Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3138352e36302e302f32322d3234203d3e20323633363436.roa
File:                     3133382e3138352e36302e302f32322d3234203d3e20323633363436.roa (raw, json)
Hash identifier:          m1/SpHAeB7QDQJ4HMheHkdBYk2Y5a7iG/wMCDcUG9Fw=
Subject key identifier:   84:6C:0B:7E:43:7C:2D:D4:FD:F9:A5:41:8F:7A:2B:F9:7E:0C:03:EA
Certificate issuer:       /CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
Certificate serial:       11C5C1CF7ABE6ACDAD615A88A1DC9A57B17D0A51
Authority key identifier: 19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3138352e36302e302f32322d3234203d3e20323633363436.roa
Signing time:             Fri 14 Jan 2022 23:40:32 +0000
ROA not before:           Fri 14 Jan 2022 23:35:32 +0000
ROA not after:            Fri 13 Jan 2023 23:40:32 +0000
asID:                     263646
IP address blocks:        138.185.60.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:c5:c1:cf:7a:be:6a:cd:ad:61:5a:88:a1:dc:9a:57:b1:7d:0a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19664A43D08FC5C1667B502608579B90F5D7A2EF
        Validity
            Not Before: Jan 14 23:35:32 2022 GMT
            Not After : Jan 13 23:40:32 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1e:cb:a2:38:9d:7f:2e:b1:f1:ff:5d:85:a4:
                    bd:c0:1a:7e:94:1f:4d:ec:54:e6:e4:87:dd:f5:fb:
                    e7:3b:86:91:19:ec:f4:89:3b:bf:1b:bf:55:ff:ff:
                    5d:b6:67:40:36:c3:f3:7d:26:86:6d:bf:2d:08:c7:
                    72:44:45:51:fc:e2:41:f1:6e:37:a5:50:6f:17:d6:
                    16:d3:2c:1d:11:16:8c:d1:24:f6:ea:65:b8:c7:8c:
                    84:a3:3e:48:4b:b4:d3:9e:bc:1e:ac:98:1a:f5:c0:
                    c2:c6:37:da:8b:8d:4b:e2:99:d8:df:a6:17:a9:2b:
                    9c:76:8b:5c:93:19:14:d4:c9:21:4a:29:72:b6:59:
                    82:04:1d:1f:49:94:ee:41:c3:35:e1:4c:e1:7b:15:
                    a0:b8:0b:b8:75:14:a1:4b:1f:36:46:d2:4b:9a:95:
                    ba:17:5a:e4:1f:e4:cf:f4:38:6b:eb:08:bd:33:fe:
                    19:ca:72:53:ae:c7:07:51:73:ee:91:c7:49:2c:ac:
                    4c:1e:ce:82:ca:7e:73:15:bf:24:cf:6b:16:91:af:
                    24:1e:55:f3:4b:26:a7:b8:85:08:97:25:6e:2e:db:
                    9b:d2:83:4b:ac:65:fa:b3:65:61:8a:d2:c9:0e:9a:
                    b6:0d:d6:a1:e6:19:11:a8:b5:18:93:c9:e9:37:11:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6C:0B:7E:43:7C:2D:D4:FD:F9:A5:41:8F:7A:2B:F9:7E:0C:03:EA
            X509v3 Authority Key Identifier:
                keyid:19:66:4A:43:D0:8F:C5:C1:66:7B:50:26:08:57:9B:90:F5:D7:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19664A43D08FC5C1667B502608579B90F5D7A2EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FwQW8Fp2n17RQF2tmhNjY9KdLyGDFezWDC2fphRUqxYa/0/3133382e3138352e36302e302f32322d3234203d3e20323633363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:4e:41:86:bd:e0:8c:32:1c:fd:ac:c3:b2:8b:73:32:f4:
         ef:a9:cd:21:77:b6:2c:7e:1f:3a:c7:0f:cc:ca:97:eb:c4:c8:
         95:3e:a8:2a:92:c3:f1:f4:c5:d6:f8:1a:99:2a:c4:21:5d:65:
         5a:4e:a5:7f:33:91:45:23:55:52:a8:70:58:f3:85:ae:03:c6:
