Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/3133382e3131382e37322e302f32322d3232203d3e20323634323538.roa
File:                     3133382e3131382e37322e302f32322d3232203d3e20323634323538.roa (raw, json)
Hash identifier:          NK2kNWe0WpagNncoPnqOsAOgtpCzLYRa0rjDTEtG6YY=
Subject key identifier:   59:D1:C3:61:9D:FC:82:C2:DA:F7:AE:E2:48:C6:F6:2A:2C:13:0B:52
Certificate issuer:       /CN=4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF
Certificate serial:       32ACEB16CB8F583591AA7188632A651A3F742310
Authority key identifier: 4C:32:96:CF:DB:00:59:DD:09:E9:F4:DD:8E:B6:61:85:77:8D:D4:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/3133382e3131382e37322e302f32322d3232203d3e20323634323538.roa
Signing time:             Tue 08 Aug 2023 17:52:26 +0000
ROA not before:           Tue 08 Aug 2023 17:47:26 +0000
ROA not after:            Tue 06 Aug 2024 17:52:26 +0000
asID:                     264258
IP address blocks:        138.118.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ac:eb:16:cb:8f:58:35:91:aa:71:88:63:2a:65:1a:3f:74:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF
        Validity
            Not Before: Aug  8 17:47:26 2023 GMT
            Not After : Aug  6 17:52:26 2024 GMT
        Subject: CN=59D1C3619DFC82C2DAF7AEE248C6F62A2C130B52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:30:78:28:87:3e:c1:5c:a4:0d:1b:c1:76:
                    3e:c0:be:1e:24:61:46:a7:39:9a:6b:d0:e1:20:0e:
                    d9:32:d4:15:2e:da:39:77:23:13:f2:a0:98:59:5c:
                    ea:b3:0a:d3:3a:43:93:c1:10:4f:54:da:41:80:88:
                    7d:e3:50:18:d7:37:81:93:9a:9c:ec:80:2b:c8:33:
                    3f:7c:96:d7:63:22:2f:cb:28:f7:ee:57:63:49:fa:
                    4f:84:56:b2:1d:5b:25:4a:2f:59:8e:b7:0c:59:80:
                    7c:a1:fb:e7:f8:87:7f:e2:0e:1b:00:75:b4:bd:b2:
                    2b:45:8f:7b:11:1e:68:e7:81:f6:8e:98:77:d1:09:
                    72:81:10:7d:56:99:f7:3c:78:9f:89:97:99:9b:e4:
                    d5:b1:b1:17:fc:73:b3:83:e0:1e:6a:0b:3a:55:71:
                    e3:f2:bf:aa:70:8b:25:a5:8f:1d:f7:c6:33:e3:30:
                    16:61:ae:b2:4b:b4:81:c7:0e:fb:6b:bb:80:85:cf:
                    bf:87:8c:8b:78:c7:7b:40:ef:60:5d:ab:bd:3e:3c:
                    0e:04:71:df:86:42:10:12:a5:42:45:1e:2e:3e:63:
                    a3:52:5b:81:cb:61:59:97:83:61:11:5a:fc:aa:09:
                    f8:a8:2d:73:1d:21:25:b1:6e:7c:db:7d:19:94:95:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D1:C3:61:9D:FC:82:C2:DA:F7:AE:E2:48:C6:F6:2A:2C:13:0B:52
            X509v3 Authority Key Identifier:
                keyid:4C:32:96:CF:DB:00:59:DD:09:E9:F4:DD:8E:B6:61:85:77:8D:D4:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C3296CFDB0059DD09E9F4DD8EB66185778DD4DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/3133382e3131382e37322e302f32322d3232203d3e20323634323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:18:c9:21:d4:f0:c8:d9:11:32:5a:24:06:3d:f9:03:d7:5e:
         1c:b9:32:89:da:fa:63:65:12:a8:df:a7:5f:4b:f7:8c:8b:63:
         25:c7:35:2d:1d:a2:cb:03:14:2c:6a:8a:ec:fd:80:24:08:0a:
         88:1a:69:82:02:56:cc:0a:5e:f8:6f:1f:b4:1f:95:f2:57:7e:
         07:5b:2d:38:ec:79:0f:a7:71:0c:e5:47:1b:fc:e6:fc:15:45:
         2c:78:de:ae:2e:c8:45:00:31:dd:92:6e:79:75:52:d7:b4:e9:
         ed:9d:58:37:a7:17:54:32:76:c3:fa:42:1f:c2:10:38:50:d1:
         4f:66:9d:df:83:fc:bc:55:b4:f6:0d:c5:64:1e:aa:d7:e6:04:
         37:ae:d1:f7:9f:81:a0:a1:51:e2:2b:69:9a:07:56:ef:57:76:
         f3:42:47:94:4a:e7:95:ca:90:e5:d5:ca:b2:0d:73:9c:3b:14:
         5f:31:38:82:50:d1:7d:35:d1:01:8a:2a:c9:cd:f3:63:71:45:
         37:87:6a:6e:47:cc:8d:ca:39:94:e2:fb:d7:4f:7a:b8:26:38:
         e4:43:7f:62:be:c7:0b:cf:df:75:93:3a:c8:1a:ae:19:d0:9d:
         e8:e1:1a:57:41:f2:3a:7f:c2:7e:cc:92:b7:a4:bf:b4:0f:57:
         c3:ec:74:b9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMqzrFsuPWDWRqnGIYyplGj90IxAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEMzMjk2Q0ZEQjAwNTlERDA5RTlGNEREOEVCNjYxODU3
NzhERDRERjAeFw0yMzA4MDgxNzQ3MjZaFw0yNDA4MDYxNzUyMjZaMDMxMTAvBgNV
BAMTKDU5RDFDMzYxOURGQzgyQzJEQUY3QUVFMjQ4QzZGNjJBMkMxMzBCNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLgzB4KIc+wVykDRvBdj7Avh4k
YUanOZpr0OEgDtky1BUu2jl3IxPyoJhZXOqzCtM6Q5PBEE9U2kGAiH3jUBjXN4GT
mpzsgCvIMz98ltdjIi/LKPfuV2NJ+k+EVrIdWyVKL1mOtwxZgHyh++f4h3/iDhsA
dbS9sitFj3sRHmjngfaOmHfRCXKBEH1Wmfc8eJ+Jl5mb5NWxsRf8c7OD4B5qCzpV
cePyv6pwiyWljx33xjPjMBZhrrJLtIHHDvtru4CFz7+HjIt4x3tA72Bdq70+PA4E
cd+GQhASpUJFHi4+Y6NSW4HLYVmXg2ERWvyqCfioLXMdISWxbnzbfRmUlZVrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWdHDYZ38gsLa967iSMb2KiwTC1IwHwYDVR0j
BBgwFoAUTDKWz9sAWd0J6fTdjrZhhXeN1N8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldreDk4QzE1R0F5Ukx1eDRBR2dVSEhFWXlldGk3Mmk4dTJ4ckRwa2JL
eHQvMC80QzMyOTZDRkRCMDA1OUREMDlFOUY0REQ4RUI2NjE4NTc3OERENERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDMzI5NkNGREIwMDU5REQw
OUU5RjRERDhFQjY2MTg1Nzc4REQ0REYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXa3g5OEMxNUdBeVJMdXg0QUdnVUhIRVl5ZXRpNzJpOHUyeHJEcGtiS3h0LzAv
MzEzMzM4MmUzMTMxMzgyZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzQzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdkgwDQYJKoZIhvcNAQELBQADggEBAIcYySHU
8MjZETJaJAY9+QPXXhy5Mona+mNlEqjfp19L94yLYyXHNS0dossDFCxqiuz9gCQI
CogaaYICVswKXvhvH7QflfJXfgdbLTjseQ+ncQzlRxv85vwVRSx43q4uyEUAMd2S
bnl1Ute06e2dWDenF1QydsP6Qh/CEDhQ0U9mnd+D/LxVtPYNxWQeqtfmBDeu0fef
gaChUeIraZoHVu9XdvNCR5RK55XKkOXVyrINc5w7FF8xOIJQ0X010QGKKsnN82Nx
RTeHam5HzI3KOZTi+9dPergmOORDf2K+xwvP33WTOsgarhnQnejhGldB8jp/wn7M
krekv7QPV8PsdLk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org