Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
File:                     3133382e3230342e36342e302f32322d3234203d3e203533313831.roa (raw, json)
Hash identifier:          BgNpj4ZSHK0KM32hKfIl/VAVnwQwVaK15UkWpbNOK/M=
Subject key identifier:   7C:96:E0:69:F4:C9:D5:B2:97:23:B4:45:FA:15:1A:CD:C8:AB:95:39
Certificate issuer:       /CN=0C1C6ED65AC27E32959512A2404C0C967A731CD8
Certificate serial:       434F50957EBBF7FBEAE38BDBEBA2B559AD0955C5
Authority key identifier: 0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa
Signing time:             Fri 29 Sep 2023 18:09:12 +0000
ROA not before:           Fri 29 Sep 2023 18:04:12 +0000
ROA not after:            Fri 27 Sep 2024 18:09:12 +0000
asID:                     53181
IP address blocks:        138.204.64.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:50:95:7e:bb:f7:fb:ea:e3:8b:db:eb:a2:b5:59:ad:09:55:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C1C6ED65AC27E32959512A2404C0C967A731CD8
        Validity
            Not Before: Sep 29 18:04:12 2023 GMT
            Not After : Sep 27 18:09:12 2024 GMT
        Subject: CN=7C96E069F4C9D5B29723B445FA151ACDC8AB9539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:16:b4:ba:c1:f6:16:53:02:86:24:9c:39:
                    42:a5:54:9c:c7:84:4e:ef:f5:18:12:f3:f8:b7:e4:
                    b9:48:87:c2:75:8f:bc:b1:63:e4:09:d6:8b:d9:72:
                    e6:30:f5:f1:df:42:84:7c:6f:c7:49:97:c7:3f:45:
                    3c:fb:45:c4:f5:2e:57:ee:9b:92:d6:3e:d8:da:62:
                    ad:bf:4b:97:0e:18:48:bf:c2:f7:1f:00:91:50:3c:
                    d8:90:59:f1:84:79:e6:54:ce:2c:8f:98:bf:87:2c:
                    06:e9:69:ca:85:5c:30:90:d2:08:bb:7a:cb:cc:1f:
                    ae:d9:41:0e:1e:e5:78:3f:7f:82:a3:4f:c9:34:d7:
                    30:e7:c9:b6:55:de:ae:4c:b9:cf:1d:2a:00:0a:0a:
                    38:40:99:39:40:af:58:29:bf:cd:4c:45:9d:e0:73:
                    31:3a:98:70:a1:54:3c:d5:8c:db:9b:50:a9:2f:a0:
                    c2:df:37:53:e0:42:1d:dc:84:da:bf:40:d9:93:9c:
                    ad:cf:9f:3a:97:08:2c:9e:38:f0:9b:08:63:de:f9:
                    08:95:c0:82:30:85:ff:c8:8d:3f:71:ed:6f:7a:12:
                    c2:49:84:60:63:36:b0:c0:d1:b7:81:13:03:9d:92:
                    91:25:36:09:d3:1f:b5:00:73:3e:1e:94:e1:3b:cb:
                    07:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:96:E0:69:F4:C9:D5:B2:97:23:B4:45:FA:15:1A:CD:C8:AB:95:39
            X509v3 Authority Key Identifier:
                keyid:0C:1C:6E:D6:5A:C2:7E:32:95:95:12:A2:40:4C:0C:96:7A:73:1C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/0C1C6ED65AC27E32959512A2404C0C967A731CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C1C6ED65AC27E32959512A2404C0C967A731CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/1/3133382e3230342e36342e302f32322d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:7b:2d:a2:c2:de:8c:8b:1d:98:b8:c3:93:99:b5:bb:8d:fb:
         ae:67:9e:62:51:12:99:81:b5:7d:92:fe:27:2a:d6:fd:4e:eb:
         56:7c:fc:91:ef:af:9b:46:b5:4d:9e:bd:21:a9:a2:03:bc:45:
         ee:06:e6:89:45:8a:39:c1:81:f4:a4:2a:e7:e7:d3:b0:59:c4:
         77:27:38:24:81:19:27:24:97:4f:fe:17:5c:5c:58:68:71:16:
         99:f5:b2:f9:53:cc:6e:22:c4:cf:8c:95:45:19:65:09:6d:84:
         25:db:a8:9a:22:7b:09:c7:f6:9a:62:e0:84:fa:4e:37:b1:8f:
         bb:5f:7e:a8:a3:cb:77:39:5b:92:6c:5d:6d:e4:00:6e:0f:ad:
         88:94:9d:73:1a:fc:8a:8e:78:a8:30:89:ea:37:77:d5:d5:eb:
         f3:bc:32:99:c7:37:9b:19:9f:92:bb:47:c2:e0:0b:0e:cd:4c:
         24:44:dd:bd:b1:68:a3:41:da:ce:82:85:cc:4a:6b:a1:8d:0d:
         62:e0:6a:73:1f:37:41:2e:af:c2:2c:fa:fb:b9:64:6d:1c:a5:
         7d:9d:2a:43:3c:f5:1f:0c:1b:fe:f7:b8:95:2b:45:1d:52:41:
         42:4c:79:9e:c7:be:87:37:cd:42:d4:e3:77:65:f5:21:19:0c:
         5f:ed:62:44
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ09QlX679/vq44vb66K1Wa0JVcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMxQzZFRDY1QUMyN0UzMjk1OTUxMkEyNDA0QzBDOTY3
QTczMUNEODAeFw0yMzA5MjkxODA0MTJaFw0yNDA5MjcxODA5MTJaMDMxMTAvBgNV
BAMTKDdDOTZFMDY5RjRDOUQ1QjI5NzIzQjQ0NUZBMTUxQUNEQzhBQjk1MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rRa0usH2FlMChiScOUKlVJzH
hE7v9RgS8/i35LlIh8J1j7yxY+QJ1ovZcuYw9fHfQoR8b8dJl8c/RTz7RcT1Llfu
m5LWPtjaYq2/S5cOGEi/wvcfAJFQPNiQWfGEeeZUziyPmL+HLAbpacqFXDCQ0gi7
esvMH67ZQQ4e5Xg/f4KjT8k01zDnybZV3q5Muc8dKgAKCjhAmTlAr1gpv81MRZ3g
czE6mHChVDzVjNubUKkvoMLfN1PgQh3chNq/QNmTnK3PnzqXCCyeOPCbCGPe+QiV
wIIwhf/IjT9x7W96EsJJhGBjNrDA0beBEwOdkpElNgnTH7UAcz4elOE7ywebAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUfJbgafTJ1bKXI7RF+hUazcirlTkwHwYDVR0j
BBgwFoAUDBxu1lrCfjKVlRKiQEwMlnpzHNgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVV5NGF3Q202QUhBUk1kYllFMVo3aHNTaXlRNnF6UU5OQ2lLczZ4RHBO
ZDgvMS8wQzFDNkVENjVBQzI3RTMyOTU5NTEyQTI0MDRDMEM5NjdBNzMxQ0Q4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDMUM2RUQ2NUFDMjdFMzI5
NTk1MTJBMjQwNEMwQzk2N0E3MzFDRDguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVeTRhd0NtNkFIQVJNZGJZRTFaN2hzU2l5UTZxelFOTkNpS3M2eERwTmQ4LzEv
MzEzMzM4MmUzMjMwMzQyZTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCisxAMA0GCSqGSIb3DQEBCwUAA4IBAQAuey2iwt6M
ix2YuMOTmbW7jfuuZ55iURKZgbV9kv4nKtb9TutWfPyR76+bRrVNnr0hqaIDvEXu
BuaJRYo5wYH0pCrn59OwWcR3JzgkgRknJJdP/hdcXFhocRaZ9bL5U8xuIsTPjJVF
GWUJbYQl26iaInsJx/aaYuCE+k43sY+7X36oo8t3OVuSbF1t5ABuD62IlJ1zGvyK
jnioMInqN3fV1evzvDKZxzebGZ+Su0fC4AsOzUwkRN29sWijQdrOgoXMSmuhjQ1i
4GpzHzdBLq/CLPr7uWRtHKV9nSpDPPUfDBv+97iVK0UdUkFCTHmex76HN81C1ON3
ZfUhGQxf7WJE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org