Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
File:                     3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier:          mS498VSRWsCUziPaUDF7GfOJf/9uOK6w8QrqZ23L9BQ=
Subject key identifier:   77:0E:54:6D:93:5A:95:CF:FD:16:BE:DF:6D:26:1F:31:A0:93:15:C8
Certificate issuer:       /CN=D734736DE25120E6797606BF75F2DB44E938B286
Certificate serial:       05FADB738FB391838B1B87CB050A7CAF7E24A593
Authority key identifier: D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa
Signing time:             Fri 22 Mar 2024 17:44:59 +0000
ROA not before:           Fri 22 Mar 2024 17:39:59 +0000
ROA not after:            Fri 21 Mar 2025 17:44:59 +0000
asID:                     264197
IP address blocks:        138.97.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:fa:db:73:8f:b3:91:83:8b:1b:87:cb:05:0a:7c:af:7e:24:a5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734736DE25120E6797606BF75F2DB44E938B286
        Validity
            Not Before: Mar 22 17:39:59 2024 GMT
            Not After : Mar 21 17:44:59 2025 GMT
        Subject: CN=770E546D935A95CFFD16BEDF6D261F31A09315C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:6a:6d:cd:12:f8:df:53:cd:e9:d9:dc:42:
                    ea:3e:46:28:9d:cd:a0:f7:cc:2d:97:cc:5e:0e:f6:
                    be:72:3c:2d:5e:79:44:68:33:f4:05:ab:40:c6:70:
                    90:7f:94:29:bb:3a:c2:cd:93:12:2b:fb:41:e3:12:
                    7d:64:37:24:67:91:50:4e:3e:50:ab:ef:7d:b5:63:
                    0e:0b:a0:f9:25:a1:10:7b:56:fa:21:45:7e:11:e9:
                    20:46:05:a2:aa:39:ad:6d:a3:b2:9f:0e:9e:75:31:
                    d2:8c:67:fb:43:72:94:dd:bf:15:95:c1:ba:16:52:
                    ea:07:1c:df:6f:de:71:c6:44:5a:1c:20:01:d5:6c:
                    ae:44:d5:01:e8:30:57:9b:a1:9d:bf:43:00:4e:53:
                    36:08:43:4e:a6:68:96:cf:c3:57:f8:62:e9:3d:91:
                    5e:fd:01:0e:64:fd:e0:17:90:31:b2:a6:4d:e2:f9:
                    19:0e:d5:e5:7a:32:3d:f2:dc:7f:e6:7b:59:5d:9d:
                    62:bd:c7:6a:13:6d:2d:ac:8d:72:04:43:01:e6:11:
                    40:00:36:93:bb:86:7e:9f:e6:46:7f:40:7f:fe:d0:
                    50:c9:9c:e1:47:90:13:0e:92:e3:80:09:77:f4:f8:
                    4a:f3:f8:7f:96:d6:e6:ed:73:84:d5:b9:53:dc:e2:
                    b1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0E:54:6D:93:5A:95:CF:FD:16:BE:DF:6D:26:1F:31:A0:93:15:C8
            X509v3 Authority Key Identifier:
                keyid:D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3134392e302f32342d3234203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:2a:1f:46:8e:20:cc:19:1a:b1:61:25:f2:1c:2f:2a:d4:
         a5:f1:c7:82:37:56:e8:60:53:1e:9e:54:e2:f9:04:d8:f8:be:
         db:61:01:e2:75:7f:e5:ac:e3:95:f2:32:80:f0:1b:5e:33:df:
         01:9a:03:e2:d7:57:5b:84:04:f0:c9:c7:0d:7d:10:64:0c:5e:
         8b:04:c8:18:b3:8d:eb:b4:4e:b3:b4:c1:e0:e7:30:95:cf:62:
         d9:cc:0f:a4:c3:49:ee:d6:72:a3:60:80:af:e8:f6:40:92:6f:
         bf:3e:87:aa:c0:20:6f:59:b5:89:50:89:c8:a3:3c:d2:77:7b:
         d9:26:d5:33:3a:7f:ce:30:2d:9a:97:a4:95:eb:8a:83:46:88:
         0e:2a:61:4f:7b:bc:01:fd:57:d3:cb:c4:0c:fe:09:50:b7:fe:
         a5:2f:2b:a5:ea:58:b9:23:16:0e:21:1d:60:40:69:7f:91:4e:
         8f:e8:48:ca:aa:87:13:26:d6:a7:fd:a2:50:f6:d1:4f:ea:b3:
         10:25:96:29:2b:37:bf:25:ca:0b:13:d9:11:f6:f0:a2:95:fb:
         57:20:8d:e0:f8:72:d6:3a:51:1b:0b:e3:96:07:bb:39:06:4d:
         17:40:71:33:3e:b2:d2:70:d4:e5:f2:96:ec:3f:82:69:96:77:
         31:31:a5:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBfrbc4+zkYOLG4fLBQp8r34kpZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNDczNkRFMjUxMjBFNjc5NzYwNkJGNzVGMkRCNDRF
OTM4QjI4NjAeFw0yNDAzMjIxNzM5NTlaFw0yNTAzMjExNzQ0NTlaMDMxMTAvBgNV
BAMTKDc3MEU1NDZEOTM1QTk1Q0ZGRDE2QkVERjZEMjYxRjMxQTA5MzE1QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEWptzRL431PN6dncQuo+Riid
zaD3zC2XzF4O9r5yPC1eeURoM/QFq0DGcJB/lCm7OsLNkxIr+0HjEn1kNyRnkVBO
PlCr7321Yw4LoPkloRB7VvohRX4R6SBGBaKqOa1to7KfDp51MdKMZ/tDcpTdvxWV
wboWUuoHHN9v3nHGRFocIAHVbK5E1QHoMFeboZ2/QwBOUzYIQ06maJbPw1f4Yuk9
kV79AQ5k/eAXkDGypk3i+RkO1eV6Mj3y3H/me1ldnWK9x2oTbS2sjXIEQwHmEUAA
NpO7hn6f5kZ/QH/+0FDJnOFHkBMOkuOACXf0+Erz+H+W1ubtc4TVuVPc4rHTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdw5UbZNalc/9Fr7fbSYfMaCTFcgwHwYDVR0j
BBgwFoAU1zRzbeJRIOZ5dga/dfLbROk4soYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMC9ENzM0NzM2REUyNTEyMEU2Nzk3NjA2QkY3NUYyREI0NEU5MzhCMjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3MzQ3MzZERTI1MTIwRTY3
OTc2MDZCRjc1RjJEQjQ0RTkzOEIyODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiNU1halU5ZjdwTHlyU2lkVmRaV2JzM0U3RHlucE5UZjNvUWVmRnI5UzVULzAv
MzEzMzM4MmUzOTM3MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZUwDQYJKoZIhvcNAQELBQADggEBACurKh9G
jiDMGRqxYSXyHC8q1KXxx4I3VuhgUx6eVOL5BNj4vtthAeJ1f+Ws45XyMoDwG14z
3wGaA+LXV1uEBPDJxw19EGQMXosEyBizjeu0TrO0weDnMJXPYtnMD6TDSe7WcqNg
gK/o9kCSb78+h6rAIG9ZtYlQicijPNJ3e9km1TM6f84wLZqXpJXrioNGiA4qYU97
vAH9V9PLxAz+CVC3/qUvK6XqWLkjFg4hHWBAaX+RTo/oSMqqhxMm1qf9olD20U/q
sxAllikrN78lygsT2RH28KKV+1cgjeD4ctY6URsL45YHuzkGTRdAcTM+stJw1OXy
luw/gmmWdzExpWY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org