Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3232203d3e20323633333231.roa
File:                     3133382e3131372e32342e302f32322d3232203d3e20323633333231.roa (raw, json)
Hash identifier:          xjkU5DeIQ2ve0fHHCoxUSJ5Cm0CK1qkw9UWgrUXxzNg=
Subject key identifier:   05:58:D2:6B:8E:F6:80:14:A3:09:18:7C:5B:45:9B:36:1F:1D:81:CE
Certificate issuer:       /CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
Certificate serial:       57115A0A6AB6D8BCF60A56A376C5E0A3718DD311
Authority key identifier: D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3232203d3e20323633333231.roa
Signing time:             Thu 20 Jul 2023 12:43:15 +0000
ROA not before:           Thu 20 Jul 2023 12:38:15 +0000
ROA not after:            Thu 18 Jul 2024 12:43:15 +0000
asID:                     263321
IP address blocks:        138.117.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:11:5a:0a:6a:b6:d8:bc:f6:0a:56:a3:76:c5:e0:a3:71:8d:d3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D53176AB725D41F3BF221A9749BC59C1DC62F981
        Validity
            Not Before: Jul 20 12:38:15 2023 GMT
            Not After : Jul 18 12:43:15 2024 GMT
        Subject: CN=0558D26B8EF68014A309187C5B459B361F1D81CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:b7:f9:ba:a4:46:fa:9e:a4:63:78:5f:e1:
                    6f:cc:e7:62:40:8c:b8:72:6d:0e:6f:6b:46:8e:5e:
                    db:8f:8b:3a:41:6c:dd:d9:e5:65:17:47:0e:bc:3a:
                    3f:ee:af:2f:67:ec:66:be:95:b0:7f:fe:af:e3:10:
                    79:f1:77:02:91:1e:e4:84:09:bd:f5:e6:72:e8:71:
                    82:46:3d:b6:b2:73:e7:83:90:4d:8a:3a:9f:ad:60:
                    0b:d8:15:01:28:17:ce:c8:b5:18:2f:d6:a4:d3:48:
                    9d:b8:ed:78:70:72:6c:da:7e:f3:33:ca:62:59:6b:
                    69:76:dd:f4:cb:db:14:c2:04:e7:7a:6e:77:c4:47:
                    ed:b8:45:84:db:f8:d0:29:b5:0e:2e:a2:8a:4f:cd:
                    5b:c2:9b:d9:32:10:eb:94:cb:37:8c:cf:e9:2b:e6:
                    05:f7:61:6d:1b:98:6c:67:11:8f:93:36:4f:00:c4:
                    8d:d2:ab:7a:6a:bf:78:d7:a0:79:1b:78:58:df:1f:
                    7c:e6:06:b4:46:19:63:a2:2b:9c:7e:70:55:62:14:
                    c9:39:ae:d0:7c:74:49:14:15:90:f6:18:f5:4b:75:
                    f8:e2:a5:bf:2c:ef:e4:f6:38:bc:d3:81:3a:e2:62:
                    08:49:23:36:43:c3:44:e2:7c:12:49:d1:5f:95:d4:
                    8c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:58:D2:6B:8E:F6:80:14:A3:09:18:7C:5B:45:9B:36:1F:1D:81:CE
            X509v3 Authority Key Identifier:
                keyid:D5:31:76:AB:72:5D:41:F3:BF:22:1A:97:49:BC:59:C1:DC:62:F9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D53176AB725D41F3BF221A9749BC59C1DC62F981.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/728Km9tFo8j9Ln615Ykkkg6T8rBnbgPgwshb3ghsPjHq/0/3133382e3131372e32342e302f32322d3232203d3e20323633333231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:00:76:dc:6b:07:2e:90:73:73:2d:3c:bf:76:fe:f4:12:
         70:44:b6:60:6e:36:f9:c4:10:10:51:98:fb:6d:dd:3e:db:e6:
         20:3c:6b:42:eb:00:cc:b4:de:a1:9e:5e:45:a2:21:a4:0b:03:
         01:9f:ab:0d:cf:e4:a3:9e:a1:36:c5:7c:f1:6a:63:28:37:c5:
         60:78:ba:56:47:46:4e:8f:b4:02:d6:a2:b8:6e:15:91:ec:11:
         62:0f:bf:6a:37:ae:8f:d8:4e:20:01:9f:19:42:1c:12:72:ab:
         be:22:d0:8e:cb:92:ab:40:3b:f2:b9:00:aa:f8:4e:14:84:3d:
         2b:d1:26:da:bf:e0:bc:96:8a:f1:04:b5:6f:d5:4f:e0:34:d1:
         2b:e4:3e:74:c3:90:7d:a4:ca:1c:f6:34:25:cd:6b:bb:60:32:
         c5:33:d0:51:13:39:2a:4a:db:57:81:50:bf:85:70:c3:0a:9b:
         1f:f7:4b:16:d7:29:13:de:b1:ee:09:ec:38:1d:fe:12:c6:cb:
         0d:f2:79:89:f5:be:33:41:e9:bd:e2:a8:16:b6:94:c4:f0:e8:
         00:a9:41:df:eb:90:df:a8:30:16:10:59:19:18:0e:3d:19:5d:
         6e:26:db:60:45:02:c4:b7:38:90:88:bb:6e:af:c2:da:45:5d:
         ac:88:c5:0d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVxFaCmq22Lz2ClajdsXgo3GN0xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUzMTc2QUI3MjVENDFGM0JGMjIxQTk3NDlCQzU5QzFE
QzYyRjk4MTAeFw0yMzA3MjAxMjM4MTVaFw0yNDA3MTgxMjQzMTVaMDMxMTAvBgNV
BAMTKDA1NThEMjZCOEVGNjgwMTRBMzA5MTg3QzVCNDU5QjM2MUYxRDgxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcVLf5uqRG+p6kY3hf4W/M52JA
jLhybQ5va0aOXtuPizpBbN3Z5WUXRw68Oj/ury9n7Ga+lbB//q/jEHnxdwKRHuSE
Cb315nLocYJGPbayc+eDkE2KOp+tYAvYFQEoF87ItRgv1qTTSJ247XhwcmzafvMz
ymJZa2l23fTL2xTCBOd6bnfER+24RYTb+NAptQ4uoopPzVvCm9kyEOuUyzeMz+kr
5gX3YW0bmGxnEY+TNk8AxI3Sq3pqv3jXoHkbeFjfH3zmBrRGGWOiK5x+cFViFMk5
rtB8dEkUFZD2GPVLdfjipb8s7+T2OLzTgTriYghJIzZDw0TifBJJ0V+V1IxnAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUBVjSa472gBSjCRh8W0WbNh8dgc4wHwYDVR0j
BBgwFoAU1TF2q3JdQfO/IhqXSbxZwdxi+YEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI4S205dEZvOGo5TG42MTVZa2trZzZUOHJCbmJnUGd3c2hiM2doc1Bq
SHEvMC9ENTMxNzZBQjcyNUQ0MUYzQkYyMjFBOTc0OUJDNTlDMURDNjJGOTgxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1MzE3NkFCNzI1RDQxRjNC
RjIyMUE5NzQ5QkM1OUMxREM2MkY5ODEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyOEttOXRGbzhqOUxuNjE1WWtra2c2VDhyQm5iZ1Bnd3NoYjNnaHNQakhxLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMzMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdRgwDQYJKoZIhvcNAQELBQADggEBAFLGAHbc
awcukHNzLTy/dv70EnBEtmBuNvnEEBBRmPtt3T7b5iA8a0LrAMy03qGeXkWiIaQL
AwGfqw3P5KOeoTbFfPFqYyg3xWB4ulZHRk6PtALWorhuFZHsEWIPv2o3ro/YTiAB
nxlCHBJyq74i0I7LkqtAO/K5AKr4ThSEPSvRJtq/4LyWivEEtW/VT+A00SvkPnTD
kH2kyhz2NCXNa7tgMsUz0FETOSpK21eBUL+FcMMKmx/3SxbXKRPese4J7Dgd/hLG
yw3yeYn1vjNB6b3iqBa2lMTw6ACpQd/rkN+oMBYQWRkYDj0ZXW4m22BFAsS3OJCI
u26vwtpFXayIxQ0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org