Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3232203d3e203238323130.roa
File:                     3133382e35392e3132302e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          lpUmCyhbYzb/+pI9b3MRejsiDIDjzYI6yztuXq9dR/c=
Subject key identifier:   9E:D6:B5:D7:2F:77:EC:0A:1C:E7:56:20:1F:D3:60:65:BA:80:4B:37
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       7CBB25D08CEBF6BC0B31ED7C50BE5BB9511601EC
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3232203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:23 +0000
ROA not before:           Wed 28 Feb 2024 13:58:23 +0000
ROA not after:            Wed 26 Feb 2025 14:03:23 +0000
asID:                     28210
IP address blocks:        138.59.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:bb:25:d0:8c:eb:f6:bc:0b:31:ed:7c:50:be:5b:b9:51:16:01:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:23 2024 GMT
            Not After : Feb 26 14:03:23 2025 GMT
        Subject: CN=9ED6B5D72F77EC0A1CE756201FD36065BA804B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:95:0c:55:00:b9:8e:af:4c:96:ab:e2:21:
                    8f:60:16:8d:56:84:22:f5:e0:66:34:25:08:0f:c4:
                    02:c2:fd:9c:58:cb:4d:ff:fc:f5:4a:3e:f6:3e:08:
                    c8:92:e7:af:b0:1c:b2:f5:66:75:c1:b1:0a:bd:3c:
                    4e:94:5d:f5:0f:ba:b3:78:ec:40:af:39:0b:99:4b:
                    f4:d8:98:14:1b:89:c5:de:d0:11:22:4f:df:03:12:
                    96:d1:9c:4a:44:5b:9e:69:9f:6b:9a:d0:94:17:aa:
                    93:28:ec:b8:ea:39:ce:60:93:18:88:34:ce:5f:42:
                    d7:93:28:18:c1:01:32:4c:9b:78:58:e5:35:40:82:
                    6d:8a:21:e0:30:3d:65:f5:5c:6b:da:4e:8f:cf:5b:
                    d0:8d:24:32:0a:c8:c4:c0:73:51:3c:23:ae:18:bd:
                    3a:88:67:a2:8e:72:84:1c:8c:50:e6:e2:16:25:f4:
                    1b:a6:44:2f:22:d2:05:04:d2:60:d9:a7:7e:34:91:
                    93:da:8c:d3:8e:56:2a:6a:2a:8a:04:12:78:81:44:
                    20:46:9b:bb:b9:19:d8:00:22:ea:64:27:20:08:04:
                    49:b1:09:93:da:87:b6:b9:d4:22:ea:92:d1:32:48:
                    0a:40:66:ba:88:d1:f4:2a:a9:ce:ab:1e:d0:ed:d4:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:B5:D7:2F:77:EC:0A:1C:E7:56:20:1F:D3:60:65:BA:80:4B:37
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3133382e35392e3132302e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:ea:8d:81:e4:b1:ac:c4:2a:d6:7a:fd:da:07:64:aa:9b:
         be:78:20:e0:62:1b:29:74:71:3d:f2:fb:42:04:4c:b0:94:5b:
         56:53:1d:80:b2:29:e5:28:76:e9:6d:26:5b:aa:b6:9d:ad:30:
         79:4d:42:fb:26:e4:cf:a4:1c:48:e2:23:c6:bf:d8:3a:46:ca:
         23:00:a6:ea:99:d1:b6:2b:b6:c4:fa:d8:e8:62:ee:96:06:de:
         fa:27:cf:df:9e:e9:17:67:0b:0e:66:87:45:ad:8c:5a:47:cb:
         c6:3a:96:f4:8a:41:83:21:32:ee:e6:2a:55:64:e3:bf:03:b2:
         01:95:94:93:22:f3:53:1c:48:8e:10:7e:95:c8:42:61:7e:2e:
         ff:23:0c:5b:ea:7e:1e:28:20:54:54:a0:c2:99:d3:44:cd:95:
         ef:e1:34:04:09:3f:3a:3d:12:1c:f6:de:f2:53:78:d5:6e:78:
         3a:a3:0f:6f:6d:26:8f:76:58:3f:33:5c:1c:f9:b0:c9:ad:ca:
         20:a2:57:4e:c8:da:0b:4c:6d:a5:17:c2:d9:1c:67:fb:d0:b3:
         aa:9d:54:02:c8:ba:71:ed:6e:cc:f0:64:e4:85:cb:01:f5:df:
         f0:f7:33:65:8c:ac:00:4f:c7:44:9a:bb:68:24:5f:0a:ef:fb:
         f8:7f:84:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfLsl0Izr9rwLMe18UL5buVEWAewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREJDMzNDNjU5NjY3QUE5MkE2QTBGMjVBRUZCNjJBNjAz
MzhGNUE0QjAeFw0yNDAyMjgxMzU4MjNaFw0yNTAyMjYxNDAzMjNaMDMxMTAvBgNV
BAMTKDlFRDZCNUQ3MkY3N0VDMEExQ0U3NTYyMDFGRDM2MDY1QkE4MDRCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbZUMVQC5jq9MlqviIY9gFo1W
hCL14GY0JQgPxALC/ZxYy03//PVKPvY+CMiS56+wHLL1ZnXBsQq9PE6UXfUPurN4
7ECvOQuZS/TYmBQbicXe0BEiT98DEpbRnEpEW55pn2ua0JQXqpMo7LjqOc5gkxiI
NM5fQteTKBjBATJMm3hY5TVAgm2KIeAwPWX1XGvaTo/PW9CNJDIKyMTAc1E8I64Y
vTqIZ6KOcoQcjFDm4hYl9BumRC8i0gUE0mDZp340kZPajNOOVipqKooEEniBRCBG
m7u5GdgAIupkJyAIBEmxCZPah7a51CLqktEySApAZrqI0fQqqc6rHtDt1D9vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnta11y937Aoc51YgH9NgZbqASzcwHwYDVR0j
BBgwFoAU28M8ZZZnqpKmoPJa77YqYDOPWkswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVFmeFJydGhFV3dtMXc3WVNmWUU5V2Q2NDFWMW5hWGRrdUtrQXRDOHFn
YVYvMC9EQkMzM0M2NTk2NjdBQTkyQTZBMEYyNUFFRkI2MkE2MDMzOEY1QTRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCQzMzQzY1OTY2N0FBOTJB
NkEwRjI1QUVGQjYyQTYwMzM4RjVBNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlRZnhScnRoRVd3bTF3N1lTZllFOVdkNjQxVjFuYVhka3VLa0F0QzhxZ2FWLzAv
MzEzMzM4MmUzNTM5MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzIzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijt4MA0GCSqGSIb3DQEBCwUAA4IBAQAawOqNgeSx
rMQq1nr92gdkqpu+eCDgYhspdHE98vtCBEywlFtWUx2AsinlKHbpbSZbqradrTB5
TUL7JuTPpBxI4iPGv9g6RsojAKbqmdG2K7bE+tjoYu6WBt76J8/fnukXZwsOZodF
rYxaR8vGOpb0ikGDITLu5ipVZOO/A7IBlZSTIvNTHEiOEH6VyEJhfi7/Iwxb6n4e
KCBUVKDCmdNEzZXv4TQECT86PRIc9t7yU3jVbng6ow9vbSaPdlg/M1wc+bDJrcog
oldOyNoLTG2lF8LZHGf70LOqnVQCyLpx7W7M8GTkhcsB9d/w9zNljKwAT8dEmrto
JF8K7/v4f4RE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org