Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa
File:                     3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa (raw, json)
Hash identifier:          muDVMFGhjA3rXPTrM5hHDx8e5yxE4w208QGf6TE04SQ=
Subject key identifier:   A8:01:74:90:AF:39:A5:BD:A2:FF:BF:6B:B4:F1:CF:5B:90:80:79:B5
Certificate issuer:       /CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
Certificate serial:       5EA86A589B36D2CCCEF8328AA1987B3C9E2F7CFB
Authority key identifier: E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa
Signing time:             Wed 20 Dec 2023 14:06:14 +0000
ROA not before:           Wed 20 Dec 2023 14:01:14 +0000
ROA not after:            Wed 18 Dec 2024 14:06:14 +0000
asID:                     263900
IP address blocks:        138.204.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:6a:58:9b:36:d2:cc:ce:f8:32:8a:a1:98:7b:3c:9e:2f:7c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09AEFBAB9FAA20F5629757DA668E610219ED98F
        Validity
            Not Before: Dec 20 14:01:14 2023 GMT
            Not After : Dec 18 14:06:14 2024 GMT
        Subject: CN=A8017490AF39A5BDA2FFBF6BB4F1CF5B908079B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:42:ec:3a:e9:f3:4c:54:4d:52:8c:6a:15:
                    57:bd:ff:04:3a:e9:d7:aa:b3:af:d3:f7:a5:73:40:
                    74:e9:08:c7:a0:8f:6a:56:30:53:27:4e:4c:ae:97:
                    e2:c8:41:2d:11:dc:5b:5f:aa:f1:34:67:71:52:95:
                    d5:ef:0a:76:64:12:c0:59:cb:6e:38:4e:63:58:96:
                    24:13:c8:9d:3a:f5:4b:85:57:2b:42:05:b8:c9:86:
                    61:04:0f:4c:7e:b2:4d:52:71:91:d2:79:3e:fe:c6:
                    a6:4f:41:16:fb:51:e9:ea:6a:24:93:09:d4:72:ea:
                    91:d6:d2:3e:75:f4:fc:a1:27:ed:9f:89:3f:e4:03:
                    f4:e3:71:3a:42:0f:9f:72:ee:b0:83:b8:bd:28:63:
                    d2:17:ee:4c:01:26:28:cc:0d:6a:09:db:81:ff:94:
                    f5:92:89:d4:a5:59:01:2f:6f:c1:a6:1c:a8:b5:78:
                    46:a0:2a:3d:14:63:97:18:33:ed:47:df:82:16:3a:
                    1f:a0:f9:5c:53:b0:39:49:89:c0:a6:07:53:b3:55:
                    c1:fd:05:2e:3b:2c:2a:6c:60:aa:7a:b5:0d:d2:87:
                    8b:cf:30:cf:3c:f0:51:15:59:66:95:1d:69:10:18:
                    71:71:e2:47:b7:b0:ec:68:a0:76:d9:04:ef:16:21:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:01:74:90:AF:39:A5:BD:A2:FF:BF:6B:B4:F1:CF:5B:90:80:79:B5
            X509v3 Authority Key Identifier:
                keyid:E0:9A:EF:BA:B9:FA:A2:0F:56:29:75:7D:A6:68:E6:10:21:9E:D9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/E09AEFBAB9FAA20F5629757DA668E610219ED98F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E09AEFBAB9FAA20F5629757DA668E610219ED98F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FRRMRZp7zCXMUVUZSWNrs3qsPoP3b7XNyC9Rjqmjv5uz/1/3133382e3230342e3134382e302f32342d3234203d3e20323633393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:15:89:a4:98:9c:47:b2:89:c7:4d:11:4d:df:a9:f6:81:a9:
         73:9b:da:62:9b:41:d1:5f:22:e2:27:2e:a1:b1:fb:a5:72:cf:
         27:a4:a5:e2:79:38:07:f9:8e:f4:63:51:bd:00:b2:d4:60:1d:
         6b:2e:b1:7d:03:85:62:60:17:86:4a:2e:96:1f:bf:8b:ae:4e:
         71:d8:81:f1:0b:78:8e:9a:67:77:9c:71:0c:e1:c3:77:f5:5f:
         ad:fd:9b:11:e4:39:53:65:46:50:ff:44:7a:1d:92:4d:8a:ef:
         70:52:07:8c:19:5d:a1:77:2d:60:71:9c:3e:ee:64:40:52:72:
         f5:c2:5c:76:e9:6c:04:df:08:3d:03:24:39:03:8a:a3:c8:fd:
         62:84:18:c0:48:98:15:79:7c:c0:03:1a:96:e0:df:53:98:ea:
         c0:8c:c5:02:19:52:5f:e9:74:8b:38:97:21:c0:eb:11:56:db:
         e7:93:31:6c:9b:af:6a:c0:8d:75:6a:67:d8:ff:0d:9f:e5:bc:
         86:77:c5:ea:fe:9f:a6:90:47:fc:09:97:a3:00:8d:80:58:32:
         5e:02:08:a4:d0:67:31:2e:18:88:43:7a:c0:de:34:41:0c:35:
         d5:63:2a:5d:06:7e:33:18:94:9f:c7:2e:1a:40:54:44:87:65:
         dc:89:99:1c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUXqhqWJs20szO+DKKoZh7PJ4vfPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA5QUVGQkFCOUZBQTIwRjU2Mjk3NTdEQTY2OEU2MTAy
MTlFRDk4RjAeFw0yMzEyMjAxNDAxMTRaFw0yNDEyMTgxNDA2MTRaMDMxMTAvBgNV
BAMTKEE4MDE3NDkwQUYzOUE1QkRBMkZGQkY2QkI0RjFDRjVCOTA4MDc5QjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoyELsOunzTFRNUoxqFVe9/wQ6
6deqs6/T96VzQHTpCMegj2pWMFMnTkyul+LIQS0R3FtfqvE0Z3FSldXvCnZkEsBZ
y244TmNYliQTyJ069UuFVytCBbjJhmEED0x+sk1ScZHSeT7+xqZPQRb7UenqaiST
CdRy6pHW0j519PyhJ+2fiT/kA/TjcTpCD59y7rCDuL0oY9IX7kwBJijMDWoJ24H/
lPWSidSlWQEvb8GmHKi1eEagKj0UY5cYM+1H34IWOh+g+VxTsDlJicCmB1OzVcH9
BS47LCpsYKp6tQ3Sh4vPMM888FEVWWaVHWkQGHFx4ke3sOxooHbZBO8WIQjtAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUqAF0kK85pb2i/79rtPHPW5CAebUwHwYDVR0j
BBgwFoAU4Jrvurn6og9WKXV9pmjmECGe2Y8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlJSTVJacDd6Q1hNVVZVWlNXTnJzM3FzUG9QM2I3WE55QzlSanFtanY1
dXovMS9FMDlBRUZCQUI5RkFBMjBGNTYyOTc1N0RBNjY4RTYxMDIxOUVEOThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UwOUFFRkJBQjlGQUEyMEY1
NjI5NzU3REE2NjhFNjEwMjE5RUQ5OEYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZSUk1SWnA3ekNYTVVWVVpTV05yczNxc1BvUDNiN1hOeUM5UmpxbWp2NXV6LzEv
MzEzMzM4MmUzMjMwMzQyZTMxMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIrMlDANBgkqhkiG9w0BAQsFAAOCAQEAAhWJ
pJicR7KJx00RTd+p9oGpc5vaYptB0V8i4icuobH7pXLPJ6Sl4nk4B/mO9GNRvQCy
1GAday6xfQOFYmAXhkoulh+/i65OcdiB8Qt4jppnd5xxDOHDd/Vfrf2bEeQ5U2VG
UP9Eeh2STYrvcFIHjBldoXctYHGcPu5kQFJy9cJcdulsBN8IPQMkOQOKo8j9YoQY
wEiYFXl8wAMaluDfU5jqwIzFAhlSX+l0iziXIcDrEVbb55MxbJuvasCNdWpn2P8N
n+W8hnfF6v6fppBH/AmXowCNgFgyXgIIpNBnMS4YiEN6wN40QQw11WMqXQZ+MxiU
n8cuGkBURIdl3ImZHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org