Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa (raw, json)
Hash identifier:          xbRnt6i44J/7icAqmvbUTIARq+wP5TLywfH04+xccEw=
Subject key identifier:   FF:00:0D:02:C3:9D:C5:A9:21:9F:EA:6D:94:6A:B0:21:CD:EE:B1:0B
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       7A6A048BF956CD8AA3BCBF9D00770D366C6F97EA
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:13 +0000
ROA not before:           Thu 23 Nov 2023 20:06:13 +0000
ROA not after:            Thu 21 Nov 2024 20:11:13 +0000
asID:                     263384
IP address blocks:        138.185.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:6a:04:8b:f9:56:cd:8a:a3:bc:bf:9d:00:77:0d:36:6c:6f:97:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:13 2023 GMT
            Not After : Nov 21 20:11:13 2024 GMT
        Subject: CN=FF000D02C39DC5A9219FEA6D946AB021CDEEB10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c5:98:df:68:7e:20:f7:bd:68:d6:75:d2:19:
                    ce:2f:59:50:e0:b6:9f:18:28:d3:7c:0e:ab:7c:66:
                    9c:5c:5b:23:08:6f:29:aa:7b:f9:0f:6d:28:14:69:
                    96:2e:4f:60:32:b7:52:01:9a:c9:59:b4:eb:6d:de:
                    c6:9a:52:a4:85:81:6b:55:fe:e7:40:aa:fd:78:bd:
                    0b:fe:74:cf:6a:68:dc:ed:5e:29:f6:63:27:1a:97:
                    54:c7:7a:7d:92:04:d8:5d:62:2a:1d:a0:f4:71:0e:
                    b9:ee:a7:81:b4:14:a2:43:59:4e:e3:bb:8b:93:cc:
                    22:cd:95:d1:03:00:67:45:94:4f:a9:c1:a3:89:cc:
                    a6:3f:8e:29:63:4b:ec:06:f4:3f:80:e6:c7:96:e3:
                    bf:ca:e5:84:93:5a:71:17:64:55:c7:43:ed:ee:87:
                    88:fd:54:69:59:3b:18:e7:b2:73:a9:20:8a:86:08:
                    91:04:60:25:8b:0f:75:28:04:4f:80:5d:12:0a:30:
                    6a:c4:b0:16:b8:b2:c4:f1:d3:45:83:c3:7a:58:ed:
                    1c:92:89:7b:f5:5a:f2:66:c2:10:78:b0:c9:96:ee:
                    88:f9:0d:3e:ad:1d:62:2d:be:f5:81:86:e6:7f:66:
                    31:bf:20:07:9a:08:ac:35:c0:35:d0:e0:f1:7c:10:
                    d2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:00:0D:02:C3:9D:C5:A9:21:9F:EA:6D:94:6A:B0:21:CD:EE:B1:0B
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32322d3232203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:3f:13:a7:96:6f:f7:6a:4d:e6:f8:85:2b:5d:eb:aa:08:
         5b:18:97:42:29:18:01:91:20:02:d6:9f:61:03:2a:2d:73:22:
         66:c0:ae:48:34:0d:c2:c2:21:51:cf:69:da:8c:2c:8d:bc:1b:
         84:c0:0e:09:29:26:20:cb:fd:eb:99:7a:4a:f5:fc:f1:dc:f9:
         62:a5:54:96:7b:a3:ec:0a:1a:f1:47:77:0d:dd:0d:41:7e:a4:
         04:03:4a:ee:24:aa:02:2e:a9:ba:06:57:cf:b8:a2:04:90:f3:
         84:37:ba:58:32:5a:ca:23:96:7e:af:3e:94:1f:39:bc:21:b2:
         0e:92:18:06:25:2e:03:86:53:71:83:00:a6:82:4e:7a:11:f3:
         c1:5a:81:30:fc:86:65:8b:04:2d:7f:01:ee:c9:df:dd:a9:02:
         fe:ac:e2:f5:ee:ba:61:0b:aa:36:03:9f:40:b0:e2:28:3d:4c:
         33:c6:b7:81:ca:29:02:aa:f6:78:d1:22:eb:75:2c:92:3a:ec:
         e1:43:9e:fb:37:31:3b:c2:5a:2b:62:7e:6a:28:10:b3:06:58:
         0b:ce:75:83:08:76:3f:3c:ac:62:c8:51:c0:33:0f:ea:fe:a2:
         db:95:ba:01:1a:09:37:8b:c1:fd:83:5c:cd:d3:a9:2e:ab:96:
         ad:bd:bb:49
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUemoEi/lWzYqjvL+dAHcNNmxvl+owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwNjlFOEU2ODc1OUQ3RTkyQ0E3MDcxMTYxOUVBNERD
NEUyNzcyMTAeFw0yMzExMjMyMDA2MTNaFw0yNDExMjEyMDExMTNaMDMxMTAvBgNV
BAMTKEZGMDAwRDAyQzM5REM1QTkyMTlGRUE2RDk0NkFCMDIxQ0RFRUIxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xZjfaH4g971o1nXSGc4vWVDg
tp8YKNN8Dqt8ZpxcWyMIbymqe/kPbSgUaZYuT2Ayt1IBmslZtOtt3saaUqSFgWtV
/udAqv14vQv+dM9qaNztXin2Yycal1THen2SBNhdYiodoPRxDrnup4G0FKJDWU7j
u4uTzCLNldEDAGdFlE+pwaOJzKY/jiljS+wG9D+A5seW47/K5YSTWnEXZFXHQ+3u
h4j9VGlZOxjnsnOpIIqGCJEEYCWLD3UoBE+AXRIKMGrEsBa4ssTx00WDw3pY7RyS
iXv1WvJmwhB4sMmW7oj5DT6tHWItvvWBhuZ/ZjG/IAeaCKw1wDXQ4PF8ENLfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/wANAsOdxakhn+ptlGqwIc3usQswHwYDVR0j
BBgwFoAUQgaejmh1nX6SynBxFhnqTcTidyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC80MjA2OUU4RTY4NzU5RDdFOTJDQTcwNzExNjE5RUE0REM0RTI3NzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMDY5RThFNjg3NTlEN0U5
MkNBNzA3MTE2MTlFQTREQzRFMjc3MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAv
MzEzMzM4MmUzMTM4MzUyZTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzMzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuSgwDQYJKoZIhvcNAQELBQADggEBAFt6PxOn
lm/3ak3m+IUrXeuqCFsYl0IpGAGRIALWn2EDKi1zImbArkg0DcLCIVHPadqMLI28
G4TADgkpJiDL/euZekr1/PHc+WKlVJZ7o+wKGvFHdw3dDUF+pAQDSu4kqgIuqboG
V8+4ogSQ84Q3ulgyWsojln6vPpQfObwhsg6SGAYlLgOGU3GDAKaCTnoR88FagTD8
hmWLBC1/Ae7J392pAv6s4vXuumELqjYDn0Cw4ig9TDPGt4HKKQKq9njRIut1LJI6
7OFDnvs3MTvCWitifmooELMGWAvOdYMIdj88rGLIUcAzD+r+otuVugEaCTeLwf2D
XM3TqS6rlq29u0k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org