Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e203533313533.roa
File:                     3133382e3230342e3232302e302f32322d3234203d3e203533313533.roa (raw, json)
Hash identifier:          rBrbsUkgfgp8dSlQeXk/xDkVbLRUfS3kGByjxapSlh8=
Subject key identifier:   F5:B5:EA:D9:69:CB:B5:31:E9:93:B0:52:D8:A0:1E:51:3C:98:17:B2
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       0C89A8036E02D724C4EDFFD5CB992F32D1ED39AA
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e203533313533.roa
Signing time:             Thu 10 Nov 2022 14:05:11 +0000
ROA not before:           Thu 10 Nov 2022 14:00:11 +0000
ROA not after:            Thu 09 Nov 2023 14:05:11 +0000
asID:                     53153
IP address blocks:        138.204.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:a8:03:6e:02:d7:24:c4:ed:ff:d5:cb:99:2f:32:d1:ed:39:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Nov 10 14:00:11 2022 GMT
            Not After : Nov  9 14:05:11 2023 GMT
        Subject: CN=F5B5EAD969CBB531E993B052D8A01E513C9817B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4c:f5:be:bb:3f:54:f7:6d:47:37:bc:dd:ae:
                    90:68:26:ba:01:ba:bf:86:7a:24:ec:83:da:73:fc:
                    aa:6a:f6:7e:9f:25:ea:c4:64:73:03:66:8e:01:6f:
                    ab:4c:3c:57:bb:ee:69:14:6b:d6:88:90:bb:23:72:
                    3a:96:35:d1:e8:ef:d0:60:9d:35:39:18:b1:06:1a:
                    d4:73:65:eb:a1:4f:f3:fc:45:2b:09:4b:8f:4f:db:
                    c7:81:18:9e:45:42:25:88:9d:b4:97:c8:e0:51:68:
                    4d:77:b8:9e:9c:ba:48:27:9b:19:4f:e0:09:ef:ba:
                    a8:a7:18:ff:70:ff:4c:db:aa:d1:56:d5:4f:c7:c7:
                    6f:b1:9e:e1:d6:78:3f:27:9a:c8:94:e1:97:83:b1:
                    3e:0c:99:8f:c0:98:df:a1:7e:80:5d:48:f5:43:9f:
                    6d:8f:83:d6:6c:8e:cc:09:d6:fe:97:92:b1:b8:e9:
                    8b:cb:aa:04:f9:03:71:d7:6f:47:7e:23:b9:29:07:
                    0f:e6:ff:eb:e6:0c:8c:22:1f:0b:1e:8a:3a:88:72:
                    76:c5:93:70:14:93:92:3f:8c:19:ef:ca:d8:32:59:
                    2d:04:38:c0:ca:05:1a:e3:45:a7:fb:a5:d6:70:18:
                    e0:2c:b2:71:a5:12:f1:1e:ae:f8:bc:1a:38:91:a4:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B5:EA:D9:69:CB:B5:31:E9:93:B0:52:D8:A0:1E:51:3C:98:17:B2
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3133382e3230342e3232302e302f32322d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:e2:ea:bc:4a:09:63:62:f3:2d:79:5b:a1:4f:e8:8e:ae:8a:
         e2:3e:a1:c0:42:09:35:b7:ae:0a:88:79:74:99:24:bb:9a:0f:
         7d:bb:b0:3f:01:18:5e:78:49:24:42:c0:48:88:bb:08:27:2e:
         24:f4:cd:df:dd:e4:2c:f3:f2:2f:84:61:61:5b:ef:f0:1e:a3:
         82:dd:1a:1d:00:e6:14:44:dd:ee:df:c4:a6:5f:b3:29:42:24:
         27:5a:cb:0e:50:d7:42:28:8d:2b:d8:c2:b6:10:35:9c:6b:5f:
         73:e4:7d:3f:3e:8c:13:e5:31:22:10:a5:6e:46:0b:b5:41:1f:
         6d:02:41:0f:88:73:dd:92:a9:17:3f:f8:67:5c:8e:e2:ba:4a:
         8f:86:25:db:20:ae:31:52:20:c1:df:bb:cc:75:30:57:7d:48:
         09:44:15:ba:79:55:2a:ee:95:c2:23:80:90:53:cf:78:54:b3:
         56:11:2f:d0:e2:ab:13:d9:b1:48:42:d9:c7:54:4e:0d:bd:6f:
         42:fb:7e:01:30:9f:cb:d5:8a:c6:01:d5:04:07:bc:d3:30:93:
         59:f0:db:84:c9:6b:e8:46:9b:85:f3:f3:87:3f:a4:f0:45:5a:
         1c:d5:2c:36:49:c4:73:a9:46:b2:18:eb:cb:66:b6:54:29:92:
         0b:49:6b:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDImoA24C1yTE7f/Vy5kvMtHtOaowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE2QzEwODdCQjFBNTI2MENCMzJFNDVGQkFCMDVCRkM2
MTE3N0RERTAeFw0yMjExMTAxNDAwMTFaFw0yMzExMDkxNDA1MTFaMDMxMTAvBgNV
BAMTKEY1QjVFQUQ5NjlDQkI1MzFFOTkzQjA1MkQ4QTAxRTUxM0M5ODE3QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTTPW+uz9U921HN7zdrpBoJroB
ur+GeiTsg9pz/Kpq9n6fJerEZHMDZo4Bb6tMPFe77mkUa9aIkLsjcjqWNdHo79Bg
nTU5GLEGGtRzZeuhT/P8RSsJS49P28eBGJ5FQiWInbSXyOBRaE13uJ6cukgnmxlP
4AnvuqinGP9w/0zbqtFW1U/Hx2+xnuHWeD8nmsiU4ZeDsT4MmY/AmN+hfoBdSPVD
n22Pg9ZsjswJ1v6XkrG46YvLqgT5A3HXb0d+I7kpBw/m/+vmDIwiHwseijqIcnbF
k3AUk5I/jBnvytgyWS0EOMDKBRrjRaf7pdZwGOAssnGlEvEervi8GjiRpCilAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9bXq2WnLtTHpk7BS2KAeUTyYF7IwHwYDVR0j
BBgwFoAU8WwQh7saUmDLMuRfurBb/GEXfd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC9GMTZDMTA4N0JCMUE1MjYwQ0IzMkU0NUZCQUIwNUJGQzYxMTc3RERFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YxNkMxMDg3QkIxQTUyNjBD
QjMyRTQ1RkJBQjA1QkZDNjExNzdEREUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKzNwwDQYJKoZIhvcNAQELBQADggEBAHDi6rxK
CWNi8y15W6FP6I6uiuI+ocBCCTW3rgqIeXSZJLuaD327sD8BGF54SSRCwEiIuwgn
LiT0zd/d5Czz8i+EYWFb7/Aeo4LdGh0A5hRE3e7fxKZfsylCJCdayw5Q10IojSvY
wrYQNZxrX3PkfT8+jBPlMSIQpW5GC7VBH20CQQ+Ic92SqRc/+GdcjuK6So+GJdsg
rjFSIMHfu8x1MFd9SAlEFbp5VSrulcIjgJBTz3hUs1YRL9DiqxPZsUhC2cdUTg29
b0L7fgEwn8vVisYB1QQHvNMwk1nw24TJa+hGm4Xz84c/pPBFWhzVLDZJxHOpRrIY
68tmtlQpkgtJa3I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org