Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa
File:                     3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa (raw, json)
Hash identifier:          3PNG7sOGC3bMtXkvvABPygMQ3j5ipzd9O0Kwnf2WNuI=
Subject key identifier:   C3:6F:E7:C6:B9:6D:56:81:1F:ED:64:75:60:D5:3A:69:18:45:04:12
Certificate issuer:       /CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
Certificate serial:       0D352BC0F59FB80119ED170F2C478949D0529D7D
Authority key identifier: D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa
Signing time:             Thu 16 Nov 2023 13:16:00 +0000
ROA not before:           Thu 16 Nov 2023 13:11:00 +0000
ROA not after:            Thu 14 Nov 2024 13:16:00 +0000
asID:                     263902
IP address blocks:        138.204.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:35:2b:c0:f5:9f:b8:01:19:ed:17:0f:2c:47:89:49:d0:52:9d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C
        Validity
            Not Before: Nov 16 13:11:00 2023 GMT
            Not After : Nov 14 13:16:00 2024 GMT
        Subject: CN=C36FE7C6B96D56811FED647560D53A6918450412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:67:9f:04:6e:70:ce:c5:c0:59:b4:1f:6f:1a:
                    a5:22:38:58:e6:f2:79:f7:4b:00:7e:ce:49:5d:d0:
                    e3:f6:b7:fb:8b:0c:2c:c2:b4:0d:ae:c8:7c:18:4e:
                    f0:01:78:87:85:0a:be:94:66:82:81:45:ea:fd:5d:
                    1c:43:70:36:2d:1e:e2:0a:4a:83:b4:01:d3:74:2f:
                    31:76:23:91:78:1e:03:46:e0:20:26:e2:27:71:f2:
                    85:34:9a:77:06:12:b4:4f:ff:cd:cd:2a:fd:99:e6:
                    7a:17:6d:6a:b6:db:43:0d:19:40:72:88:c8:a4:7d:
                    a8:97:a3:72:70:57:a4:57:6a:b7:73:63:1e:8e:e7:
                    0a:19:0d:c7:0c:af:66:d6:a3:d7:07:32:28:38:f3:
                    1c:de:11:28:3d:02:19:84:07:af:f3:b4:95:5c:12:
                    dd:bd:eb:3b:ad:b5:6d:5c:89:df:0e:e5:8b:d0:ef:
                    f6:b6:64:1c:a5:57:55:6c:fb:0c:66:ad:0f:82:0e:
                    10:90:50:25:da:ef:02:8e:62:32:03:a1:d9:d2:6a:
                    b5:fb:d4:9e:ab:84:3b:d1:9c:de:31:e2:56:87:eb:
                    17:b7:9b:f1:6e:52:1e:b4:ac:d7:ea:f3:a4:8d:05:
                    0e:dc:16:cc:24:c2:b9:51:1f:e0:9d:8c:7a:55:69:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6F:E7:C6:B9:6D:56:81:1F:ED:64:75:60:D5:3A:69:18:45:04:12
            X509v3 Authority Key Identifier:
                keyid:D9:74:53:74:31:9A:27:DE:FA:4D:DB:18:A5:F3:FB:09:FC:93:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9745374319A27DEFA4DDB18A5F3FB09FC93FC9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wgV5ussyACTmrNEZtat2WYeYCF9ppshbFMf1qxJdheq/0/3133382e3230342e35352e302f32342d3234203d3e20323633393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:f7:23:5f:9e:62:b6:9a:4c:d2:d9:e9:b9:93:eb:b5:28:47:
         43:41:a0:a8:a7:cf:15:15:cc:e7:d6:db:ae:b5:40:bc:11:b9:
         b5:04:8e:63:51:bc:c9:1d:a8:fa:3e:e1:59:1a:3f:2b:86:df:
         ef:ef:e2:14:6d:79:d6:9e:ab:b1:5b:8c:20:fa:3c:19:a4:0c:
         0f:5e:75:08:18:2c:cc:6d:48:36:09:61:d0:c5:19:3f:d3:56:
         86:33:94:6f:34:de:9f:02:8b:0e:8e:cd:63:a7:05:42:53:8d:
         b6:8d:0a:bf:63:a4:5d:ba:5d:0b:df:d7:c5:98:94:6e:95:5a:
         8b:0f:88:71:7b:8e:38:07:03:99:38:48:23:02:0f:9d:6a:79:
         11:c1:35:72:20:b6:10:b1:9d:df:47:0f:a5:74:27:bf:93:24:
         f2:ec:60:5e:bf:41:50:20:c8:ec:21:94:f9:97:f7:23:8e:fb:
         f2:8c:c8:cb:3e:ab:68:1d:29:c2:76:0b:41:c5:a3:3b:c3:7e:
         b1:8d:d8:93:77:0a:b3:dd:3c:df:64:f8:cc:11:bb:8c:0f:32:
         0d:46:d0:5b:43:15:0d:56:b7:60:0d:5f:f1:a0:a7:ec:04:67:
         47:ec:14:33:f2:32:3f:0e:57:01:fc:40:f3:c6:ac:33:91:0a:
         4e:9e:14:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDTUrwPWfuAEZ7RcPLEeJSdBSnX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3NDUzNzQzMTlBMjdERUZBNEREQjE4QTVGM0ZCMDlG
QzkzRkM5QzAeFw0yMzExMTYxMzExMDBaFw0yNDExMTQxMzE2MDBaMDMxMTAvBgNV
BAMTKEMzNkZFN0M2Qjk2RDU2ODExRkVENjQ3NTYwRDUzQTY5MTg0NTA0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpZ58EbnDOxcBZtB9vGqUiOFjm
8nn3SwB+zkld0OP2t/uLDCzCtA2uyHwYTvABeIeFCr6UZoKBRer9XRxDcDYtHuIK
SoO0AdN0LzF2I5F4HgNG4CAm4idx8oU0mncGErRP/83NKv2Z5noXbWq220MNGUBy
iMikfaiXo3JwV6RXardzYx6O5woZDccMr2bWo9cHMig48xzeESg9AhmEB6/ztJVc
Et296zuttW1cid8O5YvQ7/a2ZBylV1Vs+wxmrQ+CDhCQUCXa7wKOYjIDodnSarX7
1J6rhDvRnN4x4laH6xe3m/FuUh60rNfq86SNBQ7cFswkwrlRH+CdjHpVabBvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUw2/nxrltVoEf7WR1YNU6aRhFBBIwHwYDVR0j
BBgwFoAU2XRTdDGaJ976TdsYpfP7CfyT/JwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3dnVjV1c3N5QUNUbXJORVp0YXQyV1llWUNGOXBwc2hiRk1mMXF4SmRo
ZXEvMC9EOTc0NTM3NDMxOUEyN0RFRkE0RERCMThBNUYzRkIwOUZDOTNGQzlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NzQ1Mzc0MzE5QTI3REVG
QTREREIxOEE1RjNGQjA5RkM5M0ZDOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd3Z1Y1dXNzeUFDVG1yTkVadGF0MldZZVlDRjlwcHNoYkZNZjFxeEpkaGVxLzAv
MzEzMzM4MmUzMjMwMzQyZTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKzDcwDQYJKoZIhvcNAQELBQADggEBAG33I1+e
YraaTNLZ6bmT67UoR0NBoKinzxUVzOfW2661QLwRubUEjmNRvMkdqPo+4VkaPyuG
3+/v4hRtedaeq7FbjCD6PBmkDA9edQgYLMxtSDYJYdDFGT/TVoYzlG803p8Ciw6O
zWOnBUJTjbaNCr9jpF26XQvf18WYlG6VWosPiHF7jjgHA5k4SCMCD51qeRHBNXIg
thCxnd9HD6V0J7+TJPLsYF6/QVAgyOwhlPmX9yOO+/KMyMs+q2gdKcJ2C0HFozvD
frGN2JN3CrPdPN9k+MwRu4wPMg1G0FtDFQ1Wt2ANX/Ggp+wEZ0fsFDPyMj8OVwH8
QPPGrDORCk6eFKo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org