Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/3133382e39392e31362e302f32322d3234203d3e20323634313539.roa
File:                     3133382e39392e31362e302f32322d3234203d3e20323634313539.roa (raw, json)
Hash identifier:          59+htTnoVBjahm6REG6aqOGFmYGjfUjqRyJOwmQgaAw=
Subject key identifier:   C9:69:90:71:DC:A5:8A:97:52:A7:C5:9C:B3:37:57:B7:16:25:F7:7D
Certificate issuer:       /CN=65501EFC3B1110CB16C391F797BB378146CDCE0C
Certificate serial:       14E9A57BD4C948ECB76A258A6E3DF4BDB59D747D
Authority key identifier: 65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/3133382e39392e31362e302f32322d3234203d3e20323634313539.roa
Signing time:             Tue 16 May 2023 12:07:09 +0000
ROA not before:           Tue 16 May 2023 12:02:09 +0000
ROA not after:            Tue 14 May 2024 12:07:09 +0000
asID:                     264159
IP address blocks:        138.99.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:e9:a5:7b:d4:c9:48:ec:b7:6a:25:8a:6e:3d:f4:bd:b5:9d:74:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65501EFC3B1110CB16C391F797BB378146CDCE0C
        Validity
            Not Before: May 16 12:02:09 2023 GMT
            Not After : May 14 12:07:09 2024 GMT
        Subject: CN=C9699071DCA58A9752A7C59CB33757B71625F77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d4:67:55:b7:7b:9c:0d:72:ba:49:a2:45:60:
                    b7:5f:b3:be:f4:6a:e9:d6:ff:4a:de:0c:2f:21:2a:
                    3f:69:17:11:ce:1f:97:fc:27:a7:4b:1f:08:b8:74:
                    a5:0a:6d:56:91:50:8b:b4:37:44:b9:7d:48:9f:e7:
                    68:04:28:6a:f7:49:75:29:94:ce:b1:10:2d:d4:3f:
                    89:10:5d:31:a4:34:b9:c0:de:1d:67:fc:2a:9e:26:
                    c0:63:fb:8d:11:1c:c6:e8:f9:6b:6a:90:af:3e:5a:
                    f5:8d:b2:f9:7b:f6:20:3e:f6:d4:da:44:c2:44:45:
                    b6:b4:21:31:c5:1a:6d:6a:4b:30:fe:0b:6b:60:05:
                    0c:63:cc:ae:57:49:7f:f7:2e:42:ae:0d:fa:ff:94:
                    dd:93:16:53:ef:8f:1a:d1:d5:56:67:1b:30:58:1e:
                    77:f3:ce:b2:36:70:34:53:89:41:e8:b6:88:33:d1:
                    56:54:6c:35:67:e7:b1:7b:c9:d7:58:84:01:0a:86:
                    86:8b:3f:60:15:13:86:90:f8:dc:56:11:a5:b4:76:
                    cc:b7:6e:10:47:33:d9:d2:14:c5:3d:95:0b:90:c3:
                    d7:e1:5f:8d:c4:fd:a4:f2:28:8b:0f:ce:3e:38:d4:
                    b7:1b:d6:58:97:69:4e:57:44:d1:64:92:19:2c:c0:
                    45:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:90:71:DC:A5:8A:97:52:A7:C5:9C:B3:37:57:B7:16:25:F7:7D
            X509v3 Authority Key Identifier:
                keyid:65:50:1E:FC:3B:11:10:CB:16:C3:91:F7:97:BB:37:81:46:CD:CE:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/65501EFC3B1110CB16C391F797BB378146CDCE0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rAcR6RE9QVeWWhcsye5rePb79nS3vR2tvZyaYK59Q64/0/3133382e39392e31362e302f32322d3234203d3e20323634313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:6d:c9:b0:31:6c:57:d3:2f:89:0d:3f:87:0f:18:1f:eb:15:
         a7:04:08:c1:99:d4:b6:7a:3b:fb:79:32:82:06:b4:71:e6:ca:
         26:8f:db:7d:88:4f:5a:37:9b:a9:fa:12:39:7b:53:6a:4b:06:
         1a:de:f5:2a:ab:4c:df:52:f8:6b:e6:16:5c:4d:d6:b1:1a:34:
         5c:cd:1d:4f:ca:bc:a9:94:15:55:00:a4:12:b5:78:33:81:30:
         24:03:f8:eb:7f:7e:2d:5d:f6:e9:0f:28:6f:63:2e:17:da:46:
         46:4c:a2:f1:8f:72:1f:6a:ea:8c:3a:82:6d:2f:9d:62:63:f0:
         dd:97:cf:7e:b9:9c:f3:21:06:88:43:e2:ff:46:ab:ca:cb:99:
         e8:1d:51:99:7a:cb:98:42:5e:57:98:85:06:2c:25:0c:4c:55:
         62:ba:4f:0f:1e:83:b5:01:1c:20:40:12:b8:92:76:fc:1f:a6:
         ea:d7:da:9b:84:80:6e:b0:93:37:ea:81:f3:e6:98:84:6c:70:
         25:e7:d7:0a:7c:2e:de:4a:3c:90:09:e3:53:f4:0c:6c:96:eb:
         29:ae:3b:84:7d:0d:b1:f0:c8:28:f6:0c:1d:7c:a7:a5:e2:29:
         9c:9c:69:ad:5e:69:ad:e1:d4:41:84:42:2d:9f:70:54:c7:06:
         60:49:54:34
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFOmle9TJSOy3aiWKbj30vbWddH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU1MDFFRkMzQjExMTBDQjE2QzM5MUY3OTdCQjM3ODE0
NkNEQ0UwQzAeFw0yMzA1MTYxMjAyMDlaFw0yNDA1MTQxMjA3MDlaMDMxMTAvBgNV
BAMTKEM5Njk5MDcxRENBNThBOTc1MkE3QzU5Q0IzMzc1N0I3MTYyNUY3N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1GdVt3ucDXK6SaJFYLdfs770
aunW/0reDC8hKj9pFxHOH5f8J6dLHwi4dKUKbVaRUIu0N0S5fUif52gEKGr3SXUp
lM6xEC3UP4kQXTGkNLnA3h1n/CqeJsBj+40RHMbo+WtqkK8+WvWNsvl79iA+9tTa
RMJERba0ITHFGm1qSzD+C2tgBQxjzK5XSX/3LkKuDfr/lN2TFlPvjxrR1VZnGzBY
HnfzzrI2cDRTiUHotogz0VZUbDVn57F7yddYhAEKhoaLP2AVE4aQ+NxWEaW0dsy3
bhBHM9nSFMU9lQuQw9fhX43E/aTyKIsPzj441Lcb1liXaU5XRNFkkhkswEVRAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUyWmQcdylipdSp8WcszdXtxYl930wHwYDVR0j
BBgwFoAUZVAe/DsREMsWw5H3l7s3gUbNzgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJBY1I2UkU5UVZlV1doY3N5ZTVyZVBiNzluUzN2UjJ0dlp5YVlLNTlR
NjQvMC82NTUwMUVGQzNCMTExMENCMTZDMzkxRjc5N0JCMzc4MTQ2Q0RDRTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY1NTAxRUZDM0IxMTEwQ0Ix
NkMzOTFGNzk3QkIzNzgxNDZDRENFMEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyQWNSNlJFOVFWZVdXaGNzeWU1cmVQYjc5blMzdlIydHZaeWFZSzU5UTY0LzAv
MzEzMzM4MmUzOTM5MmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimMQMA0GCSqGSIb3DQEBCwUAA4IBAQCmbcmwMWxX
0y+JDT+HDxgf6xWnBAjBmdS2ejv7eTKCBrRx5somj9t9iE9aN5up+hI5e1NqSwYa
3vUqq0zfUvhr5hZcTdaxGjRczR1PyryplBVVAKQStXgzgTAkA/jrf34tXfbpDyhv
Yy4X2kZGTKLxj3IfauqMOoJtL51iY/Ddl89+uZzzIQaIQ+L/RqvKy5noHVGZesuY
Ql5XmIUGLCUMTFViuk8PHoO1ARwgQBK4knb8H6bq19qbhIBusJM36oHz5piEbHAl
59cKfC7eSjyQCeNT9AxslusprjuEfQ2x8Mgo9gwdfKel4imcnGmtXmmt4dRBhEIt
n3BUxwZgSVQ0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org