Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3232203d3e20323634313633.roa
File:                     3133382e39372e3131322e302f32322d3232203d3e20323634313633.roa (raw, json)
Hash identifier:          dPEWpWB09Cc5RX6ZkPhuzmpcwp3ok+pPt+G0v9YYmHw=
Subject key identifier:   64:1A:C8:55:9D:92:B2:98:77:97:2A:4E:65:CE:BE:4F:89:1E:89:D7
Certificate issuer:       /CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
Certificate serial:       4E666EB23933F23035763F63233BBD47B4441095
Authority key identifier: FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3232203d3e20323634313633.roa
Signing time:             Mon 27 Mar 2023 13:10:52 +0000
ROA not before:           Mon 27 Mar 2023 13:05:52 +0000
ROA not after:            Mon 25 Mar 2024 13:10:52 +0000
asID:                     264163
IP address blocks:        138.97.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:66:6e:b2:39:33:f2:30:35:76:3f:63:23:3b:bd:47:b4:44:10:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Validity
            Not Before: Mar 27 13:05:52 2023 GMT
            Not After : Mar 25 13:10:52 2024 GMT
        Subject: CN=641AC8559D92B29877972A4E65CEBE4F891E89D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:eb:19:10:e7:08:51:40:70:86:10:c7:44:01:
                    5b:8a:c5:aa:7b:9f:0c:98:2c:52:44:49:45:6e:9b:
                    0c:dd:72:74:45:ad:14:3a:a4:ca:3c:2a:2a:96:0a:
                    a8:6f:ad:e5:86:86:02:a6:94:29:b7:39:46:b8:7a:
                    81:31:90:e6:73:58:ef:0e:8b:4c:9c:28:0f:e4:4b:
                    67:5f:49:5f:ac:d3:37:a5:b9:74:bc:e2:08:6c:a6:
                    4a:dd:8e:b3:bc:53:ae:db:cd:ec:33:0a:89:c1:29:
                    1e:65:ee:87:dd:44:b0:70:b7:22:c5:82:bb:f9:5b:
                    ef:64:84:85:17:98:82:0b:2f:d5:4e:0a:d7:5a:25:
                    99:66:c1:38:ae:84:4a:0e:ea:4f:b9:3a:9f:67:1f:
                    52:93:cb:0a:17:50:ce:59:27:17:6f:20:ab:22:c2:
                    52:e2:24:af:21:2b:3a:75:eb:d8:91:42:23:5f:a3:
                    82:1e:8e:e9:89:14:a3:1d:4e:ab:c0:de:e2:04:32:
                    d0:b5:fd:ba:3f:7d:2f:3b:48:fe:21:11:72:6a:ce:
                    4e:60:98:e4:60:22:68:42:ef:d8:8a:8a:a2:1c:5d:
                    50:a3:63:fb:d5:a8:3b:5c:26:a9:20:79:b8:46:a7:
                    c3:dc:ed:2f:76:f2:0f:1e:f0:1b:81:c1:9b:1c:e7:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:C8:55:9D:92:B2:98:77:97:2A:4E:65:CE:BE:4F:89:1E:89:D7
            X509v3 Authority Key Identifier:
                keyid:FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131322e302f32322d3232203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:06:15:b4:17:4a:3f:b8:25:3b:46:8e:57:cd:fa:8b:7e:9c:
