Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3133382e35392e38382e302f32322d3234203d3e203232363839.roa
File:                     3133382e35392e38382e302f32322d3234203d3e203232363839.roa (raw, json)
Hash identifier:          koRrirrXQpmp6BnDpbKWGDwS02t/bv15MbCRoLVWngM=
Subject key identifier:   D3:FC:62:49:35:4F:BD:31:C7:F0:CD:BC:D0:17:27:00:77:06:5F:91
Certificate issuer:       /CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
Certificate serial:       13D5FE6AE5CEAEADD3F88DB69D804441FF58E404
Authority key identifier: FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3133382e35392e38382e302f32322d3234203d3e203232363839.roa
Signing time:             Fri 27 Aug 2021 13:56:00 +0000
ROA not before:           Fri 27 Aug 2021 13:51:00 +0000
ROA not after:            Fri 26 Aug 2022 13:56:00 +0000
asID:                     22689
IP address blocks:        138.59.88.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:fe:6a:e5:ce:ae:ad:d3:f8:8d:b6:9d:80:44:41:ff:58:e4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD
        Validity
            Not Before: Aug 27 13:51:00 2021 GMT
            Not After : Aug 26 13:56:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8f:28:8e:33:f5:1e:74:78:40:ea:5f:8c:ca:
                    c0:58:8c:45:7e:b4:dd:8b:79:93:47:d0:6f:f3:12:
                    1d:49:4a:eb:98:84:c6:e1:9a:77:a4:fd:81:d6:d8:
                    28:c0:88:89:14:2c:5e:8e:23:df:a7:9a:f8:cd:72:
                    03:94:76:c8:d8:86:cc:ed:1a:1d:bf:37:43:b0:18:
                    e6:fc:84:79:73:13:79:ab:6a:ea:06:18:8c:1d:7e:
                    64:1a:e1:c9:99:12:01:e6:88:f6:f0:70:73:18:12:
                    2b:4f:ba:f1:7b:9c:5b:92:f5:6a:b1:a3:c2:f9:75:
                    1c:31:08:59:b3:7a:30:13:ab:3e:c7:04:c1:9e:5f:
                    89:80:3b:0a:09:fd:c4:5d:bd:4c:82:6f:3c:e1:b2:
                    8f:c4:67:6e:d6:3b:5d:a4:bd:7a:78:c7:af:f0:a7:
                    62:ae:2e:74:91:31:bc:39:79:5c:22:ca:15:08:48:
                    b7:9f:1c:62:70:49:3b:8c:a9:31:28:dc:c8:2f:16:
                    85:fe:d6:35:fe:d1:bd:e6:ea:03:62:9a:a8:65:59:
                    e8:d2:f2:47:41:65:bf:10:96:e6:19:60:d5:e5:8e:
                    d6:e8:cf:01:1e:13:7e:93:4a:c8:0f:2c:2f:6d:78:
                    8d:90:b3:47:b3:b5:2b:bd:5a:1f:e8:80:90:ca:c6:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FC:62:49:35:4F:BD:31:C7:F0:CD:BC:D0:17:27:00:77:06:5F:91
            X509v3 Authority Key Identifier:
                keyid:FE:AA:AC:DC:EA:12:02:AB:4E:4D:D5:BE:CC:48:75:9C:00:40:D1:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEAAACDCEA1202AB4E4DD5BECC48759C0040D1BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5n4XHyaVagitqiqUYFK1sj3DJH1keSd6y1RnnxCp9V1a/0/3133382e35392e38382e302f32322d3234203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:57:42:e8:08:2c:53:50:d1:87:eb:89:aa:e2:c2:60:99:
         b8:81:0a:04:e9:3e:ef:01:c6:12:29:43:30:da:df:69:96:22:
         9f:9c:d9:fb:e7:3b:19:de:d8:26:97:65:fa:1b:1c:ee:cb:45:
         a2:16:f4:4d:96:40:cd:2d:43:ed:09:f8:64:12:2e:bc:93:e6:
         4c:f5:6d:89:af:9b:58:5e:f2:bb:43:0a:c6:56:09:4a:b0:0e:
         93:9a:01:94:17:e6:d5:2d:90:fa:a1:5a:f7:08:48:49:12:9f:
         ed:8b:9a:1f:83:ea:61:e8:a4:a5:48:65:e5:c7:4b:cc:5b:87:
         35:ca:66:78:14:0f:5e:88:0c:5b:c2:2b:7b:8e:90:18:e9:d2:
         6f:24:0a:84:f1:5d:0c:3d:f7:75:56:77:e6:fa:f3:36:25:e3:
         fa:4f:f3:ec:b6:40:07:d6:bd:02:fb:76:d2:d1:be:2e:64:dc:
         f5:d8:7c:aa:05:50:61:73:f6:1c:62:1f:48:61:32:49:c7:ed:
         03:7f:45:4e:32:65:8b:70:d2:48:d5:ad:62:5a:8b:eb:e9:38:
         27:70:95:3f:da:c0:dd:58:88:1c:b9:7f:2c:a9:f8:44:db:c6:
         cb:f3:b0:f1:b7:45:3a:7b:dc:5d:61:c6:46:6d:3f:17:a5:70:
         b6:1a:7c:a9
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUE9X+auXOrq3T+I22nYBEQf9Y5AQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVBQUFDRENFQTEyMDJBQjRFNERENUJFQ0M0ODc1OUMw
MDQwRDFCRDAeFw0yMTA4MjcxMzUxMDBaFw0yMjA4MjYxMzU2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzY4RjI4OEUzM0Y1MUU3NDc4
NDBFQTVGOENDQUMwNTg4QzQ1N0VCNEREOEI3OTkzNDdEMDZGRjMxMjFENDk0QUVC
OTg4NEM2RTE5QTc3QTRGRDgxRDZEODI4QzA4ODg5MTQyQzVFOEUyM0RGQTc5QUY4
Q0Q3MjAzOTQ3NkM4RDg4NkNDRUQxQTFEQkYzNzQzQjAxOEU2RkM4NDc5NzMxMzc5
QUI2QUVBMDYxODhDMUQ3RTY0MUFFMUM5OTkxMjAxRTY4OEY2RjA3MDczMTgxMjJC
NEZCQUYxN0I5QzVCOTJGNTZBQjFBM0MyRjk3NTFDMzEwODU5QjM3QTMwMTNBQjNF
QzcwNEMxOUU1Rjg5ODAzQjBBMDlGREM0NURCRDRDODI2RjNDRTFCMjhGQzQ2NzZF
RDYzQjVEQTRCRDdBNzhDN0FGRjBBNzYyQUUyRTc0OTEzMUJDMzk3OTVDMjJDQTE1
MDg0OEI3OUYxQzYyNzA0OTNCOENBOTMxMjhEQ0M4MkYxNjg1RkVENjM1RkVEMUJE
RTZFQTAzNjI5QUE4NjU1OUU4RDJGMjQ3NDE2NUJGMTA5NkU2MTk2MEQ1RTU4RUQ2
RThDRjAxMUUxMzdFOTM0QUM4MEYyQzJGNkQ3ODhEOTBCMzQ3QjNCNTJCQkQ1QTFG
RTg4MDkwQ0FDNkMwQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxo8ojjP1HnR4QOpfjMrAWIxFfrTdi3mTR9Bv8xIdSUrrmITG4Zp3
pP2B1tgowIiJFCxejiPfp5r4zXIDlHbI2IbM7RodvzdDsBjm/IR5cxN5q2rqBhiM
HX5kGuHJmRIB5oj28HBzGBIrT7rxe5xbkvVqsaPC+XUcMQhZs3owE6s+xwTBnl+J
gDsKCf3EXb1Mgm884bKPxGdu1jtdpL16eMev8Kdiri50kTG8OXlcIsoVCEi3nxxi
cEk7jKkxKNzILxaF/tY1/tG95uoDYpqoZVno0vJHQWW/EJbmGWDV5Y7W6M8BHhN+
k0rIDywvbXiNkLNHs7UrvVof6ICQysbAoQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FNP8Ykk1T70xx/DNvNAXJwB3Bl+RMB8GA1UdIwQYMBaAFP6qrNzqEgKrTk3VvsxI
dZwAQNG9MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzVuNFhIeWFWYWdpdHFp
cVVZRksxc2ozREpIMWtlU2Q2eTFSbm54Q3A5VjFhLzAvRkVBQUFDRENFQTEyMDJB
QjRFNERENUJFQ0M0ODc1OUMwMDQwRDFCRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRUFBQUNEQ0VBMTIwMkFCNEU0REQ1QkVDQzQ4NzU5QzAwNDBE
MUJELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby81bjRYSHlhVmFnaXRxaXFVWUZL
MXNqM0RKSDFrZVNkNnkxUm5ueENwOVYxYS8wLzMxMzMzODJlMzUzOTJlMzgzODJl
MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzIzNjM4Mzkucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKKO1gw
DQYJKoZIhvcNAQELBQADggEBAK4wV0LoCCxTUNGH64mq4sJgmbiBCgTpPu8BxhIp
QzDa32mWIp+c2fvnOxne2CaXZfobHO7LRaIW9E2WQM0tQ+0J+GQSLryT5kz1bYmv
m1he8rtDCsZWCUqwDpOaAZQX5tUtkPqhWvcISEkSn+2Lmh+D6mHopKVIZeXHS8xb
hzXKZngUD16IDFvCK3uOkBjp0m8kCoTxXQw993VWd+b68zYl4/pP8+y2QAfWvQL7
dtLRvi5k3PXYfKoFUGFz9hxiH0hhMknH7QN/RU4yZYtw0kjVrWJai+vpOCdwlT/a
wN1YiBy5fyyp+ETbxsvzsPG3RTp73F1hxkZtPxelcLYafKk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org