Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa
File:                     3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa (raw, json)
Hash identifier:          5KUn3OAsEqgr0r1/QkHFKWfnrGlD5s9+GCU6gqPh2XQ=
Subject key identifier:   2C:1E:B8:F7:05:62:6F:2E:11:60:9C:8C:B2:E6:34:FD:77:EB:DF:7A
Certificate issuer:       /CN=6412782E54CC80849912277A375A0261FBBD2F8D
Certificate serial:       5B0684640A5323257E2609F45B8A12D1A0591FFE
Authority key identifier: 64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6412782E54CC80849912277A375A0261FBBD2F8D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa
Signing time:             Fri 15 Dec 2023 22:26:00 +0000
ROA not before:           Fri 15 Dec 2023 22:21:00 +0000
ROA not after:            Fri 13 Dec 2024 22:26:00 +0000
asID:                     263951
IP address blocks:        138.255.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:06:84:64:0a:53:23:25:7e:26:09:f4:5b:8a:12:d1:a0:59:1f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6412782E54CC80849912277A375A0261FBBD2F8D
        Validity
            Not Before: Dec 15 22:21:00 2023 GMT
            Not After : Dec 13 22:26:00 2024 GMT
        Subject: CN=3082010A0282010100BF37C9E7B53A0AA5F74B09F8E258341AC7F49932001F6A6D61E603055E538851CBE91C1FDD81DDD4FA576BC53EC7506A412510167A241135F7843072CA815E6AB16B6D090F248BC764950E0A9DE860DE31FD95C724D87BD12EA08C2FD8D5EF37DC3F33FCF650983B6B1FA8F2A5D9627A66B14A513AC62E9574107AA66E35F0541771A2F7F948E8088A01133A3A3EAF04671C4808482CC22A27C4FF7A1BF2C728ED4303DA1A8FFBE30D616DE69C4B9D1DEC21DCA31669178BB1D05D07CB6916D187ED2BCA3DBB265D5869E75D6DDCE254EA6A2F50F8EF3F6986B6BC0B724E94660FF53866DC1BE6C73E68624026CE128E847F4CFB54A90F5D24B339A26FAF37F70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:c9:e7:b5:3a:0a:a5:f7:4b:09:f8:e2:58:
                    34:1a:c7:f4:99:32:00:1f:6a:6d:61:e6:03:05:5e:
                    53:88:51:cb:e9:1c:1f:dd:81:dd:d4:fa:57:6b:c5:
                    3e:c7:50:6a:41:25:10:16:7a:24:11:35:f7:84:30:
                    72:ca:81:5e:6a:b1:6b:6d:09:0f:24:8b:c7:64:95:
                    0e:0a:9d:e8:60:de:31:fd:95:c7:24:d8:7b:d1:2e:
                    a0:8c:2f:d8:d5:ef:37:dc:3f:33:fc:f6:50:98:3b:
                    6b:1f:a8:f2:a5:d9:62:7a:66:b1:4a:51:3a:c6:2e:
                    95:74:10:7a:a6:6e:35:f0:54:17:71:a2:f7:f9:48:
                    e8:08:8a:01:13:3a:3a:3e:af:04:67:1c:48:08:48:
                    2c:c2:2a:27:c4:ff:7a:1b:f2:c7:28:ed:43:03:da:
                    1a:8f:fb:e3:0d:61:6d:e6:9c:4b:9d:1d:ec:21:dc:
                    a3:16:69:17:8b:b1:d0:5d:07:cb:69:16:d1:87:ed:
                    2b:ca:3d:bb:26:5d:58:69:e7:5d:6d:dc:e2:54:ea:
                    6a:2f:50:f8:ef:3f:69:86:b6:bc:0b:72:4e:94:66:
                    0f:f5:38:66:dc:1b:e6:c7:3e:68:62:40:26:ce:12:
                    8e:84:7f:4c:fb:54:a9:0f:5d:24:b3:39:a2:6f:af:
                    37:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1E:B8:F7:05:62:6F:2E:11:60:9C:8C:B2:E6:34:FD:77:EB:DF:7A
            X509v3 Authority Key Identifier:
                keyid:64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/6412782E54CC80849912277A375A0261FBBD2F8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6412782E54CC80849912277A375A0261FBBD2F8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/3133382e3235352e32302e302f32322d3234203d3e20323633393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:6a:77:dc:61:ed:87:47:99:08:62:14:62:26:89:bc:ef:06:
         d9:08:ac:a1:63:4d:85:81:97:c8:00:67:21:0c:b0:9a:15:1c:
         e2:70:87:43:af:f7:49:e4:af:cb:17:6b:06:bc:6f:a4:c3:9d:
         49:c0:24:19:43:9f:eb:9d:06:8e:f3:59:23:de:94:ec:0a:8e:
         d0:a8:38:1c:4c:00:a9:cc:1e:bd:89:55:f7:f7:f6:d2:3d:d6:
         46:e8:fc:53:d1:70:3f:18:6d:20:5a:30:66:88:08:97:12:91:
         dd:52:ae:60:fb:d2:83:30:e3:76:fc:d9:83:4c:83:c2:15:fe:
         e9:1e:01:00:14:98:64:96:08:75:54:ff:2f:d6:c8:9e:d9:6a:
         29:a4:7b:e4:03:de:a6:2f:9d:1f:16:66:01:b2:fe:9d:47:3b:
         54:8f:50:ef:32:f2:64:d4:30:24:a4:c1:f9:c6:9a:d2:4d:73:
         2d:ac:e9:16:b1:c4:0c:0c:6b:13:c3:06:57:9f:37:a0:33:3a:
         72:0c:ab:e9:c8:71:4c:29:1a:ac:d3:6a:ab:c9:cb:61:44:cd:
         be:9d:1e:f5:62:9f:78:2d:be:ba:28:02:c2:b0:bf:66:dc:cd:
         93:3e:82:6e:d4:3d:b7:e8:8f:6c:ac:f5:19:91:5c:51:99:25:
         f8:74:fc:96
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUWwaEZApTIyV+Jgn0W4oS0aBZH/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQxMjc4MkU1NENDODA4NDk5MTIyNzdBMzc1QTAyNjFG
QkJEMkY4RDAeFw0yMzEyMTUyMjIxMDBaFw0yNDEyMTMyMjI2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkYzN0M5RTdCNTNBMEFBNUY3
NEIwOUY4RTI1ODM0MUFDN0Y0OTkzMjAwMUY2QTZENjFFNjAzMDU1RTUzODg1MUNC
RTkxQzFGREQ4MURERDRGQTU3NkJDNTNFQzc1MDZBNDEyNTEwMTY3QTI0MTEzNUY3
ODQzMDcyQ0E4MTVFNkFCMTZCNkQwOTBGMjQ4QkM3NjQ5NTBFMEE5REU4NjBERTMx
RkQ5NUM3MjREODdCRDEyRUEwOEMyRkQ4RDVFRjM3REMzRjMzRkNGNjUwOTgzQjZC
MUZBOEYyQTVEOTYyN0E2NkIxNEE1MTNBQzYyRTk1NzQxMDdBQTY2RTM1RjA1NDE3
NzFBMkY3Rjk0OEU4MDg4QTAxMTMzQTNBM0VBRjA0NjcxQzQ4MDg0ODJDQzIyQTI3
QzRGRjdBMUJGMkM3MjhFRDQzMDNEQTFBOEZGQkUzMEQ2MTZERTY5QzRCOUQxREVD
MjFEQ0EzMTY2OTE3OEJCMUQwNUQwN0NCNjkxNkQxODdFRDJCQ0EzREJCMjY1RDU4
NjlFNzVENkREQ0UyNTRFQTZBMkY1MEY4RUYzRjY5ODZCNkJDMEI3MjRFOTQ2NjBG
RjUzODY2REMxQkU2QzczRTY4NjI0MDI2Q0UxMjhFODQ3RjRDRkI1NEE5MEY1RDI0
QjMzOUEyNkZBRjM3RjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvzfJ57U6CqX3Swn44lg0Gsf0mTIAH2ptYeYDBV5TiFHL6Rwf3YHd
1PpXa8U+x1BqQSUQFnokETX3hDByyoFearFrbQkPJIvHZJUOCp3oYN4x/ZXHJNh7
0S6gjC/Y1e833D8z/PZQmDtrH6jypdliemaxSlE6xi6VdBB6pm418FQXcaL3+Ujo
CIoBEzo6Pq8EZxxICEgswionxP96G/LHKO1DA9oaj/vjDWFt5pxLnR3sIdyjFmkX
i7HQXQfLaRbRh+0ryj27Jl1YaeddbdziVOpqL1D47z9phra8C3JOlGYP9Thm3Bvm
xz5oYkAmzhKOhH9M+1SpD10kszmib6839wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCweuPcFYm8uEWCcjLLmNP136996MB8GA1UdIwQYMBaAFGQSeC5UzICEmRInejda
AmH7vS+NMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JUaHlmVmhkM2plQWpu
a3lROVVDa0RTbTRDRTgzTllSZ1RCZGRUUFFoTXpTLzAvNjQxMjc4MkU1NENDODA4
NDk5MTIyNzdBMzc1QTAyNjFGQkJEMkY4RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82NDEyNzgyRTU0Q0M4MDg0OTkxMjI3N0EzNzVBMDI2MUZCQkQy
RjhELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CVGh5ZlZoZDNqZUFqbmt5UTlV
Q2tEU200Q0U4M05ZUmdUQmRkVFBRaE16Uy8wLzMxMzMzODJlMzIzNTM1MmUzMjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzkzNTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
iv8UMA0GCSqGSIb3DQEBCwUAA4IBAQBaanfcYe2HR5kIYhRiJom87wbZCKyhY02F
gZfIAGchDLCaFRzicIdDr/dJ5K/LF2sGvG+kw51JwCQZQ5/rnQaO81kj3pTsCo7Q
qDgcTACpzB69iVX39/bSPdZG6PxT0XA/GG0gWjBmiAiXEpHdUq5g+9KDMON2/NmD
TIPCFf7pHgEAFJhklgh1VP8v1sie2WoppHvkA96mL50fFmYBsv6dRztUj1DvMvJk
1DAkpMH5xprSTXMtrOkWscQMDGsTwwZXnzegMzpyDKvpyHFMKRqs02qrycthRM2+
nR71Yp94Lb66KALCsL9m3M2TPoJu1D236I9srPUZkVxRmSX4dPyW
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org