Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132382e302f32332d3233203d3e20323633393134.roa
File:                     3133382e3138352e3132382e302f32332d3233203d3e20323633393134.roa (raw, json)
Hash identifier:          wxgog3DN/0xRUlPw3Ele1L4RMHrlEH2V66BX6/xwy58=
Subject key identifier:   0D:52:7D:64:59:60:0C:52:41:08:96:D4:43:94:38:71:DF:EF:1D:6F
Certificate issuer:       /CN=48C8061F5071A75BFD71388DAAD34A94EE1FB7DF
Certificate serial:       6014B97ACBA7B2E289769935A02B6327C753405A
Authority key identifier: 48:C8:06:1F:50:71:A7:5B:FD:71:38:8D:AA:D3:4A:94:EE:1F:B7:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132382e302f32332d3233203d3e20323633393134.roa
Signing time:             Thu 21 Jul 2022 19:40:59 +0000
ROA not before:           Thu 21 Jul 2022 19:35:59 +0000
ROA not after:            Thu 20 Jul 2023 19:40:59 +0000
asID:                     263914
IP address blocks:        138.185.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:14:b9:7a:cb:a7:b2:e2:89:76:99:35:a0:2b:63:27:c7:53:40:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48C8061F5071A75BFD71388DAAD34A94EE1FB7DF
        Validity
            Not Before: Jul 21 19:35:59 2022 GMT
            Not After : Jul 20 19:40:59 2023 GMT
        Subject: CN=0D527D6459600C52410896D443943871DFEF1D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:93:ab:71:3a:c6:25:28:f4:40:38:5d:50:
                    2d:e0:c7:87:a5:3b:41:3a:66:79:d8:b3:c6:74:50:
                    18:8b:cf:62:4f:45:77:da:54:06:06:9d:1c:03:6e:
                    f4:50:ea:82:33:e2:7f:bd:9c:ba:8e:d2:1d:02:ac:
                    77:80:1d:ca:08:2e:d9:dd:b0:7f:58:a1:55:0a:bd:
                    96:36:88:d7:34:80:10:16:e2:4a:df:2b:94:83:98:
                    9e:e2:13:df:7f:4a:68:77:78:25:15:6b:5d:5f:de:
                    ad:88:e6:6f:40:c6:87:5f:2a:3f:02:e3:96:06:7d:
                    eb:62:4c:ed:c6:44:b3:bc:3a:91:d3:5e:0b:9a:0c:
                    05:80:87:14:7b:0d:e1:f4:ae:69:d9:5c:87:de:ca:
                    3e:db:66:b1:54:54:22:3d:c1:55:b7:ca:27:ce:22:
                    cc:10:52:40:5d:f0:6a:f3:5c:1e:17:f3:48:92:d4:
                    62:a3:68:a6:dd:fd:03:d2:5c:a3:bf:26:0e:01:bf:
                    8f:f3:32:1e:a3:1a:f3:be:fe:78:17:db:f9:af:03:
                    52:ca:fc:2b:80:ae:68:da:aa:35:3d:b2:5b:3a:48:
                    bd:19:ba:1a:92:e9:03:60:f6:0c:91:4b:c1:fd:9e:
                    b2:f1:cf:1f:fb:75:5e:21:e0:64:0f:5e:a5:8c:ae:
                    41:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:52:7D:64:59:60:0C:52:41:08:96:D4:43:94:38:71:DF:EF:1D:6F
            X509v3 Authority Key Identifier:
                keyid:48:C8:06:1F:50:71:A7:5B:FD:71:38:8D:AA:D3:4A:94:EE:1F:B7:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/3133382e3138352e3132382e302f32332d3233203d3e20323633393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:31:51:42:4d:a1:75:0d:b2:16:ed:d9:4d:b7:27:6c:d8:64:
         1b:dd:53:44:94:36:d8:50:24:1e:a3:14:7e:bf:03:e2:8d:03:
         bd:38:d6:3b:4b:a9:62:5d:79:2e:f9:ad:f5:09:c5:25:a5:bf:
         58:3f:28:c2:ab:cf:cc:68:e0:a0:7c:6e:d7:77:05:4a:d7:01:
         4a:d7:55:84:97:4f:4c:f1:ae:dd:30:03:91:3a:b2:b2:7f:8d:
         bb:5e:c1:b4:92:30:61:8b:32:f9:76:0a:3c:81:fd:c4:c0:7c:
         64:45:24:22:2b:7b:b8:25:88:72:0b:e6:dc:75:7b:17:4d:2e:
         44:fb:20:28:01:e5:78:ac:fd:f9:2f:63:5e:7e:63:85:fb:07:
         66:01:87:eb:08:b7:f6:38:4e:7d:62:1d:30:65:ef:15:21:fe:
         94:ce:aa:88:6e:12:9b:3b:d9:59:fb:82:d4:1e:74:a1:cc:46:
         7b:4a:09:7f:74:89:68:01:ad:a9:41:54:4a:67:e2:26:33:0b:
         63:7b:c0:e0:a1:56:32:05:9b:c1:2d:e5:65:1f:c2:be:e1:b4:
         f0:41:07:f4:b8:50:f2:7b:da:be:f9:62:46:85:cd:a6:df:4e:
         ab:55:66:2a:61:00:17:32:9e:0c:ba:c5:54:2e:db:e2:6a:1f:
         19:8b:25:d6
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYBS5esunsuKJdpk1oCtjJ8dTQFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDhDODA2MUY1MDcxQTc1QkZENzEzODhEQUFEMzRBOTRF
RTFGQjdERjAeFw0yMjA3MjExOTM1NTlaFw0yMzA3MjAxOTQwNTlaMDMxMTAvBgNV
BAMTKDBENTI3RDY0NTk2MDBDNTI0MTA4OTZENDQzOTQzODcxREZFRjFENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxYpOrcTrGJSj0QDhdUC3gx4el
O0E6ZnnYs8Z0UBiLz2JPRXfaVAYGnRwDbvRQ6oIz4n+9nLqO0h0CrHeAHcoILtnd
sH9YoVUKvZY2iNc0gBAW4krfK5SDmJ7iE99/Smh3eCUVa11f3q2I5m9AxodfKj8C
45YGfetiTO3GRLO8OpHTXguaDAWAhxR7DeH0rmnZXIfeyj7bZrFUVCI9wVW3yifO
IswQUkBd8GrzXB4X80iS1GKjaKbd/QPSXKO/Jg4Bv4/zMh6jGvO+/ngX2/mvA1LK
/CuArmjaqjU9sls6SL0ZuhqS6QNg9gyRS8H9nrLxzx/7dV4h4GQPXqWMrkE/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDVJ9ZFlgDFJBCJbUQ5Q4cd/vHW8wHwYDVR0j
BBgwFoAUSMgGH1Bxp1v9cTiNqtNKlO4ft98wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkNuaHU1Rnc3QTc0dGNwbmZ0UXhidzVTS2Q2WktpZWpTckN6WWpiS21h
eE0vMC80OEM4MDYxRjUwNzFBNzVCRkQ3MTM4OERBQUQzNEE5NEVFMUZCN0RGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4QzgwNjFGNTA3MUE3NUJG
RDcxMzg4REFBRDM0QTk0RUUxRkI3REYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JDbmh1NUZ3N0E3NHRjcG5mdFF4Ync1U0tkNlpLaWVqU3JDellqYkttYXhNLzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq5gDANBgkqhkiG9w0BAQsFAAOCAQEACTFR
Qk2hdQ2yFu3ZTbcnbNhkG91TRJQ22FAkHqMUfr8D4o0DvTjWO0upYl15Lvmt9QnF
JaW/WD8owqvPzGjgoHxu13cFStcBStdVhJdPTPGu3TADkTqysn+Nu17BtJIwYYsy
+XYKPIH9xMB8ZEUkIit7uCWIcgvm3HV7F00uRPsgKAHleKz9+S9jXn5jhfsHZgGH
6wi39jhOfWIdMGXvFSH+lM6qiG4SmzvZWfuC1B50ocxGe0oJf3SJaAGtqUFUSmfi
JjMLY3vA4KFWMgWbwS3lZR/CvuG08EEH9LhQ8nvavvliRoXNpt9Oq1VmKmEAFzKe
DLrFVC7b4mofGYsl1g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org