Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32332d3233203d3e20323634323036.roa
File:                     3133382e39372e3138302e302f32332d3233203d3e20323634323036.roa (raw, json)
Hash identifier:          4csl2MHbRlqGN2q6vC2bKJqrtgy4xvibYXXAHepwK0A=
Subject key identifier:   AE:83:7C:C3:EF:B6:36:02:D8:0F:1B:40:E2:5A:B9:61:6D:43:36:B8
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       0EB66D3E71109ACB46E29FCAB144BB7D8997B1AA
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32332d3233203d3e20323634323036.roa
Signing time:             Fri 30 Jun 2023 00:00:00 +0000
ROA not before:           Thu 29 Jun 2023 23:55:00 +0000
ROA not after:            Fri 28 Jun 2024 00:00:00 +0000
asID:                     264206
IP address blocks:        138.97.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:6d:3e:71:10:9a:cb:46:e2:9f:ca:b1:44:bb:7d:89:97:b1:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Jun 29 23:55:00 2023 GMT
            Not After : Jun 28 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:48:65:b4:cd:d3:17:28:73:29:5e:a8:2b:
                    28:10:77:74:0e:40:2f:22:a7:8c:00:23:aa:90:d6:
                    6c:59:54:b6:89:f4:db:2c:ea:72:7a:37:1c:65:1c:
                    d4:05:06:01:35:dd:3e:fd:01:ad:79:28:b9:58:17:
                    23:8f:17:a1:22:cf:de:3f:bf:ef:4f:bb:10:f0:9c:
                    1a:53:c3:40:70:2e:b9:84:3c:4f:1b:00:cf:73:2f:
                    bb:77:3d:e6:06:90:16:67:4f:bd:57:39:92:80:6a:
                    7b:40:f9:6f:6f:fc:d0:d4:30:69:9d:6f:e6:fc:68:
                    36:a0:2d:c2:81:68:31:00:a2:a9:0d:94:0e:9a:45:
                    31:8b:f6:21:2f:ce:dc:b8:ad:0d:af:3f:52:42:63:
                    69:cc:c3:9b:64:0b:d3:52:3d:66:bd:d8:fb:21:95:
                    6b:fe:80:6d:54:2a:b9:b9:75:91:16:11:06:32:cc:
                    5e:4b:56:76:7a:23:f1:83:19:fa:7c:d2:f9:9d:98:
                    e7:96:7d:63:45:c1:77:29:35:e3:ce:0f:37:81:87:
                    ed:f3:43:fe:9e:60:df:95:08:e0:c0:0e:31:2c:a2:
                    72:82:0d:a0:5c:b5:27:97:f0:d9:2c:93:48:72:16:
                    7b:1d:e9:ea:f8:8d:4b:02:b7:22:a7:f5:c0:93:0a:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:83:7C:C3:EF:B6:36:02:D8:0F:1B:40:E2:5A:B9:61:6D:43:36:B8
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138302e302f32332d3233203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:66:b4:74:c8:0c:f0:c0:9e:40:82:e0:d3:00:1f:1a:d7:61:
         06:e4:7f:5e:ed:69:e8:0c:8c:74:c9:66:89:f5:8d:62:e8:89:
         f7:18:9e:c0:49:30:1d:ea:a5:7f:c3:44:63:ba:bd:6e:15:12:
         7b:80:07:38:a4:45:2f:e0:4f:3c:cc:91:d2:ed:97:b0:40:82:
         02:83:3d:3b:d2:ac:05:14:31:a7:7b:c6:c6:10:fb:e7:06:6d:
         a6:2d:65:12:26:24:a4:46:95:e2:56:53:b0:c2:dc:25:14:29:
         2c:60:24:80:9e:7e:fa:45:f8:19:3c:63:38:37:c4:fa:fe:7d:
         7f:27:92:c5:41:9e:30:aa:71:e0:37:32:f7:a4:4e:a3:67:38:
         60:50:f8:56:ee:5c:b5:d9:42:2d:c9:8c:f0:7e:7b:aa:da:27:
         3c:fe:c8:af:13:f4:17:c3:f1:25:62:95:a7:ec:b7:6e:c6:05:
         16:09:42:17:f7:0e:01:be:f0:03:c3:e9:3b:c8:09:56:a6:35:
         26:fe:84:7c:83:2e:5d:9e:47:5f:8c:e0:48:64:61:dc:16:ea:
         7e:5b:99:e5:e3:f2:df:2e:b5:42:3f:23:50:39:6d:a8:91:22:
         1e:87:20:89:86:1e:9c:40:35:f4:a9:b9:78:9d:a1:44:9f:9f:
         bb:e5:8e:07
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUDrZtPnEQmstG4p/KsUS7fYmXsaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRERjhBMUUzM0NCRTlFOTg4NDE4QjJGREJCQzNFQTcz
QzlGREVCODAeFw0yMzA2MjkyMzU1MDBaFw0yNDA2MjgwMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM2QzQ4NjVCNENERDMxNzI4
NzMyOTVFQTgyQjI4MTA3Nzc0MEU0MDJGMjJBNzhDMDAyM0FBOTBENjZDNTk1NEI2
ODlGNERCMkNFQTcyN0EzNzFDNjUxQ0Q0MDUwNjAxMzVERDNFRkQwMUFENzkyOEI5
NTgxNzIzOEYxN0ExMjJDRkRFM0ZCRkVGNEZCQjEwRjA5QzFBNTNDMzQwNzAyRUI5
ODQzQzRGMUIwMENGNzMyRkJCNzczREU2MDY5MDE2Njc0RkJENTczOTkyODA2QTdC
NDBGOTZGNkZGQ0QwRDQzMDY5OUQ2RkU2RkM2ODM2QTAyREMyODE2ODMxMDBBMkE5
MEQ5NDBFOUE0NTMxOEJGNjIxMkZDRURDQjhBRDBEQUYzRjUyNDI2MzY5Q0NDMzlC
NjQwQkQzNTIzRDY2QkREOEZCMjE5NTZCRkU4MDZENTQyQUI5Qjk3NTkxMTYxMTA2
MzJDQzVFNEI1Njc2N0EyM0YxODMxOUZBN0NEMkY5OUQ5OEU3OTY3RDYzNDVDMTc3
MjkzNUUzQ0UwRjM3ODE4N0VERjM0M0ZFOUU2MERGOTUwOEUwQzAwRTMxMkNBMjcy
ODIwREEwNUNCNTI3OTdGMEQ5MkM5MzQ4NzIxNjdCMURFOUVBRjg4RDRCMDJCNzIy
QTdGNUMwOTMwQUY3NDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA02xIZbTN0xcocyleqCsoEHd0DkAvIqeMACOqkNZsWVS2ifTbLOpy
ejccZRzUBQYBNd0+/QGteSi5WBcjjxehIs/eP7/vT7sQ8JwaU8NAcC65hDxPGwDP
cy+7dz3mBpAWZ0+9VzmSgGp7QPlvb/zQ1DBpnW/m/Gg2oC3CgWgxAKKpDZQOmkUx
i/YhL87cuK0Nrz9SQmNpzMObZAvTUj1mvdj7IZVr/oBtVCq5uXWRFhEGMsxeS1Z2
eiPxgxn6fNL5nZjnln1jRcF3KTXjzg83gYft80P+nmDflQjgwA4xLKJygg2gXLUn
l/DZLJNIchZ7Henq+I1LArcip/XAkwr3SQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FK6DfMPvtjYC2A8bQOJauWFtQza4MB8GA1UdIwQYMBaAFLTfih4zy+npiEGLL9u8
Pqc8n964MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNeUVBdGRjaHE3Tmht
QTJhRlU1SGtudXliQlZFZGRBVENmRVlOZTdOQ3RRLzAvQjRERjhBMUUzM0NCRTlF
OTg4NDE4QjJGREJCQzNFQTczQzlGREVCOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNERGOEExRTMzQ0JFOUU5ODg0MThCMkZEQkJDM0VBNzNDOUZE
RUI4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTXlFQXRkY2hxN05obUEyYUZV
NUhrbnV5YkJWRWRkQVRDZkVZTmU3TkN0US8wLzMxMzMzODJlMzkzNzJlMzEzODMw
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0MzIzMDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
imG0MA0GCSqGSIb3DQEBCwUAA4IBAQBdZrR0yAzwwJ5AguDTAB8a12EG5H9e7Wno
DIx0yWaJ9Y1i6In3GJ7ASTAd6qV/w0Rjur1uFRJ7gAc4pEUv4E88zJHS7ZewQIIC
gz070qwFFDGne8bGEPvnBm2mLWUSJiSkRpXiVlOwwtwlFCksYCSAnn76RfgZPGM4
N8T6/n1/J5LFQZ4wqnHgNzL3pE6jZzhgUPhW7ly12UItyYzwfnuq2ic8/sivE/QX
w/ElYpWn7LduxgUWCUIX9w4BvvADw+k7yAlWpjUm/oR8gy5dnkdfjOBIZGHcFup+
W5nl4/LfLrVCPyNQOW2okSIehyCJhh6cQDX0qbl4naFEn5+75Y4H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org