Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
File:                     3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa (raw, json)
Hash identifier:          lXIYNDLvtROFI2y/du5Kk9Y2dyvPxH28Ai2xb1t4mXs=
Subject key identifier:   3F:EB:20:D9:BB:E7:5A:44:C3:94:EA:50:D2:DB:49:9D:27:4F:22:3F
Certificate issuer:       /CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
Certificate serial:       72C2F46A28E152D11739F59A097AAE7C41DF233D
Authority key identifier: 0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa
Signing time:             Thu 29 Jun 2023 17:15:23 +0000
ROA not before:           Thu 29 Jun 2023 17:10:23 +0000
ROA not after:            Thu 27 Jun 2024 17:15:23 +0000
asID:                     270876
IP address blocks:        138.94.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:f4:6a:28:e1:52:d1:17:39:f5:9a:09:7a:ae:7c:41:df:23:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1286D833D95E1A23922C5317C2CEE9C0697A05
        Validity
            Not Before: Jun 29 17:10:23 2023 GMT
            Not After : Jun 27 17:15:23 2024 GMT
        Subject: CN=3FEB20D9BBE75A44C394EA50D2DB499D274F223F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1e:a7:95:f6:2c:e6:40:47:1f:a4:b9:9a:15:
                    b1:26:9d:a9:30:1a:41:2f:10:49:83:a8:bf:dd:c1:
                    e4:22:c1:5e:c2:e2:ee:f3:7a:c3:cb:ba:4e:7d:52:
                    15:e3:7e:36:e8:8c:78:c6:6f:b5:2e:0d:e3:8a:6c:
                    eb:18:09:68:29:8a:70:32:e5:65:a6:ae:6e:12:86:
                    9c:6f:8a:b0:21:55:28:7b:9b:67:c9:2c:eb:65:27:
                    2c:bb:0e:0e:0e:d4:85:d2:1b:a9:ad:c4:d8:db:39:
                    c1:cf:52:f6:bf:ca:ed:7f:e4:8a:99:00:e8:19:5a:
                    3a:68:e2:43:f6:9b:5f:82:eb:3d:e2:69:e0:65:ee:
                    08:ef:3a:03:82:24:9a:a4:ef:b1:61:45:2d:30:05:
                    87:51:0f:6f:1d:d7:25:ed:0c:87:15:36:cf:a6:af:
                    4d:57:c4:79:a0:1f:10:d0:16:a5:56:6b:3d:aa:56:
                    60:6a:d2:c7:de:41:57:fc:3a:c7:76:09:0a:ea:86:
                    2c:e6:4a:8a:c7:46:16:b5:ed:93:57:f0:65:36:e1:
                    18:70:79:68:08:9c:79:99:f1:f4:da:3b:0e:84:15:
                    b5:da:de:f9:17:94:b2:fc:72:40:77:7c:cf:4b:12:
                    ff:45:c4:2e:4a:37:97:fc:dd:d3:5e:47:34:45:a7:
                    9f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EB:20:D9:BB:E7:5A:44:C3:94:EA:50:D2:DB:49:9D:27:4F:22:3F
            X509v3 Authority Key Identifier:
                keyid:0B:12:86:D8:33:D9:5E:1A:23:92:2C:53:17:C2:CE:E9:C0:69:7A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B1286D833D95E1A23922C5317C2CEE9C0697A05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3137312e302f32342d3234203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:62:6b:a8:e6:32:68:06:09:fd:2b:99:55:c2:91:58:3c:a8:
