Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32342d3234203d3e20323632363536.roa
File:                     3133382e3132312e3230382e302f32342d3234203d3e20323632363536.roa (raw, json)
Hash identifier:          0TX4Q+iPfBBq18NHaJ61I4yJDRko8rMZLWnig+Pp38c=
Subject key identifier:   0E:4A:DD:C4:E0:B5:AB:4C:6C:2E:82:FB:BF:53:CC:EA:59:2F:DE:04
Certificate issuer:       /CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
Certificate serial:       650D054679A52F7943B3C40E78A971FB070FBFFF
Authority key identifier: FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32342d3234203d3e20323632363536.roa
Signing time:             Thu 11 Apr 2024 23:08:46 +0000
ROA not before:           Thu 11 Apr 2024 23:03:46 +0000
ROA not after:            Thu 10 Apr 2025 23:08:46 +0000
asID:                     262656
IP address blocks:        138.121.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:0d:05:46:79:a5:2f:79:43:b3:c4:0e:78:a9:71:fb:07:0f:bf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Validity
            Not Before: Apr 11 23:03:46 2024 GMT
            Not After : Apr 10 23:08:46 2025 GMT
        Subject: CN=0E4ADDC4E0B5AB4C6C2E82FBBF53CCEA592FDE04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:eb:57:1f:37:58:51:91:1c:c1:78:8f:52:80:
                    aa:5d:fe:87:9b:1d:ad:c8:13:18:b0:03:e6:67:cf:
                    e4:50:e4:20:7a:e5:d8:63:f7:2b:06:0c:4b:91:f6:
                    dc:0e:04:de:db:55:70:da:6d:a8:be:ae:0b:04:39:
                    38:d1:84:9c:84:6e:29:3a:e0:60:0f:95:c9:cd:b6:
                    50:4d:21:a6:7d:03:48:0e:fb:7b:68:df:67:e7:be:
                    af:ff:dd:6e:3f:d9:09:4f:3a:06:bb:6c:9d:4a:f5:
                    46:99:8a:47:03:a0:8e:cc:0e:a0:97:56:55:72:b1:
                    a2:13:5b:4c:f7:c1:61:ea:ad:9d:fe:1b:d8:0d:46:
                    c0:73:60:02:2a:ff:69:e8:b3:a9:8f:7e:2c:29:ee:
                    37:7b:24:21:8b:3c:c4:47:d6:52:f5:62:75:5a:96:
                    93:12:a0:91:04:a8:95:eb:b9:f3:02:d4:ee:73:d9:
                    70:b4:78:ad:b6:e2:d6:6a:fa:ea:78:f8:11:de:6d:
                    e5:5e:01:c2:c8:09:15:61:d6:07:87:de:a4:ee:0f:
                    48:85:67:c4:e8:76:27:32:d1:0e:e1:19:89:01:ba:
                    8c:d8:70:9c:b2:ac:05:6a:d1:7a:9b:e9:2f:d2:89:
                    0b:01:12:be:78:8e:1a:ab:46:78:60:0e:b8:78:cc:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4A:DD:C4:E0:B5:AB:4C:6C:2E:82:FB:BF:53:CC:EA:59:2F:DE:04
            X509v3 Authority Key Identifier:
                keyid:FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/3133382e3132312e3230382e302f32342d3234203d3e20323632363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:33:1f:4b:3e:2c:7e:30:75:43:fe:cb:f5:3e:da:1b:2b:
