Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32332d3233203d3e20323634323438.roa
File:                     3133382e3131382e36302e302f32332d3233203d3e20323634323438.roa (raw, json)
Hash identifier:          rXi2ENMoc3Np27FU0UlXkulpJY80ti3YfPE6H4l8p2I=
Subject key identifier:   FA:16:CF:E0:AF:2B:21:00:FE:D9:26:1C:32:37:AB:CB:6B:40:C7:03
Certificate issuer:       /CN=329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A
Certificate serial:       33B119883F3FCD7D92EE44DE69A6C8FA831561A2
Authority key identifier: 32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32332d3233203d3e20323634323438.roa
Signing time:             Mon 19 Dec 2022 19:25:10 +0000
ROA not before:           Mon 19 Dec 2022 19:20:10 +0000
ROA not after:            Mon 18 Dec 2023 19:25:10 +0000
asID:                     264248
IP address blocks:        138.118.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:b1:19:88:3f:3f:cd:7d:92:ee:44:de:69:a6:c8:fa:83:15:61:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A
        Validity
            Not Before: Dec 19 19:20:10 2022 GMT
            Not After : Dec 18 19:25:10 2023 GMT
        Subject: CN=FA16CFE0AF2B2100FED9261C3237ABCB6B40C703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:91:38:6a:65:1a:57:23:48:57:4f:78:7b:f0:
                    d0:e4:29:70:b1:9b:74:d7:00:22:c0:93:77:db:6b:
                    ec:ea:01:c0:72:68:0c:a6:73:9d:a3:b3:ae:7d:94:
                    8f:78:40:0d:11:dc:5f:9c:14:ad:6e:d4:74:15:27:
                    ea:92:cc:9f:e9:58:6d:fe:f1:fc:84:74:43:74:c8:
                    97:db:96:04:39:2c:9b:30:1b:e1:ad:0e:b2:fc:e9:
                    06:23:9c:f5:7e:83:f4:22:13:54:07:fc:95:09:ea:
                    d7:69:ec:90:d6:0b:81:27:07:97:9e:e2:53:9e:91:
                    ea:2c:73:95:a8:79:e2:07:68:24:dc:cf:f7:42:a2:
                    03:d3:77:60:24:a1:2a:51:9f:b4:55:56:5b:d7:28:
                    f2:67:71:84:a7:b2:18:b1:4a:89:9c:99:66:5f:81:
                    d0:21:da:0f:25:81:28:7a:b8:b8:bd:37:34:03:4f:
                    da:4c:e7:79:92:44:5d:93:65:94:06:27:a2:41:b9:
                    21:2c:bd:b1:0a:c5:5e:73:62:df:8c:cb:0e:48:08:
                    11:6e:1b:5f:8f:5f:fd:9b:0d:2d:9e:04:50:f4:55:
                    65:c1:69:62:9c:ce:57:f7:55:0f:7e:0b:42:91:91:
                    8a:86:f2:de:6a:c1:39:e6:7c:8e:03:dc:e0:a2:af:
                    a5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:CF:E0:AF:2B:21:00:FE:D9:26:1C:32:37:AB:CB:6B:40:C7:03
            X509v3 Authority Key Identifier:
                keyid:32:9E:E7:F3:E4:FB:C7:56:71:BC:C8:C4:8C:A2:F7:C1:A2:30:B8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/329EE7F3E4FBC75671BCC8C48CA2F7C1A230B85A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4PEdeu3ZYsHy5KfJaj9sovASyT6nTozshn1yLPTJwrKX/0/3133382e3131382e36302e302f32332d3233203d3e20323634323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:bd:03:07:d8:89:e8:15:9b:3b:b8:72:44:c0:c7:89:a2:
         ec:96:19:e8:5f:65:37:36:f3:5f:e8:97:03:30:79:33:63:2d:
         bd:97:f8:84:60:84:ba:74:e7:07:38:44:7f:02:f8:2a:26:98:
         f2:31:3d:77:5f:01:1d:3d:f8:1f:6c:6d:90:d4:3b:ff:a1:5c:
         49:91:44:3f:5b:7c:b1:72:b3:65:bb:15:c0:2e:df:89:1e:fc:
         f8:dd:01:0b:18:36:87:19:0a:9e:1d:b9:d7:35:41:b3:02:67:
         f3:7b:76:2b:8d:3d:63:f2:e2:83:89:e6:a8:a7:3b:7d:2c:f3:
         6e:01:38:f1:71:ac:b4:ea:61:7c:28:f0:81:26:81:b6:b2:42:
         4a:a9:8d:65:ed:70:24:5d:42:3a:a9:cc:a7:38:52:c9:f2:80:
         c3:8d:3b:31:2d:ff:4a:94:35:75:6e:57:8a:a8:b3:61:dc:30:
         6a:d3:42:93:17:91:98:52:1c:e9:2b:8a:d4:42:89:10:46:0c:
         87:ff:df:a2:a4:7f:8d:8d:fc:36:2c:21:92:08:90:e6:5c:05:
         93:ce:aa:f8:71:0b:50:2a:ed:80:99:4e:9d:14:75:6a:c3:5f:
         04:f3:e3:a2:f4:cf:97:75:91:ca:c3:9e:fa:4d:73:36:f4:dc:
         ea:c5:9b:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUM7EZiD8/zX2S7kTeaabI+oMVYaIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI5RUU3RjNFNEZCQzc1NjcxQkNDOEM0OENBMkY3QzFB
MjMwQjg1QTAeFw0yMjEyMTkxOTIwMTBaFw0yMzEyMTgxOTI1MTBaMDMxMTAvBgNV
BAMTKEZBMTZDRkUwQUYyQjIxMDBGRUQ5MjYxQzMyMzdBQkNCNkI0MEM3MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1kThqZRpXI0hXT3h78NDkKXCx
m3TXACLAk3fba+zqAcByaAymc52js659lI94QA0R3F+cFK1u1HQVJ+qSzJ/pWG3+
8fyEdEN0yJfblgQ5LJswG+GtDrL86QYjnPV+g/QiE1QH/JUJ6tdp7JDWC4EnB5ee
4lOekeosc5WoeeIHaCTcz/dCogPTd2AkoSpRn7RVVlvXKPJncYSnshixSomcmWZf
gdAh2g8lgSh6uLi9NzQDT9pM53mSRF2TZZQGJ6JBuSEsvbEKxV5zYt+Myw5ICBFu
G1+PX/2bDS2eBFD0VWXBaWKczlf3VQ9+C0KRkYqG8t5qwTnmfI4D3OCir6VnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+hbP4K8rIQD+2SYcMjery2tAxwMwHwYDVR0j
BBgwFoAUMp7n8+T7x1ZxvMjEjKL3waIwuFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFBFZGV1M1pZc0h5NUtmSmFqOXNvdkFTeVQ2blRvenNobjF5TFBUSndy
S1gvMC8zMjlFRTdGM0U0RkJDNzU2NzFCQ0M4QzQ4Q0EyRjdDMUEyMzBCODVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyOUVFN0YzRTRGQkM3NTY3
MUJDQzhDNDhDQTJGN0MxQTIzMEI4NUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRQRWRldTNaWXNIeTVLZkphajlzb3ZBU3lUNm5Ub3pzaG4xeUxQVEp3cktYLzAv
MzEzMzM4MmUzMTMxMzgyZTM2MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMjM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKdjwwDQYJKoZIhvcNAQELBQADggEBAB/yvQMH
2InoFZs7uHJEwMeJouyWGehfZTc281/olwMweTNjLb2X+IRghLp05wc4RH8C+Com
mPIxPXdfAR09+B9sbZDUO/+hXEmRRD9bfLFys2W7FcAu34ke/PjdAQsYNocZCp4d
udc1QbMCZ/N7diuNPWPy4oOJ5qinO30s824BOPFxrLTqYXwo8IEmgbayQkqpjWXt
cCRdQjqpzKc4UsnygMONOzEt/0qUNXVuV4qos2HcMGrTQpMXkZhSHOkritRCiRBG
DIf/36Kkf42N/DYsIZIIkOZcBZPOqvhxC1Aq7YCZTp0UdWrDXwTz46L0z5d1kcrD
nvpNczb03OrFm54=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org