Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
File:                     3133382e3131382e36382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          G42d9KBH1VqeOin5Z+zmlHI4TTPMGJv6jrLuEKtjiwc=
Subject key identifier:   14:10:3B:05:DA:64:F8:A3:6C:3A:D0:C6:A2:87:17:74:EC:FC:D3:28
Certificate issuer:       /CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
Certificate serial:       37238985D841127D4508F8F659552A7FA9931CE7
Authority key identifier: 85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa
Signing time:             Wed 03 Apr 2024 23:58:32 +0000
ROA not before:           Wed 03 Apr 2024 23:53:32 +0000
ROA not after:            Wed 02 Apr 2025 23:58:32 +0000
asID:                     52573
IP address blocks:        138.118.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:23:89:85:d8:41:12:7d:45:08:f8:f6:59:55:2a:7f:a9:93:1c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854124E28FF4349920ECC8D4C1EE16AF1B636A47
        Validity
            Not Before: Apr  3 23:53:32 2024 GMT
            Not After : Apr  2 23:58:32 2025 GMT
        Subject: CN=14103B05DA64F8A36C3AD0C6A2871774ECFCD328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:1c:eb:9e:c4:2c:f7:10:82:62:7b:0d:69:
                    85:df:4e:6c:7b:96:6b:62:de:a6:a6:14:72:75:7f:
                    10:77:ec:12:ce:a0:26:31:ea:c8:44:d6:a4:21:22:
                    23:c4:b3:5e:43:3e:35:e3:87:33:ac:17:7e:5c:e8:
                    5c:21:e9:24:96:e6:20:67:e2:4c:f9:f1:41:52:ed:
                    df:ff:4c:2f:1b:d2:70:23:d5:f4:eb:b1:50:28:b3:
                    a0:dd:bd:f4:91:07:68:dc:fe:1d:c6:65:59:f5:09:
                    fb:4b:fa:97:c0:08:9c:7f:71:0c:a9:25:37:22:71:
                    16:1c:c8:f2:1d:8f:ed:f5:4c:55:c8:b5:cd:7d:71:
                    9e:94:09:2f:83:f2:f6:fa:74:99:a9:09:95:ee:dc:
                    d9:ae:96:4c:b0:e1:44:94:d5:48:3e:8f:46:7a:c0:
                    0a:92:dc:68:d6:cf:00:f1:34:5d:30:08:7f:22:8e:
                    c0:03:9e:a9:8f:8b:b3:e2:89:ec:e3:61:cc:8e:72:
                    2e:9a:2a:74:da:ac:aa:0b:2e:29:32:ee:02:29:8c:
                    ed:b2:fa:f8:9f:54:ff:a6:85:58:9a:ba:0a:e1:84:
                    f9:ac:18:f2:52:7a:d7:e6:ba:95:36:39:15:7f:fb:
                    4d:23:62:33:70:f9:84:de:dc:30:39:a1:47:4d:50:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:3B:05:DA:64:F8:A3:6C:3A:D0:C6:A2:87:17:74:EC:FC:D3:28
            X509v3 Authority Key Identifier:
                keyid:85:41:24:E2:8F:F4:34:99:20:EC:C8:D4:C1:EE:16:AF:1B:63:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/854124E28FF4349920ECC8D4C1EE16AF1B636A47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jGAWQ4guM5JPpAts55LtLmVCsFXMyPhzcPZtSQEk4hk/1/3133382e3131382e36382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:e4:cb:56:e3:15:98:5b:1e:56:75:b4:e6:36:5c:65:3b:8e:
         c7:ab:2a:8e:ee:a4:13:4c:d4:d0:1d:50:42:3e:36:d6:c6:f5:
         a9:bd:99:4d:92:f8:52:c4:b9:ab:eb:82:42:64:3a:79:ab:b6:
         68:5b:dd:ca:fb:e5:85:9d:ee:92:f3:6c:47:e7:da:80:5e:2c:
         4a:d1:5f:cc:fc:f6:8e:25:ab:5e:d9:cd:ac:4a:71:8b:3f:b2:
         09:07:35:a7:b5:ac:03:be:03:b8:85:2d:f3:13:fc:f2:7f:db:
         55:81:21:8f:b4:a7:b8:a2:11:5b:a9:e3:09:f4:aa:dd:92:44:
         d0:56:0c:04:e0:00:59:d0:e1:aa:f7:78:a0:8f:b8:5c:96:be:
         68:c8:cf:e3:c1:b8:06:c0:bf:7e:2a:20:2c:34:12:cc:83:41:
         ad:1c:a2:5f:76:45:bd:75:83:d3:de:18:d8:12:20:12:5e:aa:
         a1:fd:31:8a:9f:b3:b3:f8:08:cb:c3:0d:94:52:01:09:8f:8d:
         57:4e:94:db:21:7f:91:92:d3:00:4a:ad:f4:7e:d4:68:36:c3:
         d5:58:eb:85:cd:03:4e:09:e4:ca:a0:3a:0a:bc:c9:fa:de:fa:
         28:82:7f:cb:80:8b:ea:20:6d:53:ea:59:f3:79:fc:9c:61:0d:
         07:76:8d:c3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNyOJhdhBEn1FCPj2WVUqf6mTHOcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0MTI0RTI4RkY0MzQ5OTIwRUNDOEQ0QzFFRTE2QUYx
QjYzNkE0NzAeFw0yNDA0MDMyMzUzMzJaFw0yNTA0MDIyMzU4MzJaMDMxMTAvBgNV
BAMTKDE0MTAzQjA1REE2NEY4QTM2QzNBRDBDNkEyODcxNzc0RUNGQ0QzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63RzrnsQs9xCCYnsNaYXfTmx7
lmti3qamFHJ1fxB37BLOoCYx6shE1qQhIiPEs15DPjXjhzOsF35c6Fwh6SSW5iBn
4kz58UFS7d//TC8b0nAj1fTrsVAos6DdvfSRB2jc/h3GZVn1CftL+pfACJx/cQyp
JTcicRYcyPIdj+31TFXItc19cZ6UCS+D8vb6dJmpCZXu3Nmulkyw4USU1Ug+j0Z6
wAqS3GjWzwDxNF0wCH8ijsADnqmPi7PiiezjYcyOci6aKnTarKoLLiky7gIpjO2y
+vifVP+mhViaugrhhPmsGPJSetfmupU2ORV/+00jYjNw+YTe3DA5oUdNUOyJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFBA7Bdpk+KNsOtDGoocXdOz80ygwHwYDVR0j
BBgwFoAUhUEk4o/0NJkg7MjUwe4WrxtjakcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWpHQVdRNGd1TTVKUHBBdHM1NUx0TG1WQ3NGWE15UGh6Y1BadFNRRWs0
aGsvMS84NTQxMjRFMjhGRjQzNDk5MjBFQ0M4RDRDMUVFMTZBRjFCNjM2QTQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1NDEyNEUyOEZGNDM0OTky
MEVDQzhENEMxRUUxNkFGMUI2MzZBNDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVqR0FXUTRndU01SlBwQXRzNTVMdExtVkNzRlhNeVBoemNQWnRTUUVrNGhrLzEv
MzEzMzM4MmUzMTMxMzgyZTM2MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinZEMA0GCSqGSIb3DQEBCwUAA4IBAQBe5MtW4xWY
Wx5WdbTmNlxlO47HqyqO7qQTTNTQHVBCPjbWxvWpvZlNkvhSxLmr64JCZDp5q7Zo
W93K++WFne6S82xH59qAXixK0V/M/PaOJate2c2sSnGLP7IJBzWntawDvgO4hS3z
E/zyf9tVgSGPtKe4ohFbqeMJ9KrdkkTQVgwE4ABZ0OGq93igj7hclr5oyM/jwbgG
wL9+KiAsNBLMg0GtHKJfdkW9dYPT3hjYEiASXqqh/TGKn7Oz+AjLww2UUgEJj41X
TpTbIX+RktMASq30ftRoNsPVWOuFzQNOCeTKoDoKvMn63voogn/LgIvqIG1T6lnz
efycYQ0Hdo3D
-----END CERTIFICATE-----
Generated at Sat Jun 29 02:17:08 2024 by rpki-client on console-fra.rpki-client.org