Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3332203d3e20323633393038.roa
File:                     3133382e3230342e3139322e302f32322d3332203d3e20323633393038.roa (raw, json)
Hash identifier:          Ktou7AdNFqM6fH5fkmtOZrNVJKiGf8N4MZjW2BzOkDc=
Subject key identifier:   75:A1:9C:B2:43:C9:6E:C3:88:42:85:53:54:D7:D4:98:EC:CF:E6:68
Certificate issuer:       /CN=63C8DF9A42BFC9041F8CD50F2F30DD8772717C1F
Certificate serial:       43479A9D45DD47CD535E9ED4305D3EE231AF735F
Authority key identifier: 63:C8:DF:9A:42:BF:C9:04:1F:8C:D5:0F:2F:30:DD:87:72:71:7C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63C8DF9A42BFC9041F8CD50F2F30DD8772717C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3332203d3e20323633393038.roa
Signing time:             Mon 06 May 2024 17:18:55 +0000
ROA not before:           Mon 06 May 2024 17:13:55 +0000
ROA not after:            Mon 05 May 2025 17:18:55 +0000
asID:                     263908
IP address blocks:        138.204.192.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:47:9a:9d:45:dd:47:cd:53:5e:9e:d4:30:5d:3e:e2:31:af:73:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63C8DF9A42BFC9041F8CD50F2F30DD8772717C1F
        Validity
            Not Before: May  6 17:13:55 2024 GMT
            Not After : May  5 17:18:55 2025 GMT
        Subject: CN=75A19CB243C96EC38842855354D7D498ECCFE668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:4e:5e:77:4a:da:87:42:df:0c:31:c0:e3:
                    f0:87:39:4d:30:d1:a0:81:88:b6:3b:e4:fb:d6:16:
                    8c:9d:16:0e:c2:79:82:23:c9:1c:de:dd:2b:52:36:
                    5d:20:bb:b4:e8:12:b4:f7:7b:78:63:7d:4c:d0:63:
                    38:62:e5:0a:e1:a1:f0:e4:2e:a0:8a:b9:c1:f3:de:
                    61:ea:da:98:90:e3:68:2a:9e:4b:0d:63:b2:b8:69:
                    4f:9b:ae:d5:e1:51:7c:f3:a7:ac:bf:f5:b7:61:11:
                    b3:45:0e:92:38:f3:9d:8f:d4:24:be:8a:61:94:a4:
                    81:73:1f:d1:ce:f9:41:69:bd:e8:04:5e:4c:a4:d3:
                    46:97:23:d0:93:d9:f5:b9:07:95:bc:29:cc:03:d8:
                    3d:c9:7b:2b:6e:a7:49:93:46:6d:5b:32:f3:d0:d3:
                    de:8c:c2:50:35:b4:82:66:0d:fd:4f:b5:71:1a:e3:
                    7a:f8:8a:80:e6:45:08:12:a6:5c:de:b3:a7:fd:46:
                    c1:c2:0b:45:8f:8e:2f:81:c3:54:71:11:15:42:89:
                    0b:45:44:e1:a0:7c:47:41:17:c1:f6:be:df:92:16:
                    a9:98:e6:a3:7c:f3:bd:e2:89:66:8e:88:48:49:9f:
                    ac:fd:26:93:9f:ad:75:1c:9f:0b:20:61:9a:12:f1:
                    4e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A1:9C:B2:43:C9:6E:C3:88:42:85:53:54:D7:D4:98:EC:CF:E6:68
            X509v3 Authority Key Identifier:
                keyid:63:C8:DF:9A:42:BF:C9:04:1F:8C:D5:0F:2F:30:DD:87:72:71:7C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/63C8DF9A42BFC9041F8CD50F2F30DD8772717C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63C8DF9A42BFC9041F8CD50F2F30DD8772717C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB8u8Lz3WxiB9RCAU9qFL1JS3DBbq89VmiNA1HT9rgZj/0/3133382e3230342e3139322e302f32322d3332203d3e20323633393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:b5:ec:e0:88:4a:88:b9:65:cc:41:1d:a4:cf:bd:4b:85:95:
         b2:5c:a1:89:e2:bd:8d:0e:6c:0a:9f:92:ae:73:a6:3d:c5:7c:
         eb:5a:ac:1b:af:be:f3:7b:55:11:de:a5:c7:fc:e8:fe:7d:77:
         58:09:73:ba:81:1b:ab:2b:01:1c:60:a8:15:37:73:4c:43:9f:
         e7:a8:9c:94:77:d6:1b:3a:7b:24:49:1f:81:83:d3:d1:91:ab:
         a7:74:4b:ef:5b:c6:a6:15:a1:34:28:a9:12:3a:fd:85:13:5d:
         cb:76:c5:46:2c:72:f4:b2:5a:a9:15:4b:61:8d:06:e5:39:fc:
         39:d4:a0:f4:9d:8e:21:5f:53:9e:b5:f1:06:b5:ae:99:e0:78:
         8a:e4:90:83:79:3f:c8:8b:e8:d7:56:fb:20:10:0a:8c:05:9b:
         02:40:b7:fc:aa:11:7d:b1:00:cf:62:2c:7d:11:e4:2b:2b:86:
         5a:c9:5d:98:ad:02:5c:ad:c6:c4:35:36:a6:95:8d:bc:0a:a8:
         e8:db:bf:e7:74:b0:65:39:94:9e:a8:7e:de:ee:1c:1a:55:d7:
         19:50:3a:05:fe:5b:1a:2a:57:4e:dd:27:17:f6:fb:c7:55:07:
         3b:d5:80:04:d6:ac:05:d9:2d:bd:1c:7b:c2:74:45:5b:6c:7b:
         a5:64:5b:57
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ0eanUXdR81TXp7UMF0+4jGvc18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNDOERGOUE0MkJGQzkwNDFGOENENTBGMkYzMEREODc3
MjcxN0MxRjAeFw0yNDA1MDYxNzEzNTVaFw0yNTA1MDUxNzE4NTVaMDMxMTAvBgNV
BAMTKDc1QTE5Q0IyNDNDOTZFQzM4ODQyODU1MzU0RDdENDk4RUNDRkU2NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChbU5ed0rah0LfDDHA4/CHOU0w
0aCBiLY75PvWFoydFg7CeYIjyRze3StSNl0gu7ToErT3e3hjfUzQYzhi5QrhofDk
LqCKucHz3mHq2piQ42gqnksNY7K4aU+brtXhUXzzp6y/9bdhEbNFDpI4852P1CS+
imGUpIFzH9HO+UFpvegEXkyk00aXI9CT2fW5B5W8KcwD2D3Jeytup0mTRm1bMvPQ
096MwlA1tIJmDf1PtXEa43r4ioDmRQgSplzes6f9RsHCC0WPji+Bw1RxERVCiQtF
ROGgfEdBF8H2vt+SFqmY5qN8873iiWaOiEhJn6z9JpOfrXUcnwsgYZoS8U7dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdaGcskPJbsOIQoVTVNfUmOzP5mgwHwYDVR0j
BBgwFoAUY8jfmkK/yQQfjNUPLzDdh3JxfB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkI4dThMejNXeGlCOVJDQVU5cUZMMUpTM0RCYnE4OVZtaU5BMUhUOXJn
WmovMC82M0M4REY5QTQyQkZDOTA0MUY4Q0Q1MEYyRjMwREQ4NzcyNzE3QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzQzhERjlBNDJCRkM5MDQx
RjhDRDUwRjJGMzBERDg3NzI3MTdDMUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZCOHU4THozV3hpQjlSQ0FVOXFGTDFKUzNEQmJxODlWbWlOQTFIVDlyZ1pqLzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzkzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzMzM5MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorMwDANBgkqhkiG9w0BAQsFAAOCAQEAn7Xs
4IhKiLllzEEdpM+9S4WVslyhieK9jQ5sCp+SrnOmPcV861qsG6++83tVEd6lx/zo
/n13WAlzuoEbqysBHGCoFTdzTEOf56iclHfWGzp7JEkfgYPT0ZGrp3RL71vGphWh
NCipEjr9hRNdy3bFRixy9LJaqRVLYY0G5Tn8OdSg9J2OIV9TnrXxBrWumeB4iuSQ
g3k/yIvo11b7IBAKjAWbAkC3/KoRfbEAz2IsfRHkKyuGWsldmK0CXK3GxDU2ppWN
vAqo6Nu/53SwZTmUnqh+3u4cGlXXGVA6Bf5bGipXTt0nF/b7x1UHO9WABNasBdkt
vRx7wnRFW2x7pWRbVw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:24 2025 by rpki-client