Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139342e302f32342d3234203d3e20323633393336.roa
File:                     3133382e3231392e3139342e302f32342d3234203d3e20323633393336.roa (raw, json)
Hash identifier:          q+FeObtAnoJyAB/zfi01tll0+F3CbZje0ADjsjVSOjg=
Subject key identifier:   AD:FE:CB:17:84:DC:97:C6:33:04:91:46:91:48:C1:50:12:7D:10:F0
Certificate issuer:       /CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
Certificate serial:       3592F4CB9ABDE96D39C3A69D408B7315998CAC9A
Authority key identifier: 39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139342e302f32342d3234203d3e20323633393336.roa
Signing time:             Fri 13 Oct 2023 17:10:11 +0000
ROA not before:           Fri 13 Oct 2023 17:05:11 +0000
ROA not after:            Fri 11 Oct 2024 17:10:11 +0000
asID:                     263936
IP address blocks:        138.219.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:92:f4:cb:9a:bd:e9:6d:39:c3:a6:9d:40:8b:73:15:99:8c:ac:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391CEA542A70D11AAAF4D9ACC5C14A2237B8C040
        Validity
            Not Before: Oct 13 17:05:11 2023 GMT
            Not After : Oct 11 17:10:11 2024 GMT
        Subject: CN=ADFECB1784DC97C6330491469148C150127D10F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:89:72:8d:b3:80:74:1f:09:65:9a:78:ea:
                    79:2b:43:b4:dd:d2:be:f3:bd:f4:55:17:b3:6e:4f:
                    6b:2a:78:4d:12:9f:96:03:c9:d9:b6:ec:d2:c8:96:
                    3b:4a:ce:58:04:64:db:6e:1e:09:b5:46:dd:65:71:
                    66:30:39:07:a0:55:2e:03:9e:c2:2f:23:92:d9:fd:
                    28:8b:12:1b:d5:76:fb:72:21:6b:cd:62:ab:dd:78:
                    c5:15:a1:5a:32:6f:00:aa:08:28:56:68:eb:a1:33:
                    e7:67:4c:ba:ce:61:d2:7d:8f:f9:a2:27:e8:82:f1:
                    5f:e5:9e:08:3e:7d:7e:de:65:86:43:8f:26:34:b3:
                    aa:bb:e8:70:72:c4:f7:ab:5d:70:1f:76:30:8a:d2:
                    af:af:23:fc:75:4f:b2:85:1f:6b:4e:55:cc:8a:4a:
                    33:1a:58:3f:c9:98:e2:6a:72:dc:20:3b:6e:db:0c:
                    1f:69:00:19:a6:c2:11:fd:cc:9b:7a:08:65:af:be:
                    8a:dc:b7:08:43:91:42:44:57:2d:c7:4e:26:fb:18:
                    37:eb:2f:36:01:16:06:a1:90:b5:11:ca:30:51:fa:
                    f9:f7:52:33:ca:94:98:71:c9:62:a8:65:0c:87:75:
                    59:ac:11:6f:51:e0:91:5a:39:b8:bb:87:c8:a1:11:
                    0b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FE:CB:17:84:DC:97:C6:33:04:91:46:91:48:C1:50:12:7D:10:F0
            X509v3 Authority Key Identifier:
                keyid:39:1C:EA:54:2A:70:D1:1A:AA:F4:D9:AC:C5:C1:4A:22:37:B8:C0:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391CEA542A70D11AAAF4D9ACC5C14A2237B8C040.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133382e3231392e3139342e302f32342d3234203d3e20323633393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:ff:68:84:9a:74:6e:2a:f8:35:49:9b:d3:cb:09:a2:80:d4:
