Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
File:                     3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa (raw, json)
Hash identifier:          GtYZKlhxGiOBDGuOGRBs3mkluPJViT7si8HUJnDFDy8=
Subject key identifier:   F1:C6:E4:93:AC:F5:BD:BE:DE:9C:BE:2D:DC:DB:34:05:0D:7B:97:85
Certificate issuer:       /CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
Certificate serial:       7A3CD8A7E4F2B5067E0A401C7909DE5AFB31470F
Authority key identifier: 5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa
Signing time:             Tue 04 Jul 2023 20:16:38 +0000
ROA not before:           Tue 04 Jul 2023 20:11:38 +0000
ROA not after:            Tue 02 Jul 2024 20:16:38 +0000
asID:                     52708
IP address blocks:        138.118.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3c:d8:a7:e4:f2:b5:06:7e:0a:40:1c:79:09:de:5a:fb:31:47:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5B5CB9EEF23947370DA03E71D6B051CB5C7641
        Validity
            Not Before: Jul  4 20:11:38 2023 GMT
            Not After : Jul  2 20:16:38 2024 GMT
        Subject: CN=F1C6E493ACF5BDBEDE9CBE2DDCDB34050D7B9785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b8:26:68:ef:af:34:1f:e2:f1:b7:cb:79:bb:
                    03:06:28:b6:ab:17:93:04:21:f8:d9:41:15:b6:33:
                    2d:cf:01:e5:04:54:4a:69:b6:5f:71:69:03:a2:f5:
                    e2:c0:b9:7a:09:bb:2e:13:10:b1:ff:73:ba:0c:64:
                    1c:f0:13:0b:6b:81:c4:86:c9:31:e4:4c:41:44:76:
                    3b:5d:38:b4:8b:37:60:39:a6:4e:3c:fd:fb:0d:60:
                    7f:e6:03:09:45:19:30:bf:e6:72:30:f7:aa:48:e7:
                    83:75:5d:08:eb:83:98:37:f7:69:64:86:d9:40:ca:
                    2b:a6:6f:74:b3:d9:82:75:6b:4b:d3:08:a7:59:61:
                    6a:1b:f0:59:0d:21:25:65:59:75:8f:0e:95:8d:c2:
                    9a:f5:ab:da:87:ad:d9:1a:7d:fa:a4:19:4e:8f:71:
                    41:f6:f9:ab:ab:5a:bd:ac:68:59:31:1f:74:9b:ea:
                    a8:ec:9b:1e:9e:a2:4c:77:f5:32:7e:12:be:d3:97:
                    fa:80:78:f9:44:cf:2a:de:aa:75:4a:c6:92:1d:98:
                    0b:91:ad:9e:97:7b:ea:7c:32:45:e6:b1:90:c7:ba:
                    0e:15:ab:b5:77:b4:e0:5c:a4:ee:8e:a8:3c:76:40:
                    5e:af:e1:c2:1c:55:e9:4c:b8:d5:55:ab:05:a5:13:
                    0f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C6:E4:93:AC:F5:BD:BE:DE:9C:BE:2D:DC:DB:34:05:0D:7B:97:85
            X509v3 Authority Key Identifier:
                keyid:5B:5B:5C:B9:EE:F2:39:47:37:0D:A0:3E:71:D6:B0:51:CB:5C:76:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B5B5CB9EEF23947370DA03E71D6B051CB5C7641.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9q6uG3aWfABntKbo8v5pRrAtfoiNWygwjeLmnEPvXUgM/0/3133382e3131382e3130302e302f32322d3232203d3e203532373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:03:e1:6f:17:0d:81:4c:02:25:3e:5a:63:52:33:bf:f8:1a:
         99:37:bd:63:26:46:87:8a:93:66:fe:e8:b7:bc:e4:ae:a3:e9:
         d0:9a:f9:b4:bf:fe:81:59:ec:93:f5:0b:75:96:87:d8:7e:c0:
         0d:16:0c:2a:84:0e:3e:63:c2:73:01:63:48:7e:83:c3:6f:5d:
         72:32:cb:a7:c3:49:a1:0e:b5:73:af:fc:db:09:b0:fa:a4:b1:
         d4:f8:22:66:dd:9d:19:5d:c6:ad:b9:87:48:e4:d6:e2:28:41:
         58:9f:7a:3c:73:a5:e9:cd:f9:84:85:00:ab:05:de:d9:f1:77:
         58:c8:91:da:0a:d7:21:e8:4d:64:a1:2e:c7:be:9c:86:f9:ef:
         fb:a5:8a:58:8b:de:14:42:f5:96:13:a5:eb:b2:1b:dd:b9:82:
         22:e0:8d:f4:65:79:04:8d:79:16:22:33:49:0e:83:24:4c:8a:
         58:b8:c6:f8:e6:66:33:7b:cf:ed:fa:e9:87:fa:d5:1c:8b:9c:
         cb:f2:e4:12:7f:0f:b8:49:e5:b1:12:ee:f8:74:18:4a:7b:53:
         04:eb:ae:4c:29:9d:4e:f9:a0:f5:43:2f:30:82:f8:13:ed:be:
         f1:8c:5d:fe:a2:6c:31:96:5e:e3:69:03:e5:ae:07:75:bc:90:
         3b:06:dc:e8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUejzYp+TytQZ+CkAceQneWvsxRw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI1QjVDQjlFRUYyMzk0NzM3MERBMDNFNzFENkIwNTFD
QjVDNzY0MTAeFw0yMzA3MDQyMDExMzhaFw0yNDA3MDIyMDE2MzhaMDMxMTAvBgNV
BAMTKEYxQzZFNDkzQUNGNUJEQkVERTlDQkUyRERDREIzNDA1MEQ3Qjk3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuCZo7680H+Lxt8t5uwMGKLar
F5MEIfjZQRW2My3PAeUEVEpptl9xaQOi9eLAuXoJuy4TELH/c7oMZBzwEwtrgcSG
yTHkTEFEdjtdOLSLN2A5pk48/fsNYH/mAwlFGTC/5nIw96pI54N1XQjrg5g392lk
htlAyiumb3Sz2YJ1a0vTCKdZYWob8FkNISVlWXWPDpWNwpr1q9qHrdkaffqkGU6P
cUH2+aurWr2saFkxH3Sb6qjsmx6eokx39TJ+Er7Tl/qAePlEzyreqnVKxpIdmAuR
rZ6Xe+p8MkXmsZDHug4Vq7V3tOBcpO6OqDx2QF6v4cIcVelMuNVVqwWlEw8pAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8cbkk6z1vb7enL4t3Ns0BQ17l4UwHwYDVR0j
BBgwFoAUW1tcue7yOUc3DaA+cdawUctcdkEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXE2dUczYVdmQUJudEtibzh2NXBSckF0Zm9pTld5Z3dqZUxtbkVQdlhV
Z00vMC81QjVCNUNCOUVFRjIzOTQ3MzcwREEwM0U3MUQ2QjA1MUNCNUM3NjQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNUI1Q0I5RUVGMjM5NDcz
NzBEQTAzRTcxRDZCMDUxQ0I1Qzc2NDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxNnVHM2FXZkFCbnRLYm84djVwUnJBdGZvaU5XeWd3amVMbW5FUHZYVWdNLzAv
MzEzMzM4MmUzMTMxMzgyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1
MzIzNzMwMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKdmQwDQYJKoZIhvcNAQELBQADggEBACAD4W8X
DYFMAiU+WmNSM7/4Gpk3vWMmRoeKk2b+6Le85K6j6dCa+bS//oFZ7JP1C3WWh9h+
wA0WDCqEDj5jwnMBY0h+g8NvXXIyy6fDSaEOtXOv/NsJsPqksdT4ImbdnRldxq25
h0jk1uIoQVifejxzpenN+YSFAKsF3tnxd1jIkdoK1yHoTWShLse+nIb57/uliliL
3hRC9ZYTpeuyG925giLgjfRleQSNeRYiM0kOgyRMili4xvjmZjN7z+366Yf61RyL
nMvy5BJ/D7hJ5bES7vh0GEp7UwTrrkwpnU75oPVDLzCC+BPtvvGMXf6ibDGWXuNp
A+WuB3W8kDsG3Og=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org