Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32332d3233203d3e20323632333136.roa
File:                     3133382e3131372e3139342e302f32332d3233203d3e20323632333136.roa (raw, json)
Hash identifier:          xcMsa/2eAROcTVtvF7LAyMToQjl/8WP+kuk64bLscwM=
Subject key identifier:   C9:AC:BF:FA:C6:48:4E:7E:7E:DE:82:01:84:4C:AB:6E:AA:24:36:A1
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       1630091225A49553E7114360D60132702AF5CF2C
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32332d3233203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:37 +0000
ROA not before:           Mon 21 Aug 2023 13:21:37 +0000
ROA not after:            Mon 19 Aug 2024 13:26:37 +0000
asID:                     262316
IP address blocks:        138.117.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:30:09:12:25:a4:95:53:e7:11:43:60:d6:01:32:70:2a:f5:cf:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:37 2023 GMT
            Not After : Aug 19 13:26:37 2024 GMT
        Subject: CN=C9ACBFFAC6484E7E7EDE8201844CAB6EAA2436A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:99:27:8e:eb:3f:37:c1:21:32:ea:73:e7:
                    bd:7a:ad:a4:67:4c:81:3c:e0:8c:7a:dd:f6:46:00:
                    ad:a0:c4:3d:58:57:01:c5:25:5d:f1:a1:79:6b:9e:
                    a4:f1:3b:86:c8:2f:a5:e6:23:bd:a4:79:67:1a:e0:
                    bf:1a:e5:21:5f:e5:fe:6e:d7:77:62:08:43:0b:e8:
                    4e:d7:b3:d7:cf:74:33:10:c6:ae:34:28:a6:04:8f:
                    33:5e:8a:0c:37:10:3e:61:28:cf:d4:43:b4:c8:0f:
                    3c:74:ba:80:e7:e7:17:2d:b7:46:09:a2:ac:96:64:
                    40:d9:b9:37:31:1c:e6:97:63:9e:04:3c:b0:e1:d0:
                    51:60:99:60:26:05:6a:8b:65:8a:34:3e:f1:ef:f8:
                    f7:5c:da:c1:33:5a:6a:a3:9f:c2:c0:36:2a:72:e0:
                    7d:75:e8:7e:03:a8:c6:f4:b1:31:69:cf:9a:19:bc:
                    f3:9e:2f:e8:79:cc:c4:4e:2b:df:c9:64:4c:17:11:
                    73:24:19:a0:d2:cc:0c:d0:32:6a:94:90:65:9e:ad:
                    dc:d3:17:9e:4a:75:3b:aa:df:48:44:d0:1b:1d:18:
                    ef:9f:03:67:b3:a4:6c:fd:8c:8f:15:21:a4:cd:9e:
                    e0:d2:84:b4:34:50:32:b1:d3:b9:d1:54:a0:14:0f:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AC:BF:FA:C6:48:4E:7E:7E:DE:82:01:84:4C:AB:6E:AA:24:36:A1
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/3133382e3131372e3139342e302f32332d3233203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:57:96:97:b5:43:a4:56:6b:db:23:48:04:18:db:28:fd:57:
         7f:18:d5:0e:2a:a9:35:1c:2e:7c:d1:41:d9:d6:7c:a3:ab:6a:
