Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
File:                     3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa (raw, json)
Hash identifier:          7/kaMmWLhl/MO9CT5cDJ07EJ5Ek0jRb40faOEKILCWY=
Subject key identifier:   0F:6A:9F:C9:8C:0A:DE:DB:6C:91:1B:AC:83:C3:A5:67:73:F6:38:71
Certificate issuer:       /CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
Certificate serial:       0C5E067929B26A066AB07F030A983AC0A2234717
Authority key identifier: CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa
Signing time:             Tue 12 Mar 2024 16:27:45 +0000
ROA not before:           Tue 12 Mar 2024 16:22:45 +0000
ROA not after:            Tue 11 Mar 2025 16:27:45 +0000
asID:                     264233
IP address blocks:        138.117.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5e:06:79:29:b2:6a:06:6a:b0:7f:03:0a:98:3a:c0:a2:23:47:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938
        Validity
            Not Before: Mar 12 16:22:45 2024 GMT
            Not After : Mar 11 16:27:45 2025 GMT
        Subject: CN=0F6A9FC98C0ADEDB6C911BAC83C3A56773F63871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:c1:05:37:d9:38:bf:43:40:05:06:08:90:
                    48:6a:e4:61:16:82:0a:31:0e:63:c4:0c:fa:b6:c9:
                    82:02:26:3f:0b:a3:32:23:92:43:7b:f6:ef:55:82:
                    aa:a4:89:9a:f1:4a:a2:ce:83:5d:1a:38:09:3b:dd:
                    a8:5c:4f:67:a1:49:81:46:ee:d5:bc:fb:64:c6:b1:
                    1d:3a:f7:5b:8f:85:1d:6f:93:48:42:00:ea:02:9d:
                    8b:9a:9b:e3:1b:a5:fd:3d:b6:da:51:28:f1:88:6b:
                    73:16:88:b4:1c:1e:1d:b5:68:72:c7:ed:94:09:c5:
                    af:e5:cb:71:95:a5:4d:cb:a7:7e:c2:98:7e:b6:19:
                    f5:e3:9f:95:cd:b2:8b:71:f5:22:b1:fc:a3:56:12:
                    dc:7d:73:cd:d8:e7:10:83:e9:7a:33:2b:e8:02:64:
                    ae:c8:de:26:3c:9b:7b:b4:82:a4:22:20:55:df:04:
                    15:d4:bb:af:4f:a3:aa:2f:bf:8e:3f:4d:e6:97:9f:
                    d6:85:8c:02:94:50:d1:54:0a:04:5a:da:e1:a8:b5:
                    13:dc:f1:dc:00:b1:d9:16:7d:fc:62:d4:c6:f6:a0:
                    1a:96:37:b8:9c:26:1c:da:d1:7a:73:6a:a4:24:bc:
                    78:c8:1b:b2:a1:fa:48:df:25:33:af:59:d1:e0:8d:
                    dc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6A:9F:C9:8C:0A:DE:DB:6C:91:1B:AC:83:C3:A5:67:73:F6:38:71
            X509v3 Authority Key Identifier:
                keyid:CA:1E:AF:52:54:A0:89:DA:EF:D2:DB:19:FE:65:10:4F:DC:FD:89:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA1EAF5254A089DAEFD2DB19FE65104FDCFD8938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTSraUdAWWLhUYX9ud3cynyXH6ZeWcAVC8zcGoFhP9AH/0/3133382e3131372e3131362e302f32322d3234203d3e20323634323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:a8:a6:5d:e8:de:65:e2:be:1e:93:a1:64:9f:c8:ce:96:
         43:a1:0f:69:80:55:54:4d:20:fb:fd:56:00:2c:be:5b:84:92:
         52:76:18:e9:9d:d9:e0:64:10:26:3a:44:b9:04:9d:c2:2c:35:
         5a:74:cb:1d:ff:7f:7c:28:4f:c5:b6:12:27:5e:7e:f2:3f:a9:
         e1:6c:96:1a:ed:8f:7f:83:4d:cd:34:03:60:1b:95:2f:53:a9:
         38:e4:12:f1:27:aa:99:b4:69:e0:00:d2:c8:ca:9c:f6:a2:23:
         b4:07:30:ec:b1:c3:fe:42:88:c2:28:f6:58:6b:2b:1f:f9:df:
         0b:91:02:3e:b8:ce:41:b5:52:75:63:2b:97:24:86:2a:db:2d:
         b0:db:2a:ca:dd:ec:a8:99:05:bb:72:20:a0:45:54:3e:27:1e:
         cc:ea:41:f6:f7:ab:7b:c3:d3:df:1b:93:8d:15:82:08:63:b0:
         54:86:b5:d4:d6:fd:dc:c0:81:2c:e6:a2:a6:20:8c:a5:ed:54:
         50:6e:ba:7d:31:5c:22:c0:83:c4:c2:77:66:df:d3:34:74:7c:
         7e:3d:dc:6e:43:cf:ea:18:72:ee:e6:98:96:86:8b:13:c7:d2:
         99:3e:4f:88:21:dc:2e:b9:64:1b:7b:ad:c3:cd:35:ea:bc:6b:
         83:28:d2:28
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDF4GeSmyagZqsH8DCpg6wKIjRxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExRUFGNTI1NEEwODlEQUVGRDJEQjE5RkU2NTEwNEZE
Q0ZEODkzODAeFw0yNDAzMTIxNjIyNDVaFw0yNTAzMTExNjI3NDVaMDMxMTAvBgNV
BAMTKDBGNkE5RkM5OEMwQURFREI2QzkxMUJBQzgzQzNBNTY3NzNGNjM4NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwH8EFN9k4v0NABQYIkEhq5GEW
ggoxDmPEDPq2yYICJj8LozIjkkN79u9VgqqkiZrxSqLOg10aOAk73ahcT2ehSYFG
7tW8+2TGsR0691uPhR1vk0hCAOoCnYuam+Mbpf09ttpRKPGIa3MWiLQcHh21aHLH
7ZQJxa/ly3GVpU3Lp37CmH62GfXjn5XNsotx9SKx/KNWEtx9c83Y5xCD6XozK+gC
ZK7I3iY8m3u0gqQiIFXfBBXUu69Po6ovv44/TeaXn9aFjAKUUNFUCgRa2uGotRPc
8dwAsdkWffxi1Mb2oBqWN7icJhza0XpzaqQkvHjIG7Kh+kjfJTOvWdHgjdwlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUD2qfyYwK3ttskRusg8OlZ3P2OHEwHwYDVR0j
BBgwFoAUyh6vUlSgidrv0tsZ/mUQT9z9iTgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRTcmFVZEFXV0xoVVlYOXVkM2N5bnlYSDZaZVdjQVZDOHpjR29GaFA5
QUgvMC9DQTFFQUY1MjU0QTA4OURBRUZEMkRCMTlGRTY1MTA0RkRDRkQ4OTM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMUVBRjUyNTRBMDg5REFF
RkQyREIxOUZFNjUxMDRGRENGRDg5MzguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUU3JhVWRBV1dMaFVZWDl1ZDNjeW55WEg2WmVXY0FWQzh6Y0dvRmhQOUFILzAv
MzEzMzM4MmUzMTMxMzcyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop1dDANBgkqhkiG9w0BAQsFAAOCAQEAZR+o
pl3o3mXivh6ToWSfyM6WQ6EPaYBVVE0g+/1WACy+W4SSUnYY6Z3Z4GQQJjpEuQSd
wiw1WnTLHf9/fChPxbYSJ15+8j+p4WyWGu2Pf4NNzTQDYBuVL1OpOOQS8SeqmbRp
4ADSyMqc9qIjtAcw7LHD/kKIwij2WGsrH/nfC5ECPrjOQbVSdWMrlySGKtstsNsq
yt3sqJkFu3IgoEVUPicezOpB9vere8PT3xuTjRWCCGOwVIa11Nb93MCBLOaipiCM
pe1UUG66fTFcIsCDxMJ3Zt/TNHR8fj3cbkPP6hhy7uaYloaLE8fSmT5PiCHcLrlk
G3utw8016rxrgyjSKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org