Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa
File:                     3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa (raw, json)
Hash identifier:          BWGfvKWnPYDewv229QpO8s/OQQDVvVE2iMWaUAcZ9T8=
Subject key identifier:   28:02:5C:74:28:7E:1E:CA:BD:49:98:E0:EF:38:1D:3A:B3:FC:34:8F
Certificate issuer:       /CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
Certificate serial:       16E809BFAA71FDC2909E6E4ED0F143B2DF1017D9
Authority key identifier: 78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa
Signing time:             Sat 08 Apr 2023 03:10:02 +0000
ROA not before:           Sat 08 Apr 2023 03:05:02 +0000
ROA not after:            Sat 06 Apr 2024 03:10:02 +0000
asID:                     264301
IP address blocks:        138.121.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:09:bf:aa:71:fd:c2:90:9e:6e:4e:d0:f1:43:b2:df:10:17:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7865DDF6994A4180F54A56BC8EB587B80A32279C
        Validity
            Not Before: Apr  8 03:05:02 2023 GMT
            Not After : Apr  6 03:10:02 2024 GMT
        Subject: CN=28025C74287E1ECABD4998E0EF381D3AB3FC348F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:08:67:f4:f4:5b:48:f5:36:13:17:61:3a:
                    51:c1:5d:a6:24:2d:bf:bd:e2:83:99:47:78:7c:06:
                    a0:f2:11:51:60:42:c6:ad:86:e5:70:e0:67:a1:75:
                    16:fa:f3:83:98:f1:db:e8:d7:33:30:3b:8c:bc:58:
                    90:1f:e4:bf:d4:0b:86:42:95:b8:09:04:51:a5:e6:
                    6c:1a:f2:16:0e:7a:dc:bd:cc:f9:07:74:3c:a8:12:
                    05:d6:bb:09:d7:f7:ad:6d:c1:39:9b:e5:52:a0:e0:
                    1d:f8:94:c5:99:b6:97:1b:1e:bc:c5:3b:76:8c:21:
                    71:56:a2:34:30:3e:0b:09:d9:b9:21:a8:3e:fc:c2:
                    79:40:3e:d2:c8:c0:a6:42:c9:58:8f:41:de:62:e6:
                    13:e5:12:e9:9f:83:5c:e1:9a:c1:3b:95:49:50:f3:
                    a1:34:48:60:5e:29:44:19:3f:a3:fd:70:bf:96:82:
                    96:e7:63:41:51:19:40:40:9e:1f:04:89:d6:b3:ef:
                    b1:13:2e:99:5b:ad:c4:1a:33:6d:b6:63:8a:e3:63:
                    17:9c:ae:6c:cf:5a:48:6f:b4:f6:b1:b8:e3:61:f6:
                    10:d1:06:2e:b5:82:88:27:91:21:bf:81:cf:33:4b:
                    c3:cc:c4:ea:f9:65:af:69:04:77:77:8f:78:c6:f1:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:02:5C:74:28:7E:1E:CA:BD:49:98:E0:EF:38:1D:3A:B3:FC:34:8F
            X509v3 Authority Key Identifier:
                keyid:78:65:DD:F6:99:4A:41:80:F5:4A:56:BC:8E:B5:87:B8:0A:32:27:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7865DDF6994A4180F54A56BC8EB587B80A32279C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kUADYaLBDzaBZaBFAW2fNVHquxot4N96nN3ZCydYfrT/0/3133382e3132312e3139392e302f32342d3234203d3e20323634333031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:70:12:a5:c9:2f:9e:4a:4e:1a:1c:46:10:56:de:84:a9:e2:
         45:fd:3f:fe:54:5e:62:c9:00:cf:95:2c:16:13:fd:82:d6:1f:
         91:49:01:f0:be:9e:0e:f3:05:31:f7:57:90:18:2a:fd:d4:7c:
         af:7e:b6:9c:09:7d:55:59:ea:1e:50:19:53:e8:90:0a:b7:1b:
         7d:f2:69:eb:d6:79:a4:12:98:43:a4:16:1a:09:07:55:54:66:
         67:45:1e:aa:9a:9a:8b:65:4d:93:6d:60:32:70:7f:31:98:3b:
         69:16:8d:c8:3f:73:79:72:37:9b:d0:88:91:30:be:fa:0d:ec:
         14:58:aa:00:8b:c3:46:b8:5e:c3:9f:b7:8a:54:e1:5a:60:61:
         86:59:20:7b:ca:eb:41:2e:6e:99:f7:d4:f5:5e:21:87:ac:98:
         a0:0b:5f:39:82:24:f0:95:e3:8d:2f:4d:ad:39:7c:f5:b0:18:
         4a:79:c2:82:8e:77:af:e3:bd:1d:ef:ae:bd:1f:4c:42:18:8a:
         e5:16:84:b6:36:52:84:da:75:09:07:df:1a:9f:5e:4c:99:93:
         80:0f:99:35:7d:d8:13:65:ff:66:ec:31:8b:51:f6:f1:de:d9:
         aa:0b:5a:7c:45:0c:6d:b9:c0:ed:c6:06:ee:b2:f1:2d:51:5f:
         e7:e3:32:d2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFugJv6px/cKQnm5O0PFDst8QF9kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg2NURERjY5OTRBNDE4MEY1NEE1NkJDOEVCNTg3Qjgw
QTMyMjc5QzAeFw0yMzA0MDgwMzA1MDJaFw0yNDA0MDYwMzEwMDJaMDMxMTAvBgNV
BAMTKDI4MDI1Qzc0Mjg3RTFFQ0FCRDQ5OThFMEVGMzgxRDNBQjNGQzM0OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5Qhn9PRbSPU2ExdhOlHBXaYk
Lb+94oOZR3h8BqDyEVFgQsathuVw4GehdRb684OY8dvo1zMwO4y8WJAf5L/UC4ZC
lbgJBFGl5mwa8hYOety9zPkHdDyoEgXWuwnX961twTmb5VKg4B34lMWZtpcbHrzF
O3aMIXFWojQwPgsJ2bkhqD78wnlAPtLIwKZCyViPQd5i5hPlEumfg1zhmsE7lUlQ
86E0SGBeKUQZP6P9cL+WgpbnY0FRGUBAnh8Eidaz77ETLplbrcQaM222Y4rjYxec
rmzPWkhvtPaxuONh9hDRBi61gognkSG/gc8zS8PMxOr5Za9pBHd3j3jG8SNLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKAJcdCh+Hsq9SZjg7zgdOrP8NI8wHwYDVR0j
BBgwFoAUeGXd9plKQYD1Sla8jrWHuAoyJ5wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmtVQURZYUxCRHphQlphQkZBVzJmTlZIcXV4b3Q0Tjk2bk4zWkN5ZFlm
clQvMC83ODY1RERGNjk5NEE0MTgwRjU0QTU2QkM4RUI1ODdCODBBMzIyNzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc4NjVEREY2OTk0QTQxODBG
NTRBNTZCQzhFQjU4N0I4MEEzMjI3OUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJrVUFEWWFMQkR6YUJaYUJGQVcyZk5WSHF1eG90NE45Nm5OM1pDeWRZZnJULzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzkzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMzMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp5xzANBgkqhkiG9w0BAQsFAAOCAQEAlHAS
pckvnkpOGhxGEFbehKniRf0//lReYskAz5UsFhP9gtYfkUkB8L6eDvMFMfdXkBgq
/dR8r362nAl9VVnqHlAZU+iQCrcbffJp69Z5pBKYQ6QWGgkHVVRmZ0Ueqpqai2VN
k21gMnB/MZg7aRaNyD9zeXI3m9CIkTC++g3sFFiqAIvDRrhew5+3ilThWmBhhlkg
e8rrQS5umffU9V4hh6yYoAtfOYIk8JXjjS9NrTl89bAYSnnCgo53r+O9He+uvR9M
QhiK5RaEtjZShNp1CQffGp9eTJmTgA+ZNX3YE2X/Zuwxi1H28d7ZqgtafEUMbbnA
7cYG7rLxLVFf5+My0g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org