Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa
File:                     3133382e302e3133382e302f32332d3233203d3e20323634353530.roa (raw, json)
Hash identifier:          eKyY8AvZufZsOMF4ZPRMemSDi+fEdzaz2jlhwQNH1ik=
Subject key identifier:   84:3E:BD:00:86:C0:2F:E7:C9:47:C3:A1:29:4D:9E:38:1B:D1:EA:3A
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       58A4FAD4969FD71A07340323E9E6476F4B2959C6
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:21:27 +0000
ROA not before:           Wed 27 Mar 2024 21:16:27 +0000
ROA not after:            Wed 26 Mar 2025 21:21:27 +0000
asID:                     264550
IP address blocks:        138.0.138.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a4:fa:d4:96:9f:d7:1a:07:34:03:23:e9:e6:47:6f:4b:29:59:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:16:27 2024 GMT
            Not After : Mar 26 21:21:27 2025 GMT
        Subject: CN=843EBD0086C02FE7C947C3A1294D9E381BD1EA3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:e6:6b:4b:2c:e2:51:e0:55:58:ee:41:cf:
                    1b:2a:b4:eb:df:e7:54:36:e0:53:ea:b1:2b:5f:e5:
                    82:3e:1b:f4:bb:dc:f8:59:cc:a8:1c:2e:0e:43:1e:
                    cf:bd:fb:28:98:be:81:0e:fd:0c:71:31:10:86:48:
                    08:e9:8d:01:10:e4:0d:a9:a6:bf:e9:f2:80:83:12:
                    1b:d9:96:dc:30:b5:a6:f5:99:d0:b8:12:3f:1b:1c:
                    f1:9c:3d:c9:01:1c:0b:4a:2d:78:0a:d3:b0:67:0c:
                    a1:da:15:21:cc:4a:62:eb:9a:ff:3b:eb:3e:00:7e:
                    a7:6d:da:e1:b8:fd:7a:2b:70:9a:72:ff:44:33:95:
                    e0:dc:7a:99:2f:4e:05:69:ab:07:81:ab:f0:62:c6:
                    52:dd:49:47:8f:26:f7:01:bd:a2:ec:26:b5:b1:cb:
                    ce:9e:53:d3:27:01:dc:b0:2d:4c:0c:49:eb:ee:7c:
                    6b:5f:48:7e:d5:99:76:b0:43:4d:03:da:c3:ef:ef:
                    a1:ce:7f:27:8b:42:5c:b1:04:2b:9f:1a:3d:38:61:
                    dc:a3:c9:9b:01:8f:d8:90:58:e1:3d:41:74:9c:6e:
                    68:cc:74:62:31:59:e4:25:f3:ed:ba:0b:be:a3:41:
                    89:13:94:01:dd:b5:cc:49:e2:5f:06:ef:94:ca:9d:
                    26:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:BD:00:86:C0:2F:E7:C9:47:C3:A1:29:4D:9E:38:1B:D1:EA:3A
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133382e302f32332d3233203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:1e:21:79:1b:d9:7b:4a:10:f7:b3:69:e3:8e:05:8c:05:2d:
         94:5c:e8:3e:80:26:ad:d6:90:91:50:58:d9:63:0e:55:7d:3e:
         6e:36:96:4a:eb:48:d2:8a:3b:59:a2:23:c2:4e:f1:be:45:2e:
         86:18:e1:93:76:9b:16:68:59:df:22:21:f4:45:70:33:2a:91:
         c0:e5:3f:44:23:a4:45:18:38:46:ff:29:7f:60:da:89:d2:8d:
         69:d0:12:1b:8c:f0:e1:3b:13:b3:24:60:fb:9e:7b:1c:59:fe:
         e9:26:bd:51:ac:cf:07:ff:5a:5a:be:25:ed:64:71:e2:4c:36:
         f2:0e:4b:44:38:82:ee:9e:1a:2c:25:c7:b4:67:61:af:0e:eb:
         78:b7:19:97:60:0d:4f:02:40:b7:fa:16:da:a2:e6:b8:72:2a:
         7c:80:a7:db:07:7c:10:f7:7e:9f:1c:78:7f:b0:ec:d1:8c:aa:
         48:f1:14:48:40:2b:06:2f:6a:60:98:83:ed:92:12:09:02:52:
         d7:89:79:27:25:f8:26:42:a3:9a:78:df:b8:8d:c1:24:4e:4c:
         02:69:e6:5f:a0:df:57:16:60:26:69:fb:5c:98:44:1d:df:c3:
         e7:be:c3:c1:0d:85:98:fe:18:03:28:78:6b:a4:d9:0d:35:46:
         0b:7e:51:1f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWKT61Jaf1xoHNAMj6eZHb0spWcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M4OEQyREVEMjU5QUUzODRFNjRCRTQ4RDBCMUMzQTI2
MjdDQzFBNzAeFw0yNDAzMjcyMTE2MjdaFw0yNTAzMjYyMTIxMjdaMDMxMTAvBgNV
BAMTKDg0M0VCRDAwODZDMDJGRTdDOTQ3QzNBMTI5NEQ5RTM4MUJEMUVBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImuZrSyziUeBVWO5BzxsqtOvf
51Q24FPqsStf5YI+G/S73PhZzKgcLg5DHs+9+yiYvoEO/QxxMRCGSAjpjQEQ5A2p
pr/p8oCDEhvZltwwtab1mdC4Ej8bHPGcPckBHAtKLXgK07BnDKHaFSHMSmLrmv87
6z4Afqdt2uG4/XorcJpy/0QzleDcepkvTgVpqweBq/BixlLdSUePJvcBvaLsJrWx
y86eU9MnAdywLUwMSevufGtfSH7VmXawQ00D2sPv76HOfyeLQlyxBCufGj04Ydyj
yZsBj9iQWOE9QXScbmjMdGIxWeQl8+26C76jQYkTlAHdtcxJ4l8G75TKnSYdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUhD69AIbAL+fJR8OhKU2eOBvR6jowHwYDVR0j
BBgwFoAUfIjS3tJZrjhOZL5I0LHDomJ8wacwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC83Qzg4RDJERUQyNTlBRTM4NEU2NEJFNDhEMEIxQzNBMjYyN0NDMUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDODhEMkRFRDI1OUFFMzg0
RTY0QkU0OEQwQjFDM0EyNjI3Q0MxQTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzEzMzM4MmUzMDJlMzEzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBigCKMA0GCSqGSIb3DQEBCwUAA4IBAQB1HiF5G9l7
ShD3s2njjgWMBS2UXOg+gCat1pCRUFjZYw5VfT5uNpZK60jSijtZoiPCTvG+RS6G
GOGTdpsWaFnfIiH0RXAzKpHA5T9EI6RFGDhG/yl/YNqJ0o1p0BIbjPDhOxOzJGD7
nnscWf7pJr1RrM8H/1paviXtZHHiTDbyDktEOILunhosJce0Z2GvDut4txmXYA1P
AkC3+hbaoua4cip8gKfbB3wQ936fHHh/sOzRjKpI8RRIQCsGL2pgmIPtkhIJAlLX
iXknJfgmQqOaeN+4jcEkTkwCaeZfoN9XFmAmaftcmEQd38PnvsPBDYWY/hgDKHhr
pNkNNUYLflEf
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org