         6e:ef:5e:ec:ea:85:17:8a:29:72:65:d2:ac:d0:82:25:8c:3d:
         36:21:24:6b:68:61:20:e5:22:6f:fa:e6:7e:27:af:56:56:9d:
         aa:da:dc:27:b4:a1:b7:44:50:56:d6:ee:8e:09:a3:82:82:3d:
         27:2b:21:c9:2f:66:e3:26:98:b1:bc:d3:a0:ff:94:8b:e9:14:
         dd:81:6d:14:4f:ae:ce:af:ec:57:6c:8e:5b:ed:af:72:d5:3a:
         89:e7:c7:94:35:74:97:2c:bd:08:5c:94:39:d4:dc:8f:ee:b3:
         df:14:f5:c1:31:53:bd:fa:dc:36:8b:f6:f2:68:27:11:38:64:
         3d:65:d4:ce:c7:62:24:90:84:b3:f7:03:ff:3d:29:4d:5f:ff:
         3a:ab:03:4d:81:1e:ef:25:ef:ab:4e:69:8d:a1:e5:fe:62:21:
         ac:c9:38:cc:f7:7b:a4:ba:59:d7:b6:d0:f1:4c:43:97:fd:e2:
         2b:47:57:97:f7:30:12:3b:be:4a:d2:a1:ba:5a:13:31:c2:99:
         46:d3:ed:a5:aa:c2:ae:2c:ce:29:47:ce:a1:64:6d:e4:28:06:
         25:5a:6d:31:13:37:f1:f6:d0:73:3f:18:a8:36:a2:a0:e3:ff:
         c7:a6:00:4f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTmZusjkz8jA1dj9jIzu9R7REEJUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNDVCRDAyRUZCNzlBRjQxNzkyMEFDQzFDMTI3M0JF
MEE0NkZGNjAeFw0yMzAzMjcxMzA1NTJaFw0yNDAzMjUxMzEwNTJaMDMxMTAvBgNV
BAMTKDY0MUFDODU1OUQ5MkIyOTg3Nzk3MkE0RTY1Q0VCRTRGODkxRTg5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj6xkQ5whRQHCGEMdEAVuKxap7
nwyYLFJESUVumwzdcnRFrRQ6pMo8KiqWCqhvreWGhgKmlCm3OUa4eoExkOZzWO8O
i0ycKA/kS2dfSV+s0zeluXS84ghspkrdjrO8U67bzewzConBKR5l7ofdRLBwtyLF
grv5W+9khIUXmIILL9VOCtdaJZlmwTiuhEoO6k+5Op9nH1KTywoXUM5ZJxdvIKsi
wlLiJK8hKzp169iRQiNfo4IejumJFKMdTqvA3uIEMtC1/bo/fS87SP4hEXJqzk5g
mORgImhC79iKiqIcXVCjY/vVqDtcJqkgebhGp8Pc7S928g8e8BuBwZsc53Q7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZBrIVZ2Ssph3lypOZc6+T4keidcwHwYDVR0j
BBgwFoAU+uRb0C77ea9BeSCswcEnO+Ckb/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1IzWHJadGppM1lyYjN2MXp2dWsyREJ4eVE3QjQxenBqVXVBTTdGVkh1
dkUvMC9GQUU0NUJEMDJFRkI3OUFGNDE3OTIwQUNDMUMxMjczQkUwQTQ2RkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTQ1QkQwMkVGQjc5QUY0
MTc5MjBBQ0MxQzEyNzNCRTBBNDZGRjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSM1hyWnRqaTNZcmIzdjF6dnVrMkRCeHlRN0I0MXpwalV1QU03RlZIdXZFLzAv
MzEzMzM4MmUzOTM3MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYXAwDQYJKoZIhvcNAQELBQADggEBAGkGFbQX
Sj+4JTtGjlfN+ot+nG7vXuzqhReKKXJl0qzQgiWMPTYhJGtoYSDlIm/65n4nr1ZW
nara3Ce0obdEUFbW7o4Jo4KCPScrIckvZuMmmLG806D/lIvpFN2BbRRPrs6v7Fds
jlvtr3LVOonnx5Q1dJcsvQhclDnU3I/us98U9cExU7363DaL9vJoJxE4ZD1l1M7H
YiSQhLP3A/89KU1f/zqrA02BHu8l76tOaY2h5f5iIazJOMz3e6S6Wde20PFMQ5f9
4itHV5f3MBI7vkrSobpaEzHCmUbT7aWqwq4szilHzqFkbeQoBiVabTETN/H20HM/
GKg2oqDj/8emAE8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org