Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa
File:                     3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa (raw, json)
Hash identifier:          782BnnM32ua+ajTJvFCSaHaIFxnTvbJePLiC7JhTxk4=
Subject key identifier:   01:47:E9:FB:75:82:FE:A1:6D:DB:A0:7B:1B:8F:5A:4C:94:A1:8F:0E
Certificate issuer:       /CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
Certificate serial:       61D324A66536F4B25C40E7344CFA19A753AB9568
Authority key identifier: 49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa
Signing time:             Tue 16 May 2023 14:24:12 +0000
ROA not before:           Tue 16 May 2023 14:19:12 +0000
ROA not after:            Tue 14 May 2024 14:24:12 +0000
asID:                     52653
IP address blocks:        138.122.180.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d3:24:a6:65:36:f4:b2:5c:40:e7:34:4c:fa:19:a7:53:ab:95:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Validity
            Not Before: May 16 14:19:12 2023 GMT
            Not After : May 14 14:24:12 2024 GMT
        Subject: CN=0147E9FB7582FEA16DDBA07B1B8F5A4C94A18F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:24:cc:00:c3:9e:9d:ad:21:bd:f0:f3:98:
                    df:13:aa:d3:ca:36:ca:89:a9:f3:65:ae:82:a8:b8:
                    ad:40:16:76:b1:ba:15:bc:b9:50:a5:a1:ed:f6:db:
                    14:22:d4:ad:f8:52:8b:cd:a6:ff:e7:07:d9:19:5a:
                    8d:80:0b:ae:77:fa:f3:c8:0c:36:8f:7e:d9:fd:1e:
                    c1:09:c2:7f:67:3c:c8:3d:25:0c:a8:5e:55:a2:d3:
                    37:31:bb:50:41:8d:24:d7:a7:2d:6a:88:51:62:d9:
                    90:a0:96:b9:1d:d8:d7:4d:dc:6f:36:b6:2f:14:01:
                    93:c5:52:15:18:11:81:a3:1b:9c:db:3e:83:a2:ed:
                    e5:b7:f9:7d:82:05:3f:2f:4a:bf:0e:8e:1a:ef:e4:
                    fd:b9:68:14:db:bd:23:2a:89:3a:2a:47:4a:41:38:
                    f4:cd:ff:b6:02:32:99:98:ea:92:4d:e0:57:0f:3d:
                    0d:b8:d3:e1:24:37:1c:78:3a:78:80:4e:42:4e:7e:
                    06:b3:df:30:e1:2a:32:f4:73:9f:42:8f:56:81:65:
                    95:e8:bf:58:3f:d6:03:29:8b:18:2f:8f:88:9f:17:
                    3f:74:77:71:84:88:46:30:63:2b:7d:e5:39:ac:f2:
                    0e:06:1d:04:45:d7:f7:a3:24:c4:0a:5d:fe:4e:66:
                    03:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:E9:FB:75:82:FE:A1:6D:DB:A0:7B:1B:8F:5A:4C:94:A1:8F:0E
            X509v3 Authority Key Identifier:
                keyid:49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/3133382e3132322e3138302e302f32332d3233203d3e203532363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:85:3f:b3:2b:f7:94:37:f4:d0:be:ac:24:53:70:8b:00:27:
         ca:32:29:52:0e:9a:bb:a7:8b:a2:d3:10:06:b2:ed:a8:26:d5:
         1b:77:82:43:d3:9e:e2:df:55:12:c1:72:05:c3:c6:bc:4b:53:
         41:25:33:7c:01:69:0e:5d:3b:64:0d:6c:b0:58:d1:92:ff:aa:
         75:b7:33:1f:91:ac:db:a3:4d:1d:95:96:48:00:61:e5:ff:2a:
         62:4e:0d:9f:53:2b:ae:71:9e:8e:98:19:ea:94:82:99:ef:8d:
         e4:2b:f0:9e:7e:20:39:7d:bb:e0:60:65:0a:d9:09:11:50:65:
         a5:50:6e:7b:80:20:8a:78:ed:c7:41:19:d2:5c:dd:c4:39:09:
         2e:04:31:6b:0e:56:54:59:4a:ac:2e:cf:85:67:75:7f:76:bf:
         b4:9e:9e:e1:8c:22:64:7d:c2:bd:c9:d8:5a:b6:be:30:87:78:
         01:3b:17:74:54:83:b7:93:f9:b0:87:7b:52:45:94:08:2e:6d:
         03:b5:fb:e2:f7:d0:4c:f1:00:d5:fd:9d:47:8a:47:bf:e5:c6:
         5b:5f:90:79:95:66:7d:be:c6:2a:d7:2b:4e:b6:5a:88:62:e6:
         ca:88:ac:da:eb:50:10:53:3f:21:87:6b:09:f8:9d:71:ad:73:
         69:bc:82:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYdMkpmU29LJcQOc0TPoZp1OrlWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCRjVFODUzNDlFQkRDNTg4MkIzQkMyMkJCODExRDg2
N0U0QkU3MDAeFw0yMzA1MTYxNDE5MTJaFw0yNDA1MTQxNDI0MTJaMDMxMTAvBgNV
BAMTKDAxNDdFOUZCNzU4MkZFQTE2RERCQTA3QjFCOEY1QTRDOTRBMThGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyyTMAMOena0hvfDzmN8TqtPK
NsqJqfNlroKouK1AFnaxuhW8uVCloe322xQi1K34UovNpv/nB9kZWo2AC653+vPI
DDaPftn9HsEJwn9nPMg9JQyoXlWi0zcxu1BBjSTXpy1qiFFi2ZCglrkd2NdN3G82
ti8UAZPFUhUYEYGjG5zbPoOi7eW3+X2CBT8vSr8Ojhrv5P25aBTbvSMqiToqR0pB
OPTN/7YCMpmY6pJN4FcPPQ240+EkNxx4OniATkJOfgaz3zDhKjL0c59Cj1aBZZXo
v1g/1gMpixgvj4ifFz90d3GEiEYwYyt95Tms8g4GHQRF1/ejJMQKXf5OZgO5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAUfp+3WC/qFt26B7G49aTJShjw4wHwYDVR0j
BBgwFoAUSb9ehTSevcWIKzvCK7gR2GfkvnAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDRUVVJnQnFtWUp5b1N2QWFDTnh3YzJNZHVuWHF0SGVtNlBwS0RpVzF6
SjYvMC80OUJGNUU4NTM0OUVCREM1ODgyQjNCQzIyQkI4MTFEODY3RTRCRTcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QkY1RTg1MzQ5RUJEQzU4
ODJCM0JDMjJCQjgxMUQ4NjdFNEJFNzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ0VFVSZ0JxbVlKeW9TdkFhQ054d2MyTWR1blhxdEhlbTZQcEtEaVcxeko2LzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzgzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzIzNjM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKerQwDQYJKoZIhvcNAQELBQADggEBAFKFP7Mr
95Q39NC+rCRTcIsAJ8oyKVIOmruni6LTEAay7agm1Rt3gkPTnuLfVRLBcgXDxrxL
U0ElM3wBaQ5dO2QNbLBY0ZL/qnW3Mx+RrNujTR2VlkgAYeX/KmJODZ9TK65xno6Y
GeqUgpnvjeQr8J5+IDl9u+BgZQrZCRFQZaVQbnuAIIp47cdBGdJc3cQ5CS4EMWsO
VlRZSqwuz4VndX92v7SenuGMImR9wr3J2Fq2vjCHeAE7F3RUg7eT+bCHe1JFlAgu
bQO1++L30EzxANX9nUeKR7/lxltfkHmVZn2+xirXK062Wohi5sqIrNrrUBBTPyGH
awn4nXGtc2m8ghk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org