Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa
File:                     3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa (raw, json)
Hash identifier:          mrSy1wV0NSKbGZ5fppiwdeV43032B6tu1HXUJQmiEBo=
Subject key identifier:   3F:EC:14:76:59:D8:9E:42:E8:13:EB:21:8A:AA:87:5B:86:CB:0C:CC
Certificate issuer:       /CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
Certificate serial:       7EC0708AC82353B33CFF58B9B53D6943CF91D95B
Authority key identifier: 38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa
Signing time:             Fri 27 Jan 2023 20:21:55 +0000
ROA not before:           Fri 27 Jan 2023 20:16:55 +0000
ROA not after:            Fri 26 Jan 2024 20:21:55 +0000
asID:                     263934
IP address blocks:        138.219.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c0:70:8a:c8:23:53:b3:3c:ff:58:b9:b5:3d:69:43:cf:91:d9:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F2E02474ED87E3A76DE6DB986F752AFD10B8C2
        Validity
            Not Before: Jan 27 20:16:55 2023 GMT
            Not After : Jan 26 20:21:55 2024 GMT
        Subject: CN=3FEC147659D89E42E813EB218AAA875B86CB0CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f3:c6:2c:9d:a9:70:31:f8:60:d3:0d:20:eb:
                    2a:ad:a4:ad:97:a3:af:82:4d:cc:5e:fb:99:ae:78:
                    53:99:68:ef:0c:4f:00:93:77:ae:02:6c:8e:2d:67:
                    5b:ff:39:b0:8d:d7:66:c6:ca:76:14:d5:79:20:12:
                    8a:13:ea:71:ff:65:cd:e1:e4:29:95:a9:19:62:c8:
                    5e:f5:59:21:b9:16:d9:0f:ec:93:6a:04:ae:bb:f1:
                    95:a6:ac:8e:58:69:26:32:0c:75:47:ac:9f:df:5e:
                    ab:1d:ce:c6:a6:88:02:b1:a8:2e:7d:78:de:05:80:
                    66:1a:dd:90:ce:e8:ae:5b:70:2b:e0:7a:f0:8c:09:
                    7f:65:f9:2d:ff:9d:12:9a:23:77:01:6f:11:6f:43:
                    63:9c:a4:74:2e:c6:f3:3e:d2:4e:85:55:d4:39:0f:
                    0e:71:6d:50:1b:50:be:d1:3f:44:f5:8e:dd:e2:e9:
                    98:05:17:32:a6:07:77:06:ed:9f:fb:04:62:2f:e9:
                    98:ec:43:cd:90:a9:97:bc:a3:73:43:9e:df:d4:97:
                    42:81:7e:e8:5e:68:4c:5c:e2:81:0e:5c:51:7d:89:
                    47:7d:56:69:4c:4a:20:19:90:d7:c3:5f:4f:c9:98:
                    80:57:03:d8:86:42:0c:3f:ee:50:50:7c:87:58:69:
                    29:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EC:14:76:59:D8:9E:42:E8:13:EB:21:8A:AA:87:5B:86:CB:0C:CC
            X509v3 Authority Key Identifier:
                keyid:38:F2:E0:24:74:ED:87:E3:A7:6D:E6:DB:98:6F:75:2A:FD:10:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38F2E02474ED87E3A76DE6DB986F752AFD10B8C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6E5knCQainqdjrek1HaTzGtqNMZu1pjCCi4ZsvT2v6p4/0/3133382e3231392e3132392e302f32342d3234203d3e20323633393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:b0:10:c2:bb:1e:d7:47:2a:4a:c1:69:a7:ee:75:28:11:a2:
         5d:75:f8:cf:96:61:f6:d1:5f:11:f1:ed:3b:04:21:2a:f4:61:
         c2:c4:5a:f6:21:23:2b:ae:ae:c1:35:2c:9a:61:1d:a6:2c:c7:
         d6:25:e6:3b:0e:08:94:55:c4:93:9b:2d:43:6c:7b:a6:f8:8d:
         72:37:bd:e1:49:c7:d4:a4:37:ae:6d:ac:e5:f8:1c:4c:4b:1f:
         e6:d9:1c:1a:36:77:b5:40:4f:61:3f:1b:c2:84:16:2d:9e:e2:
         78:18:a5:07:52:b7:f2:a7:7c:c5:63:8d:db:38:e0:ef:ff:8e:
         31:3e:25:a1:da:16:ad:95:90:1f:0b:e1:05:2d:1b:9f:ee:eb:
         ca:18:87:d9:df:74:9c:16:c8:76:2d:1b:f9:e4:22:ac:1f:42:
         1e:61:69:5d:35:70:f5:90:36:13:4f:e6:b7:28:65:45:14:01:
         34:69:50:37:74:15:ef:86:a2:d9:03:58:33:22:56:d6:82:bd:
         91:2c:3b:b9:6f:63:c1:0a:2f:40:77:20:2e:af:0f:84:30:e9:
         d6:24:97:67:9b:b5:ac:0a:d0:9f:18:e2:f7:63:8a:47:44:c5:
         72:01:7a:25:80:52:54:b3:d4:1b:28:3d:a8:5c:6d:f7:be:41:
         b6:5f:92:9e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUfsBwisgjU7M8/1i5tT1pQ8+R2VswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGMkUwMjQ3NEVEODdFM0E3NkRFNkRCOTg2Rjc1MkFG
RDEwQjhDMjAeFw0yMzAxMjcyMDE2NTVaFw0yNDAxMjYyMDIxNTVaMDMxMTAvBgNV
BAMTKDNGRUMxNDc2NTlEODlFNDJFODEzRUIyMThBQUE4NzVCODZDQjBDQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa88YsnalwMfhg0w0g6yqtpK2X
o6+CTcxe+5mueFOZaO8MTwCTd64CbI4tZ1v/ObCN12bGynYU1XkgEooT6nH/Zc3h
5CmVqRliyF71WSG5FtkP7JNqBK678ZWmrI5YaSYyDHVHrJ/fXqsdzsamiAKxqC59
eN4FgGYa3ZDO6K5bcCvgevCMCX9l+S3/nRKaI3cBbxFvQ2OcpHQuxvM+0k6FVdQ5
Dw5xbVAbUL7RP0T1jt3i6ZgFFzKmB3cG7Z/7BGIv6ZjsQ82QqZe8o3NDnt/Ul0KB
fuheaExc4oEOXFF9iUd9VmlMSiAZkNfDX0/JmIBXA9iGQgw/7lBQfIdYaSmNAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUP+wUdlnYnkLoE+shiqqHW4bLDMwwHwYDVR0j
BBgwFoAUOPLgJHTth+OnbebbmG91Kv0QuMIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkU1a25DUWFpbnFkanJlazFIYVR6R3RxTk1adTFwakNDaTRac3ZUMnY2
cDQvMC8zOEYyRTAyNDc0RUQ4N0UzQTc2REU2REI5ODZGNzUyQUZEMTBCOEMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RjJFMDI0NzRFRDg3RTNB
NzZERTZEQjk4NkY3NTJBRkQxMEI4QzIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZFNWtuQ1FhaW5xZGpyZWsxSGFUekd0cU5NWnUxcGpDQ2k0WnN2VDJ2NnA0LzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrbgTANBgkqhkiG9w0BAQsFAAOCAQEAXbAQ
wrse10cqSsFpp+51KBGiXXX4z5Zh9tFfEfHtOwQhKvRhwsRa9iEjK66uwTUsmmEd
pizH1iXmOw4IlFXEk5stQ2x7pviNcje94UnH1KQ3rm2s5fgcTEsf5tkcGjZ3tUBP
YT8bwoQWLZ7ieBilB1K38qd8xWON2zjg7/+OMT4lodoWrZWQHwvhBS0bn+7ryhiH
2d90nBbIdi0b+eQirB9CHmFpXTVw9ZA2E0/mtyhlRRQBNGlQN3QV74ai2QNYMyJW
1oK9kSw7uW9jwQovQHcgLq8PhDDp1iSXZ5u1rArQnxji92OKR0TFcgF6JYBSVLPU
Gyg9qFxt975Btl+Sng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org