         2e:cc:a9:3e:c7:38:27:65:8a:f1:b9:ac:d1:32:75:54:2f:b4:
         d5:be:51:e9:2a:bb:54:b2:dd:43:7a:61:fe:f0:d6:27:8c:72:
         08:1a:1c:a5:a8:7a:58:5a:17:12:66:ac:e8:b3:59:15:3c:ec:
         2d:8a:71:39:e9:aa:e8:6b:5c:09:99:f0:b4:df:a7:6d:42:f0:
         28:9c:4e:48:a5:20:79:42:c7:f1:3a:12:81:4e:45:fd:d3:f6:
         da:29:f0:12:c1:8f:c8:5c:ee:86:ec:d6:0b:28:db:be:fe:90:
         44:17:9f:37:f3:bf:32:dd:a7:9c:d4:9d:d8:9b:92:61:25:8b:
         f3:76:08:0c:9e:7d:d7:2a:60:9b:7a:8b:e1:71:b4:79:d2:71:
         79:61:58:39:83:13:39:6e:1c:55:9c:57:75:db:2a:ba:49:b4:
         d5:c5:2e:90:55:74:e7:77:13:b5:43:b6:4c:61:04:7c:1c:c7:
         1c:d2:73:40
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUEcXBz3q+as2tYVqIodyaV7F9ClEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2NjRBNDNEMDhGQzVDMTY2N0I1MDI2MDg1NzlCOTBG
NUQ3QTJFRjAeFw0yMjAxMTQyMzM1MzJaFw0yMzAxMTMyMzQwMzJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjExRUNCQTIzODlEN0YyRUIx
RjFGRjVEODVBNEJEQzAxQTdFOTQxRjRERUM1NEU2RTQ4N0RERjVGQkU3M0I4Njkx
MTlFQ0Y0ODkzQkJGMUJCRjU1RkZGRjVEQjY2NzQwMzZDM0YzN0QyNjg2NkRCRjJE
MDhDNzcyNDQ0NTUxRkNFMjQxRjE2RTM3QTU1MDZGMTdENjE2RDMyQzFEMTExNjhD
RDEyNEY2RUE2NUI4Qzc4Qzg0QTMzRTQ4NEJCNEQzOUVCQzFFQUM5ODFBRjVDMEMy
QzYzN0RBOEI4RDRCRTI5OUQ4REZBNjE3QTkyQjlDNzY4QjVDOTMxOTE0RDRDOTIx
NEEyOTcyQjY1OTgyMDQxRDFGNDk5NEVFNDFDMzM1RTE0Q0UxN0IxNUEwQjgwQkI4
NzUxNEExNEIxRjM2NDZEMjRCOUE5NUJBMTc1QUU0MUZFNENGRjQzODZCRUIwOEJE
MzNGRTE5Q0E3MjUzQUVDNzA3NTE3M0VFOTFDNzQ5MkNBQzRDMUVDRTgyQ0E3RTcz
MTVCRjI0Q0Y2QjE2OTFBRjI0MUU1NUYzNEIyNkE3Qjg4NTA4OTcyNTZFMkVEQjlC
RDI4MzRCQUM2NUZBQjM2NTYxOEFEMkM5MEU5QUI2MERENkExRTYxOTExQThCNTE4
OTNDOUU5MzcxMUY5QUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsR7Lojidfy6x8f9dhaS9wBp+lB9N7FTm5Ifd9fvnO4aRGez0iTu/
G79V//9dtmdANsPzfSaGbb8tCMdyREVR/OJB8W43pVBvF9YW0ywdERaM0ST26mW4
x4yEoz5IS7TTnrwerJga9cDCxjfai41L4pnY36YXqSucdotckxkU1MkhSilytlmC
BB0fSZTuQcM14UzhexWguAu4dRShSx82RtJLmpW6F1rkH+TP9Dhr6wi9M/4ZynJT
rscHUXPukcdJLKxMHs6Cyn5zFb8kz2sWka8kHlXzSyanuIUIlyVuLtub0oNLrGX6
s2VhitLJDpq2Ddah5hkRqLUYk8npNxH5qwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FIRsC35DfC3U/fmlQY96K/l+DAPqMB8GA1UdIwQYMBaAFBlmSkPQj8XBZntQJghX
m5D116LvMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z3UVc4RnAybjE3UlFG
MnRtaE5qWTlLZEx5R0RGZXpXREMyZnBoUlVxeFlhLzAvMTk2NjRBNDNEMDhGQzVD
MTY2N0I1MDI2MDg1NzlCOTBGNUQ3QTJFRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xOTY2NEE0M0QwOEZDNUMxNjY3QjUwMjYwODU3OUI5MEY1RDdB
MkVGLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Gd1FXOEZwMm4xN1JRRjJ0bWhO
alk5S2RMeUdERmV6V0RDMmZwaFJVcXhZYS8wLzMxMzMzODJlMzEzODM1MmUzNjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzYzNDM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
irk8MA0GCSqGSIb3DQEBCwUAA4IBAQBT3E5Bhr3gjDIc/azDsotzMvTvqc0hd7Ys
fh86xw/MypfrxMiVPqgqksPx9MXW+BqZKsQhXWVaTqV/M5FFI1VSqHBY84WuA8Yu
zKk+xzgnZYrxuazRMnVUL7TVvlHpKrtUst1DemH+8NYnjHIIGhylqHpYWhcSZqzo
s1kVPOwtinE56aroa1wJmfC036dtQvAonE5IpSB5QsfxOhKBTkX90/baKfASwY/I
XO6G7NYLKNu+/pBEF583878y3aec1J3Ym5JhJYvzdggMnn3XKmCbeovhcbR50nF5
YVg5gxM5bhxVnFd12yq6SbTVxS6QVXTndxO1Q7ZMYQR8HMcc0nNA
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:21 2025 by rpki-client