Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e352e302f32342d3234203d3e20323634353237.roa
File:                     3133382e302e352e302f32342d3234203d3e20323634353237.roa (raw, json)
Hash identifier:          YVCpIHzGvBS4kkoaPa3R2JSH8AGzwlIFtaZqZcJmyyQ=
Subject key identifier:   3F:BA:14:AF:6F:B9:C7:63:67:F0:1F:63:9A:3A:51:CF:8A:CC:4B:7E
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       01C0813B3F915CA548FF901805AA94C605D47BB4
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e352e302f32342d3234203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 12:00:01 +0000
ROA not before:           Wed 29 Nov 2023 11:55:01 +0000
ROA not after:            Wed 27 Nov 2024 12:00:01 +0000
asID:                     264527
IP address blocks:        138.0.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c0:81:3b:3f:91:5c:a5:48:ff:90:18:05:aa:94:c6:05:d4:7b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 11:55:01 2023 GMT
            Not After : Nov 27 12:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:24:4e:91:bc:98:89:c5:b0:61:46:ca:7a:
                    93:a1:e5:bd:88:19:b0:16:66:37:df:49:1c:27:a3:
                    22:e3:3d:0e:b5:55:9f:d6:3e:1b:65:1e:79:79:d0:
                    19:9a:53:9f:a0:fc:91:4c:25:b6:09:11:d4:fc:b6:
                    62:4b:b2:34:75:b1:7f:ec:49:08:4a:2e:5e:1b:03:
                    47:bb:13:9b:d2:fe:97:71:45:39:ed:a6:9d:be:f7:
                    fb:fd:77:a6:02:04:c8:11:cd:c5:4e:56:5f:2d:6c:
                    79:67:05:c8:4b:85:49:8d:5a:1c:45:57:27:e5:a1:
                    b9:68:f2:d1:a4:31:32:a6:d0:7d:3b:61:0f:40:bb:
                    a1:2b:c3:06:34:39:17:af:ed:e8:e8:00:29:96:a5:
                    91:f0:6c:d9:96:e6:ed:2e:0d:8b:84:2c:29:b8:45:
                    e2:ef:0d:6f:c5:eb:87:88:cd:33:a2:f6:0a:04:78:
                    a9:07:ba:f4:46:c0:b7:48:58:5e:2f:94:6c:09:38:
                    4c:0b:b3:be:2f:94:78:4f:04:d6:ae:ca:a3:da:52:
                    db:a0:18:fa:6e:7c:81:35:61:a3:9e:59:dc:49:69:
                    f2:49:7b:b1:28:92:f0:a7:0b:c2:26:ae:6e:49:4c:
                    79:d4:ce:e7:b7:49:ec:0a:6e:c7:2c:37:82:d2:db:
                    ee:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BA:14:AF:6F:B9:C7:63:67:F0:1F:63:9A:3A:51:CF:8A:CC:4B:7E
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/3133382e302e352e302f32342d3234203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:46:56:ad:d6:2d:02:c3:ff:e0:65:61:3c:47:4d:fb:4a:
         7a:8e:d6:25:36:f9:18:f5:aa:1c:64:55:8b:95:08:43:64:65:
         73:e3:0c:ba:d3:0a:69:bd:93:4f:d7:cc:f4:0e:bc:78:10:ab:
         6b:b7:da:d8:d5:19:7f:76:6b:4c:0d:1f:2e:fa:27:8a:11:5e:
         81:c0:fe:81:e2:9a:c2:48:51:5a:cc:a2:7f:82:7c:32:3a:3f:
         d5:6a:f7:b9:da:49:7a:54:42:39:d8:6e:fe:aa:36:70:c8:7b:
         3f:b9:c6:c6:96:13:ce:d6:7c:ad:46:5a:4f:53:0e:8b:cc:c5:
         21:26:ac:14:37:d8:e1:50:34:c4:80:9f:a3:4e:6e:94:db:1d:
         6c:29:28:3f:5d:96:8a:3b:76:3f:43:76:79:9c:23:56:8c:fb:
         b6:d3:9a:48:44:31:59:ae:16:4f:17:5b:6a:ed:36:a4:1e:e2:
         d7:18:0b:92:13:c8:26:53:ff:75:14:ab:47:04:0b:b3:0f:ec:
         05:f1:04:34:c2:31:bf:c7:fe:eb:a3:d9:b7:96:57:9f:ae:19:
         26:a3:bf:be:e7:8a:1a:64:64:81:d0:1d:17:97:a1:02:ad:2a:
         28:d0:8d:c3:bc:3e:ea:e9:66:83:18:2c:73:d9:f2:51:b1:47:
         61:87:3b:3d
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUAcCBOz+RXKVI/5AYBaqUxgXUe7QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMEYzMUJDNDU2ODdFRjZCQTgyQjdDMEI3OUVGNDIy
MjQ4RjYxNjAeFw0yMzExMjkxMTU1MDFaFw0yNDExMjcxMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0RCODI0NEU5MUJDOTg4OUM1
QjA2MTQ2Q0E3QTkzQTFFNUJEODgxOUIwMTY2NjM3REY0OTFDMjdBMzIyRTMzRDBF
QjU1NTlGRDYzRTFCNjUxRTc5NzlEMDE5OUE1MzlGQTBGQzkxNEMyNUI2MDkxMUQ0
RkNCNjYyNEJCMjM0NzVCMTdGRUM0OTA4NEEyRTVFMUIwMzQ3QkIxMzlCRDJGRTk3
NzE0NTM5RURBNjlEQkVGN0ZCRkQ3N0E2MDIwNEM4MTFDREM1NEU1NjVGMkQ2Qzc5
NjcwNUM4NEI4NTQ5OEQ1QTFDNDU1NzI3RTVBMUI5NjhGMkQxQTQzMTMyQTZEMDdE
M0I2MTBGNDBCQkExMkJDMzA2MzQzOTE3QUZFREU4RTgwMDI5OTZBNTkxRjA2Q0Q5
OTZFNkVEMkUwRDhCODQyQzI5Qjg0NUUyRUYwRDZGQzVFQjg3ODhDRDMzQTJGNjBB
MDQ3OEE5MDdCQUY0NDZDMEI3NDg1ODVFMkY5NDZDMDkzODRDMEJCM0JFMkY5NDc4
NEYwNEQ2QUVDQUEzREE1MkRCQTAxOEZBNkU3QzgxMzU2MUEzOUU1OURDNDk2OUYy
NDk3QkIxMjg5MkYwQTcwQkMyMjZBRTZFNDk0Qzc5RDRDRUU3Qjc0OUVDMEE2RUM3
MkMzNzgyRDJEQkVFRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzbgkTpG8mInFsGFGynqToeW9iBmwFmY330kcJ6Mi4z0OtVWf1j4b
ZR55edAZmlOfoPyRTCW2CRHU/LZiS7I0dbF/7EkISi5eGwNHuxOb0v6XcUU57aad
vvf7/XemAgTIEc3FTlZfLWx5ZwXIS4VJjVocRVcn5aG5aPLRpDEyptB9O2EPQLuh
K8MGNDkXr+3o6AAplqWR8GzZlubtLg2LhCwpuEXi7w1vxeuHiM0zovYKBHipB7r0
RsC3SFheL5RsCThMC7O+L5R4TwTWrsqj2lLboBj6bnyBNWGjnlncSWnySXuxKJLw
pwvCJq5uSUx51M7nt0nsCm7HLDeC0tvu/QIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FD+6FK9vucdjZ/AfY5o6Uc+KzEt+MB8GA1UdIwQYMBaAFIwA8xvEVofva6grfAt5
70IiSPYWMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0F1ZHI3b2szRDFhcEJD
VExKcDRTS2NrQ1NBSk5NQXFjZExLekdZSFBmTkZ5LzAvOEMwMEYzMUJDNDU2ODdF
RjZCQTgyQjdDMEI3OUVGNDIyMjQ4RjYxNi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84QzAwRjMxQkM0NTY4N0VGNkJBODJCN0MwQjc5RUY0MjIyNDhG
NjE2LmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BdWRyN29rM0QxYXBCQ1RMSnA0
U0tja0NTQUpOTUFxY2RMS3pHWUhQZk5GeS8wLzMxMzMzODJlMzAyZTM1MmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzUzMjM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAigAFMA0G
CSqGSIb3DQEBCwUAA4IBAQBx00ZWrdYtAsP/4GVhPEdN+0p6jtYlNvkY9aocZFWL
lQhDZGVz4wy60wppvZNP18z0Drx4EKtrt9rY1Rl/dmtMDR8u+ieKEV6BwP6B4prC
SFFazKJ/gnwyOj/Vave52kl6VEI52G7+qjZwyHs/ucbGlhPO1nytRlpPUw6LzMUh
JqwUN9jhUDTEgJ+jTm6U2x1sKSg/XZaKO3Y/Q3Z5nCNWjPu205pIRDFZrhZPF1tq
7TakHuLXGAuSE8gmU/91FKtHBAuzD+wF8QQ0wjG/x/7ro9m3llefrhkmo7++54oa
ZGSB0B0Xl6ECrSoo0I3DvD7q6WaDGCxz2fJRsUdhhzs9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org