         ce:20:58:b0:ab:2f:0b:48:d7:5a:49:00:2a:9b:e9:fb:b7:50:
         f8:8a:fa:ca:d2:33:50:04:f2:84:aa:38:6a:29:8c:29:19:6f:
         60:84:63:b6:00:99:9e:b8:a8:51:61:80:4f:88:49:44:d6:4b:
         80:0c:33:ef:50:78:ee:3c:3e:3c:a9:7e:d5:3e:d0:b6:2f:d2:
         d0:21:32:a5:d5:63:93:76:65:76:9f:2e:ea:cb:80:0c:36:5c:
         66:69:1f:15:ec:e2:9c:66:69:78:a0:95:08:9a:58:81:a9:f7:
         3f:86:3f:9b:86:31:e8:51:09:e3:af:0f:85:b9:f4:40:0e:62:
         a6:d0:c8:cc:1f:b7:02:de:da:ae:41:c9:35:7d:5e:c8:df:e2:
         26:1d:24:56:ef:fe:f0:bc:d7:78:d2:95:6c:d4:6e:39:37:01:
         cf:9f:13:00:e9:92:76:3b:e5:26:4f:e5:00:3e:bd:65:c3:0a:
         52:0f:ab:2d:4d:1a:10:c5:72:88:4f:5d:d0:13:cd:69:66:ce:
         c0:dc:cf:fc:ec:f3:db:da:76:70:0d:7e:66:c2:8f:0a:7e:9f:
         c6:ca:fe:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUFjAJEiWklVPnEUNg1gEycCr1zywwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2QTEzMkZCOEY5QzFCOThBOUNEQ0YxNTFFQTgyMzUw
QTFFMDgwODAeFw0yMzA4MjExMzIxMzdaFw0yNDA4MTkxMzI2MzdaMDMxMTAvBgNV
BAMTKEM5QUNCRkZBQzY0ODRFN0U3RURFODIwMTg0NENBQjZFQUEyNDM2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiJknjus/N8EhMupz5716raRn
TIE84Ix63fZGAK2gxD1YVwHFJV3xoXlrnqTxO4bIL6XmI72keWca4L8a5SFf5f5u
13diCEML6E7Xs9fPdDMQxq40KKYEjzNeigw3ED5hKM/UQ7TIDzx0uoDn5xctt0YJ
oqyWZEDZuTcxHOaXY54EPLDh0FFgmWAmBWqLZYo0PvHv+Pdc2sEzWmqjn8LANipy
4H116H4DqMb0sTFpz5oZvPOeL+h5zMROK9/JZEwXEXMkGaDSzAzQMmqUkGWerdzT
F55KdTuq30hE0BsdGO+fA2ezpGz9jI8VIaTNnuDShLQ0UDKx07nRVKAUD+xTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyay/+sZITn5+3oIBhEyrbqokNqEwHwYDVR0j
BBgwFoAUzWoTL7j5wbmKnNzxUeqCNQoeCAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODhTcjZrNWc1bnkxdndkaXdoOHlmTURTMkVlclc0NXBaZERob1h1VXQy
S2EvMC9DRDZBMTMyRkI4RjlDMUI5OEE5Q0RDRjE1MUVBODIzNTBBMUUwODA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkExMzJGQjhGOUMxQjk4
QTlDRENGMTUxRUE4MjM1MEExRTA4MDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg4U3I2azVnNW55MXZ3ZGl3aDh5Zk1EUzJFZXJXNDVwWmREaG9YdVV0MkthLzAv
MzEzMzM4MmUzMTMxMzcyZTMxMzkzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp1wjANBgkqhkiG9w0BAQsFAAOCAQEAvVeW
l7VDpFZr2yNIBBjbKP1XfxjVDiqpNRwufNFB2dZ8o6tqziBYsKsvC0jXWkkAKpvp
+7dQ+Ir6ytIzUATyhKo4aimMKRlvYIRjtgCZnrioUWGAT4hJRNZLgAwz71B47jw+
PKl+1T7Qti/S0CEypdVjk3Zldp8u6suADDZcZmkfFezinGZpeKCVCJpYgan3P4Y/
m4Yx6FEJ468Phbn0QA5iptDIzB+3At7arkHJNX1eyN/iJh0kVu/+8LzXeNKVbNRu
OTcBz58TAOmSdjvlJk/lAD69ZcMKUg+rLU0aEMVyiE9d0BPNaWbOwNzP/Ozz29p2
cA1+ZsKPCn6fxsr+Vw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org