Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32342d3234203d3e203238333630.roa
File:                     3133382e39342e31302e302f32342d3234203d3e203238333630.roa (raw, json)
Hash identifier:          YGRBoorHPXgbo3NNfnvkBpHcBBf0aAzY22IVTsMjpe8=
Subject key identifier:   4B:49:49:0D:90:07:93:FB:72:34:3C:9A:AD:AC:C5:7C:48:8D:44:8E
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       0B59B82CCC5AF4E741CFADC5D9E0EF8DCCA0952D
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32342d3234203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:36 +0000
ROA not before:           Thu 17 Nov 2022 17:58:36 +0000
ROA not after:            Thu 16 Nov 2023 18:03:36 +0000
asID:                     28360
IP address blocks:        138.94.10.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:59:b8:2c:cc:5a:f4:e7:41:cf:ad:c5:d9:e0:ef:8d:cc:a0:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:36 2022 GMT
            Not After : Nov 16 18:03:36 2023 GMT
        Subject: CN=4B49490D900793FB72343C9AADACC57C488D448E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:7f:f4:b6:27:a2:83:e7:d1:b6:e6:02:de:
                    b7:f7:46:c5:9a:76:a7:13:59:f2:f2:40:f6:d6:07:
                    26:9f:f0:87:d2:3e:9a:68:fd:b3:fa:06:69:dd:36:
                    e9:b1:fe:a9:a1:7a:88:19:fe:c5:87:53:a1:ef:2e:
                    42:21:ce:91:c6:f4:c2:98:38:1f:95:f7:63:54:2c:
                    54:31:03:f8:ee:cc:29:88:56:e6:d1:49:2a:03:34:
                    38:4f:21:4a:8b:d4:0d:93:47:18:7e:33:7e:7e:ab:
                    85:b6:1d:4f:29:05:06:97:1a:10:4c:61:d4:f6:98:
                    28:02:f8:4d:7b:0b:b7:53:b2:1b:6e:21:60:f3:e9:
                    7e:5d:6e:83:6c:53:cd:b5:c7:e3:34:1b:10:0b:c6:
                    dc:56:a6:ca:fb:8e:63:d0:8d:03:f5:64:93:ca:91:
                    be:27:ad:5d:54:d1:87:a2:53:da:44:8a:ea:d3:79:
                    9b:43:ec:18:a4:27:27:a0:d2:75:06:42:c2:91:be:
                    fb:3e:c1:3b:bf:c5:fe:ee:2c:22:2f:5c:53:94:01:
                    6c:75:b7:57:d3:82:6a:f1:a1:93:84:79:5a:16:85:
                    bc:bd:bb:2a:ce:e0:c8:15:26:85:7c:34:37:ae:c6:
                    aa:21:c1:25:43:25:f6:fa:94:14:8a:e9:1b:c3:f2:
                    b2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:49:49:0D:90:07:93:FB:72:34:3C:9A:AD:AC:C5:7C:48:8D:44:8E
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e31302e302f32342d3234203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:29:90:4d:db:57:4e:de:bc:ca:ca:49:23:59:75:55:b5:81:
         30:f9:5d:75:1c:07:34:0d:d2:28:bc:0b:e0:73:01:0a:29:52:
         89:00:f3:eb:f6:6f:1f:e8:02:6b:22:14:42:e5:cd:ab:d3:35:
         87:5d:9a:c3:7d:f8:3a:ad:a5:c7:2a:f6:85:25:0a:39:59:3a:
         c4:87:3c:3b:7e:61:2f:bd:15:99:2a:e3:59:25:90:7d:b3:01:
         52:c2:75:62:79:76:af:9c:14:a8:7d:0f:5a:ae:9b:c1:5d:a1:
         2c:a4:84:95:d2:12:d7:41:46:0b:f6:05:2f:92:b4:10:1e:16:
         09:05:f2:73:4d:53:6f:31:24:5e:5b:42:49:e3:88:79:dd:8d:
         0d:56:09:e8:11:a3:8c:fe:f3:ee:eb:d3:f1:4f:07:25:38:8e:
         e5:b4:c1:ca:39:13:5d:88:4f:df:03:d5:c9:56:fc:a4:d2:a3:
         32:b5:76:18:92:70:c1:28:80:1a:a7:4e:f9:a4:aa:d4:93:59:
         91:36:8f:40:63:a0:06:f2:67:d4:77:ad:27:54:82:9b:04:56:
         77:d8:65:3b:89:f4:ec:78:ab:44:48:88:37:3e:e1:af:36:d8:
         8f:a6:7e:45:b7:c0:bc:6e:5a:12:6d:0a:28:4f:1f:74:e9:00:
         16:ed:52:3c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC1m4LMxa9OdBz63F2eDvjcyglS0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzZaFw0yMzExMTYxODAzMzZaMDMxMTAvBgNV
BAMTKDRCNDk0OTBEOTAwNzkzRkI3MjM0M0M5QUFEQUNDNTdDNDg4RDQ0OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJX/0tieig+fRtuYC3rf3RsWa
dqcTWfLyQPbWByaf8IfSPppo/bP6BmndNumx/qmheogZ/sWHU6HvLkIhzpHG9MKY
OB+V92NULFQxA/juzCmIVubRSSoDNDhPIUqL1A2TRxh+M35+q4W2HU8pBQaXGhBM
YdT2mCgC+E17C7dTshtuIWDz6X5dboNsU821x+M0GxALxtxWpsr7jmPQjQP1ZJPK
kb4nrV1U0YeiU9pEiurTeZtD7BikJyeg0nUGQsKRvvs+wTu/xf7uLCIvXFOUAWx1
t1fTgmrxoZOEeVoWhby9uyrO4MgVJoV8NDeuxqohwSVDJfb6lBSK6RvD8rK1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUS0lJDZAHk/tyNDyarazFfEiNRI4wHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzMzM4MmUzOTM0MmUzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMz
MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIpeCjANBgkqhkiG9w0BAQsFAAOCAQEAASmQTdtXTt68
yspJI1l1VbWBMPlddRwHNA3SKLwL4HMBCilSiQDz6/ZvH+gCayIUQuXNq9M1h12a
w334Oq2lxyr2hSUKOVk6xIc8O35hL70VmSrjWSWQfbMBUsJ1Ynl2r5wUqH0PWq6b
wV2hLKSEldIS10FGC/YFL5K0EB4WCQXyc01TbzEkXltCSeOIed2NDVYJ6BGjjP7z
7uvT8U8HJTiO5bTByjkTXYhP3wPVyVb8pNKjMrV2GJJwwSiAGqdO+aSq1JNZkTaP
QGOgBvJn1HetJ1SCmwRWd9hlO4n07HirREiINz7hrzbYj6Z+RbfAvG5aEm0KKE8f
dOkAFu1SPA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org