Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32332d3233203d3e20323632343933.roa
File:                     3133382e3235352e3231362e302f32332d3233203d3e20323632343933.roa (raw, json)
Hash identifier:          KqBe2FeQZJukMEan85CEAJ7tro46A8DCVHqb6PwpdaQ=
Subject key identifier:   A1:08:C2:05:EE:3D:02:B8:3F:C4:4E:C2:A2:69:41:73:3E:22:26:E0
Certificate issuer:       /CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
Certificate serial:       0F2334E3A8AB79F318D8A133BBB7CF1BECE121D7
Authority key identifier: 6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32332d3233203d3e20323632343933.roa
Signing time:             Mon 08 Apr 2024 20:10:41 +0000
ROA not before:           Mon 08 Apr 2024 20:05:41 +0000
ROA not after:            Mon 07 Apr 2025 20:10:41 +0000
asID:                     262493
IP address blocks:        138.255.216.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:23:34:e3:a8:ab:79:f3:18:d8:a1:33:bb:b7:cf:1b:ec:e1:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE
        Validity
            Not Before: Apr  8 20:05:41 2024 GMT
            Not After : Apr  7 20:10:41 2025 GMT
        Subject: CN=A108C205EE3D02B83FC44EC2A26941733E2226E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:51:d2:2a:7e:89:ae:f8:dc:6e:30:7f:bc:
                    c3:83:f1:d0:26:30:34:3c:84:d2:97:d4:b7:2c:5d:
                    e2:0a:4a:d8:3b:e3:86:60:4a:17:b5:b7:86:99:08:
                    31:58:50:79:1d:e5:4a:b0:f7:a7:d3:d4:19:f0:0e:
                    89:91:69:10:e5:c0:eb:70:af:10:87:74:66:c6:7c:
                    96:01:ca:f3:f2:1c:a3:8a:f8:1c:2f:cb:f6:53:a7:
                    da:95:5d:65:f7:7c:f1:8f:4e:69:c5:f2:e2:2f:b0:
                    b6:31:0f:fc:32:c3:e1:bd:f2:e2:a6:bd:be:6d:2e:
                    4f:2a:63:04:15:01:95:f2:d8:1c:e3:dd:a7:21:e9:
                    a8:30:91:4c:1c:0a:68:85:00:ad:ac:35:f2:7d:26:
                    2c:cd:b5:86:be:30:73:58:50:4f:ed:95:bb:75:31:
                    17:09:4b:92:09:e2:a1:64:cd:fb:bb:cf:5b:54:ea:
                    09:41:51:94:95:99:32:1d:a7:1c:03:4a:79:17:85:
                    49:cd:89:2e:13:15:98:9f:46:18:08:8e:11:4b:78:
                    25:87:bb:0c:ac:f8:d0:01:b5:ef:e7:ae:91:a9:42:
                    d6:b5:2a:9d:d2:e5:46:c2:b3:a7:48:24:dd:31:7a:
                    91:f6:a1:f7:57:73:4c:38:c0:c3:3e:01:9f:59:aa:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:08:C2:05:EE:3D:02:B8:3F:C4:4E:C2:A2:69:41:73:3E:22:26:E0
            X509v3 Authority Key Identifier:
                keyid:6A:63:DC:AA:5A:F1:11:9C:C8:B4:CD:AE:6A:72:2E:0A:28:DD:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A63DCAA5AF1119CC8B4CDAE6A722E0A28DDC1CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/1/3133382e3235352e3231362e302f32332d3233203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:b2:f8:b8:e5:68:2c:cd:38:fb:d8:c4:7f:1b:79:91:99:
         f0:a0:f4:f1:df:6f:62:ef:b6:47:d9:3a:66:8b:2d:94:e8:f5:
         9f:c1:63:2f:73:e7:8b:8e:4e:28:31:55:8b:d9:00:64:01:e1:
         77:f0:79:2c:ff:8c:79:39:d5:3a:56:f5:97:0a:30:3a:e3:70:
         7e:3d:5d:75:17:31:fa:db:80:e0:07:30:84:70:f9:9e:0e:31:
         d0:9b:56:26:00:f5:73:69:1f:22:69:62:a6:6a:3d:8b:3a:33:
         5a:eb:ce:49:63:e7:33:a3:f6:32:3b:be:d5:55:6b:18:c7:d4:
         cc:55:7c:09:14:91:bd:e5:25:1c:3a:ff:3a:d6:1d:01:27:96:
         fc:c0:5f:92:4d:3a:e9:d2:d0:b6:f5:61:4e:29:ef:f4:9f:6d:
         e7:be:6f:71:18:bf:b4:ef:0d:7d:df:9b:21:ed:f2:a1:b2:7c:
         4c:fc:39:57:8e:32:64:41:e1:73:48:ac:cd:21:3f:d3:55:3a:
         63:fd:84:d7:17:0c:5a:ee:cd:d2:cf:ad:92:3c:30:24:75:84:
         60:6c:0f:c7:bb:24:ae:fd:0d:29:b6:02:bf:9b:7b:10:f6:eb:
         3f:fb:f5:b8:b1:97:c2:24:b6:7e:58:fe:33:e4:1a:07:22:ef:
         50:69:7b:70
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDyM046irefMY2KEzu7fPG+zhIdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkE2M0RDQUE1QUYxMTE5Q0M4QjRDREFFNkE3MjJFMEEy
OEREQzFDRTAeFw0yNDA0MDgyMDA1NDFaFw0yNTA0MDcyMDEwNDFaMDMxMTAvBgNV
BAMTKEExMDhDMjA1RUUzRDAyQjgzRkM0NEVDMkEyNjk0MTczM0UyMjI2RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtPlHSKn6JrvjcbjB/vMOD8dAm
MDQ8hNKX1LcsXeIKStg744ZgShe1t4aZCDFYUHkd5Uqw96fT1BnwDomRaRDlwOtw
rxCHdGbGfJYByvPyHKOK+Bwvy/ZTp9qVXWX3fPGPTmnF8uIvsLYxD/wyw+G98uKm
vb5tLk8qYwQVAZXy2Bzj3ach6agwkUwcCmiFAK2sNfJ9JizNtYa+MHNYUE/tlbt1
MRcJS5IJ4qFkzfu7z1tU6glBUZSVmTIdpxwDSnkXhUnNiS4TFZifRhgIjhFLeCWH
uwys+NABte/nrpGpQta1Kp3S5UbCs6dIJN0xepH2ofdXc0w4wMM+AZ9ZqiqBAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUoQjCBe49Arg/xE7ComlBcz4iJuAwHwYDVR0j
BBgwFoAUamPcqlrxEZzItM2uanIuCijdwc4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRU1QM3htYjVNU1ZnYW1ySml6c0IzYlBSOXdjTURpOVJuZHJ2cFloaHNR
ZDQvMS82QTYzRENBQTVBRjExMTlDQzhCNENEQUU2QTcyMkUwQTI4RERDMUNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBNjNEQ0FBNUFGMTExOUND
OEI0Q0RBRTZBNzIyRTBBMjhEREMxQ0UuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VNUDN4bWI1TVNWZ2FtckppenNCM2JQUjl3Y01EaTlSbmRydnBZaGhzUWQ0LzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzEzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/2DANBgkqhkiG9w0BAQsFAAOCAQEADE2y
+LjlaCzNOPvYxH8beZGZ8KD08d9vYu+2R9k6ZostlOj1n8FjL3Pni45OKDFVi9kA
ZAHhd/B5LP+MeTnVOlb1lwowOuNwfj1ddRcx+tuA4AcwhHD5ng4x0JtWJgD1c2kf
Imlipmo9izozWuvOSWPnM6P2Mju+1VVrGMfUzFV8CRSRveUlHDr/OtYdASeW/MBf
kk066dLQtvVhTinv9J9t575vcRi/tO8Nfd+bIe3yobJ8TPw5V44yZEHhc0iszSE/
01U6Y/2E1xcMWu7N0s+tkjwwJHWEYGwPx7skrv0NKbYCv5t7EPbrP/v1uLGXwiS2
flj+M+QaByLvUGl7cA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 14:16:43 2025 by rpki-client