Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa
File:                     3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa (raw, json)
Hash identifier:          aF+yo6JKp47j00VvQBW96k7LFxvupdauG83F9pkGMwM=
Subject key identifier:   74:1F:1B:86:65:E3:E6:33:C8:1A:5F:27:AA:E5:0A:A1:E5:FD:82:2F
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       6B0214FCEB67E1DCB4C9157FC5FA70F270923BC4
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:37 +0000
ROA not before:           Tue 02 Jan 2024 21:11:37 +0000
ROA not after:            Tue 31 Dec 2024 21:16:37 +0000
asID:                     262293
IP address blocks:        138.94.110.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:02:14:fc:eb:67:e1:dc:b4:c9:15:7f:c5:fa:70:f2:70:92:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:37 2024 GMT
            Not After : Dec 31 21:16:37 2024 GMT
        Subject: CN=741F1B8665E3E633C81A5F27AAE50AA1E5FD822F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f3:3c:b0:05:7f:5d:37:7e:3b:be:69:89:67:
                    b4:95:63:2c:a1:f1:6a:db:87:66:d2:2a:18:6b:18:
                    47:7a:5a:2d:cd:60:e0:56:a0:32:b7:54:5b:89:e6:
                    ab:b7:3e:40:e4:0e:3e:61:c7:5c:92:2f:3a:70:b8:
                    fe:22:d9:2b:09:97:56:43:47:57:84:fd:de:b5:c3:
                    07:47:eb:8f:6a:0b:13:f5:25:1e:a4:40:f2:53:b8:
                    83:38:0b:06:82:99:d0:0f:34:5f:03:04:07:c9:63:
                    62:a7:89:05:be:e8:33:2c:f7:f4:9f:59:c5:98:40:
                    d1:a8:b7:ae:81:c6:a8:2a:3d:9b:6f:4e:ad:77:ab:
                    6b:ba:7e:3c:a9:b1:07:ea:cc:36:ad:07:ef:02:ab:
                    00:7d:ce:c6:c7:c8:75:b2:dc:64:cb:0d:2d:07:bc:
                    cd:ad:c1:dd:b3:64:44:77:9b:58:99:77:79:69:54:
                    e5:61:42:31:6c:56:82:21:f5:7a:87:90:43:94:45:
                    46:c3:ee:40:c3:21:ac:ff:aa:4c:f6:56:32:24:f7:
                    ce:78:56:f5:c0:cd:57:54:a0:40:16:90:9d:66:e9:
                    41:ad:5b:46:f2:8e:14:c7:ec:2a:ca:e7:b7:76:1d:
                    3d:26:24:74:94:9a:38:97:5c:aa:c2:c5:8d:42:e0:
                    fc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1F:1B:86:65:E3:E6:33:C8:1A:5F:27:AA:E5:0A:A1:E5:FD:82:2F
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3131302e302f32332d3233203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:6f:81:8b:90:05:0a:ae:73:4e:2f:51:df:0a:ad:6b:79:
         43:40:ed:cd:c3:49:59:9c:5b:6b:f3:83:ae:75:eb:20:3d:31:
         23:4d:0c:f6:28:4f:d0:f2:2b:f2:f3:39:4a:7f:6a:76:db:77:
         dc:47:1c:93:b7:d0:00:15:8c:1f:99:1a:66:3e:3b:b8:02:f5:
         90:c8:81:cd:e0:db:f9:85:17:42:62:76:47:ca:a8:30:4f:b5:
         2c:29:be:fd:dd:57:fa:0a:b8:d3:76:a0:b4:2f:99:0e:2c:b8:
         81:11:9d:bf:de:30:95:51:7a:50:9a:45:9e:8b:f0:54:4a:4f:
         77:b4:81:7d:4d:26:57:a8:2e:f3:9b:41:39:ca:27:ec:bf:ca:
         6f:5a:b6:ca:a3:93:6c:cb:44:ea:58:5a:2c:b6:4e:b7:75:99:
         cb:8c:bb:c1:da:c8:4d:39:93:c7:ee:e6:83:4d:f3:6c:90:85:
         5b:1b:a6:a6:18:25:36:a9:93:fe:2a:f9:7a:d5:d9:44:a9:df:
         52:64:a1:db:cb:ac:a7:78:9e:50:e0:40:28:00:f2:c8:49:ba:
         8f:3d:b1:cd:8b:6a:22:37:1d:04:4d:af:75:ec:46:63:e4:73:
         a1:4b:8f:bf:55:85:4e:e4:ee:99:1f:ed:c1:04:aa:a8:49:7f:
         ca:98:1a:67
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUawIU/Otn4dy0yRV/xfpw8nCSO8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEwMUFEMzM4M0JGQTM4Qjc2RjFDQTEzOTk1ODEwMkEx
N0FGMDM5MTAeFw0yNDAxMDIyMTExMzdaFw0yNDEyMzEyMTE2MzdaMDMxMTAvBgNV
BAMTKDc0MUYxQjg2NjVFM0U2MzNDODFBNUYyN0FBRTUwQUExRTVGRDgyMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC28zywBX9dN347vmmJZ7SVYyyh
8Wrbh2bSKhhrGEd6Wi3NYOBWoDK3VFuJ5qu3PkDkDj5hx1ySLzpwuP4i2SsJl1ZD
R1eE/d61wwdH649qCxP1JR6kQPJTuIM4CwaCmdAPNF8DBAfJY2KniQW+6DMs9/Sf
WcWYQNGot66BxqgqPZtvTq13q2u6fjypsQfqzDatB+8CqwB9zsbHyHWy3GTLDS0H
vM2twd2zZER3m1iZd3lpVOVhQjFsVoIh9XqHkEOURUbD7kDDIaz/qkz2VjIk9854
VvXAzVdUoEAWkJ1m6UGtW0byjhTH7CrK57d2HT0mJHSUmjiXXKrCxY1C4PwRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdB8bhmXj5jPIGl8nquUKoeX9gi8wHwYDVR0j
BBgwFoAUGgGtM4O/o4t28coTmVgQKhevA5EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXpyeUE1M3ZyZ3RRd3hFTkFjdzRzOXhFZlF2cmh6VEdUS243V1ZYTERk
SGgvMC8xQTAxQUQzMzgzQkZBMzhCNzZGMUNBMTM5OTU4MTAyQTE3QUYwMzkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMDFBRDMzODNCRkEzOEI3
NkYxQ0ExMzk5NTgxMDJBMTdBRjAzOTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F6cnlBNTN2cmd0UXd4RU5BY3c0czl4RWZRdnJoelRHVEtuN1dWWExEZEhoLzAv
MzEzMzM4MmUzOTM0MmUzMTMxMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzMjM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKXm4wDQYJKoZIhvcNAQELBQADggEBAIyQb4GL
kAUKrnNOL1HfCq1reUNA7c3DSVmcW2vzg6516yA9MSNNDPYoT9DyK/LzOUp/anbb
d9xHHJO30AAVjB+ZGmY+O7gC9ZDIgc3g2/mFF0JidkfKqDBPtSwpvv3dV/oKuNN2
oLQvmQ4suIERnb/eMJVRelCaRZ6L8FRKT3e0gX1NJleoLvObQTnKJ+y/ym9atsqj
k2zLROpYWiy2Trd1mcuMu8HayE05k8fu5oNN82yQhVsbpqYYJTapk/4q+XrV2USp
31JkodvLrKd4nlDgQCgA8shJuo89sc2LaiI3HQRNr3XsRmPkc6FLj79VhU7k7pkf
7cEEqqhJf8qYGmc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org