Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          IBCCXv6PlqsiweTmVs9HbzePNmpN1GP5aifHFmcEYCE=
Subject key identifier:   30:46:BD:9A:0A:29:40:83:48:24:5C:47:1A:53:FD:10:B0:3F:6B:EF
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       5F55ED4F95D182B9CFF6F34588A6DD660CC433E5
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:33 +0000
ROA not before:           Tue 02 Jan 2024 21:11:33 +0000
ROA not after:            Tue 31 Dec 2024 21:16:33 +0000
asID:                     262293
IP address blocks:        138.94.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:55:ed:4f:95:d1:82:b9:cf:f6:f3:45:88:a6:dd:66:0c:c4:33:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:33 2024 GMT
            Not After : Dec 31 21:16:33 2024 GMT
        Subject: CN=3046BD9A0A29408348245C471A53FD10B03F6BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:e6:bc:4c:8b:5e:36:11:c7:6f:70:03:14:
                    43:7c:9d:c5:a8:a8:50:a8:b4:29:52:e6:00:20:d6:
                    20:c4:31:70:d9:09:fb:a6:fb:74:41:e1:49:b9:60:
                    76:fb:89:2a:8d:19:99:3a:68:69:01:b2:15:0b:d1:
                    af:a9:07:d7:7b:37:00:a9:26:00:f6:f4:9d:03:be:
                    b2:40:3d:45:9c:53:27:3b:86:99:6b:73:9a:7a:4d:
                    6c:d6:9c:11:79:57:3d:5c:6c:26:fe:3c:21:49:22:
                    89:b4:44:7f:82:6e:b5:1a:04:0e:53:53:94:34:1e:
                    12:66:8a:db:46:05:56:db:09:c8:5b:bc:97:12:e9:
                    4a:f2:7a:e7:81:45:61:38:9f:d0:a2:0b:7e:70:d4:
                    ec:62:b4:3f:92:a4:2d:2b:87:c5:88:af:e9:c9:d8:
                    cd:f6:5d:6a:03:02:85:4b:6a:a3:25:f1:4c:47:1a:
                    f6:ea:ff:6d:0d:6b:0b:4d:ae:13:8a:99:64:9c:bd:
                    b9:6a:5c:3c:86:e8:88:7f:c1:f0:a0:9b:e8:92:22:
                    83:e6:85:c3:44:20:d4:e0:ce:38:d1:19:1d:2f:e2:
                    87:97:78:fb:6a:99:87:63:6b:72:92:ca:61:c7:94:
                    57:58:b6:0e:2f:af:9f:f0:40:cc:52:62:08:8c:61:
                    04:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:BD:9A:0A:29:40:83:48:24:5C:47:1A:53:FD:10:B0:3F:6B:EF
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:93:10:70:50:fd:47:c6:e6:ad:4d:3f:8b:fd:75:ef:e8:70:
         cd:98:92:0e:8e:d3:01:8e:22:c4:a5:3b:a0:48:15:b1:68:11:
         24:93:ac:b9:25:98:68:d1:f7:3c:58:0a:d4:c1:8e:39:d0:c0:
         55:8e:fa:ad:6a:57:58:9f:6e:1b:9f:4d:b8:0f:19:2a:d5:33:
         0d:4a:4e:a7:9b:4e:21:89:16:11:17:39:c5:69:c9:9f:85:a0:
         7f:45:77:1f:59:f3:9e:dc:15:c7:cc:95:ed:74:9d:24:ba:57:
         24:29:1c:9a:55:02:41:e8:25:e4:51:92:05:43:ac:6f:c3:58:
         bd:75:16:5a:f2:4b:f3:99:5e:b5:51:bf:c0:d3:17:8a:45:d9:
         53:56:9d:9f:48:d2:20:19:b1:e8:e5:14:b6:a6:0c:6c:d7:e2:
         c9:a8:8f:ea:d0:37:b8:e6:07:91:e5:27:3a:98:96:73:ef:54:
         40:80:3e:0b:65:d8:b0:36:36:42:db:ae:c0:a4:5f:e2:36:5e:
         43:7b:3f:a1:9e:c1:f8:51:01:dc:46:b4:32:f3:c3:13:a2:ca:
         0e:f0:46:8b:73:8f:8a:b9:11:8c:56:c4:5c:02:af:ad:d3:fe:
         64:ba:f3:42:8b:9a:d4:b8:68:56:72:df:19:a9:99:de:39:c9:
         b1:ec:89:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUX1XtT5XRgrnP9vNFiKbdZgzEM+UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzNaFw0yNDEyMzEyMTE2MzNaMDMxMTAvBgNV
BAMTKDMwNDZCRDlBMEEyOTQwODM0ODI0NUM0NzFBNTNGRDEwQjAzRjZCRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChg+a8TIteNhHHb3ADFEN8ncWo
qFCotClS5gAg1iDEMXDZCfum+3RB4Um5YHb7iSqNGZk6aGkBshUL0a+pB9d7NwCp
JgD29J0DvrJAPUWcUyc7hplrc5p6TWzWnBF5Vz1cbCb+PCFJIom0RH+CbrUaBA5T
U5Q0HhJmittGBVbbCchbvJcS6UryeueBRWE4n9CiC35w1OxitD+SpC0rh8WIr+nJ
2M32XWoDAoVLaqMl8UxHGvbq/20NawtNrhOKmWScvblqXDyG6Ih/wfCgm+iSIoPm
hcNEINTgzjjRGR0v4oeXePtqmYdja3KSymHHlFdYtg4vr5/wQMxSYgiMYQTFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMEa9mgopQINIJFxHGlP9ELA/a+8wHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzMzM4MmUzOTM0MmUzMTMwMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKXmwwDQYJKoZIhvcNAQELBQADggEBACGTEHBQ
/UfG5q1NP4v9de/ocM2Ykg6O0wGOIsSlO6BIFbFoESSTrLklmGjR9zxYCtTBjjnQ
wFWO+q1qV1ifbhufTbgPGSrVMw1KTqebTiGJFhEXOcVpyZ+FoH9Fdx9Z857cFcfM
le10nSS6VyQpHJpVAkHoJeRRkgVDrG/DWL11FlryS/OZXrVRv8DTF4pF2VNWnZ9I
0iAZsejlFLamDGzX4smoj+rQN7jmB5HlJzqYlnPvVECAPgtl2LA2NkLbrsCkX+I2
XkN7P6GewfhRAdxGtDLzwxOiyg7wRotzj4q5EYxWxFwCr63T/mS680KLmtS4aFZy
3xmpmd45ybHsiaA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org