         08:34:55:f4:22:75:02:eb:63:91:5a:cf:b7:20:62:f0:d9:b9:
         76:eb:75:38:7d:09:8d:73:02:38:d8:e5:b8:8b:d1:c6:dd:61:
         d1:2d:08:29:1c:dd:dc:9c:1e:d9:ae:6a:2b:b0:af:f5:67:61:
         02:2c:e5:f2:82:a6:6d:43:d8:c6:80:7f:bc:d2:b8:e7:5d:25:
         3f:4a:90:17:f6:66:2c:fb:70:ba:6c:5b:75:f9:d2:44:c2:2e:
         cd:aa:84:f1:bf:62:59:cd:1c:66:13:2c:10:a6:ff:b7:e7:de:
         b2:fa:04:50:46:80:61:e6:d2:e9:c1:d4:1b:1f:7c:8f:03:75:
         23:98:5f:f5:7f:a3:99:d2:f9:3b:fc:b1:95:2d:8e:e1:f7:a3:
         d5:76:cb:ca:96:03:41:d9:2e:d4:7d:6f:40:44:b9:f3:63:3c:
         d1:cf:08:25:1e:c8:b8:c7:b0:ea:c8:d9:6b:03:c3:e5:c1:04:
         b5:e1:ac:ab:d1:10:f6:56:5e:af:33:0b:98:bb:c3:ff:4e:ad:
         3d:e7:18:30:84:24:27:a4:e1:d1:a5:f4:ce:31:a1:68:a8:4e:
         12:df:16:8e:03:36:e5:b0:ab:64:0b:d6:10:9c:96:e0:1a:f2:
         b5:ff:45:ea
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNZL0y5q96W05w6adQItzFZmMrJowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxQ0VBNTQyQTcwRDExQUFBRjREOUFDQzVDMTRBMjIz
N0I4QzA0MDAeFw0yMzEwMTMxNzA1MTFaFw0yNDEwMTExNzEwMTFaMDMxMTAvBgNV
BAMTKEFERkVDQjE3ODREQzk3QzYzMzA0OTE0NjkxNDhDMTUwMTI3RDEwRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIs4lyjbOAdB8JZZp46nkrQ7Td
0r7zvfRVF7NuT2sqeE0Sn5YDydm27NLIljtKzlgEZNtuHgm1Rt1lcWYwOQegVS4D
nsIvI5LZ/SiLEhvVdvtyIWvNYqvdeMUVoVoybwCqCChWaOuhM+dnTLrOYdJ9j/mi
J+iC8V/lngg+fX7eZYZDjyY0s6q76HByxPerXXAfdjCK0q+vI/x1T7KFH2tOVcyK
SjMaWD/JmOJqctwgO27bDB9pABmmwhH9zJt6CGWvvorctwhDkUJEVy3HTib7GDfr
LzYBFgahkLURyjBR+vn3UjPKlJhxyWKoZQyHdVmsEW9R4JFaObi7h8ihEQsXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUrf7LF4Tcl8YzBJFGkUjBUBJ9EPAwHwYDVR0j
BBgwFoAUORzqVCpw0Rqq9NmsxcFKIje4wEAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjF5SkxKV2U1MmJadXNMUjlHdWpucXhUQmNvUlVMcURKOHl2Yjg1Q2Z1
Y1gvMC8zOTFDRUE1NDJBNzBEMTFBQUFGNEQ5QUNDNUMxNEEyMjM3QjhDMDQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MUNFQTU0MkE3MEQxMUFB
QUY0RDlBQ0M1QzE0QTIyMzdCOEMwNDAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0YxeUpMSldlNTJiWnVzTFI5R3VqbnF4VEJjb1JVTHFESjh5dmI4NUNmdWNYLzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrbwjANBgkqhkiG9w0BAQsFAAOCAQEAj/9o
hJp0bir4NUmb08sJooDUCDRV9CJ1AutjkVrPtyBi8Nm5dut1OH0JjXMCONjluIvR
xt1h0S0IKRzd3Jwe2a5qK7Cv9WdhAizl8oKmbUPYxoB/vNK4510lP0qQF/ZmLPtw
umxbdfnSRMIuzaqE8b9iWc0cZhMsEKb/t+fesvoEUEaAYebS6cHUGx98jwN1I5hf
9X+jmdL5O/yxlS2O4fej1XbLypYDQdku1H1vQES582M80c8IJR7IuMew6sjZawPD
5cEEteGsq9EQ9lZerzMLmLvD/06tPecYMIQkJ6Th0aX0zjGhaKhOEt8WjgM25bCr
ZAvWEJyW4Brytf9F6g==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:12 2025 by rpki-client