Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32332d3233203d3e20323633393631.roa
File:                     3133382e3235352e3130342e302f32332d3233203d3e20323633393631.roa (raw, json)
Hash identifier:          VGZgfA45nr1jTchvztPJ4IBuBujZs0ZDGFAZ9lszd1o=
Subject key identifier:   C2:77:F6:69:16:27:9A:C4:68:9F:6E:71:FB:6C:75:CF:7E:55:06:3A
Certificate issuer:       /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial:       3E1074259632A6B48C6DFC3E4B05C403E3BBF3F8
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32332d3233203d3e20323633393631.roa
Signing time:             Fri 29 Mar 2024 21:59:26 +0000
ROA not before:           Fri 29 Mar 2024 21:54:26 +0000
ROA not after:            Fri 28 Mar 2025 21:59:26 +0000
asID:                     263961
IP address blocks:        138.255.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:10:74:25:96:32:a6:b4:8c:6d:fc:3e:4b:05:c4:03:e3:bb:f3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
        Validity
            Not Before: Mar 29 21:54:26 2024 GMT
            Not After : Mar 28 21:59:26 2025 GMT
        Subject: CN=C277F66916279AC4689F6E71FB6C75CF7E55063A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:a6:4b:dd:93:5e:55:dd:52:e1:0e:8c:f4:
                    2e:96:3b:5f:fe:31:16:b9:3e:8a:b3:e8:f6:91:33:
                    95:7a:f9:bc:b6:b8:7e:4c:13:b3:37:ae:6d:0b:af:
                    0e:35:22:0d:7e:f5:0e:ec:ab:5b:6d:95:43:4c:3b:
                    d5:7f:cf:ce:47:bf:0d:7e:03:d2:b2:9a:a3:83:bb:
                    11:7b:ff:33:1e:8c:03:ea:c7:12:6d:00:c5:62:cc:
                    0e:61:80:65:e7:66:16:14:dc:63:77:9c:82:ad:6a:
                    a3:cf:f6:2f:e9:c0:ea:2b:9e:85:49:02:08:90:e1:
                    fc:9e:89:88:70:b5:9a:2f:3b:ff:1a:83:ba:2a:f3:
                    e2:1c:1c:d5:c4:b5:70:60:af:86:57:05:68:a7:9b:
                    65:26:e9:ad:27:82:03:f9:32:ca:53:66:ce:a0:73:
                    c7:9f:2b:3a:b4:b7:a6:f3:ac:30:7e:48:3c:e2:e9:
                    87:99:bc:95:80:22:56:f8:c5:6a:be:31:d2:08:53:
                    51:1a:e4:41:b1:07:09:a0:ca:d6:68:3a:bc:a8:cf:
                    0a:cd:24:c0:bb:26:a7:9f:20:d0:e8:5e:7e:6f:d5:
                    61:7d:cd:76:d2:b7:e1:f1:0c:3e:76:80:3a:0d:b3:
                    aa:f2:f5:63:d0:f7:92:13:c9:10:de:ec:ad:51:e8:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:77:F6:69:16:27:9A:C4:68:9F:6E:71:FB:6C:75:CF:7E:55:06:3A
            X509v3 Authority Key Identifier:
                keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/3133382e3235352e3130342e302f32332d3233203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:c7:41:bf:69:89:2c:6c:ac:76:20:f5:80:0e:b1:c1:7a:4f:
         ce:e4:c5:4b:04:6c:3a:e5:fc:5c:3b:fe:09:7e:94:2f:27:78:
         22:09:a6:04:a6:d1:7c:f8:25:c2:8e:39:75:14:57:89:b4:7d:
         29:0a:ac:1f:d3:90:b6:61:00:dc:59:b6:f1:8e:82:3a:d3:35:
         a0:df:9c:2d:66:a4:ce:d7:93:82:ca:d5:f8:be:de:34:1f:85:
         b8:c9:73:c7:7c:dc:d2:12:41:0e:79:7a:b1:c8:a3:ae:a9:cd:
         b5:c5:4a:68:83:48:0c:d0:80:a2:b6:d3:80:45:b8:08:c1:da:
         fa:31:cd:b6:1b:34:11:62:cf:95:88:00:b2:c3:8e:4c:52:d2:
         5c:05:37:de:17:be:21:cd:4f:11:3c:f6:32:1e:45:35:be:17:
         c3:05:16:6b:34:97:43:d0:4f:85:08:76:43:c2:9d:4c:f8:2d:
         dd:4e:43:6b:5d:81:5a:29:fc:2d:ae:49:0a:0e:64:f4:d7:cf:
         7e:8b:18:98:4f:81:21:16:57:f4:7a:aa:e4:08:b5:92:3f:8b:
         a2:66:e3:86:a9:9b:1e:69:0a:74:5d:51:b3:1b:8f:b3:c3:68:
         94:b3:90:05:a2:df:2d:5d:70:51:e4:2e:77:7e:02:33:cc:fa:
         68:56:3f:fd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUPhB0JZYyprSMbfw+SwXEA+O78/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI4NDY5OEUyMjFGN0U2NTA3NTVCQUI4RTRFODY1RDY3
MEM3MzgzRjAeFw0yNDAzMjkyMTU0MjZaFw0yNTAzMjgyMTU5MjZaMDMxMTAvBgNV
BAMTKEMyNzdGNjY5MTYyNzlBQzQ2ODlGNkU3MUZCNkM3NUNGN0U1NTA2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvaZL3ZNeVd1S4Q6M9C6WO1/+
MRa5Poqz6PaRM5V6+by2uH5ME7M3rm0Lrw41Ig1+9Q7sq1ttlUNMO9V/z85Hvw1+
A9KymqODuxF7/zMejAPqxxJtAMVizA5hgGXnZhYU3GN3nIKtaqPP9i/pwOornoVJ
AgiQ4fyeiYhwtZovO/8ag7oq8+IcHNXEtXBgr4ZXBWinm2Um6a0nggP5MspTZs6g
c8efKzq0t6bzrDB+SDzi6YeZvJWAIlb4xWq+MdIIU1Ea5EGxBwmgytZoOryozwrN
JMC7JqefINDoXn5v1WF9zXbSt+HxDD52gDoNs6ry9WPQ95ITyRDe7K1R6M3BAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUwnf2aRYnmsRon25x+2x1z35VBjowHwYDVR0j
BBgwFoAUwoRpjiIffmUHVbq45Ohl1nDHOD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTZKTG44N0x2ckt1a2RwaE55Z2ZocEFxVTg2Q2V4NU1UQjZEZFJqOWZS
cjcvMC9DMjg0Njk4RTIyMUY3RTY1MDc1NUJBQjhFNEU4NjVENjcwQzczODNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MyODQ2OThFMjIxRjdFNjUw
NzU1QkFCOEU0RTg2NUQ2NzBDNzM4M0YuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU2SkxuODdMdnJLdWtkcGhOeWdmaHBBcVU4NkNleDVNVEI2RGRSajlmUnI3LzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/aDANBgkqhkiG9w0BAQsFAAOCAQEAIMdB
v2mJLGysdiD1gA6xwXpPzuTFSwRsOuX8XDv+CX6ULyd4IgmmBKbRfPglwo45dRRX
ibR9KQqsH9OQtmEA3Fm28Y6COtM1oN+cLWakzteTgsrV+L7eNB+FuMlzx3zc0hJB
Dnl6scijrqnNtcVKaINIDNCAorbTgEW4CMHa+jHNths0EWLPlYgAssOOTFLSXAU3
3he+Ic1PETz2Mh5FNb4XwwUWazSXQ9BPhQh2Q8KdTPgt3U5Da12BWin8La5JCg5k
9NfPfosYmE+BIRZX9Hqq5Ai1kj+LombjhqmbHmkKdF1RsxuPs8NolLOQBaLfLV1w
UeQud34CM8z6aFY//Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org