Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138332e302f32342d3234203d3e20323634323036.roa
File:                     3133382e39372e3138332e302f32342d3234203d3e20323634323036.roa (raw, json)
Hash identifier:          /5NnQo2z2CPqnCdlH3JFLRDTmlj1AGporzbxvSaHMf0=
Subject key identifier:   68:FE:F6:0A:FF:09:23:57:99:FD:C6:CA:05:1A:E4:27:D5:E4:AB:C3
Certificate issuer:       /CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
Certificate serial:       529CD7458684EFF0D77C7D1BDE2E9E9A748CD3A8
Authority key identifier: B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138332e302f32342d3234203d3e20323634323036.roa
Signing time:             Fri 08 Sep 2023 00:23:05 +0000
ROA not before:           Fri 08 Sep 2023 00:18:05 +0000
ROA not after:            Fri 06 Sep 2024 00:23:05 +0000
asID:                     264206
IP address blocks:        138.97.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:9c:d7:45:86:84:ef:f0:d7:7c:7d:1b:de:2e:9e:9a:74:8c:d3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8
        Validity
            Not Before: Sep  8 00:18:05 2023 GMT
            Not After : Sep  6 00:23:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:88:5e:16:6e:1d:23:81:9d:63:20:3a:e9:e6:
                    b4:24:b1:d9:33:33:7e:64:3f:88:25:ee:0a:ac:c2:
                    12:28:77:1e:c7:c9:5b:e0:61:cc:91:f4:1b:d1:34:
                    67:69:92:27:ba:7b:95:ee:64:52:a1:38:29:d8:12:
                    e5:e9:31:db:ec:18:29:a1:df:7b:58:ad:6c:83:59:
                    15:d0:27:75:c9:64:f7:05:00:1d:fe:62:10:8f:ef:
                    66:17:66:49:dc:4e:0d:d4:9e:e8:61:2e:17:76:35:
                    96:49:61:88:0e:db:bb:63:a3:a7:a5:a1:b7:5e:ed:
                    5d:2c:25:33:67:e0:ac:55:7e:00:f1:0d:6f:c0:06:
                    ff:07:e7:cd:0d:6f:7a:f1:5d:7d:0c:fa:c2:01:6b:
                    30:e3:55:0a:e1:48:2e:ac:ac:62:2f:04:96:d5:d1:
                    f1:94:c9:c1:91:9d:1a:c6:0b:fc:41:a0:e7:f7:99:
                    51:eb:6d:06:0c:9b:1e:0b:ff:89:c4:c4:3b:d8:60:
                    92:cc:9e:23:f2:f3:3b:4f:2e:80:de:69:c1:9a:0d:
                    14:4b:8e:89:16:96:4d:ca:06:1e:d4:3e:f0:78:08:
                    e1:59:bd:7b:33:9b:d6:9f:2a:16:f4:bd:21:ab:92:
                    57:33:ed:87:bd:c6:64:8f:d8:9d:9f:1a:61:b1:ff:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FE:F6:0A:FF:09:23:57:99:FD:C6:CA:05:1A:E4:27:D5:E4:AB:C3
            X509v3 Authority Key Identifier:
                keyid:B4:DF:8A:1E:33:CB:E9:E9:88:41:8B:2F:DB:BC:3E:A7:3C:9F:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B4DF8A1E33CBE9E988418B2FDBBC3EA73C9FDEB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MyEAtdchq7NhmA2aFU5HknuybBVEddATCfEYNe7NCtQ/0/3133382e39372e3138332e302f32342d3234203d3e20323634323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ed:ab:34:2a:84:05:78:82:b3:79:3c:10:54:94:b3:67:25:
         fa:9c:bf:19:99:ce:44:53:80:c5:73:f6:b4:be:76:1d:0d:c5:
         38:e6:9e:5b:0a:16:4c:39:e0:fb:8f:b1:34:68:96:da:e1:a8:
         f5:41:cb:e1:b4:c7:69:29:53:e4:c0:a1:51:e7:7b:c6:0a:37:
         8f:55:15:4b:a0:72:46:fc:2f:66:0f:f8:bd:b0:9d:4f:70:59:
         d8:8b:3b:cd:08:09:84:e6:34:cb:e3:b4:e7:67:78:bd:25:12:
         52:29:dc:ca:77:8f:7c:19:c8:17:ca:65:eb:a2:00:50:3b:ca:
         ec:bd:ea:94:4d:d0:78:88:06:6d:82:78:a8:ec:d3:2e:0b:0a:
         04:4a:a5:0c:de:2a:ce:e3:fc:2f:7a:73:91:4a:0f:9d:97:aa:
         34:84:cc:b0:bb:d5:38:24:a1:cc:74:ed:e8:c0:f3:8a:d2:77:
         25:4d:9d:9b:c8:ca:34:a5:18:ac:4e:9e:42:48:09:46:9b:51:
         fa:f2:f6:14:20:b5:28:b3:77:5d:2b:cf:4f:69:f8:7c:78:e0:
         14:f8:e1:5d:2f:28:e0:14:1b:4e:18:db:33:4f:ee:16:fd:f1:
         b7:fd:97:eb:7f:97:c1:8a:f4:fa:18:1f:0a:e9:cc:55:46:ed:
         c8:62:4d:7f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUUpzXRYaE7/DXfH0b3i6emnSM06gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRERjhBMUUzM0NCRTlFOTg4NDE4QjJGREJCQzNFQTcz
QzlGREVCODAeFw0yMzA5MDgwMDE4MDVaFw0yNDA5MDYwMDIzMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzU4ODVFMTY2RTFEMjM4MTlE
NjMyMDNBRTlFNkI0MjRCMUQ5MzMzMzdFNjQzRjg4MjVFRTBBQUNDMjEyMjg3NzFF
QzdDOTVCRTA2MUNDOTFGNDFCRDEzNDY3Njk5MjI3QkE3Qjk1RUU2NDUyQTEzODI5
RDgxMkU1RTkzMURCRUMxODI5QTFERjdCNThBRDZDODM1OTE1RDAyNzc1Qzk2NEY3
MDUwMDFERkU2MjEwOEZFRjY2MTc2NjQ5REM0RTBERDQ5RUU4NjEyRTE3NzYzNTk2
NDk2MTg4MEVEQkJCNjNBM0E3QTVBMUI3NUVFRDVEMkMyNTMzNjdFMEFDNTU3RTAw
RjEwRDZGQzAwNkZGMDdFN0NEMEQ2RjdBRjE1RDdEMENGQUMyMDE2QjMwRTM1NTBB
RTE0ODJFQUNBQzYyMkYwNDk2RDVEMUYxOTRDOUMxOTE5RDFBQzYwQkZDNDFBMEU3
Rjc5OTUxRUI2RDA2MEM5QjFFMEJGRjg5QzRDNDNCRDg2MDkyQ0M5RTIzRjJGMzNC
NEYyRTgwREU2OUMxOUEwRDE0NEI4RTg5MTY5NjREQ0EwNjFFRDQzRUYwNzgwOEUx
NTlCRDdCMzM5QkQ2OUYyQTE2RjRCRDIxQUI5MjU3MzNFRDg3QkRDNjY0OEZEODlE
OUYxQTYxQjFGRjlDQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxYheFm4dI4GdYyA66ea0JLHZMzN+ZD+IJe4KrMISKHcex8lb4GHM
kfQb0TRnaZInunuV7mRSoTgp2BLl6THb7Bgpod97WK1sg1kV0Cd1yWT3BQAd/mIQ
j+9mF2ZJ3E4N1J7oYS4XdjWWSWGIDtu7Y6OnpaG3Xu1dLCUzZ+CsVX4A8Q1vwAb/
B+fNDW968V19DPrCAWsw41UK4UgurKxiLwSW1dHxlMnBkZ0axgv8QaDn95lR620G
DJseC/+JxMQ72GCSzJ4j8vM7Ty6A3mnBmg0US46JFpZNygYe1D7weAjhWb17M5vW
nyoW9L0hq5JXM+2HvcZkj9idnxphsf+cwwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FGj+9gr/CSNXmf3GygUa5CfV5KvDMB8GA1UdIwQYMBaAFLTfih4zy+npiEGLL9u8
Pqc8n964MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNeUVBdGRjaHE3Tmht
QTJhRlU1SGtudXliQlZFZGRBVENmRVlOZTdOQ3RRLzAvQjRERjhBMUUzM0NCRTlF
OTg4NDE4QjJGREJCQzNFQTczQzlGREVCOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9CNERGOEExRTMzQ0JFOUU5ODg0MThCMkZEQkJDM0VBNzNDOUZE
RUI4LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTXlFQXRkY2hxN05obUEyYUZV
NUhrbnV5YkJWRWRkQVRDZkVZTmU3TkN0US8wLzMxMzMzODJlMzkzNzJlMzEzODMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzIzMDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
imG3MA0GCSqGSIb3DQEBCwUAA4IBAQBa7as0KoQFeIKzeTwQVJSzZyX6nL8Zmc5E
U4DFc/a0vnYdDcU45p5bChZMOeD7j7E0aJba4aj1QcvhtMdpKVPkwKFR53vGCjeP
VRVLoHJG/C9mD/i9sJ1PcFnYizvNCAmE5jTL47TnZ3i9JRJSKdzKd498GcgXymXr
ogBQO8rsveqUTdB4iAZtgnio7NMuCwoESqUM3irO4/wvenORSg+dl6o0hMywu9U4
JKHMdO3owPOK0nclTZ2byMo0pRisTp5CSAlGm1H68vYUILUos3ddK89Pafh8eOAU
+OFdLyjgFBtOGNszT+4W/fG3/Zfrf5fBivT6GB8K6cxVRu3IYk1/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org