Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131342e302f32342d3234203d3e20323634313633.roa
File:                     3133382e39372e3131342e302f32342d3234203d3e20323634313633.roa (raw, json)
Hash identifier:          Mzg3J1U46JL5fs6JlPerruP91H11p9HSNL2/5mwLkGg=
Subject key identifier:   07:04:44:9E:B3:03:9D:9C:56:76:F5:B1:DA:5C:15:54:E6:8F:C9:7E
Certificate issuer:       /CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
Certificate serial:       35474D3BDD1B589209F8A1108148E45EFCA36C06
Authority key identifier: FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131342e302f32342d3234203d3e20323634313633.roa
Signing time:             Mon 27 Mar 2023 13:10:53 +0000
ROA not before:           Mon 27 Mar 2023 13:05:53 +0000
ROA not after:            Mon 25 Mar 2024 13:10:53 +0000
asID:                     264163
IP address blocks:        138.97.114.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:47:4d:3b:dd:1b:58:92:09:f8:a1:10:81:48:e4:5e:fc:a3:6c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6
        Validity
            Not Before: Mar 27 13:05:53 2023 GMT
            Not After : Mar 25 13:10:53 2024 GMT
        Subject: CN=0704449EB3039D9C5676F5B1DA5C1554E68FC97E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:99:64:c7:f4:f7:33:21:ef:fc:1f:39:43:
                    17:ea:09:12:e6:f0:7c:ea:73:a9:01:11:68:94:09:
                    34:a4:5f:ac:ad:4e:ab:79:75:d1:68:f6:21:19:f8:
                    d9:86:87:fd:ed:03:21:24:58:06:2b:21:6c:fc:8f:
                    ae:a9:a9:0c:44:79:1f:4e:c5:30:18:a4:6f:b1:29:
                    77:94:d1:19:56:c6:3c:f8:e4:92:c6:ef:c7:9f:fe:
                    eb:e7:bd:df:ba:ea:fa:20:57:9c:f5:16:15:85:e9:
                    c8:28:53:61:29:fd:cc:61:df:8e:3b:0a:85:22:66:
                    26:32:58:53:0b:18:03:59:71:38:65:fd:9e:ef:ea:
                    26:89:f6:0d:4b:9a:6c:f3:74:d6:b5:25:ad:35:36:
                    85:a7:01:39:60:82:0d:86:65:13:50:d5:e0:dd:9b:
                    43:9c:33:3d:f0:dc:4d:0a:9b:4f:f1:d7:17:ec:8b:
                    55:09:73:ef:d5:fc:a6:4c:30:5b:cf:62:59:a3:03:
                    b3:0b:8d:35:4e:8a:96:c5:cc:48:ba:1b:cb:8d:44:
                    52:b8:33:ce:c7:51:fd:99:3a:ff:8c:86:06:03:e8:
                    9e:9d:66:e5:af:74:fd:35:bc:d2:78:85:4e:bb:b6:
                    94:c2:3a:4c:43:54:39:14:c8:e2:07:7b:67:26:a9:
                    34:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:04:44:9E:B3:03:9D:9C:56:76:F5:B1:DA:5C:15:54:E6:8F:C9:7E
            X509v3 Authority Key Identifier:
                keyid:FA:E4:5B:D0:2E:FB:79:AF:41:79:20:AC:C1:C1:27:3B:E0:A4:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE45BD02EFB79AF417920ACC1C1273BE0A46FF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3R3XrZtji3Yrb3v1zvuk2DBxyQ7B41zpjUuAM7FVHuvE/0/3133382e39372e3131342e302f32342d3234203d3e20323634313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:d2:18:d1:7c:65:7b:7b:74:65:99:a5:eb:be:dd:db:13:
