Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230362e302f32342d3234203d3e20323632363439.roa
File:                     3133382e3231392e3230362e302f32342d3234203d3e20323632363439.roa (raw, json)
Hash identifier:          7vb7sch/kRz5VulgbY82/lYsjXAaSer1TvKLzi05LNs=
Subject key identifier:   D3:70:E5:53:9C:DE:E3:96:0E:FE:F5:92:A3:36:11:86:DD:59:E1:92
Certificate issuer:       /CN=7D1C362310F448AE7043C3F88DFA61C74217764E
Certificate serial:       279F307E7C9971BA2159B1302A8873DE2EB43920
Authority key identifier: 7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230362e302f32342d3234203d3e20323632363439.roa
Signing time:             Wed 16 Nov 2022 22:27:25 +0000
ROA not before:           Wed 16 Nov 2022 22:22:25 +0000
ROA not after:            Wed 15 Nov 2023 22:27:25 +0000
asID:                     262649
IP address blocks:        138.219.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9f:30:7e:7c:99:71:ba:21:59:b1:30:2a:88:73:de:2e:b4:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D1C362310F448AE7043C3F88DFA61C74217764E
        Validity
            Not Before: Nov 16 22:22:25 2022 GMT
            Not After : Nov 15 22:27:25 2023 GMT
        Subject: CN=D370E5539CDEE3960EFEF592A3361186DD59E192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:6e:2a:c8:ab:87:a5:9e:2a:b1:a4:04:f1:
                    fb:0c:af:f6:92:ce:3d:42:16:f2:30:ce:66:d2:9b:
                    36:7f:23:42:4a:d7:c6:6c:bc:f1:66:06:ea:39:ca:
                    17:17:f1:bf:b9:c4:e4:45:8f:c0:5a:72:23:b7:54:
                    94:21:71:8a:80:0e:f9:e8:70:d8:f3:55:0e:f3:f6:
                    f5:6b:4d:f3:9f:b0:88:4f:12:03:96:4b:eb:8a:25:
                    60:3c:73:2d:ad:4b:b3:50:65:1b:59:5d:73:0c:e1:
                    6f:a4:1c:f7:a0:89:e3:e7:7e:ec:8a:14:f5:1b:d9:
                    65:36:f7:08:f4:dd:e5:c9:92:85:c5:db:c3:ec:3b:
                    1e:bf:f0:23:cd:58:76:2d:95:02:86:b5:e5:8c:06:
                    3f:7d:0c:1c:5f:0e:ad:e0:cc:cb:d1:6e:75:b0:3b:
                    ce:a5:09:d9:c0:a9:4b:d4:c8:e7:08:95:8f:d4:79:
                    b7:12:45:d3:f7:66:fd:7a:c0:3b:e5:00:b9:a7:e0:
                    d7:05:81:51:22:ae:84:8e:73:ae:a7:45:c4:d0:23:
                    54:f5:ee:84:65:4b:87:85:b5:5d:5c:38:56:d5:d1:
                    31:c2:04:cf:35:69:1b:e0:27:8d:9c:76:68:a4:d6:
                    42:02:48:b7:4c:c4:41:19:c5:1f:b1:83:e4:c3:1a:
                    1b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:E5:53:9C:DE:E3:96:0E:FE:F5:92:A3:36:11:86:DD:59:E1:92
            X509v3 Authority Key Identifier:
                keyid:7D:1C:36:23:10:F4:48:AE:70:43:C3:F8:8D:FA:61:C7:42:17:76:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/7D1C362310F448AE7043C3F88DFA61C74217764E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D1C362310F448AE7043C3F88DFA61C74217764E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxDLy7cXkrWWZ6RqKv9CvKfvuYpCaG8RJT61FgnJPg3t/0/3133382e3231392e3230362e302f32342d3234203d3e20323632363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:12:91:3b:7e:44:5c:e8:84:c4:16:61:fa:c0:a3:44:47:04:
         f0:c9:1d:60:81:ed:d0:26:6c:0b:68:70:d2:0d:63:e9:ac:05:
         3d:ba:b9:a3:88:8b:0e:f9:2d:3f:3b:12:64:e3:b5:ba:10:65:
         87:27:7d:46:c8:48:05:6b:25:e6:59:1f:69:63:4a:ce:9e:a0:
         fd:58:7a:81:57:d8:b2:ae:1c:73:b8:cf:5a:67:dc:aa:fb:8c:
         8b:a3:74:0b:d4:0e:bd:bd:ed:95:6b:e3:b3:33:b4:53:7c:36:
         52:9b:58:a9:d6:f8:ea:53:dc:e8:0c:6c:a0:a4:a3:af:4c:ec:
         7a:a9:f0:68:38:a9:b8:e1:99:ea:68:86:24:1a:f6:95:ce:a4:
         7a:79:c8:43:d5:ce:a7:b7:1b:07:ee:ab:fd:30:55:51:b5:91:
         1e:61:99:d1:0a:12:17:d4:65:b4:12:91:48:a3:52:dc:2a:ef:
         79:49:9c:19:9c:d7:83:dc:d8:fd:84:44:40:87:3c:49:40:cd:
         fa:39:8a:4b:63:42:3c:2a:f0:b6:26:0c:62:19:e9:b3:d0:ee:
         78:7e:b4:e1:58:a4:05:74:9e:43:3b:2e:e4:83:0a:ae:3d:bf:
         19:70:b7:9a:1e:51:bc:a9:80:c2:22:a9:e7:7c:b6:2d:8e:d9:
         43:03:bb:cd
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ58wfnyZcbohWbEwKohz3i60OSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0QxQzM2MjMxMEY0NDhBRTcwNDNDM0Y4OERGQTYxQzc0
MjE3NzY0RTAeFw0yMjExMTYyMjIyMjVaFw0yMzExMTUyMjI3MjVaMDMxMTAvBgNV
BAMTKEQzNzBFNTUzOUNERUUzOTYwRUZFRjU5MkEzMzYxMTg2REQ1OUUxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFG4qyKuHpZ4qsaQE8fsMr/aS
zj1CFvIwzmbSmzZ/I0JK18ZsvPFmBuo5yhcX8b+5xORFj8BaciO3VJQhcYqADvno
cNjzVQ7z9vVrTfOfsIhPEgOWS+uKJWA8cy2tS7NQZRtZXXMM4W+kHPegiePnfuyK
FPUb2WU29wj03eXJkoXF28PsOx6/8CPNWHYtlQKGteWMBj99DBxfDq3gzMvRbnWw
O86lCdnAqUvUyOcIlY/UebcSRdP3Zv16wDvlALmn4NcFgVEiroSOc66nRcTQI1T1
7oRlS4eFtV1cOFbV0THCBM81aRvgJ42cdmik1kICSLdMxEEZxR+xg+TDGhu3AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU03DlU5ze45YO/vWSozYRht1Z4ZIwHwYDVR0j
BBgwFoAUfRw2IxD0SK5wQ8P4jfphx0IXdk4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3hETHk3Y1hrcldXWjZScUt2OUN2S2Z2dVlwQ2FHOFJKVDYxRmduSlBn
M3QvMC83RDFDMzYyMzEwRjQ0OEFFNzA0M0MzRjg4REZBNjFDNzQyMTc3NjRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdEMUMzNjIzMTBGNDQ4QUU3
MDQzQzNGODhERkE2MUM3NDIxNzc2NEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N4REx5N2NYa3JXV1o2UnFLdjlDdktmdnVZcENhRzhSSlQ2MUZnbkpQZzN0LzAv
MzEzMzM4MmUzMjMxMzkyZTMyMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrbzjANBgkqhkiG9w0BAQsFAAOCAQEAVxKR
O35EXOiExBZh+sCjREcE8MkdYIHt0CZsC2hw0g1j6awFPbq5o4iLDvktPzsSZOO1
uhBlhyd9RshIBWsl5lkfaWNKzp6g/Vh6gVfYsq4cc7jPWmfcqvuMi6N0C9QOvb3t
lWvjszO0U3w2UptYqdb46lPc6AxsoKSjr0zseqnwaDipuOGZ6miGJBr2lc6kennI
Q9XOp7cbB+6r/TBVUbWRHmGZ0QoSF9RltBKRSKNS3CrveUmcGZzXg9zY/YREQIc8
SUDN+jmKS2NCPCrwtiYMYhnps9DueH604VikBXSeQzsu5IMKrj2/GXC3mh5RvKmA
wiKp53y2LY7ZQwO7zQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org