Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
File:                     3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa (raw, json)
Hash identifier:          WVs0/hqhY8c0h/s9s1yLRD8pIoCYLr27H677Vrs7ffw=
Subject key identifier:   EF:BB:CB:A4:71:F7:FC:7B:73:45:E8:E5:D2:A8:C0:D7:7F:0D:6F:79
Certificate issuer:       /CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
Certificate serial:       3A077DF3ABAA35DA988BE4C6B1A355A08873423A
Authority key identifier: AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa
Signing time:             Tue 22 Aug 2023 15:25:39 +0000
ROA not before:           Tue 22 Aug 2023 15:20:39 +0000
ROA not after:            Tue 20 Aug 2024 15:25:39 +0000
asID:                     61856
IP address blocks:        138.117.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:07:7d:f3:ab:aa:35:da:98:8b:e4:c6:b1:a3:55:a0:88:73:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF8669C40A1705DDF9FF8B1C94EE047AB500F37E
        Validity
            Not Before: Aug 22 15:20:39 2023 GMT
            Not After : Aug 20 15:25:39 2024 GMT
        Subject: CN=EFBBCBA471F7FC7B7345E8E5D2A8C0D77F0D6F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:c0:23:b4:44:ff:ef:26:e5:cf:af:97:ba:
                    a5:fe:95:25:78:5b:c0:7d:b1:d3:b5:66:ca:4b:7e:
                    c8:44:37:e8:a0:12:6e:ad:15:18:be:d4:7e:94:68:
                    03:6f:3a:8e:e5:60:2a:ca:2c:16:f0:67:b0:b7:ec:
                    b5:3c:ef:70:87:fe:d0:f1:c0:b9:83:74:72:f0:2f:
                    1d:81:10:ff:c3:43:f4:2c:57:92:d3:d2:54:91:e4:
                    b4:95:cc:5d:e9:e7:ac:cb:bc:92:31:46:b3:77:95:
                    5e:a1:0d:b7:30:cc:5e:17:ab:3f:6a:e0:45:a8:ec:
                    4b:34:83:54:88:58:1f:9d:9f:dd:1d:42:00:d3:47:
                    a4:40:0b:7f:aa:38:b0:7a:ad:2a:12:18:5f:3d:89:
                    ad:c3:56:86:d4:96:47:a5:bc:c4:74:11:c9:df:18:
                    dc:f3:df:67:14:92:1a:3d:4d:ad:e9:ea:79:d9:39:
                    39:5b:7e:3e:64:db:75:c2:2a:4e:be:8c:85:7c:48:
                    da:d0:4e:9a:86:4a:9c:bd:12:c9:28:a9:b5:da:8b:
                    a2:ab:54:52:60:e0:34:1a:d4:a0:8c:31:b2:e7:fc:
                    4f:7c:b5:76:3f:31:00:7c:f2:e7:2c:66:b6:3d:7c:
                    b6:ed:a4:58:1a:77:3c:b2:d4:4a:c1:2c:ff:4c:0a:
                    9f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:CB:A4:71:F7:FC:7B:73:45:E8:E5:D2:A8:C0:D7:7F:0D:6F:79
            X509v3 Authority Key Identifier:
                keyid:AF:86:69:C4:0A:17:05:DD:F9:FF:8B:1C:94:EE:04:7A:B5:00:F3:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF8669C40A1705DDF9FF8B1C94EE047AB500F37E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Asj7c85UngufZWUW1ALuvuzjepvNwQpB7JbbfyjQu5kq/0/3133382e3131372e3230382e302f32322d3234203d3e203631383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:56:04:26:75:85:29:fd:5a:b5:e9:ae:fb:0e:02:47:2f:0c:
         e7:e5:2e:0b:8c:34:12:cf:7e:c1:1d:11:23:e8:ae:71:11:9e:
         cb:6c:fb:fa:c9:b9:5b:1b:25:53:42:42:1a:62:8c:04:44:0c:
         8c:d7:92:42:1e:f7:a2:3e:98:e3:7c:b8:5e:d9:66:9b:ad:4e:
         0e:f7:62:ac:6d:01:a7:64:5e:6c:e5:b3:c7:6f:02:97:ad:d1:
         20:5d:7f:d2:ad:44:a1:e2:09:aa:ea:6b:ee:cd:49:67:77:d5:
         8f:d8:f9:58:d0:8d:3b:5e:60:77:39:de:28:04:a2:1b:94:67:
         52:0d:b0:d8:f3:81:8f:21:b0:c6:63:91:e3:87:c3:64:ac:11:
         6c:ca:be:fa:21:16:dd:9b:b9:b1:55:fb:8b:d3:c8:f9:88:66:
         9d:1c:10:12:10:08:65:15:1e:90:d0:67:ac:d7:fd:ef:ca:61:
         2b:b4:8f:cf:eb:8f:d2:32:61:23:a2:fa:83:0c:67:7f:40:69:
         77:50:ad:b7:45:d2:2e:3b:68:92:3c:03:b5:f2:c9:12:7d:ff:
         b7:99:79:b3:50:b7:7e:39:df:e6:19:29:1e:ae:7b:47:02:99:
         92:e7:2f:62:bb:4d:29:e9:4b:14:0e:c0:8a:c4:0d:3d:77:2e:
         3d:3c:e1:60
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOgd986uqNdqYi+TGsaNVoIhzQjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY4NjY5QzQwQTE3MDVEREY5RkY4QjFDOTRFRTA0N0FC
NTAwRjM3RTAeFw0yMzA4MjIxNTIwMzlaFw0yNDA4MjAxNTI1MzlaMDMxMTAvBgNV
BAMTKEVGQkJDQkE0NzFGN0ZDN0I3MzQ1RThFNUQyQThDMEQ3N0YwRDZGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUssAjtET/7yblz6+XuqX+lSV4
W8B9sdO1ZspLfshEN+igEm6tFRi+1H6UaANvOo7lYCrKLBbwZ7C37LU873CH/tDx
wLmDdHLwLx2BEP/DQ/QsV5LT0lSR5LSVzF3p56zLvJIxRrN3lV6hDbcwzF4Xqz9q
4EWo7Es0g1SIWB+dn90dQgDTR6RAC3+qOLB6rSoSGF89ia3DVobUlkelvMR0Ecnf
GNzz32cUkho9Ta3p6nnZOTlbfj5k23XCKk6+jIV8SNrQTpqGSpy9EskoqbXai6Kr
VFJg4DQa1KCMMbLn/E98tXY/MQB88ucsZrY9fLbtpFgadzyy1ErBLP9MCp+NAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU77vLpHH3/HtzRejl0qjA138Nb3kwHwYDVR0j
BBgwFoAUr4ZpxAoXBd35/4sclO4EerUA834wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXNqN2M4NVVuZ3VmWldVVzFBTHV2dXpqZXB2TndRcEI3SmJiZnlqUXU1
a3EvMC9BRjg2NjlDNDBBMTcwNURERjlGRjhCMUM5NEVFMDQ3QUI1MDBGMzdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGODY2OUM0MEExNzA1RERG
OUZGOEIxQzk0RUUwNDdBQjUwMEYzN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FzajdjODVVbmd1ZlpXVVcxQUx1dnV6amVwdk53UXBCN0piYmZ5alF1NWtxLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM2
MzEzODM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKddAwDQYJKoZIhvcNAQELBQADggEBAJNWBCZ1
hSn9WrXprvsOAkcvDOflLguMNBLPfsEdESPornERnsts+/rJuVsbJVNCQhpijARE
DIzXkkIe96I+mON8uF7ZZputTg73YqxtAadkXmzls8dvApet0SBdf9KtRKHiCarq
a+7NSWd31Y/Y+VjQjTteYHc53igEohuUZ1INsNjzgY8hsMZjkeOHw2SsEWzKvvoh
Ft2bubFV+4vTyPmIZp0cEBIQCGUVHpDQZ6zX/e/KYSu0j8/rj9IyYSOi+oMMZ39A
aXdQrbdF0i47aJI8A7XyyRJ9/7eZebNQt3453+YZKR6ue0cCmZLnL2K7TSnpSxQO
wIrEDT13Lj084WA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org