Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e322e302f32342d3234203d3e20323634353632.roa
File:                     3133382e33362e322e302f32342d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          G56bllJH0vZ5AF32jNOCJQROK9N1yCzYN45U6UC81W8=
Subject key identifier:   3F:0D:69:72:D6:EB:30:84:4D:C0:EA:50:AC:04:C5:35:1D:35:91:AD
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       3E25E0D7582944FD59B799B8E1DE7B9CE4C857DA
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e322e302f32342d3234203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:33 +0000
ROA not before:           Fri 05 May 2023 19:10:33 +0000
ROA not after:            Fri 03 May 2024 19:15:33 +0000
asID:                     264562
IP address blocks:        138.36.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:e0:d7:58:29:44:fd:59:b7:99:b8:e1:de:7b:9c:e4:c8:57:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:33 2023 GMT
            Not After : May  3 19:15:33 2024 GMT
        Subject: CN=3F0D6972D6EB30844DC0EA50AC04C5351D3591AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:ec:0c:2b:c9:6e:30:e8:ea:22:ea:45:24:
                    48:90:e5:73:df:a3:60:8d:60:5a:27:75:a0:3f:6a:
                    c6:ab:3e:8b:b3:d0:1d:d4:fc:b9:b0:de:8e:98:bc:
                    9f:77:d3:4a:c1:4f:d0:5c:91:5b:82:25:68:1f:ce:
                    e4:02:f2:07:30:5e:2a:d9:79:43:52:3b:96:09:d3:
                    d5:e0:1d:04:1b:f5:f6:ae:93:a1:e5:26:14:54:64:
                    87:22:c5:a9:f0:d7:a0:ad:f0:b2:46:7b:08:8d:6e:
                    33:64:b0:10:1c:4d:60:8c:a2:87:aa:00:4b:95:6a:
                    b8:28:87:22:92:bc:a2:2a:94:5a:1b:62:17:1a:0e:
                    b8:ce:12:ff:70:70:16:d7:1f:f7:0e:46:7a:4e:31:
                    30:64:51:15:20:02:d5:ea:db:3f:d1:44:15:b0:4b:
                    dc:c1:1d:be:ec:50:02:29:c0:fc:91:9c:e2:7a:38:
                    71:e2:08:33:91:37:8f:a8:b5:c1:30:7d:b9:21:9a:
                    34:a4:c1:bf:67:11:af:7f:75:43:dd:10:3f:0c:51:
                    88:61:5b:44:25:1e:27:bc:22:3a:5f:f3:5d:2d:6d:
                    09:13:1d:56:0b:14:58:11:5b:d5:7f:c0:97:d7:fc:
                    a3:d8:ad:f9:a0:90:68:4d:b0:3f:7a:d8:69:8c:06:
                    76:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0D:69:72:D6:EB:30:84:4D:C0:EA:50:AC:04:C5:35:1D:35:91:AD
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e322e302f32342d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:20:89:d9:e7:28:de:a6:d9:95:b0:2b:a1:0f:52:42:99:5c:
         0a:de:3d:b9:bf:10:df:cc:b1:98:a4:47:9b:b0:64:be:d7:20:
         e2:a0:59:e7:b0:86:91:8e:89:94:04:18:79:df:c0:d7:c9:bc:
         8e:c9:be:54:ba:e4:94:12:a0:cc:63:bd:ab:62:0e:cc:4f:1d:
         3b:ae:e8:a7:c3:18:96:db:5e:2b:9b:a8:8e:3c:b2:ca:74:90:
         69:8d:14:49:6e:c0:84:36:84:a2:a6:75:2a:05:4f:7a:e7:14:
         85:ff:c1:80:d5:a6:ea:b1:eb:bd:8b:3a:30:06:77:90:27:55:
         6d:72:8e:06:81:7e:4f:01:30:83:a3:7a:7d:67:f1:e3:74:65:
         51:e5:4a:d0:87:6e:40:df:22:c8:21:1f:9b:70:1f:37:69:c9:
         a5:be:01:c5:ba:5d:8d:1b:5b:a5:34:04:2f:b1:55:40:a3:84:
         3f:09:59:9b:14:12:34:f1:cf:f6:a4:44:cc:7b:ec:24:40:b7:
         94:f5:72:c8:e6:92:c0:2a:7d:5a:1e:3a:93:b2:d1:6c:68:87:
         48:db:73:63:29:8c:45:80:31:f6:7c:73:08:a4:7f:19:d6:8a:
         d8:d1:88:e0:8a:53:e0:65:3d:09:f0:1c:74:6d:f6:da:fd:7c:
         95:0f:c1:ec
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPiXg11gpRP1Zt5m44d57nOTIV9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGRDQxNEMzMTVBNTFCMjUwM0E3RDFCOUZFMkVBREE1
NzVCQjAzRTAeFw0yMzA1MDUxOTEwMzNaFw0yNDA1MDMxOTE1MzNaMDMxMTAvBgNV
BAMTKDNGMEQ2OTcyRDZFQjMwODQ0REMwRUE1MEFDMDRDNTM1MUQzNTkxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxn+wMK8luMOjqIupFJEiQ5XPf
o2CNYFondaA/asarPouz0B3U/Lmw3o6YvJ9300rBT9BckVuCJWgfzuQC8gcwXirZ
eUNSO5YJ09XgHQQb9fauk6HlJhRUZIcixanw16Ct8LJGewiNbjNksBAcTWCMooeq
AEuVargohyKSvKIqlFobYhcaDrjOEv9wcBbXH/cORnpOMTBkURUgAtXq2z/RRBWw
S9zBHb7sUAIpwPyRnOJ6OHHiCDORN4+otcEwfbkhmjSkwb9nEa9/dUPdED8MUYhh
W0QlHie8Ijpf810tbQkTHVYLFFgRW9V/wJfX/KPYrfmgkGhNsD962GmMBnajAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPw1pctbrMIRNwOpQrATFNR01ka0wHwYDVR0j
BBgwFoAUsf1BTDFaUbJQOn0bn+Lq2ldbsD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9CMUZENDE0QzMxNUE1MUIyNTAzQTdEMUI5RkUyRUFEQTU3NUJCMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxRkQ0MTRDMzE1QTUxQjI1
MDNBN0QxQjlGRTJFQURBNTc1QkIwM0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzMzM4MmUzMzM2MmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM1
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAIokAjANBgkqhkiG9w0BAQsFAAOCAQEAnSCJ2eco3qbZ
lbAroQ9SQplcCt49ub8Q38yxmKRHm7Bkvtcg4qBZ57CGkY6JlAQYed/A18m8jsm+
VLrklBKgzGO9q2IOzE8dO67op8MYltteK5uojjyyynSQaY0USW7AhDaEoqZ1KgVP
eucUhf/BgNWm6rHrvYs6MAZ3kCdVbXKOBoF+TwEwg6N6fWfx43RlUeVK0IduQN8i
yCEfm3AfN2nJpb4BxbpdjRtbpTQEL7FVQKOEPwlZmxQSNPHP9qREzHvsJEC3lPVy
yOaSwCp9Wh46k7LRbGiHSNtzYymMRYAx9nxzCKR/GdaK2NGI4IpT4GU9CfAcdG32
2v18lQ/B7A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org