Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa
File:                     3133382e35392e34322e302f32332d3234203d3e20323634353936.roa (raw, json)
Hash identifier:          xMnWGfqYdDqtbSgO3zdEP2M5mJthlY+TULfN8Jf04Ic=
Subject key identifier:   30:67:87:0C:EF:51:03:1A:12:C0:4B:B4:DC:2E:77:E4:7E:4D:AE:96
Certificate issuer:       /CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
Certificate serial:       65E63332786FBA43C889DDD8D409A6548E05BE4E
Authority key identifier: 4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa
Signing time:             Tue 05 Mar 2024 16:05:58 +0000
ROA not before:           Tue 05 Mar 2024 16:00:58 +0000
ROA not after:            Tue 04 Mar 2025 16:05:58 +0000
asID:                     264596
IP address blocks:        138.59.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:33:32:78:6f:ba:43:c8:89:dd:d8:d4:09:a6:54:8e:05:be:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A
        Validity
            Not Before: Mar  5 16:00:58 2024 GMT
            Not After : Mar  4 16:05:58 2025 GMT
        Subject: CN=3067870CEF51031A12C04BB4DC2E77E47E4DAE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:f2:4a:a9:f7:d8:c2:70:46:8d:71:4c:25:
                    0f:d8:02:d6:c2:3e:dc:1f:d9:71:ed:bb:38:9e:42:
                    41:89:da:99:44:18:6c:53:83:ca:da:44:78:4d:51:
                    b5:1e:fd:7d:e5:3a:a6:e7:d4:16:5b:9e:f7:15:5a:
                    53:ee:6c:a8:04:a0:f4:90:c0:4c:50:b3:3b:d6:18:
                    82:6f:8c:31:da:ab:aa:89:06:0a:eb:3d:2e:fc:52:
                    2b:e1:ae:f2:d1:a3:8d:d1:67:5e:3b:7d:3b:68:c3:
                    59:af:88:72:6d:91:18:c4:d7:4a:06:7e:f3:fb:26:
                    b0:ed:8c:f2:c7:cf:df:bc:03:99:97:67:b6:18:84:
                    4a:3c:c2:64:c4:5a:34:b7:52:1a:89:3d:76:4e:42:
                    f3:5f:85:ed:ff:69:ff:80:e5:8f:6d:3f:0b:8b:8c:
                    f6:2b:ba:14:35:81:f8:ed:21:67:76:a7:0f:85:ed:
                    5c:b6:f7:74:c3:98:26:75:31:36:3c:9b:91:ea:58:
                    42:81:9e:30:e4:45:0b:d3:41:21:c0:08:7d:d6:d6:
                    f0:d3:99:93:6d:25:37:33:8a:ce:f6:02:f7:9b:fe:
                    08:6c:5b:af:10:a8:26:b9:07:ee:25:18:fb:e5:8d:
                    ec:2a:44:fa:6b:57:10:c2:45:af:ff:35:66:4d:d1:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:67:87:0C:EF:51:03:1A:12:C0:4B:B4:DC:2E:77:E4:7E:4D:AE:96
            X509v3 Authority Key Identifier:
                keyid:4A:EB:6F:3B:61:C5:B7:82:C9:DA:F5:01:8F:F8:C1:DA:78:64:21:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AEB6F3B61C5B782C9DAF5018FF8C1DA7864215A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34322e302f32332d3234203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:6b:34:89:89:5a:11:9e:23:70:cf:33:2f:5f:76:4e:3d:95:
         8c:ad:01:28:d8:e8:93:ee:f9:e6:10:46:30:3c:4c:46:a1:47:
         17:83:61:c2:d2:d1:b8:01:44:67:6b:8c:1f:93:f3:c4:4a:95:
         95:b4:d6:ca:35:32:26:24:c2:e8:5f:bc:f8:29:a5:c1:8b:27:
         a3:3a:47:a4:eb:52:42:6f:07:91:73:66:76:c2:7c:68:79:be:
         e9:36:50:18:07:b2:23:57:14:18:f4:e3:4e:8c:7c:a6:8a:80:
         8d:d1:9b:ca:0a:ad:78:b5:bc:19:bc:56:f9:70:59:f8:85:fa:
         e1:e6:44:35:f8:f6:be:aa:4a:c4:37:76:9c:84:86:66:c6:85:
         ed:2b:f4:5b:0c:28:0e:32:cb:1a:46:c1:3b:70:8e:15:5f:74:
         10:82:d9:9a:d8:ad:d1:60:4c:c5:01:ea:ae:c5:55:f0:ed:d0:
         ba:0e:8b:3b:dc:db:75:13:92:8a:c2:ad:8d:6f:87:13:69:60:
         f2:dc:28:f3:90:ad:a2:ca:96:c1:82:23:31:6c:d7:c8:13:a7:
         e4:25:8c:25:a7:64:27:28:52:b5:a2:fc:44:8b:d1:6a:51:d5:
         c1:c7:94:de:25:42:ba:3a:14:0a:8b:5f:91:53:b6:a0:9c:40:
         5a:33:01:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZeYzMnhvukPIid3Y1AmmVI4Fvk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEFFQjZGM0I2MUM1Qjc4MkM5REFGNTAxOEZGOEMxREE3
ODY0MjE1QTAeFw0yNDAzMDUxNjAwNThaFw0yNTAzMDQxNjA1NThaMDMxMTAvBgNV
BAMTKDMwNjc4NzBDRUY1MTAzMUExMkMwNEJCNERDMkU3N0U0N0U0REFFOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49/JKqffYwnBGjXFMJQ/YAtbC
Ptwf2XHtuzieQkGJ2plEGGxTg8raRHhNUbUe/X3lOqbn1BZbnvcVWlPubKgEoPSQ
wExQszvWGIJvjDHaq6qJBgrrPS78UivhrvLRo43RZ147fTtow1mviHJtkRjE10oG
fvP7JrDtjPLHz9+8A5mXZ7YYhEo8wmTEWjS3UhqJPXZOQvNfhe3/af+A5Y9tPwuL
jPYruhQ1gfjtIWd2pw+F7Vy293TDmCZ1MTY8m5HqWEKBnjDkRQvTQSHACH3W1vDT
mZNtJTczis72Aveb/ghsW68QqCa5B+4lGPvljewqRPprVxDCRa//NWZN0eh9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMGeHDO9RAxoSwEu03C535H5NrpYwHwYDVR0j
BBgwFoAUSutvO2HFt4LJ2vUBj/jB2nhkIVowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO
VlovMC80QUVCNkYzQjYxQzVCNzgyQzlEQUY1MDE4RkY4QzFEQTc4NjQyMTVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRBRUI2RjNCNjFDNUI3ODJD
OURBRjUwMThGRjhDMURBNzg2NDIxNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLbUZEbkY2Ylh2RVliTHBibmhaRVdFa3hqR3JaUlFwcFhRSzRGblVUTlZaLzAv
MzEzMzM4MmUzNTM5MmUzNDMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBijsqMA0GCSqGSIb3DQEBCwUAA4IBAQBPazSJiVoR
niNwzzMvX3ZOPZWMrQEo2OiT7vnmEEYwPExGoUcXg2HC0tG4AURna4wfk/PESpWV
tNbKNTImJMLoX7z4KaXBiyejOkek61JCbweRc2Z2wnxoeb7pNlAYB7IjVxQY9ONO
jHymioCN0ZvKCq14tbwZvFb5cFn4hfrh5kQ1+Pa+qkrEN3achIZmxoXtK/RbDCgO
MssaRsE7cI4VX3QQgtma2K3RYEzFAequxVXw7dC6Dos73Nt1E5KKwq2Nb4cTaWDy
3CjzkK2iypbBgiMxbNfIE6fkJYwlp2QnKFK1ovxEi9FqUdXBx5TeJUK6OhQKi1+R
U7agnEBaMwEN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org