Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
File:                     3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa (raw, json)
Hash identifier:          BojLvQsruzOkSF/Rqx//SxqZOYfggTmK67zwqS6UIV8=
Subject key identifier:   02:17:4E:44:9F:04:15:F1:C2:24:68:43:74:A5:6B:41:C7:3E:4A:83
Certificate issuer:       /CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
Certificate serial:       2FCE3EF7135F91B290126F3D975057F00390FC35
Authority key identifier: A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa
Signing time:             Tue 28 Nov 2023 02:10:27 +0000
ROA not before:           Tue 28 Nov 2023 02:05:27 +0000
ROA not after:            Tue 26 Nov 2024 02:10:27 +0000
asID:                     263948
IP address blocks:        138.219.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ce:3e:f7:13:5f:91:b2:90:12:6f:3d:97:50:57:f0:03:90:fc:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1FBC871EB104DDB5E2BB4BC43A63A35148DB820
        Validity
            Not Before: Nov 28 02:05:27 2023 GMT
            Not After : Nov 26 02:10:27 2024 GMT
        Subject: CN=02174E449F0415F1C224684374A56B41C73E4A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:e3:c0:7b:18:ae:8a:6f:3d:38:d4:ae:0b:
                    8a:c7:7f:2d:86:25:63:b5:f9:a7:8f:84:09:da:54:
                    af:76:f2:00:8c:69:04:34:4e:83:bf:91:52:81:59:
                    7e:f7:47:3c:a9:20:da:14:45:90:30:22:14:b7:4f:
                    03:4d:e7:ea:e8:5c:60:b9:d5:c5:1d:1f:2f:09:0a:
                    98:d3:bc:95:b2:f9:37:4c:f1:9c:f6:01:83:5c:50:
                    6a:17:7d:62:eb:7c:7d:69:b6:1c:bb:78:cb:f9:b2:
                    9f:44:19:e4:49:68:20:07:2a:d4:7d:ce:f7:f7:4f:
                    98:2b:37:6c:90:28:23:2a:64:56:e1:b5:6e:52:43:
                    1e:88:19:71:1d:54:24:d7:44:06:70:81:c1:8f:88:
                    4a:1a:1f:c9:a4:8b:cc:a6:07:71:e9:45:2d:b9:af:
                    a2:a1:80:fb:36:3e:fd:15:33:52:5f:cd:41:d8:c6:
                    cc:db:5f:ce:47:a1:df:b2:8e:d3:cc:dc:17:fa:c7:
                    f7:b7:f4:ed:fe:f7:3d:88:63:10:28:dc:5b:9b:3a:
                    c8:37:09:5f:cf:05:b6:a7:ba:1e:14:93:95:8f:4b:
                    7b:b8:14:d7:7f:69:97:89:08:81:92:8b:63:98:dc:
                    cb:db:5f:c8:3b:c0:98:3f:52:52:15:7c:8d:85:93:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:17:4E:44:9F:04:15:F1:C2:24:68:43:74:A5:6B:41:C7:3E:4A:83
            X509v3 Authority Key Identifier:
                keyid:A1:FB:C8:71:EB:10:4D:DB:5E:2B:B4:BC:43:A6:3A:35:14:8D:B8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1FBC871EB104DDB5E2BB4BC43A63A35148DB820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmRKTDQBeGVEDGGyjWi8tVWLXjUTtsjeHmDvZh4RJEiq/0/3133382e3231392e3233362e302f32322d3234203d3e20323633393438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:ea:61:58:c4:8d:21:19:3c:30:5f:ff:af:4a:b2:23:83:b5:
