Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa
File:                     3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          xCgXIs2eBt62oHtNyFhxqSjmOjyqzYjlUhHVvI9LzhM=
Subject key identifier:   E5:03:89:E1:7A:7C:B4:EF:D8:F1:23:B3:29:7B:1A:38:CE:CB:DC:51
Certificate issuer:       /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial:       04DD3A48CC1FF3D3BF345C2AB99CEA102D00E966
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa
Signing time:             Thu 06 Oct 2022 17:39:57 +0000
ROA not before:           Thu 06 Oct 2022 17:34:57 +0000
ROA not after:            Thu 05 Oct 2023 17:39:57 +0000
asID:                     262992
IP address blocks:        138.121.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:dd:3a:48:cc:1f:f3:d3:bf:34:5c:2a:b9:9c:ea:10:2d:00:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
        Validity
            Not Before: Oct  6 17:34:57 2022 GMT
            Not After : Oct  5 17:39:57 2023 GMT
        Subject: CN=E50389E17A7CB4EFD8F123B3297B1A38CECBDC51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c8:20:9b:d3:77:07:ab:ae:f6:8a:2c:1a:07:
                    60:c5:c9:59:b9:ed:c2:e2:33:d9:b1:e5:1f:8c:c4:
                    81:34:3c:ba:24:b0:c7:eb:a8:87:0d:58:82:30:39:
                    df:44:2a:f8:c4:b1:0a:a5:7f:dc:81:35:3a:57:8f:
                    a0:51:c0:e5:77:95:93:34:9b:79:06:4d:10:cc:1d:
                    b0:c2:63:ca:db:eb:89:11:51:15:00:d8:80:64:8f:
                    c0:f9:68:9a:25:75:de:f4:50:6e:17:88:a0:76:2e:
                    3b:8d:cf:5e:b3:91:e0:9a:bb:6c:b5:0e:d9:09:88:
                    04:c2:7f:da:9c:7f:2b:4e:d6:c4:4f:4b:7e:d6:e7:
                    04:67:90:5e:77:cf:67:ef:65:f2:fa:94:a8:66:6a:
                    32:78:13:7c:e2:79:79:27:cc:fe:7a:f3:93:88:04:
                    0b:7b:8f:42:0b:f4:19:29:a7:af:6f:0c:69:d0:6d:
                    98:13:f1:f2:18:f6:87:64:ff:3c:3d:24:18:35:b1:
                    14:51:27:a9:d9:0f:55:06:ba:99:8d:1a:c7:7d:99:
                    59:c0:08:c5:11:cc:06:dd:4b:e3:0d:e0:c8:10:26:
                    c4:ed:fa:7c:ca:0e:7f:61:a8:22:d3:e8:f1:73:e6:
                    fa:52:97:79:e8:d2:9b:42:57:0d:9d:39:3d:8d:f8:
                    0d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:03:89:E1:7A:7C:B4:EF:D8:F1:23:B3:29:7B:1A:38:CE:CB:DC:51
            X509v3 Authority Key Identifier:
                keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/3133382e3132312e3232302e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:5d:50:97:68:e5:9c:7f:36:47:a6:f7:26:bd:09:83:3a:2f:
         9c:4e:65:92:a6:ad:c1:12:09:45:c7:cf:67:e4:6f:22:3d:64:
         72:a4:6f:6f:e5:2f:52:7a:9b:ed:d3:fe:13:0c:99:64:87:8e:
         bd:91:12:e4:02:81:f4:06:c7:e3:e4:cb:26:57:e4:c2:8e:b0:
         58:ea:8c:a4:e3:39:e1:e1:80:6a:b8:66:c5:a3:d0:a3:d2:78:
         51:9f:f7:b9:ce:0b:73:16:2c:37:16:0d:65:29:65:7d:09:4a:
         65:da:19:d4:d6:8e:e1:f5:33:98:76:5d:6e:7b:25:41:9a:9d:
         fe:b0:e4:9d:f9:87:4a:7f:1c:91:6e:84:1a:99:3e:e8:51:1f:
         b6:d3:95:1a:94:ae:cb:00:48:73:d1:62:29:e2:52:cc:02:90:
         b4:46:21:d3:94:a1:14:bc:f4:96:20:82:5b:41:57:6a:67:4d:
         84:52:10:5d:44:50:84:a3:e7:6b:97:f4:eb:ec:10:1e:9a:0e:
         b4:51:b3:d9:b3:70:eb:f3:f0:99:0a:58:c2:85:ff:ce:3f:79:
         17:a3:f6:31:33:de:40:41:eb:a3:ab:ee:6a:a6:13:a4:b9:f5:
         88:28:e1:0d:e3:31:1f:db:62:50:f7:9c:dc:fe:5f:b3:ef:bc:
         47:a3:2a:ff
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBN06SMwf89O/NFwquZzqEC0A6WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUxODlBNEJERUQ4RTJBRTMxQzBEQ0Y1MzM2ODkxRUEx
NjRFQ0EzNzAeFw0yMjEwMDYxNzM0NTdaFw0yMzEwMDUxNzM5NTdaMDMxMTAvBgNV
BAMTKEU1MDM4OUUxN0E3Q0I0RUZEOEYxMjNCMzI5N0IxQTM4Q0VDQkRDNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnyCCb03cHq672iiwaB2DFyVm5
7cLiM9mx5R+MxIE0PLoksMfrqIcNWIIwOd9EKvjEsQqlf9yBNTpXj6BRwOV3lZM0
m3kGTRDMHbDCY8rb64kRURUA2IBkj8D5aJoldd70UG4XiKB2LjuNz16zkeCau2y1
DtkJiATCf9qcfytO1sRPS37W5wRnkF53z2fvZfL6lKhmajJ4E3zieXknzP5685OI
BAt7j0IL9Bkpp69vDGnQbZgT8fIY9odk/zw9JBg1sRRRJ6nZD1UGupmNGsd9mVnA
CMURzAbdS+MN4MgQJsTt+nzKDn9hqCLT6PFz5vpSl3no0ptCVw2dOT2N+A1rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5QOJ4Xp8tO/Y8SOzKXsaOM7L3FEwHwYDVR0j
BBgwFoAUhRiaS97Y4q4xwNz1M2iR6hZOyjcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmJIV1N2UUZFQWpOSHIxUHBjd1JrZWRnTDZCWjllb2tHNFl2bnNGZ29Q
anUvMC84NTE4OUE0QkRFRDhFMkFFMzFDMERDRjUzMzY4OTFFQTE2NEVDQTM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg1MTg5QTRCREVEOEUyQUUz
MUMwRENGNTMzNjg5MUVBMTY0RUNBMzcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJiSFdTdlFGRUFqTkhyMVBwY3dSa2VkZ0w2Qlo5ZW9rRzRZdm5zRmdvUGp1LzAv
MzEzMzM4MmUzMTMyMzEyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMjM5MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop53DANBgkqhkiG9w0BAQsFAAOCAQEAvF1Q
l2jlnH82R6b3Jr0JgzovnE5lkqatwRIJRcfPZ+RvIj1kcqRvb+UvUnqb7dP+EwyZ
ZIeOvZES5AKB9AbH4+TLJlfkwo6wWOqMpOM54eGAarhmxaPQo9J4UZ/3uc4LcxYs
NxYNZSllfQlKZdoZ1NaO4fUzmHZdbnslQZqd/rDknfmHSn8ckW6EGpk+6FEfttOV
GpSuywBIc9FiKeJSzAKQtEYh05ShFLz0liCCW0FXamdNhFIQXURQhKPna5f06+wQ
HpoOtFGz2bNw6/PwmQpYwoX/zj95F6P2MTPeQEHro6vuaqYTpLn1iCjhDeMxH9ti
UPec3P5fs++8R6Mq/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:04 2024 by rpki-client on console-ams.rpki-client.org