Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32332d3233203d3e203631363339.roa
File:                     3133382e3231392e3136342e302f32332d3233203d3e203631363339.roa (raw, json)
Hash identifier:          L2HpXM06cM+1gl/ox0e/ubs7YHiscH13XV1zXnCLEZQ=
Subject key identifier:   2F:F9:15:D3:40:F5:37:71:DE:F3:2D:45:1F:2E:41:98:82:06:5E:76
Certificate issuer:       /CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
Certificate serial:       6FE455AD1466C63B40D809405CC7161F52488209
Authority key identifier: 15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32332d3233203d3e203631363339.roa
Signing time:             Wed 02 Aug 2023 13:55:11 +0000
ROA not before:           Wed 02 Aug 2023 13:50:11 +0000
ROA not after:            Wed 31 Jul 2024 13:55:11 +0000
asID:                     61639
IP address blocks:        138.219.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e4:55:ad:14:66:c6:3b:40:d8:09:40:5c:c7:16:1f:52:48:82:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15938D5E67F7A6239C0080B3B4B4B46E96DB9519
        Validity
            Not Before: Aug  2 13:50:11 2023 GMT
            Not After : Jul 31 13:55:11 2024 GMT
        Subject: CN=2FF915D340F53771DEF32D451F2E419882065E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:17:43:c4:6e:e1:43:77:b1:2c:c8:b6:5f:
                    c0:22:ee:2a:09:ce:53:52:d3:fe:90:7a:c4:b5:45:
                    c0:35:6e:40:9d:9e:e8:6c:ba:51:d3:56:67:f3:6c:
                    08:3f:98:e9:19:bc:eb:da:3f:cb:5c:53:ac:27:6d:
                    34:72:bd:ef:c1:23:b1:61:d7:48:e2:e3:b7:9e:b3:
                    bd:72:03:26:20:1b:3e:00:a5:88:a8:ca:00:0a:f4:
                    65:ac:e9:22:7c:af:ed:14:6d:e3:27:86:fd:72:a7:
                    8a:a6:c3:a4:65:a5:66:22:da:85:e9:a6:50:22:ec:
                    59:77:de:e8:2e:fa:88:b1:f1:64:8a:be:5b:5c:c3:
                    7c:4d:95:21:22:0f:c1:40:0d:66:90:f1:af:43:25:
                    6f:08:03:e1:01:ae:e8:19:03:49:34:dc:ad:36:09:
                    64:29:d4:4c:c8:ad:87:76:ac:e6:59:f9:bf:1e:77:
                    29:8a:d6:c7:32:9a:e4:85:00:7f:c0:4d:c1:0c:32:
                    b5:2c:7a:f6:31:71:28:9e:c5:6b:fb:6f:22:ac:32:
                    2b:21:a1:2b:09:cf:81:d2:13:0c:01:f5:21:f2:7a:
                    83:b8:73:42:b6:58:15:62:df:be:96:51:cb:38:08:
                    ee:e3:be:3a:f4:6f:69:81:e0:9f:20:a4:77:4f:df:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F9:15:D3:40:F5:37:71:DE:F3:2D:45:1F:2E:41:98:82:06:5E:76
            X509v3 Authority Key Identifier:
                keyid:15:93:8D:5E:67:F7:A6:23:9C:00:80:B3:B4:B4:B4:6E:96:DB:95:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15938D5E67F7A6239C0080B3B4B4B46E96DB9519.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/0/3133382e3231392e3136342e302f32332d3233203d3e203631363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:f6:f8:03:de:d8:ad:2f:14:89:dd:1c:db:7b:b3:2a:38:
