21:12 2024 GMT
            Not After : Mar  3 19:26:12 2025 GMT
        Subject: CN=365C970385AC7857DB03C44B201480C541CF41E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:16:9a:59:9d:24:63:4a:61:b2:5f:1d:d1:9a:
                    6f:4b:be:ad:dd:db:bc:12:5a:57:28:6a:87:bb:08:
                    46:05:a2:27:25:02:b1:1e:71:81:98:56:d0:88:62:
                    d0:64:1a:52:30:c9:6e:3c:82:41:72:3a:02:e3:2d:
                    f9:f8:aa:83:5c:82:d9:c6:31:1c:2e:82:86:52:09:
                    c2:a6:c2:41:da:8c:ef:35:f5:b5:23:2c:4b:cd:91:
                    02:2b:97:9d:bb:5a:b4:f2:60:e0:62:10:d1:a9:6f:
                    9f:59:85:5d:e6:ad:e6:b2:26:f9:e7:9f:1b:56:9e:
                    2b:fc:92:78:29:2e:c5:28:9a:80:9d:a7:dd:e0:7e:
                    5d:79:2c:6b:d0:1b:0a:5b:40:fa:c5:ee:77:11:5e:
                    55:bd:e6:ac:4b:28:83:cc:8d:c4:68:9f:69:35:00:
                    ef:a5:da:93:ee:06:f5:7a:39:6c:4c:b1:b7:c9:09:
                    d9:f3:78:34:af:4c:34:9f:9d:e0:97:04:22:ee:94:
                    04:20:f7:a7:09:88:cb:19:ac:bb:25:9f:77:e5:ea:
                    33:2a:4a:a4:3b:3e:63:56:1d:14:65:03:0d:f6:47:
                    3b:d7:f6:f1:6d:32:bb:bf:01:1e:a3:d3:97:05:ac:
                    2f:34:9c:7d:77:a9:c6:e5:72:c7:62:a9:dd:5a:c2:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5C:97:03:85:AC:78:57:DB:03:C4:4B:20:14:80:C5:41:CF:41:E2
            X509v3 Authority Key Identifier:
                keyid:D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/3133382e302e302e302f32322d3232203d3e20323634353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:18:44:7c:dd:31:d6:37:3e:81:eb:5d:cc:1b:95:4c:0c:ba:
         4c:8a:ab:b5:e3:b2:d4:7d:d7:ea:a5:a3:5e:2e:21:29:53:73:
         7c:70:c3:09:48:26:d2:93:96:b4:ed:39:32:e3:b6:06:15:0f:
         28:77:6b:a3:3a:e9:b1:bc:40:82:fe:8e:04:e5:8f:c2:c1:0c:
         bf:64:72:26:91:15:0e:0e:e6:97:26:86:88:c0:fe:29:c0:c8:
         3f:a0:3f:09:2d:8a:37:97:13:50:47:27:1b:88:72:79:7a:f2:
         ad:e8:61:8d:09:da:35:c3:d8:b5:9d:34:ce:4e:29:43:70:ca:
         06:f8:d4:37:e7:fc:29:44:84:d4:69:04:ad:8a:5a:87:5e:7c:
         ea:18:41:69:a3:0c:ec:0f:48:e9:b2:84:d9:9c:89:0e:6d:75:
         4f:75:b6:8d:05:20:04:04:fd:50:3d:fa:92:00:02:a3:90:b3:
         e9:92:42:35:81:89:e1:1d:b7:1e:fd:c2:d3:85:d6:7b:5b:36:
         35:36:10:3a:e7:db:99:de:b3:64:c8:46:a5:a8:5a:58:cc:ee:
         ca:bd:5f:66:2f:96:c8:7c:b9:2b:11:b4:66:42:30:6c:3f:b3:
         cd:4e:57:92:a4:66:f1:d2:33:eb:61:1e:e1:54:14:58:05:2d:
         9b:5a:d1:94
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIzaI9a6zjn4b9BOwTa5BCVb/WBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5NkI5NkExRENCMjA1RjI3NkJGQ0VGM0Y2NUIyMzMz
MjVEMDc4ODAeFw0yNDAzMDQxOTIxMTJaFw0yNTAzMDMxOTI2MTJaMDMxMTAvBgNV
BAMTKDM2NUM5NzAzODVBQzc4NTdEQjAzQzQ0QjIwMTQ4MEM1NDFDRjQxRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeFppZnSRjSmGyXx3Rmm9Lvq3d
27wSWlcoaoe7CEYFoiclArEecYGYVtCIYtBkGlIwyW48gkFyOgLjLfn4qoNcgtnG
MRwugoZSCcKmwkHajO819bUjLEvNkQIrl527WrTyYOBiENGpb59ZhV3mreayJvnn
nxtWniv8kngpLsUomoCdp93gfl15LGvQGwpbQPrF7ncRXlW95qxLKIPMjcRon2k1
AO+l2pPuBvV6OWxMsbfJCdnzeDSvTDSfneCXBCLulAQg96cJiMsZrLsln3fl6jMq
SqQ7PmNWHRRlAw32RzvX9vFtMru/AR6j05cFrC80nH13qcblcsdiqd1awjQ1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUNlyXA4WseFfbA8RLIBSAxUHPQeIwHwYDVR0j
BBgwFoAU1Za5ah3LIF8na/zvP2WyMzJdB4gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FEZkNocGRhRHQ2bkV5NE5yTHJ5aU1lZ0RCRG5KV0d5ZDk4dHBWU0xo
TDgvMC9ENTk2Qjk2QTFEQ0IyMDVGMjc2QkZDRUYzRjY1QjIzMzMyNUQwNzg4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1OTZCOTZBMURDQjIwNUYy
NzZCRkNFRjNGNjVCMjMzMzI1RDA3ODguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBRGZDaHBkYUR0Nm5FeTROckxyeWlNZWdEQkRuSldHeWQ5OHRwVlNMaEw4LzAv
MzEzMzM4MmUzMDJlMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzQzNTMy
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKKAAAwDQYJKoZIhvcNAQELBQADggEBAHUYRHzdMdY3PoHr
XcwblUwMukyKq7XjstR91+qlo14uISlTc3xwwwlIJtKTlrTtOTLjtgYVDyh3a6M6
6bG8QIL+jgTlj8LBDL9kciaRFQ4O5pcmhojA/inAyD+gPwktijeXE1BHJxuIcnl6
8q3oYY0J2jXD2LWdNM5OKUNwygb41Dfn/ClEhNRpBK2KWodefOoYQWmjDOwPSOmy
hNmciQ5tdU91to0FIAQE/VA9+pIAAqOQs+mSQjWBieEdtx79wtOF1ntbNjU2EDrn
25nes2TIRqWoWljM7sq9X2Yvlsh8uSsRtGZCMGw/s81OV5KkZvHSM+thHuFUFFgF
LZta0ZQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org