         2a:b4:6c:a2:c5:aa:62:f9:f8:87:a1:b6:3f:7f:f2:5c:e4:27:
         63:d9:f2:48:71:2e:b3:07:26:bf:11:ad:6c:fc:a0:80:2e:91:
         3c:fc:22:d1:36:4e:7d:34:c1:ae:2c:b4:15:dd:72:3a:25:28:
         c8:d2:71:2c:f9:df:42:cc:38:1d:88:04:ce:7c:6e:8d:71:7b:
         d3:51:ad:c2:d4:d4:01:3b:c0:8a:29:bc:91:d7:5a:b1:bd:d6:
         ee:96:d5:09:61:4b:4b:da:06:ae:15:65:54:13:c2:e5:42:71:
         af:59:12:eb:40:c5:16:24:1a:7c:1e:7d:14:e0:d2:11:76:3b:
         f2:9a:a2:08:43:01:23:9b:f6:dc:fb:89:35:76:52:f1:02:a8:
         2f:14:7a:e1:94:e9:2d:7d:6b:5b:cf:26:25:6b:95:09:df:1b:
         a2:54:76:dd:7c:d5:5d:cd:ac:33:7f:b2:04:5b:e3:99:3d:42:
         ee:27:ca:e3:78:cd:18:3c:90:8d:52:e0:b0:f4:ee:49:2d:93:
         e4:9e:d0:12:fb:73:60:72:27:80:0c:cf:47:ab:ac:72:69:61:
         c6:31:3b:f5:ac:28:53:a6:ff:d4:df:b3:80:52:b1:db:ce:fa:
         75:8e:86:23
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZQ0FRnmlL3lDs8QOeKlx+wcPv/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0NTVGQkY0NzJERjdGMUVCNjRGOTk2Nzc1NjhFNzQx
NEExMjBBRTAeFw0yNDA0MTEyMzAzNDZaFw0yNTA0MTAyMzA4NDZaMDMxMTAvBgNV
BAMTKDBFNEFEREM0RTBCNUFCNEM2QzJFODJGQkJGNTNDQ0VBNTkyRkRFMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk61cfN1hRkRzBeI9SgKpd/oeb
Ha3IExiwA+Znz+RQ5CB65dhj9ysGDEuR9twOBN7bVXDabai+rgsEOTjRhJyEbik6
4GAPlcnNtlBNIaZ9A0gO+3to32fnvq//3W4/2QlPOga7bJ1K9UaZikcDoI7MDqCX
VlVysaITW0z3wWHqrZ3+G9gNRsBzYAIq/2nos6mPfiwp7jd7JCGLPMRH1lL1YnVa
lpMSoJEEqJXrufMC1O5z2XC0eK224tZq+up4+BHebeVeAcLICRVh1geH3qTuD0iF
Z8Todicy0Q7hGYkBuozYcJyyrAVq0Xqb6S/SiQsBEr54jhqrRnhgDrh4zLglAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUDkrdxOC1q0xsLoL7v1PM6lkv3gQwHwYDVR0j
BBgwFoAU+0Vfv0ct9/HrZPmWd1aOdBShIK4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkwxNjJpTmlmU3ZBM2prY1dCclh0dm5hRk5SUEZNQ040aVJRdnBURUhQ
NmcvMS9GQjQ1NUZCRjQ3MkRGN0YxRUI2NEY5OTY3NzU2OEU3NDE0QTEyMEFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZCNDU1RkJGNDcyREY3RjFF
QjY0Rjk5Njc3NTY4RTc0MTRBMTIwQUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JMMTYyaU5pZlN2QTNqa2NXQnJYdHZuYUZOUlBGTUNONGlSUXZwVEVIUDZnLzEv
MzEzMzM4MmUzMTMyMzEyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzUzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp50DANBgkqhkiG9w0BAQsFAAOCAQEAKxwz
H0s+LH4wdUP+y/U+2hsrKrRsosWqYvn4h6G2P3/yXOQnY9nySHEuswcmvxGtbPyg
gC6RPPwi0TZOfTTBriy0Fd1yOiUoyNJxLPnfQsw4HYgEznxujXF701GtwtTUATvA
iim8kddasb3W7pbVCWFLS9oGrhVlVBPC5UJxr1kS60DFFiQafB59FODSEXY78pqi
CEMBI5v23PuJNXZS8QKoLxR64ZTpLX1rW88mJWuVCd8bolR23XzVXc2sM3+yBFvj
mT1C7ifK43jNGDyQjVLgsPTuSS2T5J7QEvtzYHIngAzPR6uscmlhxjE79awoU6b/
1N+zgFKx2876dY6GIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org