Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3233203d3e20323633393035.roa
File:                     3133382e3230342e3230302e302f32322d3233203d3e20323633393035.roa (raw, json)
Hash identifier:          YEAyhZYf4qzMg+0Xj32b7pAURLr6ZOD1D2hgNhTgLXk=
Subject key identifier:   6A:71:D9:C7:22:FC:4C:D1:3B:8C:06:7B:0E:5F:3C:B4:B8:D1:03:9E
Certificate issuer:       /CN=DB85262D118B08D63F7DAED3E4A17DAC17432A79
Certificate serial:       0935AEBBA12C72BB0CCCA48992B55F0F0427EE9D
Authority key identifier: DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3233203d3e20323633393035.roa
Signing time:             Fri 06 Jan 2023 19:53:25 +0000
ROA not before:           Fri 06 Jan 2023 19:48:25 +0000
ROA not after:            Fri 05 Jan 2024 19:53:25 +0000
asID:                     263905
IP address blocks:        138.204.200.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:35:ae:bb:a1:2c:72:bb:0c:cc:a4:89:92:b5:5f:0f:04:27:ee:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB85262D118B08D63F7DAED3E4A17DAC17432A79
        Validity
            Not Before: Jan  6 19:48:25 2023 GMT
            Not After : Jan  5 19:53:25 2024 GMT
        Subject: CN=6A71D9C722FC4CD13B8C067B0E5F3CB4B8D1039E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:68:6e:a9:62:26:32:e5:e7:ab:7a:a5:79:
                    ed:3d:7d:65:fd:22:26:a0:a2:7a:3b:e7:83:38:cb:
                    8a:94:95:20:85:f1:75:13:ee:83:f1:3a:fb:e8:b2:
                    5c:b6:7f:eb:aa:e1:8b:9c:f3:ad:e5:9a:70:fc:b8:
                    e4:1a:4f:77:ca:64:04:18:06:25:7c:e3:7c:fd:a7:
                    a1:7d:eb:dd:d2:61:63:4f:c2:3d:7c:bc:50:97:31:
                    ac:82:0f:1f:a0:50:f3:f9:f1:e1:c9:25:90:54:55:
                    94:04:fd:8d:ef:f0:88:a0:c9:8f:a5:59:c8:e6:91:
                    9b:ea:a8:fe:34:d3:68:c1:af:e6:38:b0:57:a1:80:
                    be:f6:34:d4:bb:3f:57:50:2f:ff:33:53:34:a7:8e:
                    8d:a0:25:18:40:f6:f3:93:d7:eb:fc:94:87:94:f8:
                    d2:99:f9:65:3e:d5:13:00:5a:bb:ff:d2:f1:90:81:
                    c5:d3:b7:a7:e8:d7:e1:ad:73:53:1c:6b:8c:ea:6f:
                    57:57:33:ab:ee:3c:0c:b7:2e:94:b7:72:8c:0b:8b:
                    e5:c8:6f:41:58:37:c1:fb:52:14:43:da:9c:78:ff:
                    cd:3e:95:f5:ee:23:a5:11:f4:8b:24:a6:c3:67:1d:
                    39:94:25:78:f2:26:fe:65:b6:83:4d:fb:8a:4e:df:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:71:D9:C7:22:FC:4C:D1:3B:8C:06:7B:0E:5F:3C:B4:B8:D1:03:9E
            X509v3 Authority Key Identifier:
                keyid:DB:85:26:2D:11:8B:08:D6:3F:7D:AE:D3:E4:A1:7D:AC:17:43:2A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB85262D118B08D63F7DAED3E4A17DAC17432A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3db7SahZtRVC8PuMcgyzbAmeUfVwyRcsxWmHCGFvpcyF/0/3133382e3230342e3230302e302f32322d3233203d3e20323633393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:00:87:85:81:8b:64:bf:2c:29:13:14:40:4b:9b:36:d2:f6:
