Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3232203d3e203238333630.roa
File:                     3133382e39342e382e302f32322d3232203d3e203238333630.roa (raw, json)
Hash identifier:          PHiBrgnbOIWwXKtYZvVJXhcp0Eg7Qh8myoT4DUyOnpQ=
Subject key identifier:   68:30:89:70:14:E2:3C:10:1F:11:D1:8A:D4:55:C5:62:CC:13:11:BC
Certificate issuer:       /CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
Certificate serial:       67A539EABDFF577C271167D83404C279F74B9A76
Authority key identifier: 16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3232203d3e203238333630.roa
Signing time:             Thu 17 Nov 2022 18:03:33 +0000
ROA not before:           Thu 17 Nov 2022 17:58:33 +0000
ROA not after:            Thu 16 Nov 2023 18:03:33 +0000
asID:                     28360
IP address blocks:        138.94.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a5:39:ea:bd:ff:57:7c:27:11:67:d8:34:04:c2:79:f7:4b:9a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167B7DC84B098DDC2B9CE4E175A003955D57A017
        Validity
            Not Before: Nov 17 17:58:33 2022 GMT
            Not After : Nov 16 18:03:33 2023 GMT
        Subject: CN=6830897014E23C101F11D18AD455C562CC1311BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f9:95:0d:22:5f:e6:4e:d3:72:b2:04:39:19:
                    4a:bd:4e:47:95:6b:47:0c:ae:81:5f:b9:f2:ae:43:
                    76:e7:3e:61:4c:e9:d2:33:87:d0:b6:6a:38:e2:14:
                    f5:09:3f:8a:9c:71:97:aa:ca:08:b9:47:b7:b6:bd:
                    1b:7a:e3:0d:77:03:8e:ef:c0:b3:f4:65:ce:bf:a2:
                    57:a2:09:78:8c:0b:df:7e:43:de:f5:50:ee:7e:cb:
                    6f:45:91:8c:c0:1b:ba:eb:8e:24:37:43:7c:a9:c6:
                    69:8f:37:6f:e0:6d:d2:f4:b3:35:1e:cf:b6:38:78:
                    98:33:ef:95:34:63:4f:02:27:b1:e3:51:6e:ff:62:
                    1f:86:57:bf:b3:b0:29:db:5a:ae:46:c7:c9:77:28:
                    e0:cd:1d:f1:9b:bd:84:65:96:62:83:f8:d1:38:42:
                    0d:06:dd:0b:e6:00:cb:a9:92:e9:a0:8a:75:78:b3:
                    52:30:da:89:c6:ac:9d:81:25:ba:fb:73:8a:f4:f8:
                    b4:a7:09:1f:81:5a:d9:55:a1:3d:11:12:35:09:4e:
                    fb:6d:1b:29:78:4d:31:cd:93:98:f5:02:09:d9:39:
                    fd:45:a7:de:e1:55:52:5e:d7:ad:81:39:af:9b:da:
                    99:d2:c2:67:f5:2b:b4:18:9f:65:00:05:cd:45:54:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:30:89:70:14:E2:3C:10:1F:11:D1:8A:D4:55:C5:62:CC:13:11:BC
            X509v3 Authority Key Identifier:
                keyid:16:7B:7D:C8:4B:09:8D:DC:2B:9C:E4:E1:75:A0:03:95:5D:57:A0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167B7DC84B098DDC2B9CE4E175A003955D57A017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3232203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:be:23:76:d9:0c:a4:99:e2:d9:cc:93:49:31:e3:29:a4:
         75:f8:1b:b7:4c:30:5d:ce:fe:2b:22:2f:ba:cf:c4:57:70:99:
         cd:ec:94:37:47:f1:b9:9b:18:2c:0d:44:d9:5d:11:31:1d:04:
         31:32:38:12:42:4a:22:ee:30:41:ab:ff:84:53:1c:90:07:a9:
         d4:af:1f:55:28:ff:80:18:fd:94:eb:a7:94:c9:aa:c1:11:b2:
         db:fa:71:31:79:4a:4e:44:4f:60:16:8c:4c:b0:dc:dd:51:ad:
         67:42:f0:2e:57:cc:6d:85:4d:3b:75:95:e0:d9:4b:2f:21:85:
         ea:ec:42:6a:2e:2e:e6:0a:76:1a:f2:b2:51:00:b9:0c:39:79:
         45:5b:e7:c5:51:a5:fb:6c:00:c9:15:98:9a:c8:7b:8e:9f:d8:
         5c:76:0a:1a:3b:9c:70:0c:32:69:16:d0:2c:c0:eb:24:68:f4:
         93:43:5e:0e:7d:f2:04:74:42:3c:ba:b0:b5:43:55:44:8d:54:
         ed:8b:f0:a8:56:a4:a8:78:37:0f:b7:4e:76:03:07:54:0d:e0:
         03:ae:2e:50:4a:62:02:e7:45:18:17:39:d4:92:59:97:50:77:
         e4:78:0f:95:94:13:86:fe:cf:af:c8:59:c0:32:c5:21:4b:3f:
         03:3c:1c:4b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUZ6U56r3/V3wnEWfYNATCefdLmnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3QjdEQzg0QjA5OEREQzJCOUNFNEUxNzVBMDAzOTU1
RDU3QTAxNzAeFw0yMjExMTcxNzU4MzNaFw0yMzExMTYxODAzMzNaMDMxMTAvBgNV
BAMTKDY4MzA4OTcwMTRFMjNDMTAxRjExRDE4QUQ0NTVDNTYyQ0MxMzExQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+ZUNIl/mTtNysgQ5GUq9TkeV
a0cMroFfufKuQ3bnPmFM6dIzh9C2ajjiFPUJP4qccZeqygi5R7e2vRt64w13A47v
wLP0Zc6/oleiCXiMC99+Q971UO5+y29FkYzAG7rrjiQ3Q3ypxmmPN2/gbdL0szUe
z7Y4eJgz75U0Y08CJ7HjUW7/Yh+GV7+zsCnbWq5Gx8l3KODNHfGbvYRllmKD+NE4
Qg0G3QvmAMupkumginV4s1Iw2onGrJ2BJbr7c4r0+LSnCR+BWtlVoT0REjUJTvtt
Gyl4TTHNk5j1AgnZOf1Fp97hVVJe162BOa+b2pnSwmf1K7QYn2UABc1FVEzxAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUaDCJcBTiPBAfEdGK1FXFYswTEbwwHwYDVR0j
BBgwFoAUFnt9yEsJjdwrnOThdaADlV1XoBcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEJoYXpqOGJGeHZwN1A2UGNaZ1lGcW0zYlB4RXJ5YXgzUTlSYURRTkoz
UDIvMC8xNjdCN0RDODRCMDk4RERDMkI5Q0U0RTE3NUEwMDM5NTVENTdBMDE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2N0I3REM4NEIwOThEREMy
QjlDRTRFMTc1QTAwMzk1NUQ1N0EwMTcuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRCaGF6ajhiRnh2cDdQNlBjWmdZRnFtM2JQeEVyeWF4M1E5UmFEUU5KM1AyLzAv
MzEzMzM4MmUzOTM0MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzgzMzM2
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAKKXggwDQYJKoZIhvcNAQELBQADggEBAIayviN22QykmeLZ
zJNJMeMppHX4G7dMMF3O/isiL7rPxFdwmc3slDdH8bmbGCwNRNldETEdBDEyOBJC
SiLuMEGr/4RTHJAHqdSvH1Uo/4AY/ZTrp5TJqsERstv6cTF5Sk5ET2AWjEyw3N1R
rWdC8C5XzG2FTTt1leDZSy8hhersQmouLuYKdhryslEAuQw5eUVb58VRpftsAMkV
mJrIe46f2Fx2Cho7nHAMMmkW0CzA6yRo9JNDXg598gR0Qjy6sLVDVUSNVO2L8KhW
pKh4Nw+3TnYDB1QN4AOuLlBKYgLnRRgXOdSSWZdQd+R4D5WUE4b+z6/IWcAyxSFL
PwM8HEs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org