Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3133382e39372e36342e302f32322d3234203d3e203631353931.roa
File:                     3133382e39372e36342e302f32322d3234203d3e203631353931.roa (raw, json)
Hash identifier:          9j8/Xj7UlhF6KHoTzHtea2qauC7bBd05dJUxMHKjzis=
Subject key identifier:   65:09:44:AE:39:0D:7A:7F:2C:BE:8A:48:F4:99:8A:98:23:64:C8:32
Certificate issuer:       /CN=177534573015FFF667FEFF6833F132D1839610DB
Certificate serial:       33097219ABAB65DD11E6B927C73DF6FDA1359F7F
Authority key identifier: 17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3133382e39372e36342e302f32322d3234203d3e203631353931.roa
Signing time:             Thu 03 Aug 2023 20:00:00 +0000
ROA not before:           Thu 03 Aug 2023 19:55:00 +0000
ROA not after:            Thu 01 Aug 2024 20:00:00 +0000
asID:                     61591
IP address blocks:        138.97.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:09:72:19:ab:ab:65:dd:11:e6:b9:27:c7:3d:f6:fd:a1:35:9f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177534573015FFF667FEFF6833F132D1839610DB
        Validity
            Not Before: Aug  3 19:55:00 2023 GMT
            Not After : Aug  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:38:2a:47:f9:37:bf:14:90:04:26:8f:02:
                    61:e2:da:2f:de:ff:a3:38:f2:c0:47:48:d6:8c:e5:
                    a6:7f:4e:be:6f:6a:f3:40:1e:6b:c9:bc:a0:6a:77:
                    a2:7d:81:eb:f2:10:43:ae:c9:35:1d:f8:c5:ea:9b:
                    70:09:59:58:0e:58:49:e0:01:6b:81:13:51:5d:73:
                    4b:cd:b4:e5:63:d7:7b:f0:98:81:d4:c2:cb:8e:48:
                    15:22:75:3d:8c:53:38:2f:e3:d6:3d:2b:1e:ff:96:
                    16:ec:38:f0:c1:5b:c1:4c:5f:2d:ab:9f:f4:de:d0:
                    89:45:22:0e:ec:a5:c6:79:0d:ff:87:bf:c2:27:da:
                    c3:86:7b:d6:88:57:c6:51:df:24:58:74:c3:7e:7b:
                    13:c5:39:e5:c3:bb:47:b1:a1:9b:1b:0c:a7:ef:4c:
                    fa:aa:9b:1c:bb:9b:8c:dc:4c:ce:13:ba:b9:3f:96:
                    c9:f8:cb:41:98:fd:1c:06:77:bf:5b:89:ad:0b:7a:
                    3e:00:a7:87:82:cf:85:dc:f5:4f:8e:dc:29:58:b3:
                    73:52:26:a4:38:1a:37:93:f1:cd:39:25:70:cb:c1:
                    e1:d8:91:6d:93:51:54:7a:f9:68:15:12:a4:6e:f8:
                    35:c2:8c:85:7c:51:82:dc:c7:d7:a4:08:66:31:ec:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:09:44:AE:39:0D:7A:7F:2C:BE:8A:48:F4:99:8A:98:23:64:C8:32
            X509v3 Authority Key Identifier:
                keyid:17:75:34:57:30:15:FF:F6:67:FE:FF:68:33:F1:32:D1:83:96:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/177534573015FFF667FEFF6833F132D1839610DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177534573015FFF667FEFF6833F132D1839610DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ENPD2HewQ764qtZNWvZ6tWy7uNBSzRkNTMJdj18RaPd/0/3133382e39372e36342e302f32322d3234203d3e203631353931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:94:b7:9e:d6:4f:78:85:ae:8d:c8:1e:64:8d:2a:47:e7:c6:
         fe:40:a6:33:6c:8c:fc:a5:8f:8f:78:e3:62:bc:87:7e:04:44:
         85:27:02:1b:ff:68:55:f3:08:73:d0:63:17:0a:7b:0f:16:0b:
         da:90:0c:67:cd:74:86:b8:6f:65:76:16:7e:63:79:e9:3a:b9:
         a1:f0:14:89:75:9b:c4:42:4d:55:4c:b5:38:4c:17:fc:90:bb:
         8b:67:22:09:6b:ff:5d:90:81:b4:98:d5:cf:f7:34:2d:42:1f:
         0e:5d:d7:c1:bb:52:09:1d:61:d7:f3:01:a9:cb:8e:70:cc:90:
         9e:db:d2:91:e3:f8:98:ae:72:96:14:13:be:eb:f2:52:d5:f3:
         8c:32:f6:ce:06:28:59:23:63:dc:7c:e6:9e:85:3c:1f:d5:0d:
         0a:f1:db:6d:4e:c2:67:58:79:a6:ce:d2:5c:55:8b:0a:63:45:
         14:9f:3f:40:99:70:a7:37:f9:d5:c7:59:0f:2c:b9:a5:77:3d:
         61:e2:66:5f:f8:65:01:e3:e2:0d:6c:40:a5:6c:30:85:a0:74:
         32:65:94:72:c8:77:4c:6b:c1:2a:82:c9:cc:47:5b:35:e1:21:
         da:1d:38:da:0f:b0:d4:78:6d:73:c0:47:3c:f1:1f:cf:e8:f0:
         ad:37:98:60
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUMwlyGaurZd0R5rknxz32/aE1n38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc3NTM0NTczMDE1RkZGNjY3RkVGRjY4MzNGMTMyRDE4
Mzk2MTBEQjAeFw0yMzA4MDMxOTU1MDBaFw0yNDA4MDEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U2QzM4MkE0N0Y5MzdCRjE0
OTAwNDI2OEYwMjYxRTJEQTJGREVGRkEzMzhGMkMwNDc0OEQ2OENFNUE2N0Y0RUJF
NkY2QUYzNDAxRTZCQzlCQ0EwNkE3N0EyN0Q4MUVCRjIxMDQzQUVDOTM1MURGOEM1
RUE5QjcwMDk1OTU4MEU1ODQ5RTAwMTZCODExMzUxNUQ3MzRCQ0RCNEU1NjNENzdC
RjA5ODgxRDRDMkNCOEU0ODE1MjI3NTNEOEM1MzM4MkZFM0Q2M0QyQjFFRkY5NjE2
RUMzOEYwQzE1QkMxNEM1RjJEQUI5RkY0REVEMDg5NDUyMjBFRUNBNUM2NzkwREZG
ODdCRkMyMjdEQUMzODY3QkQ2ODg1N0M2NTFERjI0NTg3NEMzN0U3QjEzQzUzOUU1
QzNCQjQ3QjFBMTlCMUIwQ0E3RUY0Q0ZBQUE5QjFDQkI5QjhDREM0Q0NFMTNCQUI5
M0Y5NkM5RjhDQjQxOThGRDFDMDY3N0JGNUI4OUFEMEI3QTNFMDBBNzg3ODJDRjg1
RENGNTRGOEVEQzI5NThCMzczNTIyNkE0MzgxQTM3OTNGMUNEMzkyNTcwQ0JDMUUx
RDg5MTZEOTM1MTU0N0FGOTY4MTUxMkE0NkVGODM1QzI4Qzg1N0M1MTgyRENDN0Q3
QTQwODY2MzFFQzQ0NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzmw4Kkf5N78UkAQmjwJh4tov3v+jOPLAR0jWjOWmf06+b2rzQB5r
ybyganeifYHr8hBDrsk1HfjF6ptwCVlYDlhJ4AFrgRNRXXNLzbTlY9d78JiB1MLL
jkgVInU9jFM4L+PWPSse/5YW7DjwwVvBTF8tq5/03tCJRSIO7KXGeQ3/h7/CJ9rD
hnvWiFfGUd8kWHTDfnsTxTnlw7tHsaGbGwyn70z6qpscu5uM3EzOE7q5P5bJ+MtB
mP0cBne/W4mtC3o+AKeHgs+F3PVPjtwpWLNzUiakOBo3k/HNOSVwy8Hh2JFtk1FU
evloFRKkbvg1woyFfFGC3MfXpAhmMexEcQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGUJRK45DXp/LL6KSPSZipgjZMgyMB8GA1UdIwQYMBaAFBd1NFcwFf/2Z/7/aDPx
MtGDlhDbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzNFTlBEMkhld1E3NjRx
dFpOV3ZaNnRXeTd1TkJTelJrTlRNSmRqMThSYVBkLzAvMTc3NTM0NTczMDE1RkZG
NjY3RkVGRjY4MzNGMTMyRDE4Mzk2MTBEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzc1MzQ1NzMwMTVGRkY2NjdGRUZGNjgzM0YxMzJEMTgzOTYx
MERCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8zRU5QRDJIZXdRNzY0cXRaTld2
WjZ0V3k3dU5CU3pSa05UTUpkajE4UmFQZC8wLzMxMzMzODJlMzkzNzJlMzYzNDJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzNTM5MzEucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKYUAw
DQYJKoZIhvcNAQELBQADggEBADOUt57WT3iFro3IHmSNKkfnxv5ApjNsjPylj494
42K8h34ERIUnAhv/aFXzCHPQYxcKew8WC9qQDGfNdIa4b2V2Fn5jeek6uaHwFIl1
m8RCTVVMtThMF/yQu4tnIglr/12QgbSY1c/3NC1CHw5d18G7UgkdYdfzAanLjnDM
kJ7b0pHj+JiucpYUE77r8lLV84wy9s4GKFkjY9x85p6FPB/VDQrx221OwmdYeabO
0lxViwpjRRSfP0CZcKc3+dXHWQ8suaV3PWHiZl/4ZQHj4g1sQKVsMIWgdDJllHLI
d0xrwSqCycxHWzXhIdodONoPsNR4bXPARzzxH8/o8K03mGA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org