Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa
File:                     3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa (raw, json)
Hash identifier:          26ptCNCDKIznUDQbW1ILjkipx9u5Z6IyhhjZrDDZi5o=
Subject key identifier:   67:8F:40:51:11:75:3E:58:F1:B6:AD:63:C4:BE:BD:15:84:D8:E9:AC
Certificate issuer:       /CN=77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE
Certificate serial:       7641AD71F122BC045E875F1E80B32E0CA70A0B74
Authority key identifier: 77:AE:68:B0:99:E7:47:C3:E2:C0:BC:97:1C:DB:DA:EA:E2:E9:E9:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa
Signing time:             Tue 14 Dec 2021 17:06:20 +0000
ROA not before:           Tue 14 Dec 2021 17:01:20 +0000
ROA not after:            Tue 13 Dec 2022 17:06:20 +0000
asID:                     264126
IP address blocks:        138.59.202.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:41:ad:71:f1:22:bc:04:5e:87:5f:1e:80:b3:2e:0c:a7:0a:0b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE
        Validity
            Not Before: Dec 14 17:01:20 2021 GMT
            Not After : Dec 13 17:06:20 2022 GMT
        Subject: CN=678F405111753E58F1B6AD63C4BEBD1584D8E9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2b:c4:4e:c4:b7:3d:d5:a6:7b:3e:b6:ac:30:
                    3b:11:bd:5a:4a:ef:ec:2d:63:ea:8c:5f:19:33:8e:
                    d2:02:a3:2d:12:6e:ed:ac:7b:18:db:41:de:43:14:
                    2d:64:ca:38:7c:23:d5:22:b6:f2:90:1c:ee:6d:02:
                    30:05:ce:97:69:ba:03:a6:32:19:9a:d3:9a:45:da:
                    dc:e5:33:53:21:af:5e:a1:5f:0f:4d:3b:1a:48:57:
                    97:69:24:77:29:f0:d3:ed:a4:1f:e5:c7:b1:a7:22:
                    9c:7c:91:9a:c4:00:5d:f2:4a:80:b0:86:85:0d:ad:
                    56:0a:96:5b:0a:73:3d:79:6f:ca:84:58:5f:e9:63:
                    a8:43:b0:0c:e0:9f:53:b3:96:df:cf:66:6b:0d:34:
                    ad:35:08:f4:95:8a:4e:a6:09:4c:8d:ba:95:85:10:
                    5b:04:7c:3d:cd:9f:c1:b0:44:03:5d:c6:2b:2f:f2:
                    77:a4:b2:f8:94:e4:d0:33:ee:54:0e:3b:d5:ef:40:
                    bd:c6:e3:d8:4c:29:d6:06:19:60:8a:29:32:27:5a:
                    65:a0:b9:90:60:33:e3:b7:fb:09:e1:4c:ac:27:af:
                    43:44:43:71:df:7e:84:35:c6:69:e3:0c:96:a8:45:
                    fd:5d:a1:b6:a1:3a:48:51:e8:dd:ec:a9:62:88:68:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:40:51:11:75:3E:58:F1:B6:AD:63:C4:BE:BD:15:84:D8:E9:AC
            X509v3 Authority Key Identifier:
                keyid:77:AE:68:B0:99:E7:47:C3:E2:C0:BC:97:1C:DB:DA:EA:E2:E9:E9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77AE68B099E747C3E2C0BC971CDBDAEAE2E9E9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32332d3233203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:fb:a3:8a:a6:41:53:7a:bd:22:4e:bc:4f:0f:53:fd:2a:
         b4:6e:f9:0e:e0:c2:06:54:ed:67:20:bc:04:d0:10:ff:28:8e:
         1e:a7:72:2d:63:f5:a1:ac:8d:48:ba:19:4f:e7:aa:7f:8c:b7:
         e3:60:3e:d6:b4:16:ab:f5:e7:b8:d2:d9:d8:a5:9d:6f:ed:57:
         90:68:61:ac:d8:b1:b7:d0:1e:68:b9:97:3c:e7:b8:5c:e8:2c:
         31:2e:de:55:c1:46:0f:af:e2:6c:94:40:25:40:7c:44:21:8a:
         da:a4:c6:98:41:7c:c6:40:09:99:e6:7f:8a:81:4f:b4:c2:0a:
         39:91:88:f1:e9:5b:05:25:1e:49:e5:b2:7d:4b:be:cc:b7:46:
         bb:bc:e9:bf:4f:d8:f2:ac:a7:96:c3:cc:eb:7b:fe:70:59:39:
         09:bd:70:62:c7:18:21:73:f3:0d:c0:5e:2e:ac:2d:4f:93:0e:
         49:d0:b1:cd:80:1a:c5:ec:a1:e5:f0:15:a5:fc:79:76:96:e1:
         73:88:60:8a:1c:d5:d3:c7:4b:7d:6e:19:29:27:35:64:e2:3a:
         96:56:0f:a8:11:be:d9:80:dc:c5:14:18:bb:43:15:90:7e:48:
         54:20:19:82:18:73:85:d8:26:7f:e2:47:03:e6:2e:88:a3:d0:
         6d:18:d3:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdkGtcfEivAReh18egLMuDKcKC3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzdBRTY4QjA5OUU3NDdDM0UyQzBCQzk3MUNEQkRBRUFF
MkU5RTlBRTAeFw0yMTEyMTQxNzAxMjBaFw0yMjEyMTMxNzA2MjBaMDMxMTAvBgNV
BAMTKDY3OEY0MDUxMTE3NTNFNThGMUI2QUQ2M0M0QkVCRDE1ODREOEU5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0K8ROxLc91aZ7PrasMDsRvVpK
7+wtY+qMXxkzjtICoy0Sbu2sexjbQd5DFC1kyjh8I9UitvKQHO5tAjAFzpdpugOm
Mhma05pF2tzlM1Mhr16hXw9NOxpIV5dpJHcp8NPtpB/lx7GnIpx8kZrEAF3ySoCw
hoUNrVYKllsKcz15b8qEWF/pY6hDsAzgn1Ozlt/PZmsNNK01CPSVik6mCUyNupWF
EFsEfD3Nn8GwRANdxisv8neksviU5NAz7lQOO9XvQL3G49hMKdYGGWCKKTInWmWg
uZBgM+O3+wnhTKwnr0NEQ3HffoQ1xmnjDJaoRf1dobahOkhR6N3sqWKIaNv5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ49AURF1Pljxtq1jxL69FYTY6awwHwYDVR0j
BBgwFoAUd65osJnnR8PiwLyXHNva6uLp6a4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMC83N0FFNjhCMDk5RTc0N0MzRTJDMEJDOTcxQ0RCREFFQUUyRTlFOUFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc3QUU2OEIwOTlFNzQ3QzNF
MkMwQkM5NzFDREJEQUVBRTJFOUU5QUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzAv
MzEzMzM4MmUzNTM5MmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKO8owDQYJKoZIhvcNAQELBQADggEBACcs+6OK
pkFTer0iTrxPD1P9KrRu+Q7gwgZU7WcgvATQEP8ojh6nci1j9aGsjUi6GU/nqn+M
t+NgPta0Fqv157jS2dilnW/tV5BoYazYsbfQHmi5lzznuFzoLDEu3lXBRg+v4myU
QCVAfEQhitqkxphBfMZACZnmf4qBT7TCCjmRiPHpWwUlHknlsn1Lvsy3Rru86b9P
2PKsp5bDzOt7/nBZOQm9cGLHGCFz8w3AXi6sLU+TDknQsc2AGsXsoeXwFaX8eXaW
4XOIYIoc1dPHS31uGSknNWTiOpZWD6gRvtmA3MUUGLtDFZB+SFQgGYIYc4XYJn/i
RwPmLoij0G0Y0z4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org