Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa
File:                     3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa (raw, json)
Hash identifier:          aB/s2ewVJFC4CELgkAaLaF6G7fJjHXEIm2u41hqnRCo=
Subject key identifier:   02:14:70:64:84:D9:49:51:EE:13:31:E8:EC:7C:87:48:C8:80:2C:E6
Certificate issuer:       /CN=42069E8E68759D7E92CA70711619EA4DC4E27721
Certificate serial:       7C88EFB2D3FFAA72FE6B5693A0F07D66E1327E9B
Authority key identifier: 42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa
Signing time:             Thu 23 Nov 2023 20:11:11 +0000
ROA not before:           Thu 23 Nov 2023 20:06:11 +0000
ROA not after:            Thu 21 Nov 2024 20:11:11 +0000
asID:                     263384
IP address blocks:        138.185.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:88:ef:b2:d3:ff:aa:72:fe:6b:56:93:a0:f0:7d:66:e1:32:7e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42069E8E68759D7E92CA70711619EA4DC4E27721
        Validity
            Not Before: Nov 23 20:06:11 2023 GMT
            Not After : Nov 21 20:11:11 2024 GMT
        Subject: CN=0214706484D94951EE1331E8EC7C8748C8802CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:93:0e:3a:01:3a:ec:56:5a:3f:73:95:67:
                    6e:46:d7:88:19:90:d1:6b:db:9c:00:07:e3:eb:51:
                    50:9c:76:57:da:ff:62:b6:21:b5:2e:71:aa:19:cb:
                    48:79:d2:93:1c:e4:1e:b0:17:b3:ff:89:83:e9:ea:
                    0b:00:06:92:1d:c9:15:97:9f:f4:b1:3c:6e:90:2a:
                    6e:20:fc:5b:43:0f:7e:8a:8f:df:44:50:dc:48:6c:
                    a4:a0:fd:75:e4:49:8f:c4:dd:0f:1b:75:72:e6:7f:
                    6b:43:72:4e:6a:11:fa:b7:c6:c9:7e:66:b3:a2:ae:
                    ed:b5:cb:b2:74:d2:7c:50:59:a1:17:40:03:27:0d:
                    49:2f:73:e1:9b:e7:11:85:3b:de:0a:01:47:c1:55:
                    68:3c:95:4a:00:60:99:66:3c:d6:3a:cf:06:fe:29:
                    d8:fc:31:59:de:99:3e:6b:28:9e:82:66:4c:1a:79:
                    9d:0b:37:88:f2:dd:b8:4c:76:c9:1e:df:0d:67:4f:
                    97:1a:4a:06:6f:f6:e9:7f:fb:44:0b:f0:80:20:df:
                    6d:23:c1:ee:1b:cd:49:1e:f1:45:95:43:96:19:b6:
                    82:da:81:15:22:28:5c:10:4b:e0:62:e7:8e:66:db:
                    5e:e6:47:7a:2d:ee:8b:ed:d2:c7:55:08:46:55:e3:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:70:64:84:D9:49:51:EE:13:31:E8:EC:7C:87:48:C8:80:2C:E6
            X509v3 Authority Key Identifier:
                keyid:42:06:9E:8E:68:75:9D:7E:92:CA:70:71:16:19:EA:4D:C4:E2:77:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/42069E8E68759D7E92CA70711619EA4DC4E27721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42069E8E68759D7E92CA70711619EA4DC4E27721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FPWW7c2Q9CTCBE6rPJXrKRppeBY1YrNSSEyhVmPm9HA1/0/3133382e3138352e34302e302f32342d3234203d3e20323633333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:38:78:ed:c8:b4:f3:b2:50:86:c4:86:9c:08:57:b2:c3:cb:
         17:95:52:90:fc:a8:8d:df:3f:96:19:76:0d:ec:b7:50:f7:fb:
         bf:ea:65:09:5a:93:59:51:5d:7e:3f:32:de:32:dd:e0:4b:94:
         72:75:1e:49:1f:f9:a1:9a:c8:5c:19:fb:28:ca:56:5c:ea:35:
         84:ec:90:9d:da:2f:7c:f6:aa:27:c7:92:19:73:bb:b5:8d:e1:
         23:c2:4a:c3:fe:59:26:e5:d4:fe:8b:cd:85:26:53:d4:c6:43:
         b0:e8:06:51:2f:bf:84:12:26:67:18:89:e9:0d:dc:da:ea:45:
         56:d8:e1:05:33:d5:46:55:5e:df:91:4b:cd:4d:21:fb:d8:8e:
         4a:86:ad:c1:da:f3:53:43:75:8a:bb:b3:d5:25:27:e1:3c:f4:
         83:a7:d8:66:c9:42:b9:7f:0e:d4:b8:ff:64:e2:10:16:f8:03:
         4f:ee:73:97:81:b5:1f:7c:ef:7d:20:3e:0e:b1:78:33:9b:0e:
         f4:c5:84:2e:42:9a:5e:32:01:fa:d5:59:d7:93:ba:f9:9e:67:
         f0:c9:ce:34:24:66:3d:bd:4d:80:67:02:a7:78:ce:2f:7c:c2:
         06:7b:2d:58:0e:82:4e:fb:04:2c:e0:cc:8a:49:2c:58:52:f3:
         eb:63:e7:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfIjvstP/qnL+a1aToPB9ZuEyfpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwNjlFOEU2ODc1OUQ3RTkyQ0E3MDcxMTYxOUVBNERD
NEUyNzcyMTAeFw0yMzExMjMyMDA2MTFaFw0yNDExMjEyMDExMTFaMDMxMTAvBgNV
BAMTKDAyMTQ3MDY0ODREOTQ5NTFFRTEzMzFFOEVDN0M4NzQ4Qzg4MDJDRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6pMOOgE67FZaP3OVZ25G14gZ
kNFr25wAB+PrUVCcdlfa/2K2IbUucaoZy0h50pMc5B6wF7P/iYPp6gsABpIdyRWX
n/SxPG6QKm4g/FtDD36Kj99EUNxIbKSg/XXkSY/E3Q8bdXLmf2tDck5qEfq3xsl+
ZrOiru21y7J00nxQWaEXQAMnDUkvc+Gb5xGFO94KAUfBVWg8lUoAYJlmPNY6zwb+
Kdj8MVnemT5rKJ6CZkwaeZ0LN4jy3bhMdske3w1nT5caSgZv9ul/+0QL8IAg320j
we4bzUke8UWVQ5YZtoLagRUiKFwQS+Bi545m217mR3ot7ovt0sdVCEZV49NzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAhRwZITZSVHuEzHo7HyHSMiALOYwHwYDVR0j
BBgwFoAUQgaejmh1nX6SynBxFhnqTcTidyEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlBXVzdjMlE5Q1RDQkU2clBKWHJLUnBwZUJZMVlyTlNTRXloVm1QbTlI
QTEvMC80MjA2OUU4RTY4NzU5RDdFOTJDQTcwNzExNjE5RUE0REM0RTI3NzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQyMDY5RThFNjg3NTlEN0U5
MkNBNzA3MTE2MTlFQTREQzRFMjc3MjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZQV1c3YzJROUNUQ0JFNnJQSlhyS1JwcGVCWTFZck5TU0V5aFZtUG05SEExLzAv
MzEzMzM4MmUzMTM4MzUyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuSgwDQYJKoZIhvcNAQELBQADggEBAAM4eO3I
tPOyUIbEhpwIV7LDyxeVUpD8qI3fP5YZdg3st1D3+7/qZQlak1lRXX4/Mt4y3eBL
lHJ1Hkkf+aGayFwZ+yjKVlzqNYTskJ3aL3z2qifHkhlzu7WN4SPCSsP+WSbl1P6L
zYUmU9TGQ7DoBlEvv4QSJmcYiekN3NrqRVbY4QUz1UZVXt+RS81NIfvYjkqGrcHa
81NDdYq7s9UlJ+E89IOn2GbJQrl/DtS4/2TiEBb4A0/uc5eBtR98730gPg6xeDOb
DvTFhC5Cml4yAfrVWdeTuvmeZ/DJzjQkZj29TYBnAqd4zi98wgZ7LVgOgk77BCzg
zIpJLFhS8+tj55c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org