Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa
File:                     3133382e3231392e38362e302f32342d3234203d3e203631363636.roa (raw, json)
Hash identifier:          431mnodaN8dqZ9bWES0jJPHrvUuk3zdiJuSnAMqcu14=
Subject key identifier:   34:21:99:97:75:39:A8:02:8E:43:1B:93:2C:2F:11:70:35:23:F4:E2
Certificate issuer:       /CN=CE6ECE6859413800410D4C90D373B1EF989710AE
Certificate serial:       7D61BF5F023BDB2D9A70DF08FDE1B320C2A73A03
Authority key identifier: CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa
Signing time:             Thu 14 Dec 2023 13:20:54 +0000
ROA not before:           Thu 14 Dec 2023 13:15:54 +0000
ROA not after:            Thu 12 Dec 2024 13:20:54 +0000
asID:                     61666
IP address blocks:        138.219.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:61:bf:5f:02:3b:db:2d:9a:70:df:08:fd:e1:b3:20:c2:a7:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE6ECE6859413800410D4C90D373B1EF989710AE
        Validity
            Not Before: Dec 14 13:15:54 2023 GMT
            Not After : Dec 12 13:20:54 2024 GMT
        Subject: CN=342199977539A8028E431B932C2F11703523F4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:de:5e:4b:dd:37:cf:05:f3:60:70:1d:8b:
                    76:62:4e:ae:06:33:76:29:6a:30:a2:f9:7c:a8:38:
                    64:b7:e5:05:2a:b3:e1:7a:a2:7c:0e:27:78:2c:1c:
                    f8:7f:65:0f:8f:92:45:69:6a:6a:10:cd:54:b2:e3:
                    4b:04:66:2d:a4:1f:83:72:1b:aa:e3:59:fa:69:50:
                    db:72:c2:02:e1:e5:be:8b:71:d3:1e:b2:a2:4e:e3:
                    65:5a:66:c5:4b:83:cb:ea:63:21:8b:dd:1d:33:93:
                    29:0d:56:d0:d3:3b:74:10:d6:12:7d:43:b2:e5:60:
                    25:bc:7c:ee:a1:ec:90:e3:1b:f0:98:21:d0:9c:a8:
                    a3:0a:29:b2:97:96:8c:a5:ec:7b:c8:08:3b:35:d6:
                    00:ac:b1:c2:4a:14:20:70:88:b7:ae:5d:d7:82:c4:
                    c1:f8:21:3c:dd:b1:c0:25:01:01:a2:89:b0:d8:77:
                    6c:2f:0a:bc:18:91:73:d9:b5:83:76:84:28:86:af:
                    f6:41:51:1f:e0:ec:38:96:71:f1:46:ec:f1:ba:80:
                    6e:ec:82:43:b2:c2:ef:53:b7:6e:c8:94:3c:d2:7e:
                    96:ac:ad:9a:63:ab:07:39:07:12:77:e1:08:47:e1:
                    b9:93:f9:2d:d4:68:d6:30:f1:7d:92:e4:77:5f:3f:
                    83:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:21:99:97:75:39:A8:02:8E:43:1B:93:2C:2F:11:70:35:23:F4:E2
            X509v3 Authority Key Identifier:
                keyid:CE:6E:CE:68:59:41:38:00:41:0D:4C:90:D3:73:B1:EF:98:97:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/CE6ECE6859413800410D4C90D373B1EF989710AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6ECE6859413800410D4C90D373B1EF989710AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5PrjjzoAUney4CivY5xf3ff8oY7XeuJk5UaLbsb9TiGm/0/3133382e3231392e38362e302f32342d3234203d3e203631363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:bd:bd:4b:f3:19:92:33:d2:94:0e:09:39:97:6f:46:14:28:
         c5:28:b5:3a:f1:7d:cc:cd:47:87:02:00:05:e9:74:cb:19:76:
         6b:2b:54:7b:e5:b0:ea:18:95:0c:bd:75:73:d9:b4:fa:ef:d3:
         76:38:ee:0e:2e:9c:5d:3d:8f:da:24:ec:fb:5d:34:20:cb:db:
         fb:dd:ce:d7:98:e0:87:70:7d:48:92:f5:35:56:7b:66:4a:66:
         77:34:45:61:61:cb:6a:29:33:d6:ab:11:34:91:0b:68:fe:fa:
         e7:0b:e5:4d:be:d5:69:c0:85:b2:88:02:81:f9:9f:1f:4d:12:
         03:12:97:a5:74:5f:f5:f8:e2:d6:47:e9:fb:69:59:b6:24:99:
         80:7a:aa:75:35:02:2c:bf:98:4e:e4:c7:25:49:58:31:24:07:
         bc:56:00:b7:c1:8f:11:a8:99:f4:81:50:12:08:92:89:21:7d:
         76:44:7c:fa:47:8c:d2:83:de:93:5c:e1:98:3b:96:00:6f:a8:
         14:45:3e:d4:a9:23:41:c4:08:05:50:ef:eb:af:a3:a9:9d:18:
         56:60:56:c9:7f:e5:3d:68:6e:96:23:59:7d:04:2d:6f:9b:64:
         5f:28:b2:43:78:08:cd:9f:5b:b6:d6:b3:ac:85:8b:71:f3:c2:
         5c:9e:44:d0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfWG/XwI72y2acN8I/eGzIMKnOgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0U2RUNFNjg1OTQxMzgwMDQxMEQ0QzkwRDM3M0IxRUY5
ODk3MTBBRTAeFw0yMzEyMTQxMzE1NTRaFw0yNDEyMTIxMzIwNTRaMDMxMTAvBgNV
BAMTKDM0MjE5OTk3NzUzOUE4MDI4RTQzMUI5MzJDMkYxMTcwMzUyM0Y0RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIfd5eS903zwXzYHAdi3ZiTq4G
M3YpajCi+XyoOGS35QUqs+F6onwOJ3gsHPh/ZQ+PkkVpamoQzVSy40sEZi2kH4Ny
G6rjWfppUNtywgLh5b6LcdMesqJO42VaZsVLg8vqYyGL3R0zkykNVtDTO3QQ1hJ9
Q7LlYCW8fO6h7JDjG/CYIdCcqKMKKbKXloyl7HvICDs11gCsscJKFCBwiLeuXdeC
xMH4ITzdscAlAQGiibDYd2wvCrwYkXPZtYN2hCiGr/ZBUR/g7DiWcfFG7PG6gG7s
gkOywu9Tt27IlDzSfpasrZpjqwc5BxJ34QhH4bmT+S3UaNYw8X2S5HdfP4MFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNCGZl3U5qAKOQxuTLC8RcDUj9OIwHwYDVR0j
BBgwFoAUzm7OaFlBOABBDUyQ03Ox75iXEK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVByamp6b0FVbmV5NENpdlk1eGYzZmY4b1k3WGV1Sms1VWFMYnNiOVRp
R20vMC9DRTZFQ0U2ODU5NDEzODAwNDEwRDRDOTBEMzczQjFFRjk4OTcxMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NFNkVDRTY4NTk0MTM4MDA0
MTBENEM5MEQzNzNCMUVGOTg5NzEwQUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVQcmpqem9BVW5leTRDaXZZNXhmM2ZmOG9ZN1hldUprNVVhTGJzYjlUaUdtLzAv
MzEzMzM4MmUzMjMxMzkyZTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzYzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAittWMA0GCSqGSIb3DQEBCwUAA4IBAQCxvb1L8xmS
M9KUDgk5l29GFCjFKLU68X3MzUeHAgAF6XTLGXZrK1R75bDqGJUMvXVz2bT679N2
OO4OLpxdPY/aJOz7XTQgy9v73c7XmOCHcH1IkvU1VntmSmZ3NEVhYctqKTPWqxE0
kQto/vrnC+VNvtVpwIWyiAKB+Z8fTRIDEpeldF/1+OLWR+n7aVm2JJmAeqp1NQIs
v5hO5MclSVgxJAe8VgC3wY8RqJn0gVASCJKJIX12RHz6R4zSg96TXOGYO5YAb6gU
RT7UqSNBxAgFUO/rr6OpnRhWYFbJf+U9aG6WI1l9BC1vm2RfKLJDeAjNn1u21rOs
hYtx88JcnkTQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org