Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130362e302f32332d3233203d3e20323634333533.roa
File:                     3133382e3138362e3130362e302f32332d3233203d3e20323634333533.roa (raw, json)
Hash identifier:          a2X4rPvYef09GqgVknTMoP2lbK7MBg+cv5+YQ3lOl7A=
Subject key identifier:   85:9A:8C:3F:C6:DD:C3:07:23:30:36:B8:16:D6:86:CF:39:EA:8E:35
Certificate issuer:       /CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
Certificate serial:       3FF938ACBBF8634466A3A13EA8DE82666A1FD5E9
Authority key identifier: 8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130362e302f32332d3233203d3e20323634333533.roa
Signing time:             Sun 30 Oct 2022 13:00:06 +0000
ROA not before:           Sun 30 Oct 2022 12:55:06 +0000
ROA not after:            Sun 29 Oct 2023 13:00:06 +0000
asID:                     264353
IP address blocks:        138.186.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:f9:38:ac:bb:f8:63:44:66:a3:a1:3e:a8:de:82:66:6a:1f:d5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
        Validity
            Not Before: Oct 30 12:55:06 2022 GMT
            Not After : Oct 29 13:00:06 2023 GMT
        Subject: CN=859A8C3FC6DDC307233036B816D686CF39EA8E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:26:80:21:31:3b:63:e9:39:b1:eb:61:65:
                    e3:52:58:d6:6e:60:ac:8e:c8:ac:86:be:d7:2b:f9:
                    12:b3:d8:70:98:07:db:ac:c2:23:69:a8:0c:a6:4f:
                    4f:19:5e:18:4c:46:78:9f:05:08:2f:87:c7:25:1f:
                    03:87:5c:15:54:0f:60:7d:91:7f:36:8d:25:96:00:
                    f6:08:ad:a9:fb:2a:1b:08:6a:e5:dc:f4:d2:20:02:
                    aa:d7:e1:4a:7a:b3:c3:d1:a6:92:d4:57:ac:16:75:
                    7a:66:8f:e8:38:f9:45:c8:ec:c7:ef:7d:c8:8b:b1:
                    27:2f:8d:36:96:a7:7f:03:a8:50:02:3a:54:6d:c6:
                    a1:4b:d9:47:73:2f:6d:04:bf:2a:83:29:dd:a4:3b:
                    6f:c2:00:c3:ce:cd:cc:77:63:5f:02:8a:f0:23:ff:
                    e8:cf:fb:d7:90:ca:14:28:ac:26:7e:72:d2:51:ab:
                    32:e3:31:8e:48:d7:ba:f3:80:96:6b:d5:83:53:55:
                    0a:64:47:69:a6:95:f1:f1:db:05:41:2c:51:3d:54:
                    68:23:bc:a0:1e:d3:5b:06:5f:49:14:e9:0b:2c:b1:
                    c9:89:37:88:87:67:54:a9:f3:75:1e:54:22:ef:74:
                    e1:a7:fe:2d:5c:7f:74:af:6b:c0:bb:28:7d:32:29:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9A:8C:3F:C6:DD:C3:07:23:30:36:B8:16:D6:86:CF:39:EA:8E:35
            X509v3 Authority Key Identifier:
                keyid:8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130362e302f32332d3233203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:17:13:97:61:30:fd:33:c6:9d:c8:22:77:ff:6f:48:a1:7b:
         26:5a:ed:75:ff:dc:c2:01:30:b0:e7:e1:50:70:55:f3:21:9c:
         27:53:2b:bf:ab:13:41:45:a3:2d:7b:b5:db:57:f3:66:bb:9a:
         7f:39:cc:44:1d:04:13:50:ba:0d:37:6c:15:f8:ca:09:a1:6d:
         5d:42:93:16:1a:5d:67:01:46:60:39:2f:0b:60:fd:f5:e6:51:
         bd:64:bf:75:da:01:6a:a0:42:92:23:5e:55:95:44:96:47:85:
         bc:be:2e:07:74:68:2c:bc:1f:59:97:62:40:e1:35:fc:5f:c2:
         15:a7:ea:5d:1c:66:23:6a:ee:35:ff:6d:6e:55:d7:94:b5:35:
         ed:ff:5f:85:f8:6d:32:3a:a1:4f:4d:87:fb:29:70:11:b3:d0:
         5d:9b:38:7a:c9:77:d3:71:e7:a7:2c:97:78:eb:9f:08:6d:70:
         8f:7e:d9:23:24:c2:86:36:8d:61:39:4d:8d:61:a8:f5:b8:6c:
         0f:d9:56:5d:64:7e:67:00:65:ab:97:64:08:5e:fc:c6:2c:38:
         77:a1:99:7b:24:b1:22:5a:a5:8e:dc:03:e8:64:08:cf:65:c7:
         4f:26:74:86:03:20:81:27:ef:18:7d:32:f4:55:8f:c1:f1:e4:
         ca:ea:05:94
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUP/k4rLv4Y0Rmo6E+qN6CZmof1ekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ3M0Y1MzM5NTVCRTc2RUNCQzExOTAwNTdEQUIwNTQ0
MkI0QTUwRTAeFw0yMjEwMzAxMjU1MDZaFw0yMzEwMjkxMzAwMDZaMDMxMTAvBgNV
BAMTKDg1OUE4QzNGQzZEREMzMDcyMzMwMzZCODE2RDY4NkNGMzlFQThFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1PyaAITE7Y+k5sethZeNSWNZu
YKyOyKyGvtcr+RKz2HCYB9uswiNpqAymT08ZXhhMRnifBQgvh8clHwOHXBVUD2B9
kX82jSWWAPYIran7KhsIauXc9NIgAqrX4Up6s8PRppLUV6wWdXpmj+g4+UXI7Mfv
fciLsScvjTaWp38DqFACOlRtxqFL2UdzL20EvyqDKd2kO2/CAMPOzcx3Y18CivAj
/+jP+9eQyhQorCZ+ctJRqzLjMY5I17rzgJZr1YNTVQpkR2mmlfHx2wVBLFE9VGgj
vKAe01sGX0kU6QssscmJN4iHZ1Sp83UeVCLvdOGn/i1cf3Sva8C7KH0yKYvFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUhZqMP8bdwwcjMDa4FtaGzznqjjUwHwYDVR0j
BBgwFoAUjXP1M5Vb527LwRkAV9qwVEK0pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxwVEFlNHY3blNZMnJSWVI4OXlhczRQMWFGY3dZRVQ5aGRwQ2dpbW5R
a3UvMC84RDczRjUzMzk1NUJFNzZFQ0JDMTE5MDA1N0RBQjA1NDQyQjRBNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhENzNGNTMzOTU1QkU3NkVD
QkMxMTkwMDU3REFCMDU0NDJCNEE1MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMcFRBZTR2N25TWTJyUllSODl5YXM0UDFhRmN3WUVUOWhkcENnaW1uUWt1LzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzAzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMzMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq6ajANBgkqhkiG9w0BAQsFAAOCAQEAxxcT
l2Ew/TPGncgid/9vSKF7Jlrtdf/cwgEwsOfhUHBV8yGcJ1Mrv6sTQUWjLXu121fz
ZruafznMRB0EE1C6DTdsFfjKCaFtXUKTFhpdZwFGYDkvC2D99eZRvWS/ddoBaqBC
kiNeVZVElkeFvL4uB3RoLLwfWZdiQOE1/F/CFafqXRxmI2ruNf9tblXXlLU17f9f
hfhtMjqhT02H+ylwEbPQXZs4esl303HnpyyXeOufCG1wj37ZIyTChjaNYTlNjWGo
9bhsD9lWXWR+ZwBlq5dkCF78xiw4d6GZeySxIlqljtwD6GQIz2XHTyZ0hgMggSfv
GH0y9FWPwfHkyuoFlA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org