Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa
File:                     3133382e35392e3132342e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          gUapmN235DHXJkQby+pA7GMB4UgJJdEX996RjFi0M8Y=
Subject key identifier:   6A:B3:93:9F:30:D0:7B:36:87:35:AF:56:C8:C5:D8:D4:9E:18:C0:63
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       1DDD8668A3A2035A07F97653EB6BC4663EC892B9
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:05 +0000
ROA not before:           Fri 18 Nov 2022 17:45:05 +0000
ROA not after:            Fri 17 Nov 2023 17:50:05 +0000
asID:                     61588
IP address blocks:        138.59.124.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dd:86:68:a3:a2:03:5a:07:f9:76:53:eb:6b:c4:66:3e:c8:92:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:05 2022 GMT
            Not After : Nov 17 17:50:05 2023 GMT
        Subject: CN=6AB3939F30D07B368735AF56C8C5D8D49E18C063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:14:39:76:91:72:6b:10:3e:a2:a7:89:38:
                    8f:9f:ff:51:87:84:dc:04:84:ca:7f:b1:54:bc:76:
                    07:b9:92:fc:bf:8b:5b:d2:b0:9c:f1:50:65:d3:ba:
                    74:ae:21:2e:c8:af:e0:24:1f:d7:41:48:5b:56:80:
                    bf:bb:5a:47:f1:98:7a:0b:5c:f0:2a:cd:92:ab:44:
                    80:4a:63:ef:27:a9:1b:89:7b:c4:f4:7c:62:49:46:
                    88:64:06:0f:30:c6:6e:f0:0e:14:2a:e3:c2:68:55:
                    59:4a:2d:77:d8:8c:72:d7:c0:bf:69:0b:71:31:fb:
                    a1:15:9c:17:65:c6:7b:46:30:51:0f:a3:5e:a8:79:
                    68:13:58:b0:56:a7:29:20:4f:8c:a1:17:a8:e4:ac:
                    f2:48:ae:5a:03:7e:2b:88:4e:d1:20:88:34:bb:8b:
                    d8:79:bb:3a:d5:df:90:2d:8f:a8:38:2b:f9:0a:f2:
                    d1:a6:13:41:16:5b:33:08:79:5d:6d:91:04:52:7b:
                    56:be:7c:a9:fb:7f:03:26:ee:1a:cf:0c:b0:47:55:
                    6f:73:14:ec:23:99:37:63:09:72:90:f5:cb:52:b5:
                    f3:1b:2f:2a:b5:c4:4a:71:f8:3a:1b:1a:d6:4e:1f:
                    05:eb:7c:ac:e9:fc:b7:89:12:cc:d8:3e:ea:57:fb:
                    32:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B3:93:9F:30:D0:7B:36:87:35:AF:56:C8:C5:D8:D4:9E:18:C0:63
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e35392e3132342e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:64:fb:52:ba:68:86:9a:ff:95:21:2c:d8:a6:1a:f6:6b:26:
         b6:47:c8:53:e5:c6:1f:f3:b2:77:45:4a:31:86:2b:f2:b8:70:
         10:a5:f9:bd:d1:a0:41:f6:b0:49:73:e1:13:50:7d:a0:44:06:
         6e:62:d9:24:62:d5:bc:3e:5a:99:2b:ca:c8:b7:e6:49:9d:f6:
         be:88:6b:a3:46:52:0a:01:9d:6c:2c:58:ff:a3:0c:65:af:0d:
         93:1d:25:0b:1f:d9:7d:18:ba:cc:32:4a:24:65:86:d1:97:c0:
         12:08:50:21:4c:e8:5d:a9:53:95:f1:c7:81:fe:5e:a9:92:c5:
         93:4d:d9:bf:05:48:c6:4a:1a:ad:59:3c:43:3d:e0:59:74:dd:
         98:2a:20:d1:d4:de:5c:0c:dd:b9:4f:78:d0:83:b0:19:b6:58:
         67:e4:a5:69:92:13:6a:c1:6a:8a:00:f9:de:09:60:e8:69:5f:
         b7:45:85:06:5e:75:95:49:ed:b5:bf:c2:bf:cd:09:1a:56:b7:
         14:ee:64:f1:08:fb:6c:e1:93:9e:fd:d4:f0:eb:b6:83:d8:ba:
         08:70:8b:9a:6d:6b:29:7b:db:10:5c:5d:b0:0e:28:d3:99:06:
         73:86:2f:78:72:82:54:10:eb:05:b3:a0:db:bd:89:f2:38:a0:
         bd:b7:e6:65
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHd2GaKOiA1oH+XZT62vEZj7IkrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUwQTk3RUU1NEJGODZCRkQ2NTNEOTgyMTlBMTYxRTVD
RkM1MDJEQzAeFw0yMjExMTgxNzQ1MDVaFw0yMzExMTcxNzUwMDVaMDMxMTAvBgNV
BAMTKDZBQjM5MzlGMzBEMDdCMzY4NzM1QUY1NkM4QzVEOEQ0OUUxOEMwNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfRQ5dpFyaxA+oqeJOI+f/1GH
hNwEhMp/sVS8dge5kvy/i1vSsJzxUGXTunSuIS7Ir+AkH9dBSFtWgL+7WkfxmHoL
XPAqzZKrRIBKY+8nqRuJe8T0fGJJRohkBg8wxm7wDhQq48JoVVlKLXfYjHLXwL9p
C3Ex+6EVnBdlxntGMFEPo16oeWgTWLBWpykgT4yhF6jkrPJIrloDfiuITtEgiDS7
i9h5uzrV35Atj6g4K/kK8tGmE0EWWzMIeV1tkQRSe1a+fKn7fwMm7hrPDLBHVW9z
FOwjmTdjCXKQ9ctStfMbLyq1xEpx+DobGtZOHwXrfKzp/LeJEszYPupX+zIjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUarOTnzDQezaHNa9WyMXY1J4YwGMwHwYDVR0j
BBgwFoAU1QqX7lS/hr/WU9mCGaFh5c/FAtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMC9ENTBBOTdFRTU0QkY4NkJGRDY1M0Q5ODIxOUExNjFFNUNGQzUwMkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1MEE5N0VFNTRCRjg2QkZE
NjUzRDk4MjE5QTE2MUU1Q0ZDNTAyREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzAv
MzEzMzM4MmUzNTM5MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijt8MA0GCSqGSIb3DQEBCwUAA4IBAQAFZPtSumiG
mv+VISzYphr2aya2R8hT5cYf87J3RUoxhivyuHAQpfm90aBB9rBJc+ETUH2gRAZu
YtkkYtW8PlqZK8rIt+ZJnfa+iGujRlIKAZ1sLFj/owxlrw2THSULH9l9GLrMMkok
ZYbRl8ASCFAhTOhdqVOV8ceB/l6pksWTTdm/BUjGShqtWTxDPeBZdN2YKiDR1N5c
DN25T3jQg7AZtlhn5KVpkhNqwWqKAPneCWDoaV+3RYUGXnWVSe21v8K/zQkaVrcU
7mTxCPts4ZOe/dTw67aD2LoIcIuabWspe9sQXF2wDijTmQZzhi94coJUEOsFs6Db
vYnyOKC9t+Zl
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org