Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/3133382e302e32342e302f32322d3233203d3e20323634353339.roa
File:                     3133382e302e32342e302f32322d3233203d3e20323634353339.roa (raw, json)
Hash identifier:          iBaiFRepIX3ZBIkGWsu5zvgM3wPGDSCHtQVCKiHaN3Q=
Subject key identifier:   06:7C:0D:D8:62:DC:F0:A1:B0:59:FF:80:C2:C3:E4:A6:CF:7E:2E:D2
Certificate issuer:       /CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
Certificate serial:       3B84A0E1AE2E1F30540DFEE62B8522829670C282
Authority key identifier: F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/3133382e302e32342e302f32322d3233203d3e20323634353339.roa
Signing time:             Thu 04 Apr 2024 19:18:09 +0000
ROA not before:           Thu 04 Apr 2024 19:13:09 +0000
ROA not after:            Thu 03 Apr 2025 19:18:09 +0000
asID:                     264539
IP address blocks:        138.0.24.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:84:a0:e1:ae:2e:1f:30:54:0d:fe:e6:2b:85:22:82:96:70:c2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4
        Validity
            Not Before: Apr  4 19:13:09 2024 GMT
            Not After : Apr  3 19:18:09 2025 GMT
        Subject: CN=067C0DD862DCF0A1B059FF80C2C3E4A6CF7E2ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:54:fe:3b:40:22:7d:22:97:f9:a5:40:06:b1:
                    06:c2:50:9c:9e:53:fd:00:08:0a:1e:3e:6b:d2:68:
                    db:98:53:b6:dd:78:fd:67:42:c4:ee:6c:e7:d2:2d:
                    c3:1c:3a:cf:31:8f:3d:15:2d:c5:49:76:29:72:95:
                    d5:ca:2c:f0:d8:c3:c3:b8:2b:71:d7:15:8f:fc:07:
                    27:c0:94:70:10:a9:55:a2:01:33:09:f2:96:91:be:
                    7e:e9:6b:f5:e6:dd:a7:be:d7:c8:7e:8c:f1:0d:0c:
                    8d:cd:31:24:d8:be:ab:52:cc:52:eb:e2:5a:19:6d:
                    4b:40:1a:39:74:d2:c8:56:7c:04:98:3f:ff:6f:d2:
                    a6:30:76:f5:43:ad:d2:88:b3:bf:24:ae:ef:01:15:
                    5d:24:27:31:42:ab:82:0b:48:8a:d3:df:2f:1e:91:
                    94:d9:60:06:29:0b:44:83:4e:97:bc:ff:fa:ac:70:
                    72:b9:94:23:e8:56:73:06:c8:ac:b8:6a:f6:c9:4a:
                    8d:ac:fc:b5:4f:1a:49:43:c8:0e:41:94:d6:5b:21:
                    e3:e0:aa:59:12:51:be:73:ce:8c:76:fd:dc:1a:f5:
                    d6:69:a3:fa:44:f5:60:cb:9c:ee:75:75:fc:03:cb:
                    50:2c:bf:e8:9d:c8:48:12:c6:15:cb:22:b9:e4:38:
                    0c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:0D:D8:62:DC:F0:A1:B0:59:FF:80:C2:C3:E4:A6:CF:7E:2E:D2
            X509v3 Authority Key Identifier:
                keyid:F5:9D:BF:BA:13:85:F6:63:D3:E9:DD:D0:95:7D:E8:E7:6B:CD:71:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F59DBFBA1385F663D3E9DDD0957DE8E76BCD71F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyVTrpV4dprmFKEXupaLNjxHd9zDB3sHPR22gE4Qmpeh/1/3133382e302e32342e302f32322d3233203d3e20323634353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:b8:cb:4e:92:89:4d:22:2c:c0:a5:99:bf:d5:11:27:03:
