Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
File:                     3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa (raw, json)
Hash identifier:          YtabRh3f0idoifoUnm52KbbD88szS3Qffy1VzU4KK/8=
Subject key identifier:   CB:F9:1C:C2:FC:1B:22:5D:08:1D:BB:61:4E:3A:90:21:6A:C4:AA:53
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       4249634879A51601A5807F7902B5D501E2E81889
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:21:43 +0000
ROA not before:           Fri 27 Jan 2023 20:16:43 +0000
ROA not after:            Fri 26 Jan 2024 20:21:43 +0000
asID:                     263934
IP address blocks:        138.219.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:49:63:48:79:a5:16:01:a5:80:7f:79:02:b5:d5:01:e2:e8:18:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:16:43 2023 GMT
            Not After : Jan 26 20:21:43 2024 GMT
        Subject: CN=CBF91CC2FC1B225D081DBB614E3A90216AC4AA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b8:23:0f:ea:e8:a7:c4:e7:c5:51:58:35:fb:
                    ec:f9:e3:07:d5:f9:fd:86:98:28:87:4f:7d:32:e1:
                    55:79:a9:d6:f4:ed:d7:cd:7f:da:25:45:d0:4c:63:
                    20:d2:9b:26:20:de:c1:6c:de:67:4e:65:53:47:08:
                    ce:9d:be:d1:5c:fc:1e:0d:05:48:0e:33:d4:3f:a6:
                    06:ab:a0:8a:5f:d4:24:4c:2b:d7:b0:1d:31:17:2c:
                    07:b9:d2:6d:f6:ee:29:d6:d7:85:35:0a:0b:65:b1:
                    5c:33:ff:ca:dd:4d:12:0d:52:c7:f9:05:74:04:fd:
                    ca:69:9a:a8:a5:ab:de:17:d0:fb:4f:65:52:23:40:
                    86:26:f3:00:dd:a3:73:ad:bf:68:24:51:4c:8f:45:
                    1a:40:6f:d8:ae:9c:b2:07:9c:13:b9:d3:41:6f:2f:
                    29:27:77:75:5a:ba:69:2e:1b:48:67:5c:b5:de:77:
                    4f:71:e7:4d:18:af:6a:39:78:f0:9c:50:fd:83:71:
                    28:c0:91:e1:23:6b:95:35:d1:3a:68:c5:db:3e:80:
                    09:b3:11:12:77:50:e3:ac:f3:75:38:4a:0f:7f:4f:
                    c5:af:e9:a3:b0:e0:e9:3e:e8:1b:5e:e3:a9:5e:f1:
                    5e:61:17:d0:c8:c9:08:c1:9a:0d:e0:3a:b1:cf:47:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F9:1C:C2:FC:1B:22:5D:08:1D:BB:61:4E:3A:90:21:6A:C4:AA:53
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132382e302f32332d3233203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:29:83:3a:36:17:ab:90:ce:18:66:d5:a8:7c:44:67:fa:0e:
         af:05:dd:1d:42:3d:84:62:c1:f4:d1:93:92:34:c5:2d:fc:06:
         88:79:0e:7f:81:90:53:6a:a1:bc:33:0d:de:63:b9:0f:a3:25:
         8b:d4:5a:90:21:f6:b3:7d:9b:51:e6:0a:a4:b6:5a:13:0f:3b:
         e7:42:f8:7f:0d:4d:49:15:3d:f5:41:ea:49:65:9b:54:f0:82:
         04:50:a4:f8:fa:b0:53:44:7a:c2:35:6a:8c:10:d0:d2:3c:2a:
         56:5d:18:f0:c9:bc:4d:70:84:b4:72:35:77:2d:73:a9:b5:92:
         a7:02:73:9a:20:b2:05:68:fc:c5:a1:21:8a:27:37:bc:da:40:
         ef:48:2a:97:70:b2:83:92:51:fe:cd:19:76:9a:1b:82:c3:16:
         af:d1:84:3f:ff:aa:bf:db:83:c1:26:e4:82:4e:50:8a:65:44:
         33:6f:0e:f9:a1:0a:66:a4:e6:27:fc:27:04:59:21:7e:86:a4:
         b8:7c:3c:bd:3f:68:40:56:54:f4:18:3c:e6:12:a5:3a:46:f8:
         63:11:9d:94:46:bf:d0:bf:89:2d:5a:e0:24:9d:f4:a8:3c:05:
         81:c5:2e:be:da:ab:9d:63:dd:6b:b3:cd:3d:7d:c4:49:05:75:
         69:ed:63:d5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQkljSHmlFgGlgH95ArXVAeLoGIkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGMkUwMjQ3NEVEODdFM0E3NkRFNkRCOTg2Rjc1MkFG
RDEwQjhDMjAeFw0yMzAxMjcyMDE2NDNaFw0yNDAxMjYyMDIxNDNaMDMxMTAvBgNV
BAMTKENCRjkxQ0MyRkMxQjIyNUQwODFEQkI2MTRFM0E5MDIxNkFDNEFBNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCauCMP6uinxOfFUVg1++z54wfV
+f2GmCiHT30y4VV5qdb07dfNf9olRdBMYyDSmyYg3sFs3mdOZVNHCM6dvtFc/B4N
BUgOM9Q/pgaroIpf1CRMK9ewHTEXLAe50m327inW14U1CgtlsVwz/8rdTRINUsf5
BXQE/cppmqilq94X0PtPZVIjQIYm8wDdo3Otv2gkUUyPRRpAb9iunLIHnBO500Fv
Lyknd3VaumkuG0hnXLXed09x500Yr2o5ePCcUP2DcSjAkeEja5U10Tpoxds+gAmz
ERJ3UOOs83U4Sg9/T8Wv6aOw4Ok+6Bte46le8V5hF9DIyQjBmg3gOrHPR4Q7AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy/kcwvwbIl0IHbthTjqQIWrEqlMwHwYDVR0j
BBgwFoAUOPLgJHTth+OnbebbmG91Kv0QuMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC8zOEYyRTAyNDc0RUQ4N0UzQTc2REU2REI5ODZGNzUyQUZEMTBCOEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RjJFMDI0NzRFRDg3RTNB
NzZERTZEQjk4NkY3NTJBRkQxMEI4QzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYrbgDANBgkqhkiG9w0BAQsFAAOCAQEAKymD
OjYXq5DOGGbVqHxEZ/oOrwXdHUI9hGLB9NGTkjTFLfwGiHkOf4GQU2qhvDMN3mO5
D6Mli9RakCH2s32bUeYKpLZaEw8750L4fw1NSRU99UHqSWWbVPCCBFCk+PqwU0R6
wjVqjBDQ0jwqVl0Y8Mm8TXCEtHI1dy1zqbWSpwJzmiCyBWj8xaEhiic3vNpA70gq
l3Cyg5JR/s0ZdpobgsMWr9GEP/+qv9uDwSbkgk5QimVEM28O+aEKZqTmJ/wnBFkh
foakuHw8vT9oQFZU9Bg85hKlOkb4YxGdlEa/0L+JLVrgJJ30qDwFgcUuvtqrnWPd
a7PNPX3ESQV1ae1j1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org