Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32342d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234382e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          OaErwzAaQpnfr+cwneX+vUmIR/h1eGKRU/yreLAV0go=
Subject key identifier:   2A:06:F8:EE:12:6D:6A:50:44:C6:CD:8F:AA:F5:B9:19:43:72:DE:D6
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       1A96CB2F110FCFD138E16603DFB63E4578B662A8
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 05 Mar 2022 15:38:36 +0000
ROA not before:           Sat 05 Mar 2022 15:33:36 +0000
ROA not after:            Sat 04 Mar 2023 15:38:36 +0000
asID:                     262393
IP address blocks:        138.121.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:96:cb:2f:11:0f:cf:d1:38:e1:66:03:df:b6:3e:45:78:b6:62:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Mar  5 15:33:36 2022 GMT
            Not After : Mar  4 15:38:36 2023 GMT
        Subject: CN=2A06F8EE126D6A5044C6CD8FAAF5B9194372DED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:6c:cc:15:8e:37:0b:91:d1:f4:17:cc:99:
                    43:18:eb:27:12:a0:e3:13:ec:63:29:c7:29:b1:df:
                    bc:c5:61:a3:57:25:a4:93:56:27:22:0e:2f:47:0b:
                    68:7a:12:23:0c:e9:aa:64:6a:f8:aa:b3:18:94:b5:
                    fc:e5:9f:3f:86:63:a2:e4:d4:ac:8d:81:ee:a2:91:
                    7c:7d:af:de:99:eb:50:8b:35:14:70:ee:9f:a4:90:
                    83:69:01:4a:a8:d2:3c:7b:a4:b1:2b:85:9a:8c:55:
                    2d:56:b1:af:57:b7:77:d1:24:3a:85:1b:97:b2:dc:
                    a4:69:16:d0:e1:d2:8c:cf:f9:9d:d7:6f:7d:f8:a2:
                    11:9a:88:2e:cc:77:d2:86:bb:b3:a7:21:92:58:10:
                    e0:c8:81:9c:9e:79:a9:b3:03:05:e6:2b:5c:77:62:
                    aa:66:40:51:9e:d9:fa:ee:26:ff:9c:d2:28:ce:76:
                    1e:be:08:14:3e:03:85:8a:04:cf:b2:cc:4a:38:06:
                    4a:3a:11:b6:10:43:94:df:b9:a3:fa:02:06:a5:f6:
                    38:30:40:b8:ff:2e:b6:df:a5:21:41:4a:39:3e:4d:
                    7b:29:6f:15:d4:f6:00:84:ad:3e:28:76:37:fc:ba:
                    bc:a0:c2:4e:3a:57:fa:41:aa:bd:08:8f:cc:2a:77:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:06:F8:EE:12:6D:6A:50:44:C6:CD:8F:AA:F5:B9:19:43:72:DE:D6
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234382e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f6:37:ee:52:33:ec:dc:f3:ab:78:74:01:5d:55:1b:12:c6:
         60:1a:f5:87:a5:7f:92:be:d4:bc:88:92:f6:03:a2:fd:a1:3f:
         e9:4c:0e:cd:51:40:dc:7b:ed:a6:5f:09:2b:d2:d5:b7:95:63:
         2e:38:65:d8:da:a4:c7:2f:6b:1f:37:d3:f2:b1:2a:44:90:d0:
         f0:34:05:7c:16:0c:b3:1e:d1:f0:9c:bb:f9:c7:75:5a:75:e8:
         a3:8c:93:5f:4e:97:cf:6c:24:90:20:bd:d7:50:c0:ba:5a:90:
         87:99:77:4e:a7:61:65:62:02:b2:87:7f:1a:01:74:a3:ec:02:
         6a:45:20:4c:91:ad:3d:f4:0c:a7:22:8c:51:e6:0d:30:30:47:
         82:f1:81:18:73:5c:8c:ab:2d:29:f0:d7:8a:4f:82:88:dc:02:
         33:37:9e:eb:4e:03:fc:b4:36:08:4e:75:75:13:a0:8b:df:cc:
         97:b5:91:94:82:bd:1a:88:88:6a:db:0c:88:2a:4e:40:ea:cf:
         f1:4d:dc:a0:f8:d5:02:a3:b0:82:a8:f0:d5:a4:73:25:b8:26:
         24:67:63:c8:77:a0:62:ad:bb:85:6a:70:3b:f1:d4:07:a4:6f:
         f1:f8:e5:2b:f8:a7:8f:96:aa:6a:28:cd:b3:e1:3f:d1:52:9d:
         a7:61:fb:8c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGpbLLxEPz9E44WYD37Y+RXi2YqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyQkM3OTBBRTM0MTlDRUFBRkMyMTlFMUM3NjlERTcy
OTAyMTVBQzAeFw0yMjAzMDUxNTMzMzZaFw0yMzAzMDQxNTM4MzZaMDMxMTAvBgNV
BAMTKDJBMDZGOEVFMTI2RDZBNTA0NEM2Q0Q4RkFBRjVCOTE5NDM3MkRFRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBmzMFY43C5HR9BfMmUMY6ycS
oOMT7GMpxymx37zFYaNXJaSTViciDi9HC2h6EiMM6apkaviqsxiUtfzlnz+GY6Lk
1KyNge6ikXx9r96Z61CLNRRw7p+kkINpAUqo0jx7pLErhZqMVS1Wsa9Xt3fRJDqF
G5ey3KRpFtDh0ozP+Z3Xb334ohGaiC7Md9KGu7OnIZJYEODIgZyeeamzAwXmK1x3
YqpmQFGe2fruJv+c0ijOdh6+CBQ+A4WKBM+yzEo4Bko6EbYQQ5TfuaP6Agal9jgw
QLj/LrbfpSFBSjk+TXspbxXU9gCErT4odjf8urygwk46V/pBqr0Ij8wqd4RZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKgb47hJtalBExs2PqvW5GUNy3tYwHwYDVR0j
BBgwFoAU8CvHkK40Gc6q/CGeHHad5ykCFawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMC9GMDJCQzc5MEFFMzQxOUNFQUFGQzIxOUUxQzc2OURFNzI5MDIxNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YwMkJDNzkwQUUzNDE5Q0VB
QUZDMjE5RTFDNzY5REU3MjkwMjE1QUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5+DANBgkqhkiG9w0BAQsFAAOCAQEAW/Y3
7lIz7Nzzq3h0AV1VGxLGYBr1h6V/kr7UvIiS9gOi/aE/6UwOzVFA3Hvtpl8JK9LV
t5VjLjhl2Nqkxy9rHzfT8rEqRJDQ8DQFfBYMsx7R8Jy7+cd1WnXoo4yTX06Xz2wk
kCC911DAulqQh5l3TqdhZWICsod/GgF0o+wCakUgTJGtPfQMpyKMUeYNMDBHgvGB
GHNcjKstKfDXik+CiNwCMzee604D/LQ2CE51dROgi9/Ml7WRlIK9GoiIatsMiCpO
QOrP8U3coPjVAqOwgqjw1aRzJbgmJGdjyHegYq27hWpwO/HUB6Rv8fjlK/inj5aq
aijNs+E/0VKdp2H7jA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org