         8e:ce:98:99:42:ea:18:5a:38:7c:58:8b:4b:22:73:29:8d:50:
         4b:2d:aa:22:2b:97:8e:ea:81:f4:4b:54:df:55:21:7c:62:c3:
         88:d1:03:a7:e0:f5:d3:82:3a:af:ec:35:8f:07:8c:ed:fc:b1:
         3b:02:07:c4:47:62:a5:b1:d4:ae:28:bb:26:ee:cd:6a:36:aa:
         2c:4c:3a:e2:f9:74:9d:cb:69:e4:78:cd:d4:ac:59:cb:38:eb:
         da:f4:32:2e:cc:0e:6f:ba:cf:ad:9e:c5:d8:a4:f1:0a:b8:e2:
         f2:da:dd:58:5f:c8:54:6d:9e:39:ec:3f:23:5e:1b:26:f8:a0:
         34:e3:96:20:a3:65:78:80:66:16:fb:49:9f:d1:1c:72:f4:ba:
         01:8d:b9:bb:19:0f:33:fd:c1:21:5a:35:e0:e3:a2:65:19:8b:
         4a:fc:b4:a4:54:58:28:bf:90:bc:80:6b:fb:0b:53:6f:0f:54:
         df:be:dc:a5:5d:42:c6:0e:b2:12:11:1e:66:02:c7:a3:4b:1a:
         fe:52:a7:76:8f:9e:9d:10:f3:81:c9:a2:19:13:af:5a:8f:eb:
         94:3b:91:c6:3a:70:9e:40:91:38:3f:ae:1e:a4:80:74:d3:73:
         36:56:93:39
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCTWuu6EscrsMzKSJkrVfDwQn7p0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4NTI2MkQxMThCMDhENjNGN0RBRUQzRTRBMTdEQUMx
NzQzMkE3OTAeFw0yMzAxMDYxOTQ4MjVaFw0yNDAxMDUxOTUzMjVaMDMxMTAvBgNV
BAMTKDZBNzFEOUM3MjJGQzRDRDEzQjhDMDY3QjBFNUYzQ0I0QjhEMTAzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPWhuqWImMuXnq3qlee09fWX9
Iiagono754M4y4qUlSCF8XUT7oPxOvvosly2f+uq4Yuc863lmnD8uOQaT3fKZAQY
BiV843z9p6F9693SYWNPwj18vFCXMayCDx+gUPP58eHJJZBUVZQE/Y3v8IigyY+l
WcjmkZvqqP4002jBr+Y4sFehgL72NNS7P1dQL/8zUzSnjo2gJRhA9vOT1+v8lIeU
+NKZ+WU+1RMAWrv/0vGQgcXTt6fo1+Gtc1Mca4zqb1dXM6vuPAy3LpS3cowLi+XI
b0FYN8H7UhRD2px4/80+lfXuI6UR9IskpsNnHTmUJXjyJv5ltoNN+4pO3/fTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUanHZxyL8TNE7jAZ7Dl88tLjRA54wHwYDVR0j
BBgwFoAU24UmLRGLCNY/fa7T5KF9rBdDKnkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RiN1NhaFp0UlZDOFB1TWNneXpiQW1lVWZWd3lSY3N4V21IQ0dGdnBj
eUYvMC9EQjg1MjYyRDExOEIwOEQ2M0Y3REFFRDNFNEExN0RBQzE3NDMyQTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCODUyNjJEMTE4QjA4RDYz
RjdEQUVEM0U0QTE3REFDMTc0MzJBNzkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkYjdTYWhadFJWQzhQdU1jZ3l6YkFtZVVmVnd5UmNzeFdtSENHRnZwY3lGLzAv
MzEzMzM4MmUzMjMwMzQyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMyDANBgkqhkiG9w0BAQsFAAOCAQEABACH
hYGLZL8sKRMUQEubNtL2js6YmULqGFo4fFiLSyJzKY1QSy2qIiuXjuqB9EtU31Uh
fGLDiNEDp+D104I6r+w1jweM7fyxOwIHxEdipbHUrii7Ju7NajaqLEw64vl0nctp
5HjN1KxZyzjr2vQyLswOb7rPrZ7F2KTxCrji8trdWF/IVG2eOew/I14bJvigNOOW
IKNleIBmFvtJn9EccvS6AY25uxkPM/3BIVo14OOiZRmLSvy0pFRYKL+QvIBr+wtT
bw9U377cpV1Cxg6yEhEeZgLHo0sa/lKndo+enRDzgcmiGROvWo/rlDuRxjpwnkCR
OD+uHqSAdNNzNlaTOQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org