Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa
File:                     3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          FWbh7Qm+PbyAQkn/Om4zJCnj4Yyr00BOrQU0vgzaK6c=
Subject key identifier:   07:19:21:3A:EC:5F:B4:20:B0:A7:C6:A9:77:C6:AD:95:0B:67:86:08
Certificate issuer:       /CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
Certificate serial:       0EF3E40774B49D4CD0DDBA6F5F76D5D3905A8F
Authority key identifier: 45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 23 Jan 2023 21:40:36 +0000
ROA not before:           Mon 23 Jan 2023 21:35:36 +0000
ROA not after:            Mon 22 Jan 2024 21:40:36 +0000
asID:                     262992
IP address blocks:        138.122.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f3:e4:07:74:b4:9d:4c:d0:dd:ba:6f:5f:76:d5:d3:90:5a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Validity
            Not Before: Jan 23 21:35:36 2023 GMT
            Not After : Jan 22 21:40:36 2024 GMT
        Subject: CN=0719213AEC5FB420B0A7C6A977C6AD950B678608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b7:e5:72:ed:3d:ee:b6:80:a0:ea:70:5e:2d:
                    23:2c:c2:6c:ab:4b:d0:74:7a:c6:1f:bb:3e:5b:62:
                    80:3c:e3:b7:48:fd:e9:12:bd:2f:50:96:a3:40:2c:
                    f7:34:a2:4a:44:3c:b5:b2:f7:e5:b7:cd:60:50:12:
                    1a:93:77:98:10:f1:df:84:db:ac:38:74:e9:54:e4:
                    42:c9:09:b9:9e:6c:b5:60:4f:60:7a:61:1d:e1:ff:
                    4f:18:90:f9:31:63:86:77:70:94:19:67:12:8a:98:
                    38:aa:c7:1e:fd:a5:b7:3d:42:da:e3:60:22:3d:76:
                    bd:a3:ab:f3:35:16:5a:8c:b1:ac:2b:64:03:d2:7b:
                    04:e2:e8:4f:1d:30:7a:e9:c0:48:91:ea:fa:11:75:
                    13:b9:6f:75:a8:7b:b7:47:7c:b3:14:72:82:fa:24:
                    12:4f:58:e0:d7:06:bd:fd:ab:14:5f:53:24:da:5f:
                    b2:df:07:8d:fc:7c:a0:26:1e:60:eb:b7:1e:79:d7:
                    f9:9c:53:75:7d:23:a7:4d:4d:31:b0:de:20:44:2d:
                    d9:fc:b7:18:75:a9:c8:0f:9e:63:6e:31:35:74:9f:
                    00:3c:8c:a0:eb:54:9b:3b:9b:c3:a4:ff:eb:60:8f:
                    2e:2a:bd:8a:08:59:1e:6a:c9:18:f5:e4:16:fe:35:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:19:21:3A:EC:5F:B4:20:B0:A7:C6:A9:77:C6:AD:95:0B:67:86:08
            X509v3 Authority Key Identifier:
                keyid:45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/3133382e3132322e3233362e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:3e:73:24:66:69:58:7a:69:df:91:c1:e9:1f:d5:32:9a:
         ce:3a:38:a1:5a:ff:7d:a1:8d:e8:fb:e6:82:6a:b1:ca:7c:9d:
         cc:eb:d3:25:8d:0a:43:0c:f5:d2:41:45:d6:a2:97:07:2b:8f:
         24:c9:4c:98:09:ed:21:28:97:91:57:f1:f8:83:16:68:44:e9:
         18:d6:a0:80:5e:29:04:9b:06:65:ed:e3:99:71:88:a0:4c:b5:
         0d:7f:1b:64:9b:b1:a0:c8:8c:18:9d:a5:9d:c1:9f:5e:3d:f5:
         37:45:20:be:18:c0:c2:6c:a5:fa:b0:b4:3f:26:9d:1d:ea:18:
         e7:b5:fe:7d:95:41:76:1d:14:2d:9b:90:d9:fe:4c:fd:04:1d:
         7b:ed:ea:98:ac:83:46:3a:85:4c:f0:43:da:d0:28:bf:4f:a1:
         74:01:4f:56:f8:a3:7b:c1:92:7a:b3:27:5f:b1:f8:d1:bb:db:
         eb:8d:00:ef:1f:c3:76:62:3b:28:af:04:a9:c1:8d:bb:bd:2f:
         47:1d:7f:0c:0f:68:53:14:87:1b:3d:66:6d:f1:b1:e1:31:74:
         14:e7:bc:9f:a6:d5:95:09:0b:c4:1a:96:77:15:cf:d7:85:01:
         eb:f6:89:09:5c:af:eb:80:15:11:c6:6f:40:57:21:b4:09:f3:
         35:f3:3b:17
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgITDvPkB3S0nUzQ3bpvX3bV05BajzANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0NTc5RTA5RjZGNDZCNzM1MDBGMTg3N0M3RjdCQzhGMEY2
NzdFNjA3MB4XDTIzMDEyMzIxMzUzNloXDTI0MDEyMjIxNDAzNlowMzExMC8GA1UE
AxMoMDcxOTIxM0FFQzVGQjQyMEIwQTdDNkE5NzdDNkFEOTUwQjY3ODYwODCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOG35XLtPe62gKDqcF4tIyzCbKtL
0HR6xh+7PltigDzjt0j96RK9L1CWo0As9zSiSkQ8tbL35bfNYFASGpN3mBDx34Tb
rDh06VTkQskJuZ5stWBPYHphHeH/TxiQ+TFjhndwlBlnEoqYOKrHHv2ltz1C2uNg
Ij12vaOr8zUWWoyxrCtkA9J7BOLoTx0weunASJHq+hF1E7lvdah7t0d8sxRygvok
Ek9Y4NcGvf2rFF9TJNpfst8Hjfx8oCYeYOu3HnnX+ZxTdX0jp01NMbDeIEQt2fy3
GHWpyA+eY24xNXSfADyMoOtUmzubw6T/62CPLiq9ighZHmrJGPXkFv41z/kCAwEA
AaOCAlMwggJPMB0GA1UdDgQWBBQHGSE67F+0ILCnxql3xq2VC2eGCDAfBgNVHSME
GDAWgBRFeeCfb0a3NQDxh3x/e8jw9nfmBzAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby8yYkhXU3ZRRkVBak5IcjFQcGN3UmtlZGdMNkJaOWVva0c0WXZuc0Znb1Bq
dS8xLzQ1NzlFMDlGNkY0NkI3MzUwMEYxODc3QzdGN0JDOEYwRjY3N0U2MDcuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvNDU3OUUwOUY2RjQ2QjczNTAw
RjE4NzdDN0Y3QkM4RjBGNjc3RTYwNy5jZXIwgbAGCCsGAQUFBwELBIGjMIGgMIGd
BggrBgEFBQcwC4aBkHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
MmJIV1N2UUZFQWpOSHIxUHBjd1JrZWRnTDZCWjllb2tHNFl2bnNGZ29QanUvMS8z
MTMzMzgyZTMxMzIzMjJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIz
NjMyMzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCinrsMA0GCSqGSIb3DQEBCwUAA4IBAQAGyD5z
JGZpWHpp35HB6R/VMprOOjihWv99oY3o++aCarHKfJ3M69MljQpDDPXSQUXWopcH
K48kyUyYCe0hKJeRV/H4gxZoROkY1qCAXikEmwZl7eOZcYigTLUNfxtkm7GgyIwY
naWdwZ9ePfU3RSC+GMDCbKX6sLQ/Jp0d6hjntf59lUF2HRQtm5DZ/kz9BB177eqY
rINGOoVM8EPa0Ci/T6F0AU9W+KN7wZJ6sydfsfjRu9vrjQDvH8N2YjsorwSpwY27
vS9HHX8MD2hTFIcbPWZt8bHhMXQU57yfptWVCQvEGpZ3Fc/XhQHr9okJXK/rgBUR
xm9AVyG0CfM18zsX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org