Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133382e39392e3234302e302f32322d3234203d3e203238313938.roa
File:                     3133382e39392e3234302e302f32322d3234203d3e203238313938.roa (raw, json)
Hash identifier:          1IQXC/Ekwp2r5pkMCxiXO6Y0zCihrUuMQZmt8iboiF8=
Subject key identifier:   5B:F2:C7:12:13:A2:B7:39:15:1E:E4:BA:33:76:46:E6:54:E0:A1:E0
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       6FCE91EAE9CCC322DBA07F200B070FB083DC77F1
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133382e39392e3234302e302f32322d3234203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:28:04 +0000
ROA not before:           Mon 21 Aug 2023 20:23:04 +0000
ROA not after:            Mon 19 Aug 2024 20:28:04 +0000
asID:                     28198
IP address blocks:        138.99.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:91:ea:e9:cc:c3:22:db:a0:7f:20:0b:07:0f:b0:83:dc:77:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:23:04 2023 GMT
            Not After : Aug 19 20:28:04 2024 GMT
        Subject: CN=5BF2C71213A2B739151EE4BA337646E654E0A1E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:22:b8:8a:16:87:8c:9c:27:bc:02:74:4d:
                    b7:b4:fa:0f:97:0b:17:df:d2:8b:96:bc:1e:c5:e5:
                    74:fa:b5:93:ab:f0:2d:d9:64:57:88:e6:96:1f:00:
                    90:d8:d4:a1:51:96:d2:c9:8e:d8:ad:ec:3f:68:e7:
                    bf:9c:24:b2:94:1c:ef:35:c1:d5:6a:78:8e:04:7e:
                    4d:26:81:17:ab:68:e9:b8:00:ca:3d:3e:aa:4a:4b:
                    d2:c6:eb:f8:b0:34:31:2c:51:4e:45:5f:56:cc:f9:
                    6d:78:86:63:d4:b3:58:46:26:1f:17:be:2f:72:e1:
                    c6:f0:8b:7a:70:41:94:15:e5:7c:48:c7:82:d5:6d:
                    81:59:60:14:e5:d4:61:57:3d:e6:bb:e8:c6:ff:d3:
                    18:57:93:22:da:2a:59:5b:d0:97:08:e5:ca:fb:d4:
                    96:e3:5b:ef:cb:40:7d:00:e7:28:e5:40:42:c2:52:
                    59:65:83:44:d4:c3:45:55:1f:b3:59:0f:4c:ae:ed:
                    1f:03:ce:12:79:f0:45:5d:93:5e:96:44:e8:c4:e1:
                    af:6e:b5:45:1d:3b:c7:2e:51:4e:89:8f:39:b4:f7:
                    88:5f:40:aa:42:65:75:36:99:74:a6:82:5c:4f:ca:
                    a5:bb:ea:d5:41:ba:b3:b6:5f:3e:7b:7d:65:4d:2d:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F2:C7:12:13:A2:B7:39:15:1E:E4:BA:33:76:46:E6:54:E0:A1:E0
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/3133382e39392e3234302e302f32322d3234203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:b5:12:2b:66:13:8b:1e:76:40:de:2a:1b:5e:b6:43:d9:ed:
         95:c8:29:60:22:c9:d9:00:92:01:34:94:d5:35:1b:f2:9b:06:
         1f:52:c3:db:d8:1b:06:89:63:fa:46:16:b9:01:41:c4:3e:02:
         5a:ee:88:f6:05:f3:f0:3a:5f:c9:57:64:59:46:a9:61:0a:d9:
         19:e7:06:24:dc:2a:5c:4c:f3:5e:2e:c8:d4:04:ba:52:54:92:
         85:49:de:fb:50:47:d5:67:67:b3:4a:2e:5d:79:a4:35:30:07:
         40:05:d4:77:75:70:db:fb:18:d9:e5:b1:d9:c3:da:ba:22:02:
         99:92:2d:ad:e6:0c:88:2b:79:dd:6a:60:bc:7f:b2:0a:08:fe:
         34:98:bb:ea:12:d0:c1:65:6c:e9:c6:2a:ea:eb:4b:28:bf:45:
         74:45:79:71:d8:94:b8:de:a8:6d:ce:42:50:f2:0f:13:55:42:
         1f:62:11:ca:89:43:ac:f7:14:28:33:fe:45:2a:cd:92:4f:a3:
         80:f8:2e:cf:c0:9d:1d:a7:7e:7b:aa:7a:de:9a:d9:b4:f1:a2:
         a4:3b:eb:7b:31:65:19:90:83:41:9f:7d:cc:c1:1f:1d:de:67:
         0f:90:4f:e4:bf:cc:b4:bb:d6:21:35:82:6b:ec:10:ed:2d:06:
         bc:ad:13:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb86R6unMwyLboH8gCwcPsIPcd/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNDMTg5M0U1NUY2NDUxNERCRkMzQjZCODAxQzE2RDAz
NjA5MTNGRTAeFw0yMzA4MjEyMDIzMDRaFw0yNDA4MTkyMDI4MDRaMDMxMTAvBgNV
BAMTKDVCRjJDNzEyMTNBMkI3MzkxNTFFRTRCQTMzNzY0NkU2NTRFMEExRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdSK4ihaHjJwnvAJ0Tbe0+g+X
Cxff0ouWvB7F5XT6tZOr8C3ZZFeI5pYfAJDY1KFRltLJjtit7D9o57+cJLKUHO81
wdVqeI4Efk0mgReraOm4AMo9PqpKS9LG6/iwNDEsUU5FX1bM+W14hmPUs1hGJh8X
vi9y4cbwi3pwQZQV5XxIx4LVbYFZYBTl1GFXPea76Mb/0xhXkyLaKllb0JcI5cr7
1JbjW+/LQH0A5yjlQELCUlllg0TUw0VVH7NZD0yu7R8DzhJ58EVdk16WROjE4a9u
tUUdO8cuUU6Jjzm094hfQKpCZXU2mXSmglxPyqW76tVBurO2Xz57fWVNLX7rAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUW/LHEhOitzkVHuS6M3ZG5lTgoeAwHwYDVR0j
BBgwFoAUc8GJPlX2RRTb/DtrgBwW0DYJE/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkJiNmF2ZnFaejV3RWZRNmRBaWFORzVHcUNVYzlaNE1nd2YyWXBkVExm
TG0vMC83M0MxODkzRTU1RjY0NTE0REJGQzNCNkI4MDFDMTZEMDM2MDkxM0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzczQzE4OTNFNTVGNjQ1MTRE
QkZDM0I2QjgwMUMxNkQwMzYwOTEzRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JCYjZhdmZxWno1d0VmUTZkQWlhTkc1R3FDVWM5WjRNZ3dmMllwZFRMZkxtLzAv
MzEzMzM4MmUzOTM5MmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM4
MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimPwMA0GCSqGSIb3DQEBCwUAA4IBAQC1tRIrZhOL
HnZA3iobXrZD2e2VyClgIsnZAJIBNJTVNRvymwYfUsPb2BsGiWP6Rha5AUHEPgJa
7oj2BfPwOl/JV2RZRqlhCtkZ5wYk3CpcTPNeLsjUBLpSVJKFSd77UEfVZ2ezSi5d
eaQ1MAdABdR3dXDb+xjZ5bHZw9q6IgKZki2t5gyIK3ndamC8f7IKCP40mLvqEtDB
ZWzpxirq60sov0V0RXlx2JS43qhtzkJQ8g8TVUIfYhHKiUOs9xQoM/5FKs2ST6OA
+C7PwJ0dp357qnremtm08aKkO+t7MWUZkINBn33MwR8d3mcPkE/kv8y0u9YhNYJr
7BDtLQa8rRMG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org