         70:7b:99:c6:1a:2d:15:c6:5f:65:61:5f:33:be:91:a7:fd:82:
         36:8b:17:92:b3:49:83:7b:db:f2:51:43:96:ab:6c:66:2a:79:
         26:b0:d3:bb:ed:1a:f7:5a:78:3e:08:b7:b6:11:9a:c3:e9:88:
         09:12:67:5f:8a:04:b2:77:95:90:f0:e7:f5:e2:8e:a6:80:98:
         2d:49:81:8d:e3:82:ab:53:31:86:52:18:16:ea:da:ca:a9:59:
         76:27:74:6f:2f:b9:02:97:65:19:c1:13:84:dd:2a:53:90:b0:
         0a:a5:bf:da:13:a5:28:87:18:f8:50:ae:06:0a:4f:80:92:e5:
         78:2e:c0:e9:7c:c5:4e:c6:29:e8:e7:b6:64:f6:5c:24:ce:4e:
         fa:db:13:f3:fa:ee:b6:d5:eb:b5:5c:58:8b:52:09:5a:4b:67:
         48:7d:32:88:81:21:ec:ee:d3:f4:be:a9:6f:cb:62:c2:4b:c9:
         78:82:5f:f3:cb:10:15:a7:7f:9b:a0:30:58:e7:a9:3f:24:dc:
         4b:45:fc:28:a2:ac:f4:01:18:e3:b4:e8:d9:db:8f:59:0e:23:
         5f:da:75:5e:45:7b:eb:41:e7:06:b1:08:37:8c:67:da:c7:96:
         4e:ed:79:dd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUO4Sg4a4uHzBUDf7mK4UigpZwwoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjU5REJGQkExMzg1RjY2M0QzRTlEREQwOTU3REU4RTc2
QkNENzFGNDAeFw0yNDA0MDQxOTEzMDlaFw0yNTA0MDMxOTE4MDlaMDMxMTAvBgNV
BAMTKDA2N0MwREQ4NjJEQ0YwQTFCMDU5RkY4MEMyQzNFNEE2Q0Y3RTJFRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVVP47QCJ9Ipf5pUAGsQbCUJye
U/0ACAoePmvSaNuYU7bdeP1nQsTubOfSLcMcOs8xjz0VLcVJdilyldXKLPDYw8O4
K3HXFY/8ByfAlHAQqVWiATMJ8paRvn7pa/Xm3ae+18h+jPENDI3NMSTYvqtSzFLr
4loZbUtAGjl00shWfASYP/9v0qYwdvVDrdKIs78kru8BFV0kJzFCq4ILSIrT3y8e
kZTZYAYpC0SDTpe8//qscHK5lCPoVnMGyKy4avbJSo2s/LVPGklDyA5BlNZbIePg
qlkSUb5zzox2/dwa9dZpo/pE9WDLnO51dfwDy1Asv+idyEgSxhXLIrnkOAzzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUBnwN2GLc8KGwWf+AwsPkps9+LtIwHwYDVR0j
BBgwFoAU9Z2/uhOF9mPT6d3QlX3o52vNcfQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXlWVHJwVjRkcHJtRktFWHVwYUxOanhIZDl6REIzc0hQUjIyZ0U0UW1w
ZWgvMS9GNTlEQkZCQTEzODVGNjYzRDNFOURERDA5NTdERThFNzZCQ0Q3MUY0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1OURCRkJBMTM4NUY2NjNE
M0U5REREMDk1N0RFOEU3NkJDRDcxRjQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5VlRycFY0ZHBybUZLRVh1cGFMTmp4SGQ5ekRCM3NIUFIyMmdFNFFtcGVoLzEv
MzEzMzM4MmUzMDJlMzIzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzYzNDM1
MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAooAGDANBgkqhkiG9w0BAQsFAAOCAQEAGyG4y06SiU0i
LMClmb/VEScDcHuZxhotFcZfZWFfM76Rp/2CNosXkrNJg3vb8lFDlqtsZip5JrDT
u+0a91p4Pgi3thGaw+mICRJnX4oEsneVkPDn9eKOpoCYLUmBjeOCq1MxhlIYFura
yqlZdid0by+5ApdlGcEThN0qU5CwCqW/2hOlKIcY+FCuBgpPgJLleC7A6XzFTsYp
6Oe2ZPZcJM5O+tsT8/ruttXrtVxYi1IJWktnSH0yiIEh7O7T9L6pb8tiwkvJeIJf
88sQFad/m6AwWOepPyTcS0X8KKKs9AEY47To2duPWQ4jX9p1XkV760HnBrEIN4xn
2seWTu153Q==
-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:56 2024 by rpki-client on console-fra.rpki-client.org