Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139372e302f32342d3234203d3e20323634333031.roa
File:                     3133382e3132312e3139372e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier:          SK3b36cqsV/FmLY7rD62ATtme6FmxyVJO6p4+onyNQQ=
Subject key identifier:   D0:AF:5C:B8:B9:4D:7D:C1:8F:77:11:F4:6B:68:35:8B:C2:56:32:0F
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       16FFCAE7FE140A9629E15AF3F5BB5FDC5E792B70
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139372e302f32342d3234203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:09:50 +0000
ROA not before:           Sat 08 Apr 2023 03:04:50 +0000
ROA not after:            Sat 06 Apr 2024 03:09:50 +0000
asID:                     264301
IP address blocks:        138.121.197.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:ff:ca:e7:fe:14:0a:96:29:e1:5a:f3:f5:bb:5f:dc:5e:79:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:04:50 2023 GMT
            Not After : Apr  6 03:09:50 2024 GMT
        Subject: CN=D0AF5CB8B94D7DC18F7711F46B68358BC256320F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:67:d8:f1:8a:82:de:8e:56:eb:92:4a:77:
                    e3:79:e3:29:dd:0e:fa:87:9f:12:59:19:fc:e8:80:
                    9c:76:b4:b4:20:fa:ef:b3:64:20:f5:59:d6:3a:21:
                    c4:9f:0c:59:ec:0b:bd:06:a7:6e:f9:4e:82:7a:74:
                    3e:b4:50:5e:50:60:d2:b2:70:7d:d5:d3:b4:21:79:
                    4e:26:2d:e4:c8:fb:c9:2f:82:56:a8:b9:18:b8:8a:
                    57:34:ca:24:2c:a2:1c:23:25:88:9e:ea:ae:a9:90:
                    e9:73:d0:56:d5:b2:89:ab:de:4f:f9:a4:7b:29:8c:
                    d8:82:71:02:ac:5a:e1:1f:29:fe:d3:b4:fd:39:4e:
                    e8:0e:6e:dc:a8:bf:bd:07:5b:e1:f8:2a:e2:49:04:
                    b1:1a:71:93:99:51:40:22:17:df:05:62:4f:3d:f8:
                    29:00:fa:eb:bc:ab:a3:62:a2:9a:2c:45:34:75:24:
                    af:6b:9e:d9:60:21:15:6d:11:ee:fa:70:ba:d4:32:
                    94:18:b3:c0:94:7a:f9:dd:11:2e:29:e7:38:b6:d8:
                    7b:1b:06:2c:64:4a:e8:c8:69:8b:55:e1:38:06:7d:
                    3c:25:1d:c8:ab:0e:1d:15:b6:2c:18:c4:eb:39:bf:
                    67:bf:71:58:01:b1:a8:b0:0c:31:68:28:4e:a7:89:
                    98:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AF:5C:B8:B9:4D:7D:C1:8F:77:11:F4:6B:68:35:8B:C2:56:32:0F
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139372e302f32342d3234203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:20:7c:85:96:3d:a1:a6:68:76:da:d1:e7:72:f0:b8:b9:21:
         36:6c:e9:46:f7:e0:43:4d:3a:42:74:66:9e:23:bf:ea:ed:55:
         18:98:7b:06:35:63:0b:99:ef:8b:a5:f1:8b:26:a7:c1:67:fc:
         42:27:0e:b8:e7:e1:5f:21:9b:f3:87:27:7c:90:64:2e:e9:49:
         ab:92:8a:07:1e:2d:de:88:04:54:c7:14:f1:ac:a0:71:99:4a:
         66:2d:70:96:97:22:67:21:df:38:2f:a6:99:7d:ad:76:0d:1b:
         14:d3:80:ad:a4:eb:d9:61:fe:dc:03:3b:d5:12:d0:d9:7c:de:
         b4:58:67:14:1a:53:52:80:b3:96:b1:71:ed:dc:2d:71:47:84:
         22:00:e1:20:70:40:64:3d:9a:f2:85:18:3e:b7:d7:9b:6a:ba:
         70:f0:4c:11:7e:3a:2a:11:15:4f:be:88:6e:0d:a7:ca:1c:ac:
         65:4b:b1:c5:5b:ee:3b:aa:d8:ab:a9:bb:da:bd:4a:be:b1:90:
         87:7c:37:08:d8:f9:c0:1e:c9:f9:76:02:41:5b:f4:92:8c:d0:
         9e:0b:37:5b:ee:1b:ea:57:22:a9:db:a5:c4:73:04:54:a4:33:
         7a:09:28:40:aa:6a:04:33:11:9b:da:25:40:79:41:e3:f6:ea:
         48:5d:12:ee
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFv/K5/4UCpYp4Vrz9btf3F55K3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg2NURERjY5OTRBNDE4MEY1NEE1NkJDOEVCNTg3Qjgw
QTMyMjc5QzAeFw0yMzA0MDgwMzA0NTBaFw0yNDA0MDYwMzA5NTBaMDMxMTAvBgNV
BAMTKEQwQUY1Q0I4Qjk0RDdEQzE4Rjc3MTFGNDZCNjgzNThCQzI1NjMyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwyWfY8YqC3o5W65JKd+N54ynd
DvqHnxJZGfzogJx2tLQg+u+zZCD1WdY6IcSfDFnsC70Gp275ToJ6dD60UF5QYNKy
cH3V07QheU4mLeTI+8kvglaouRi4ilc0yiQsohwjJYie6q6pkOlz0FbVsomr3k/5
pHspjNiCcQKsWuEfKf7TtP05TugObtyov70HW+H4KuJJBLEacZOZUUAiF98FYk89
+CkA+uu8q6NioposRTR1JK9rntlgIRVtEe76cLrUMpQYs8CUevndES4p5zi22Hsb
BixkSujIaYtV4TgGfTwlHcirDh0VtiwYxOs5v2e/cVgBsaiwDDFoKE6niZghAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0K9cuLlNfcGPdxH0a2g1i8JWMg8wHwYDVR0j
BBgwFoAUeGXd9plKQYD1Sla8jrWHuAoyJ5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtVQURZYUxCRHphQlphQkZBVzJmTlZIcXV4b3Q0Tjk2bk4zWkN5ZFlm
clQvMC83ODY1RERGNjk5NEE0MTgwRjU0QTU2QkM4RUI1ODdCODBBMzIyNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4NjVEREY2OTk0QTQxODBG
NTRBNTZCQzhFQjU4N0I4MEEzMjI3OUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrVUFEWWFMQkR6YUJaYUJGQVcyZk5WSHF1eG90NE45Nm5OM1pDeWRZZnJULzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5xTANBgkqhkiG9w0BAQsFAAOCAQEAhSB8
hZY9oaZodtrR53LwuLkhNmzpRvfgQ006QnRmniO/6u1VGJh7BjVjC5nvi6Xxiyan
wWf8QicOuOfhXyGb84cnfJBkLulJq5KKBx4t3ogEVMcU8aygcZlKZi1wlpciZyHf
OC+mmX2tdg0bFNOAraTr2WH+3AM71RLQ2XzetFhnFBpTUoCzlrFx7dwtcUeEIgDh
IHBAZD2a8oUYPrfXm2q6cPBMEX46KhEVT76Ibg2nyhysZUuxxVvuO6rYq6m72r1K
vrGQh3w3CNj5wB7J+XYCQVv0kozQngs3W+4b6lciqdulxHMEVKQzegkoQKpqBDMR
m9olQHlB4/bqSF0S7g==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:40:54 2025 by rpki-client