Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
File:                     3133382e302e3139322e302f32322d3234203d3e203238313331.roa (raw, json)
Hash identifier:          zcCnkw6bQwRhLYGCFd3ZFvJBwanPXQO64PjhZP8ZZE8=
Subject key identifier:   B9:EA:4B:4F:CB:91:B1:8B:EA:85:1F:EE:BD:13:7D:88:48:EB:64:40
Certificate issuer:       /CN=79CBF269438B5C4C5D8301EAF8BCE0DB63987301
Certificate serial:       6A49B3350C4D6103B3ADA264C9F6616BE6AC0FC1
Authority key identifier: 79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa
Signing time:             Mon 25 Sep 2023 13:40:14 +0000
ROA not before:           Mon 25 Sep 2023 13:35:14 +0000
ROA not after:            Mon 23 Sep 2024 13:40:14 +0000
asID:                     28131
IP address blocks:        138.0.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:49:b3:35:0c:4d:61:03:b3:ad:a2:64:c9:f6:61:6b:e6:ac:0f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79CBF269438B5C4C5D8301EAF8BCE0DB63987301
        Validity
            Not Before: Sep 25 13:35:14 2023 GMT
            Not After : Sep 23 13:40:14 2024 GMT
        Subject: CN=B9EA4B4FCB91B18BEA851FEEBD137D8848EB6440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:8c:fb:55:70:b8:07:2f:00:38:5f:b5:87:
                    3f:35:a0:92:16:d5:49:40:79:3d:b3:18:06:9a:78:
                    fc:cb:00:9a:97:85:49:6e:a8:d7:b0:39:aa:6e:07:
                    c7:f5:05:68:33:89:8b:c1:92:93:76:d9:8c:d4:76:
                    30:84:5c:61:21:a6:dc:3b:90:2a:84:04:2a:7d:f3:
                    33:cd:44:e2:ae:5f:fe:a9:c2:e2:a9:d0:7a:f6:7d:
                    9b:a8:94:2d:85:47:47:9e:2e:93:67:c7:4a:47:b8:
                    f4:ff:29:f9:cd:ac:8e:77:b5:f5:f7:a1:90:43:b6:
                    89:3c:e7:19:e9:33:e3:c7:fa:2c:bc:cc:f6:e5:21:
                    94:37:7b:01:a8:d7:5f:98:7b:d5:62:96:bb:3b:62:
                    4a:f9:7a:a5:89:d2:de:31:11:0e:b3:18:6a:78:be:
                    20:bc:31:17:79:9a:e4:ba:c7:1d:f1:91:e0:5a:49:
                    1e:02:9c:c9:cd:a3:2a:fc:c4:cb:8b:88:dc:8e:53:
                    09:24:e8:e6:8d:4a:5e:31:7e:6c:ed:a0:72:c2:b8:
                    9d:df:9e:06:f3:42:4b:22:48:6e:f8:2c:9a:47:39:
                    a7:f7:c0:61:96:53:ef:3c:4e:1d:e3:78:5d:38:03:
                    5e:bb:11:0d:6f:f8:f4:65:1a:eb:f6:20:7e:f0:c7:
                    13:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EA:4B:4F:CB:91:B1:8B:EA:85:1F:EE:BD:13:7D:88:48:EB:64:40
            X509v3 Authority Key Identifier:
                keyid:79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/3133382e302e3139322e302f32322d3234203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:a5:34:de:1d:26:3b:32:48:09:8c:5e:3a:23:a6:37:06:f0:
         a6:d5:8c:93:b3:66:19:ec:af:2f:f3:f4:79:77:bb:c8:f7:38:
         5b:22:4e:0c:18:ec:5c:ff:42:d7:64:b9:93:53:09:f9:04:15:
         de:fd:ac:f7:d4:a3:08:6f:e0:45:bf:90:1f:b2:2b:f1:76:2c:
         52:dd:48:a0:8a:f4:e2:83:66:9b:bf:59:b7:b2:e5:aa:46:3d:
         d5:ff:e0:cd:36:7e:52:9d:40:b1:72:e4:c2:a2:bc:50:4b:a8:
         33:e6:65:fd:ad:5f:53:27:09:a2:c3:19:83:a4:2a:6d:53:60:
         b4:5e:4a:f5:c9:8f:2f:0f:d9:c9:b2:d3:9f:4c:e1:fc:86:9f:
         9a:ae:18:d1:ae:bc:51:63:36:ce:94:f1:3e:66:31:00:be:ff:
         9a:68:41:5f:8c:15:13:19:d0:93:09:93:b4:ed:ee:08:d9:f0:
         44:75:d2:b3:40:c8:26:aa:2e:0f:be:65:bf:33:f5:a5:ca:e2:
         6a:2e:5f:79:ab:dc:76:42:72:a5:6e:a1:67:d7:fc:7f:85:78:
         7e:15:91:83:92:78:72:c0:94:eb:dc:d1:98:80:1c:73:91:29:
         f3:86:44:e3:a2:54:e0:49:36:fc:2e:7f:e6:55:b5:b3:b5:13:
         2c:bb:04:ed
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUakmzNQxNYQOzraJkyfZha+asD8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzlDQkYyNjk0MzhCNUM0QzVEODMwMUVBRjhCQ0UwREI2
Mzk4NzMwMTAeFw0yMzA5MjUxMzM1MTRaFw0yNDA5MjMxMzQwMTRaMDMxMTAvBgNV
BAMTKEI5RUE0QjRGQ0I5MUIxOEJFQTg1MUZFRUJEMTM3RDg4NDhFQjY0NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13Iz7VXC4By8AOF+1hz81oJIW
1UlAeT2zGAaaePzLAJqXhUluqNewOapuB8f1BWgziYvBkpN22YzUdjCEXGEhptw7
kCqEBCp98zPNROKuX/6pwuKp0Hr2fZuolC2FR0eeLpNnx0pHuPT/KfnNrI53tfX3
oZBDtok85xnpM+PH+iy8zPblIZQ3ewGo11+Ye9Vilrs7Ykr5eqWJ0t4xEQ6zGGp4
viC8MRd5muS6xx3xkeBaSR4CnMnNoyr8xMuLiNyOUwkk6OaNSl4xfmztoHLCuJ3f
ngbzQksiSG74LJpHOaf3wGGWU+88Th3jeF04A167EQ1v+PRlGuv2IH7wxxNBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUuepLT8uRsYvqhR/uvRN9iEjrZEAwHwYDVR0j
BBgwFoAUecvyaUOLXExdgwHq+Lzg22OYcwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3B1RnNWWTd6UlljcEo0Y1B5S2tDYTlrRnM0RzF4Y0o5M21adGVXMVJy
NmUvMC83OUNCRjI2OTQzOEI1QzRDNUQ4MzAxRUFGOEJDRTBEQjYzOTg3MzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc5Q0JGMjY5NDM4QjVDNEM1
RDgzMDFFQUY4QkNFMERCNjM5ODczMDEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdwdUZzVlk3elJZY3BKNGNQeUtrQ2E5a0ZzNEcxeGNKOTNtWnRlVzFScjZlLzAv
MzEzMzM4MmUzMDJlMzEzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODMx
MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAwDANBgkqhkiG9w0BAQsFAAOCAQEAzKU03h0mOzJI
CYxeOiOmNwbwptWMk7NmGeyvL/P0eXe7yPc4WyJODBjsXP9C12S5k1MJ+QQV3v2s
99SjCG/gRb+QH7Ir8XYsUt1IoIr04oNmm79Zt7LlqkY91f/gzTZ+Up1AsXLkwqK8
UEuoM+Zl/a1fUycJosMZg6QqbVNgtF5K9cmPLw/ZybLTn0zh/Iafmq4Y0a68UWM2
zpTxPmYxAL7/mmhBX4wVExnQkwmTtO3uCNnwRHXSs0DIJqouD75lvzP1pcriai5f
eavcdkJypW6hZ9f8f4V4fhWRg5J4csCU69zRmIAcc5Ep84ZE46JU4Ek2/C5/5lW1
s7UTLLsE7Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org