Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
File:                     3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa (raw, json)
Hash identifier:          AoQdkWZgljZOq/wX2g1b0wOdyruorb3cf09JthAKKzk=
Subject key identifier:   7A:D4:CA:1A:E7:E9:65:78:47:8A:8A:F3:6B:65:C5:01:11:A2:DF:68
Certificate issuer:       /CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
Certificate serial:       79545A967BE3070A9EDDEDB924B97C22D223C51B
Authority key identifier: 07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa
Signing time:             Sat 22 Jul 2023 21:39:18 +0000
ROA not before:           Sat 22 Jul 2023 21:34:18 +0000
ROA not after:            Sat 20 Jul 2024 21:39:18 +0000
asID:                     262868
IP address blocks:        138.255.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:54:5a:96:7b:e3:07:0a:9e:dd:ed:b9:24:b9:7c:22:d2:23:c5:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0743743A0AB828DD321DB1C96B6AB55916A8859A
        Validity
            Not Before: Jul 22 21:34:18 2023 GMT
            Not After : Jul 20 21:39:18 2024 GMT
        Subject: CN=7AD4CA1AE7E96578478A8AF36B65C50111A2DF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:d6:05:58:df:87:e7:bd:2b:82:e4:aa:5b:
                    0e:d5:53:b7:ef:76:03:d7:7e:5d:72:13:70:ca:1e:
                    7f:b4:17:25:ff:31:3e:5f:60:e8:8a:99:70:15:91:
                    46:d5:f8:44:a8:d2:47:33:0e:25:8f:2e:21:10:b1:
                    f5:cd:2c:5c:99:0c:67:d7:4a:73:bf:a6:3b:0c:9e:
                    9d:d2:c4:28:26:37:2d:5a:51:4e:6d:01:d4:f8:54:
                    52:d3:04:db:34:f3:c6:fc:c1:2b:be:9d:96:88:a5:
                    5b:35:e5:8c:dd:01:ac:64:10:22:a5:30:40:74:e2:
                    32:1b:3c:c6:af:93:75:55:b5:bb:bc:5a:bd:c5:6f:
                    07:6b:f6:9c:50:38:dd:4e:68:46:04:66:89:21:08:
                    3f:b2:36:0d:1c:04:21:6f:a4:d3:92:e0:96:51:61:
                    2e:07:8a:e4:a6:ec:af:9c:1f:95:20:b5:f4:68:ea:
                    6e:9f:0d:f3:01:1f:21:4e:2a:5a:17:c2:a7:5e:fe:
                    12:ff:41:e1:c4:2c:02:4b:7c:28:09:85:b0:f0:0c:
                    74:ac:8d:f7:e4:ba:10:f6:c9:d6:60:ae:d4:e5:53:
                    b4:a4:4f:ee:d1:83:89:c9:b8:c8:6d:e8:10:ca:2c:
                    39:76:3b:cf:be:d7:c3:a7:a8:ba:dd:4f:71:14:28:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D4:CA:1A:E7:E9:65:78:47:8A:8A:F3:6B:65:C5:01:11:A2:DF:68
            X509v3 Authority Key Identifier:
                keyid:07:43:74:3A:0A:B8:28:DD:32:1D:B1:C9:6B:6A:B5:59:16:A8:85:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0743743A0AB828DD321DB1C96B6AB55916A8859A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/0/3133382e3235352e3139362e302f32332d3233203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:53:0b:8e:0a:d1:f8:86:fe:42:e7:65:91:7f:7a:88:5b:04:
         e1:82:89:df:8b:0e:14:da:60:ab:c0:e6:53:10:8c:2e:31:90:
         6a:6e:44:8d:64:e2:07:02:f9:f0:e1:6b:75:09:c3:ed:27:f8:
         ad:0a:76:ff:26:ba:95:62:0d:81:72:77:5c:18:eb:98:63:2a:
         85:b6:12:2d:2a:42:1e:13:80:3d:8e:bc:47:e9:8f:6d:02:11:
         64:af:6b:39:44:17:78:97:20:96:be:65:05:0d:85:e2:2e:1e:
         27:d6:e6:5f:3a:ae:af:4b:58:67:31:ad:99:ab:92:3d:61:1f:
         1e:77:41:07:58:1a:51:e6:d0:f5:f4:a0:4f:f7:91:20:bb:1e:
         0b:e5:0a:d6:fc:db:f7:d3:a6:a7:94:26:a1:6c:d2:7e:d5:97:
         70:8e:3f:7c:d9:34:a1:92:15:e4:2d:2f:26:78:2b:a6:0e:4a:
         f7:aa:99:24:d4:bf:1f:6b:2a:43:96:7a:45:c7:31:ec:3d:90:
         ad:5e:a3:5a:03:1b:62:2f:22:27:10:1d:31:b3:a2:b0:d0:14:
         53:bb:c0:2e:fd:ae:6e:55:44:72:13:96:0e:ea:96:a0:61:8a:
         b8:7c:e6:33:bb:ff:e7:c9:2e:96:16:18:60:6a:5d:15:ce:30:
         5f:8a:6d:70
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeVRalnvjBwqe3e25JLl8ItIjxRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0Mzc0M0EwQUI4MjhERDMyMURCMUM5NkI2QUI1NTkx
NkE4ODU5QTAeFw0yMzA3MjIyMTM0MThaFw0yNDA3MjAyMTM5MThaMDMxMTAvBgNV
BAMTKDdBRDRDQTFBRTdFOTY1Nzg0NzhBOEFGMzZCNjVDNTAxMTFBMkRGNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBS9YFWN+H570rguSqWw7VU7fv
dgPXfl1yE3DKHn+0FyX/MT5fYOiKmXAVkUbV+ESo0kczDiWPLiEQsfXNLFyZDGfX
SnO/pjsMnp3SxCgmNy1aUU5tAdT4VFLTBNs088b8wSu+nZaIpVs15YzdAaxkECKl
MEB04jIbPMavk3VVtbu8Wr3Fbwdr9pxQON1OaEYEZokhCD+yNg0cBCFvpNOS4JZR
YS4HiuSm7K+cH5UgtfRo6m6fDfMBHyFOKloXwqde/hL/QeHELAJLfCgJhbDwDHSs
jffkuhD2ydZgrtTlU7SkT+7Rg4nJuMht6BDKLDl2O8++18OnqLrdT3EUKGzPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUetTKGufpZXhHiorza2XFARGi32gwHwYDVR0j
BBgwFoAUB0N0Ogq4KN0yHbHJa2q1WRaohZowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjRUV1E4NFN3Z2k1cTg1SnQ3WGRFU0UxNlZQenZicE50dWpIVjZ5enpL
d0EvMC8wNzQzNzQzQTBBQjgyOEREMzIxREIxQzk2QjZBQjU1OTE2QTg4NTlBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA3NDM3NDNBMEFCODI4REQz
MjFEQjFDOTZCNkFCNTU5MTZBODg1OUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY0VFdRODRTd2dpNXE4NUp0N1hkRVNFMTZWUHp2YnBOdHVqSFY2eXp6S3dBLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzkzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM4MzYzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/xDANBgkqhkiG9w0BAQsFAAOCAQEArlML
jgrR+Ib+QudlkX96iFsE4YKJ34sOFNpgq8DmUxCMLjGQam5EjWTiBwL58OFrdQnD
7Sf4rQp2/ya6lWINgXJ3XBjrmGMqhbYSLSpCHhOAPY68R+mPbQIRZK9rOUQXeJcg
lr5lBQ2F4i4eJ9bmXzqur0tYZzGtmauSPWEfHndBB1gaUebQ9fSgT/eRILseC+UK
1vzb99Omp5QmoWzSftWXcI4/fNk0oZIV5C0vJngrpg5K96qZJNS/H2sqQ5Z6Rccx
7D2QrV6jWgMbYi8iJxAdMbOisNAUU7vALv2ublVEchOWDuqWoGGKuHzmM7v/58ku
lhYYYGpdFc4wX4ptcA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org