Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa
File:                     3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa (raw, json)
Hash identifier:          GSERYmQC5aOqzdTgDUHq6QIS6zgHYM01w1AmBoiG9eY=
Subject key identifier:   0E:3E:B3:F0:6F:BE:B1:E6:9A:86:C5:15:C3:19:E1:52:FE:4B:91:05
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       75A8F0D416B8187C22AFE39421EF381637397740
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa
Signing time:             Sat 30 Dec 2023 13:00:00 +0000
ROA not before:           Sat 30 Dec 2023 12:55:00 +0000
ROA not after:            Sat 28 Dec 2024 13:00:00 +0000
asID:                     264126
IP address blocks:        138.59.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:f0:d4:16:b8:18:7c:22:af:e3:94:21:ef:38:16:37:39:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Dec 30 12:55:00 2023 GMT
            Not After : Dec 28 13:00:00 2024 GMT
        Subject: CN=0E3EB3F06FBEB1E69A86C515C319E152FE4B9105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d3:e5:49:8a:cf:82:e3:50:85:1d:7f:12:44:
                    f9:6d:32:ae:27:43:b2:4a:1e:03:e0:0d:7e:a5:c4:
                    f9:ab:bc:3a:6a:c5:18:46:67:23:21:a7:f2:f6:1c:
                    cb:fc:21:58:fa:4a:af:b5:92:b6:65:e9:b6:61:90:
                    7e:35:e6:67:ee:2f:4f:7c:87:44:df:91:be:29:20:
                    4c:d1:ef:ba:4b:7c:0d:4f:00:8f:cd:71:e6:1f:89:
                    96:f2:f5:c1:be:c3:d6:c4:bc:07:32:64:64:e2:81:
                    81:a1:d8:36:5b:e6:dd:e0:1d:1f:e0:3d:c1:71:e7:
                    a1:43:9d:ce:fe:63:42:94:a0:e5:ee:21:bf:8a:7d:
                    0d:fa:5a:71:09:bd:ab:ac:af:14:17:1f:40:23:96:
                    ac:66:db:2e:d7:92:3c:ea:ab:7c:f9:ea:0a:70:82:
                    58:88:19:24:8d:99:c2:ee:3b:75:38:17:c7:30:18:
                    4b:ff:a9:34:c2:72:f2:fd:39:5e:af:6b:72:80:2f:
                    1a:31:44:93:e5:a6:6a:de:eb:22:90:39:ad:a9:f2:
                    fc:77:45:09:fc:3b:c4:e1:ce:1f:bf:91:8c:29:c9:
                    ee:b3:62:d2:8d:cb:a8:6f:3f:ed:bb:96:50:11:cf:
                    f9:81:0b:aa:7f:db:e3:e9:db:87:54:ed:ef:5c:eb:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:B3:F0:6F:BE:B1:E6:9A:86:C5:15:C3:19:E1:52:FE:4B:91:05
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/3133382e35392e3230322e302f32342d3234203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:df:ba:e2:53:bd:91:f9:5a:9b:4e:cf:77:ea:aa:00:2c:b2:
         41:2f:86:83:e3:58:23:de:66:86:e9:97:ed:f5:78:74:de:e5:
         02:8e:fe:0d:2a:1a:c4:15:fc:ea:fb:78:86:aa:92:a1:f1:52:
         45:54:69:a6:c5:d0:7c:c1:a1:dc:d5:f0:cb:86:96:83:27:98:
         ca:61:53:93:21:96:fd:69:66:2e:0b:e4:3c:9c:3f:54:35:13:
         54:cb:07:87:50:37:49:42:40:b7:ee:97:c4:c9:2b:d5:00:1c:
         3c:62:3d:61:d7:57:fe:27:5f:d1:cb:00:a8:31:b0:d7:82:c2:
         c5:10:58:0c:84:ca:6d:7e:3b:2f:26:12:20:35:36:ac:ac:38:
         02:18:a3:2b:ff:25:a8:9f:d1:7d:81:d5:a9:19:ae:26:ef:37:
         1f:4f:a4:f8:d8:5f:1c:79:05:88:70:b5:aa:c9:c6:7d:ad:0d:
         e0:90:e3:94:86:54:b0:8e:8d:af:6b:f9:67:56:ea:fb:f6:da:
         4f:bc:f8:75:72:1b:da:43:bf:a6:6b:dc:f4:92:85:df:cd:cb:
         20:98:31:54:bc:40:b2:79:8e:b1:43:59:76:84:40:20:fd:41:
         e3:77:16:d5:3e:46:ca:ad:b7:98:37:d0:d3:fa:9f:7f:96:29:
         54:2e:15:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdajw1Ba4GHwir+OUIe84Fjc5d0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzIxMUUzOTdGQzMxMUI3RjVFNUUwNzcwOUUyNTc5QUJF
RUU2QUFBNzAeFw0yMzEyMzAxMjU1MDBaFw0yNDEyMjgxMzAwMDBaMDMxMTAvBgNV
BAMTKDBFM0VCM0YwNkZCRUIxRTY5QTg2QzUxNUMzMTlFMTUyRkU0QjkxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0+VJis+C41CFHX8SRPltMq4n
Q7JKHgPgDX6lxPmrvDpqxRhGZyMhp/L2HMv8IVj6Sq+1krZl6bZhkH415mfuL098
h0Tfkb4pIEzR77pLfA1PAI/NceYfiZby9cG+w9bEvAcyZGTigYGh2DZb5t3gHR/g
PcFx56FDnc7+Y0KUoOXuIb+KfQ36WnEJvausrxQXH0Ajlqxm2y7Xkjzqq3z56gpw
gliIGSSNmcLuO3U4F8cwGEv/qTTCcvL9OV6va3KALxoxRJPlpmre6yKQOa2p8vx3
RQn8O8Thzh+/kYwpye6zYtKNy6hvP+27llARz/mBC6p/2+Pp24dU7e9c681BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDj6z8G++seaahsUVwxnhUv5LkQUwHwYDVR0j
BBgwFoAUchHjl/wxG39eXgdwniV5q+7mqqcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhBMmhjRzRlQXVYREdCUGFZdHRLaGN0Rmd2d2J3RjVQR001RDJVUnhW
azkvMC83MjExRTM5N0ZDMzExQjdGNUU1RTA3NzA5RTI1NzlBQkVFRTZBQUE3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyMTFFMzk3RkMzMTFCN0Y1
RTVFMDc3MDlFMjU3OUFCRUVFNkFBQTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIQTJoY0c0ZUF1WERHQlBhWXR0S2hjdEZndndid0Y1UEdNNUQyVVJ4Vms5LzAv
MzEzMzM4MmUzNTM5MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKO8owDQYJKoZIhvcNAQELBQADggEBAIffuuJT
vZH5WptOz3fqqgAsskEvhoPjWCPeZobpl+31eHTe5QKO/g0qGsQV/Or7eIaqkqHx
UkVUaabF0HzBodzV8MuGloMnmMphU5Mhlv1pZi4L5DycP1Q1E1TLB4dQN0lCQLfu
l8TJK9UAHDxiPWHXV/4nX9HLAKgxsNeCwsUQWAyEym1+Oy8mEiA1NqysOAIYoyv/
Jaif0X2B1akZribvNx9PpPjYXxx5BYhwtarJxn2tDeCQ45SGVLCOja9r+WdW6vv2
2k+8+HVyG9pDv6Zr3PSShd/NyyCYMVS8QLJ5jrFDWXaEQCD9QeN3FtU+Rsqtt5g3
0NP6n3+WKVQuFd8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org