Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa
File:                     3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa (raw, json)
Hash identifier:          3OKi0scnmSatGpn+G3fggi6u1hHIBi7Wh+/57ONcBXE=
Subject key identifier:   FC:CF:E0:57:B9:F3:0C:B8:03:16:58:94:77:0B:E8:B1:9B:05:EB:43
Certificate issuer:       /CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
Certificate serial:       3DC6038A5DB737D785359E06B6418CBCF32B3229
Authority key identifier: 15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa
Signing time:             Tue 07 Feb 2023 10:12:19 +0000
ROA not before:           Tue 07 Feb 2023 10:07:19 +0000
ROA not after:            Tue 06 Feb 2024 10:12:19 +0000
asID:                     268205
IP address blocks:        138.219.64.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c6:03:8a:5d:b7:37:d7:85:35:9e:06:b6:41:8c:bc:f3:2b:32:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532
        Validity
            Not Before: Feb  7 10:07:19 2023 GMT
            Not After : Feb  6 10:12:19 2024 GMT
        Subject: CN=FCCFE057B9F30CB803165894770BE8B19B05EB43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:84:33:24:19:da:a1:5d:11:6b:6e:ff:bc:5c:
                    77:96:ee:73:c3:92:df:b3:b8:46:59:50:55:c6:11:
                    5c:9c:6e:ab:0b:a6:96:83:50:ce:6e:0f:56:49:ff:
                    9b:0a:2b:19:d7:3f:9a:ad:32:b5:f0:4b:f5:de:dd:
                    ae:2f:f7:d2:5e:12:29:b8:c5:40:db:a2:4b:cb:f1:
                    bd:ce:e2:d6:af:78:1b:24:0f:e9:97:8c:6f:2e:42:
                    85:ed:ec:a7:55:80:27:e2:5e:d4:21:3c:eb:20:fa:
                    39:91:97:77:1c:fe:e0:a4:a7:b6:e5:9b:0c:23:65:
                    fb:55:aa:3a:8c:3f:0b:15:24:18:5a:7f:4c:ca:7a:
                    1c:a5:3b:8c:11:5e:91:8b:ad:e6:de:1f:3f:d6:05:
                    30:96:36:68:eb:e2:f4:85:d5:5b:cc:2e:32:5c:e8:
                    8c:1c:05:69:83:ea:29:a6:76:4b:11:14:50:f6:ef:
                    b9:d2:b6:53:ed:09:15:f3:77:37:bd:f9:72:9d:b3:
                    2a:20:98:1b:82:01:91:24:9e:12:3d:46:7c:aa:c4:
                    e2:18:ad:f8:29:e9:69:8e:a4:1f:e7:6f:a5:1d:f7:
                    30:c9:f0:b5:ff:5f:59:b4:0a:b2:ba:b5:3d:6f:e6:
                    a3:0f:34:a0:ec:7e:3f:85:55:ae:1e:df:ce:51:95:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:E0:57:B9:F3:0C:B8:03:16:58:94:77:0B:E8:B1:9B:05:EB:43
            X509v3 Authority Key Identifier:
                keyid:15:4C:1B:45:8D:0C:AC:7F:C3:D6:34:4F:92:C0:EB:41:CE:5B:25:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/154C1B458D0CAC7FC3D6344F92C0EB41CE5B2532.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dx5wwdNFCgqEjYddcFyoiLBLVhKjUZjrVnqzGTpsNJAD/0/3133382e3231392e36342e302f32322d3232203d3e20323638323035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:b6:59:cc:7c:ca:52:89:fb:9d:ac:bc:f8:f8:0d:e0:19:
         e4:e6:8a:84:50:b4:b3:40:c1:5c:c5:78:da:f7:b6:91:a8:4f:
         ad:6a:0d:12:2b:ec:24:a3:bb:a9:ef:e5:7a:c0:7c:37:30:17:
         fa:bb:eb:2c:82:a9:e8:71:bd:20:8d:3d:f2:d4:dd:fe:d6:ee:
         02:d3:8e:44:a0:23:38:7a:70:9a:57:e6:f9:59:f7:6d:03:05:
         b9:73:5d:7a:ef:c1:fd:5e:00:f3:65:7f:4d:56:43:47:21:d8:
         5c:99:46:48:ca:25:bb:e7:a5:dd:29:2e:b3:13:6a:d5:ab:b8:
         7d:a1:e2:84:3d:a8:38:5e:ac:3e:22:ef:87:4e:d2:82:c4:e5:
         a1:12:15:38:ee:8e:f9:63:94:10:52:d4:7f:10:65:ce:42:2d:
         4f:f2:f4:f3:79:60:25:8a:b5:1e:49:fd:79:38:97:1c:2b:98:
         58:b5:e0:6e:ad:20:b8:66:10:62:18:d2:96:f9:7f:e2:08:89:
         a5:93:e5:e7:e1:88:5e:cd:f7:6b:cc:64:99:5b:d2:e9:6a:ed:
         3d:07:62:0e:af:72:c5:cb:f0:6b:16:29:6a:21:ad:89:19:34:
         aa:5b:74:e4:88:80:e7:f3:9e:46:5e:2e:e3:f0:f1:95:6b:25:
         e1:76:88:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPcYDil23N9eFNZ4GtkGMvPMrMikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0QzFCNDU4RDBDQUM3RkMzRDYzNDRGOTJDMEVCNDFD
RTVCMjUzMjAeFw0yMzAyMDcxMDA3MTlaFw0yNDAyMDYxMDEyMTlaMDMxMTAvBgNV
BAMTKEZDQ0ZFMDU3QjlGMzBDQjgwMzE2NTg5NDc3MEJFOEIxOUIwNUVCNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwhDMkGdqhXRFrbv+8XHeW7nPD
kt+zuEZZUFXGEVycbqsLppaDUM5uD1ZJ/5sKKxnXP5qtMrXwS/Xe3a4v99JeEim4
xUDbokvL8b3O4taveBskD+mXjG8uQoXt7KdVgCfiXtQhPOsg+jmRl3cc/uCkp7bl
mwwjZftVqjqMPwsVJBhaf0zKehylO4wRXpGLrebeHz/WBTCWNmjr4vSF1VvMLjJc
6IwcBWmD6immdksRFFD277nStlPtCRXzdze9+XKdsyogmBuCAZEknhI9RnyqxOIY
rfgp6WmOpB/nb6Ud9zDJ8LX/X1m0CrK6tT1v5qMPNKDsfj+FVa4e385RlWKrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/M/gV7nzDLgDFliUdwvosZsF60MwHwYDVR0j
BBgwFoAUFUwbRY0MrH/D1jRPksDrQc5bJTIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHg1d3dkTkZDZ3FFallkZGNGeW9pTEJMVmhLalVaanJWbnF6R1Rwc05K
QUQvMC8xNTRDMUI0NThEMENBQzdGQzNENjM0NEY5MkMwRUI0MUNFNUIyNTMyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE1NEMxQjQ1OEQwQ0FDN0ZD
M0Q2MzQ0RjkyQzBFQjQxQ0U1QjI1MzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R4NXd3ZE5GQ2dxRWpZZGRjRnlvaUxCTFZoS2pVWmpyVm5xekdUcHNOSkFELzAv
MzEzMzM4MmUzMjMxMzkyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKK20AwDQYJKoZIhvcNAQELBQADggEBAFk9tlnM
fMpSifudrLz4+A3gGeTmioRQtLNAwVzFeNr3tpGoT61qDRIr7CSju6nv5XrAfDcw
F/q76yyCqehxvSCNPfLU3f7W7gLTjkSgIzh6cJpX5vlZ920DBblzXXrvwf1eAPNl
f01WQ0ch2FyZRkjKJbvnpd0pLrMTatWruH2h4oQ9qDherD4i74dO0oLE5aESFTju
jvljlBBS1H8QZc5CLU/y9PN5YCWKtR5J/Xk4lxwrmFi14G6tILhmEGIY0pb5f+II
iaWT5efhiF7N92vMZJlb0ulq7T0HYg6vcsXL8GsWKWohrYkZNKpbdOSIgOfznkZe
LuPw8ZVrJeF2iI0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org