         31:5e:7e:01:2a:6e:40:29:ee:26:4c:84:06:3f:dd:39:85:a0:
         8c:24:04:99:9b:85:e1:5b:eb:27:e1:8a:bb:d7:52:b6:68:6a:
         4a:58:89:bd:00:14:de:61:d0:1d:61:a1:f1:88:02:76:99:2b:
         9e:6f:02:01:72:26:73:94:37:5e:66:e2:82:32:a1:e9:2a:78:
         76:99:09:fc:63:fa:5b:9e:bd:ca:43:64:b8:1f:e6:67:5b:64:
         e9:27:e0:0e:20:22:41:d9:c7:1e:d1:5a:8a:37:27:82:95:18:
         6b:f0:68:d5:b2:bc:df:c7:ae:9f:bd:ee:2c:1c:0a:99:6a:15:
         b6:00:6e:9a:89:37:50:5d:3a:5a:dd:c3:a5:e4:af:95:d8:d5:
         77:18:f0:d2:9d:09:5d:ba:99:13:1d:1d:5d:56:22:a0:71:ed:
         20:3d:f7:2a:99:ae:1a:01:3c:56:be:7b:c0:a7:a7:76:88:e6:
         b8:0f:e6:f3:48:d1:fd:02:f5:01:a0:e0:56:2b:02:64:5d:c5:
         73:fa:0d:1a:20:96:cf:ee:a2:55:89:5f:ab:c3:d6:2f:bc:0f:
         a6:87:3e:f7:08:0b:72:16:43:da:49:bf:b6:7c:ae:e7:50:9b:
         d8:fe:d6:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUL84+9xNfkbKQEm89l1BX8AOQ/DUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFGQkM4NzFFQjEwNEREQjVFMkJCNEJDNDNBNjNBMzUx
NDhEQjgyMDAeFw0yMzExMjgwMjA1MjdaFw0yNDExMjYwMjEwMjdaMDMxMTAvBgNV
BAMTKDAyMTc0RTQ0OUYwNDE1RjFDMjI0Njg0Mzc0QTU2QjQxQzczRTRBODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyUOPAexiuim89ONSuC4rHfy2G
JWO1+aePhAnaVK928gCMaQQ0ToO/kVKBWX73RzypINoURZAwIhS3TwNN5+roXGC5
1cUdHy8JCpjTvJWy+TdM8Zz2AYNcUGoXfWLrfH1pthy7eMv5sp9EGeRJaCAHKtR9
zvf3T5grN2yQKCMqZFbhtW5SQx6IGXEdVCTXRAZwgcGPiEoaH8mki8ymB3HpRS25
r6KhgPs2Pv0VM1JfzUHYxszbX85Hod+yjtPM3Bf6x/e39O3+9z2IYxAo3FubOsg3
CV/PBbanuh4Uk5WPS3u4FNd/aZeJCIGSi2OY3MvbX8g7wJg/UlIVfI2FkymhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAhdORJ8EFfHCJGhDdKVrQcc+SoMwHwYDVR0j
BBgwFoAUofvIcesQTdteK7S8Q6Y6NRSNuCAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRW1SS1REUUJlR1ZFREdHeWpXaTh0VldMWGpVVHRzamVIbUR2Wmg0UkpF
aXEvMC9BMUZCQzg3MUVCMTA0RERCNUUyQkI0QkM0M0E2M0EzNTE0OERCODIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExRkJDODcxRUIxMDREREI1
RTJCQjRCQzQzQTYzQTM1MTQ4REI4MjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VtUktURFFCZUdWRURHR3lqV2k4dFZXTFhqVVR0c2plSG1EdlpoNFJKRWlxLzAv
MzEzMzM4MmUzMjMxMzkyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorb7DANBgkqhkiG9w0BAQsFAAOCAQEAseph
WMSNIRk8MF//r0qyI4O1MV5+ASpuQCnuJkyEBj/dOYWgjCQEmZuF4VvrJ+GKu9dS
tmhqSliJvQAU3mHQHWGh8YgCdpkrnm8CAXImc5Q3XmbigjKh6Sp4dpkJ/GP6W569
ykNkuB/mZ1tk6SfgDiAiQdnHHtFaijcngpUYa/Bo1bK838eun73uLBwKmWoVtgBu
mok3UF06Wt3DpeSvldjVdxjw0p0JXbqZEx0dXVYioHHtID33KpmuGgE8Vr57wKen
dojmuA/m80jR/QL1AaDgVisCZF3Fc/oNGiCWz+6iVYlfq8PWL7wPpoc+9wgLchZD
2km/tnyu51Cb2P7W/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org