         a4:da:b8:ba:47:73:c9:c1:6e:16:46:74:7b:67:92:b7:fd:87:
         4b:6e:02:6a:22:39:b1:fb:61:10:b8:2c:af:28:9a:34:6d:5d:
         1a:ca:26:af:8c:fb:35:93:4c:6e:17:da:84:e5:7c:8a:68:72:
         16:51:d5:2b:3d:35:f4:26:53:ea:20:44:6a:7b:02:9a:bd:0d:
         58:ee:65:ea:ef:6d:2c:7e:78:1b:c0:d3:ab:45:62:6b:ce:8c:
         db:6c:63:aa:09:e9:f9:d7:fd:7b:f7:3a:c5:4c:12:31:73:f2:
         c1:31:62:9a:46:58:f9:42:2f:96:f5:c3:79:90:04:ab:90:a7:
         c7:72:b5:02:9a:bb:b5:56:f8:48:06:f0:8e:48:b6:8a:de:6d:
         df:50:e4:b9:26:e6:5f:59:48:77:44:cb:4c:45:ce:e1:9c:b3:
         60:fd:82:96:bc:0f:ba:f8:f9:da:86:08:39:07:20:c1:65:34:
         23:38:f4:64:d2:3b:7f:79:1f:1c:64:26:37:10:ea:8f:cc:2c:
         bf:53:d8:8f:ea:23:25:c4:01:75:e2:1c:72:d0:a8:f3:e8:a3:
         d6:36:e3:ce:d3:6f:cc:11:06:fc:ee:8e:57:1b:7c:07:26:96:
         b0:26:b2:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcsL0aijhUtEXOfWaCXqufEHfIz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEIxMjg2RDgzM0Q5NUUxQTIzOTIyQzUzMTdDMkNFRTlD
MDY5N0EwNTAeFw0yMzA2MjkxNzEwMjNaFw0yNDA2MjcxNzE1MjNaMDMxMTAvBgNV
BAMTKDNGRUIyMEQ5QkJFNzVBNDRDMzk0RUE1MEQyREI0OTlEMjc0RjIyM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEHqeV9izmQEcfpLmaFbEmnakw
GkEvEEmDqL/dweQiwV7C4u7zesPLuk59UhXjfjbojHjGb7UuDeOKbOsYCWgpinAy
5WWmrm4ShpxvirAhVSh7m2fJLOtlJyy7Dg4O1IXSG6mtxNjbOcHPUva/yu1/5IqZ
AOgZWjpo4kP2m1+C6z3iaeBl7gjvOgOCJJqk77FhRS0wBYdRD28d1yXtDIcVNs+m
r01XxHmgHxDQFqVWaz2qVmBq0sfeQVf8Osd2CQrqhizmSorHRha17ZNX8GU24Rhw
eWgInHmZ8fTaOw6EFbXa3vkXlLL8ckB3fM9LEv9FxC5KN5f83dNeRzRFp59FAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP+sg2bvnWkTDlOpQ0ttJnSdPIj8wHwYDVR0j
BBgwFoAUCxKG2DPZXhojkixTF8LO6cBpegUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlA3eUNtbmlOQ3lXWjlaWW9GVm5Ic3ZWNndXckdMWjFtb2NCcFVFV1pS
Q1EvMC8wQjEyODZEODMzRDk1RTFBMjM5MjJDNTMxN0MyQ0VFOUMwNjk3QTA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBCMTI4NkQ4MzNEOTVFMUEy
MzkyMkM1MzE3QzJDRUU5QzA2OTdBMDUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQN3lDbW5pTkN5V1o5WllvRlZuSHN2VjZ3V3JHTFoxbW9jQnBVRVdaUkNRLzAv
MzEzMzM4MmUzOTM0MmUzMTM3MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzAzODM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKXqswDQYJKoZIhvcNAQELBQADggEBACRia6jm
MmgGCf0rmVXCkVg8qKTauLpHc8nBbhZGdHtnkrf9h0tuAmoiObH7YRC4LK8omjRt
XRrKJq+M+zWTTG4X2oTlfIpochZR1Ss9NfQmU+ogRGp7Apq9DVjuZervbSx+eBvA
06tFYmvOjNtsY6oJ6fnX/Xv3OsVMEjFz8sExYppGWPlCL5b1w3mQBKuQp8dytQKa
u7VW+EgG8I5Itorebd9Q5Lkm5l9ZSHdEy0xFzuGcs2D9gpa8D7r4+dqGCDkHIMFl
NCM49GTSO395HxxkJjcQ6o/MLL9T2I/qIyXEAXXiHHLQqPPoo9Y2487Tb8wRBvzu
jlcbfAcmlrAmsnI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org