         53:3c:6d:c6:5e:fe:0f:fa:67:ac:4f:40:fe:2a:f7:aa:a4:d5:
         f2:1c:7f:6b:d4:d6:fa:59:e6:ac:e5:2c:0e:b2:71:b9:3e:e2:
         9f:59:c5:a3:84:90:98:2f:92:40:b3:05:2d:31:3f:00:f6:9c:
         dc:1b:5a:84:03:d0:50:5f:35:4f:f7:fa:0b:74:1b:9e:8a:5b:
         82:d1:77:e9:a6:0c:a2:64:28:c9:d6:11:e9:50:e5:49:e9:76:
         08:44:b7:2d:5c:74:1d:3f:26:9f:21:c1:cc:57:7e:55:2e:8e:
         20:6a:70:2c:6b:9f:69:54:87:39:2c:72:9d:78:4e:3f:ca:9c:
         1a:48:00:15:98:00:93:c1:5f:cf:c4:1b:e9:3c:38:a1:46:c8:
         c0:32:7d:08:c6:44:28:68:38:31:eb:9b:fb:fb:ab:7b:a8:b0:
         28:5f:9c:70:32:d9:2a:75:cf:3f:28:f3:ff:1d:c4:9a:69:26:
         85:f6:5d:ee:09:07:9b:76:87:e7:7a:2a:6c:7d:55:de:79:12:
         4a:40:51:b6:61:74:6b:ad:66:9d:6d:cb:59:93:7a:91:51:b5:
         ab:88:1e:32:4d:3f:fe:1b:8f:8f:7b:21:05:52:a4:45:b6:e3:
         6e:a1:40:e0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNUdNO90bWJIJ+KEQgUjkXvyjbAYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNDVCRDAyRUZCNzlBRjQxNzkyMEFDQzFDMTI3M0JF
MEE0NkZGNjAeFw0yMzAzMjcxMzA1NTNaFw0yNDAzMjUxMzEwNTNaMDMxMTAvBgNV
BAMTKDA3MDQ0NDlFQjMwMzlEOUM1Njc2RjVCMURBNUMxNTU0RTY4RkM5N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Fplkx/T3MyHv/B85QxfqCRLm
8Hzqc6kBEWiUCTSkX6ytTqt5ddFo9iEZ+NmGh/3tAyEkWAYrIWz8j66pqQxEeR9O
xTAYpG+xKXeU0RlWxjz45JLG78ef/uvnvd+66vogV5z1FhWF6cgoU2Ep/cxh3447
CoUiZiYyWFMLGANZcThl/Z7v6iaJ9g1LmmzzdNa1Ja01NoWnATlggg2GZRNQ1eDd
m0OcMz3w3E0Km0/x1xfsi1UJc+/V/KZMMFvPYlmjA7MLjTVOipbFzEi6G8uNRFK4
M87HUf2ZOv+MhgYD6J6dZuWvdP01vNJ4hU67tpTCOkxDVDkUyOIHe2cmqTRRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBwREnrMDnZxWdvWx2lwVVOaPyX4wHwYDVR0j
BBgwFoAU+uRb0C77ea9BeSCswcEnO+Ckb/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1IzWHJadGppM1lyYjN2MXp2dWsyREJ4eVE3QjQxenBqVXVBTTdGVkh1
dkUvMC9GQUU0NUJEMDJFRkI3OUFGNDE3OTIwQUNDMUMxMjczQkUwQTQ2RkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTQ1QkQwMkVGQjc5QUY0
MTc5MjBBQ0MxQzEyNzNCRTBBNDZGRjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSM1hyWnRqaTNZcmIzdjF6dnVrMkRCeHlRN0I0MXpwalV1QU03RlZIdXZFLzAv
MzEzMzM4MmUzOTM3MmUzMTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYXIwDQYJKoZIhvcNAQELBQADggEBAJwJ0hjR
fGV7e3RlmaXrvt3bE1M8bcZe/g/6Z6xPQP4q96qk1fIcf2vU1vpZ5qzlLA6ycbk+
4p9ZxaOEkJgvkkCzBS0xPwD2nNwbWoQD0FBfNU/3+gt0G56KW4LRd+mmDKJkKMnW
EelQ5UnpdghEty1cdB0/Jp8hwcxXflUujiBqcCxrn2lUhzkscp14Tj/KnBpIABWY
AJPBX8/EG+k8OKFGyMAyfQjGRChoODHrm/v7q3uosChfnHAy2Sp1zz8o8/8dxJpp
JoX2Xe4JB5t2h+d6Kmx9Vd55EkpAUbZhdGutZp1ty1mTepFRtauIHjJNP/4bj497
IQVSpEW2426hQOA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org