         22:55:81:20:71:ea:54:62:96:53:1e:d0:c5:43:d4:16:44:00:
         f5:f9:b2:b3:f6:fc:c6:04:6b:0f:f5:09:5b:39:00:fc:90:ad:
         55:7d:c3:ac:97:b0:09:e1:76:27:aa:33:6d:67:45:5f:48:d9:
         28:17:fe:1d:50:a6:81:8c:38:e2:12:68:b9:d5:3b:d5:d3:6c:
         05:18:d6:9c:3d:14:cd:9b:29:fb:84:a5:c7:95:f8:ea:da:fa:
         00:dd:cf:86:d3:d4:12:01:39:bb:19:d7:98:9a:15:a8:a2:98:
         1a:8b:ea:c8:18:eb:c8:52:2c:ec:46:18:14:94:eb:7e:00:52:
         6f:a2:87:f4:f3:f6:d3:ed:22:c6:ab:ad:9a:dd:82:85:e6:89:
         98:1d:87:b6:74:3c:22:f4:6b:fb:d7:fe:30:ea:f3:33:c3:c4:
         86:d8:bd:f4:b8:0b:fb:e4:86:64:5a:df:35:62:fd:46:d8:42:
         c8:1d:54:c1:f1:39:77:66:14:de:43:7b:59:72:52:a3:b5:31:
         d7:98:8b:e0:08:7f:fe:74:ea:cd:cb:37:c6:63:a9:2f:73:5c:
         ae:5f:c7:23:d2:02:0c:1e:de:7a:fd:48:98:42:73:9b:7c:9e:
         1b:6e:91:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb+RVrRRmxjtA2AlAXMcWH1JIggkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU5MzhENUU2N0Y3QTYyMzlDMDA4MEIzQjRCNEI0NkU5
NkRCOTUxOTAeFw0yMzA4MDIxMzUwMTFaFw0yNDA3MzExMzU1MTFaMDMxMTAvBgNV
BAMTKDJGRjkxNUQzNDBGNTM3NzFERUYzMkQ0NTFGMkU0MTk4ODIwNjVFNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNRdDxG7hQ3exLMi2X8Ai7ioJ
zlNS0/6QesS1RcA1bkCdnuhsulHTVmfzbAg/mOkZvOvaP8tcU6wnbTRyve/BI7Fh
10ji47ees71yAyYgGz4ApYioygAK9GWs6SJ8r+0UbeMnhv1yp4qmw6RlpWYi2oXp
plAi7Fl33ugu+oix8WSKvltcw3xNlSEiD8FADWaQ8a9DJW8IA+EBrugZA0k03K02
CWQp1EzIrYd2rOZZ+b8edymK1scymuSFAH/ATcEMMrUsevYxcSiexWv7byKsMish
oSsJz4HSEwwB9SHyeoO4c0K2WBVi376WUcs4CO7jvjr0b2mB4J8gpHdP3/vRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUL/kV00D1N3He8y1FHy5BmIIGXnYwHwYDVR0j
BBgwFoAUFZONXmf3piOcAICztLS0bpbblRkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTFNQ1B5QXljQk5mZnY5Mzl4enFWQUJ5VHVvN1JCakZ4dEgybjF2eHEy
dkUvMC8xNTkzOEQ1RTY3RjdBNjIzOUMwMDgwQjNCNEI0QjQ2RTk2REI5NTE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1OTM4RDVFNjdGN0E2MjM5
QzAwODBCM0I0QjRCNDZFOTZEQjk1MTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ExTUNQeUF5Y0JOZmZ2OTM5eHpxVkFCeVR1bzdSQmpGeHRIMm4xdnhxMnZFLzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzYzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM2
MzEzNjMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGK26QwDQYJKoZIhvcNAQELBQADggEBAIfX9vgD
3titLxSJ3Rzbe7MqOCJVgSBx6lRillMe0MVD1BZEAPX5srP2/MYEaw/1CVs5APyQ
rVV9w6yXsAnhdieqM21nRV9I2SgX/h1QpoGMOOISaLnVO9XTbAUY1pw9FM2bKfuE
pceV+Ora+gDdz4bT1BIBObsZ15iaFaiimBqL6sgY68hSLOxGGBSU634AUm+ih/Tz
9tPtIsarrZrdgoXmiZgdh7Z0PCL0a/vX/jDq8zPDxIbYvfS4C/vkhmRa3zVi/UbY
QsgdVMHxOXdmFN5De1lyUqO1MdeYi+AIf/506s3LN8ZjqS9zXK5fxyPSAgwe3nr9
SJhCc5t8nhtukWY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:30 2025 by rpki-client