Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32342d3234203d3e20323730393330.roa
File:                     3133382e39342e34302e302f32342d3234203d3e20323730393330.roa (raw, json)
Hash identifier:          GcWkaheX1Ulq8ng5//zGOKU6ujNv9fOndzN9jjbiov0=
Subject key identifier:   B6:58:02:C3:6A:20:16:58:50:DE:E5:F7:59:03:49:C7:C2:91:38:57
Certificate issuer:       /CN=69BAEDBA4E49257B951660C842A16EF5C736B492
Certificate serial:       2F9136BE7A246E3BCE2009870F051A3944548390
Authority key identifier: 69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32342d3234203d3e20323730393330.roa
Signing time:             Mon 22 Jul 2024 12:50:21 +0000
ROA not before:           Mon 22 Jul 2024 12:45:21 +0000
ROA not after:            Mon 21 Jul 2025 12:50:21 +0000
asID:                     270930
IP address blocks:        138.94.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:91:36:be:7a:24:6e:3b:ce:20:09:87:0f:05:1a:39:44:54:83:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69BAEDBA4E49257B951660C842A16EF5C736B492
        Validity
            Not Before: Jul 22 12:45:21 2024 GMT
            Not After : Jul 21 12:50:21 2025 GMT
        Subject: CN=B65802C36A20165850DEE5F7590349C7C2913857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:46:dc:46:af:29:eb:42:46:5f:b4:b3:3a:27:
                    9e:e3:10:db:87:51:bb:15:fa:1d:40:f3:ab:34:56:
                    4f:02:ff:11:0a:33:7d:b4:9e:ef:64:a7:a9:07:c1:
                    0c:b9:d8:d1:e8:12:91:13:f5:fd:69:f3:11:ba:21:
                    45:4e:e9:27:4f:9b:40:b6:4b:c1:42:45:49:95:4d:
                    e0:7b:4d:47:73:09:d8:bf:bc:73:2f:c3:0f:ed:ab:
                    83:a2:bd:4a:72:7c:7f:cb:ba:d4:d7:0f:9d:64:cc:
                    6f:19:14:78:c2:f2:5f:cc:a9:13:06:de:d6:90:62:
                    ce:91:77:0b:94:5f:42:cb:06:0a:77:3b:91:09:75:
                    78:da:7c:08:34:cd:cc:ed:92:51:96:6d:cd:64:49:
                    78:25:c2:77:ff:8e:81:04:d9:9c:82:16:59:80:36:
                    fd:36:96:3b:bc:12:48:78:93:f3:46:b6:0b:7e:4a:
                    0f:39:68:5b:2c:f7:da:9b:58:4d:b0:9b:15:9e:66:
                    78:f0:28:ac:19:bd:51:06:c5:c0:75:60:cb:ec:31:
                    31:b3:78:76:b1:a8:6b:41:3d:8a:61:d0:c0:41:1d:
                    1a:c6:b8:48:8c:35:5a:da:e5:eb:34:cc:5a:1e:ca:
                    50:92:82:71:19:7e:1d:c1:43:96:ea:dd:d5:75:d9:
                    00:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:58:02:C3:6A:20:16:58:50:DE:E5:F7:59:03:49:C7:C2:91:38:57
            X509v3 Authority Key Identifier:
                keyid:69:BA:ED:BA:4E:49:25:7B:95:16:60:C8:42:A1:6E:F5:C7:36:B4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/69BAEDBA4E49257B951660C842A16EF5C736B492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69BAEDBA4E49257B951660C842A16EF5C736B492.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8NAsWhpYGFucK1pecAewNFhq89Nh33GnjABbQsC7kAA/0/3133382e39342e34302e302f32342d3234203d3e20323730393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:13:b2:64:3a:29:50:e7:dc:97:99:df:2c:f5:83:1d:a8:
         af:dc:21:35:b4:c2:de:04:18:da:f1:77:ac:e1:8e:d1:71:44:
         f5:a3:ed:91:84:a8:88:98:ff:4b:f5:fc:0a:d0:b8:6c:ec:c6:
         e9:1f:9b:ec:11:6a:fe:c8:3c:d7:01:0f:3f:90:5d:d4:8d:94:
         e7:aa:a6:34:8d:0c:c3:71:0b:67:3f:3f:d1:d2:fb:67:dd:3a:
         d5:eb:ca:07:17:b2:ae:6f:60:93:ab:c1:a0:be:a3:8c:19:69:
         c6:36:b8:8e:f7:36:5e:c4:cf:2a:c0:87:e9:36:31:1c:0c:90:
         fe:26:68:09:31:29:1f:6f:3c:d3:3c:7a:d6:a8:9c:a2:de:ed:
         ff:38:7b:80:9a:34:d8:08:0a:6b:34:10:fe:07:ab:8e:4c:5a:
         8a:a1:a8:4d:3f:d8:bb:4a:11:d5:de:94:f2:10:d7:4f:e3:76:
         4b:d9:97:9d:b4:98:26:b4:a5:20:51:bc:1c:b0:f2:c3:11:26:
         31:fa:0b:2d:2d:81:26:67:1a:d2:25:23:3b:60:5c:9c:1a:52:
         b7:a8:8c:d1:6b:4f:27:8b:f9:34:0b:fb:d5:ce:7f:41:cc:37:
         32:63:44:23:ea:35:0a:73:81:3a:22:bd:58:8f:df:6d:9e:80:
         46:eb:3d:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL5E2vnokbjvOIAmHDwUaOURUg5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlCQUVEQkE0RTQ5MjU3Qjk1MTY2MEM4NDJBMTZFRjVD
NzM2QjQ5MjAeFw0yNDA3MjIxMjQ1MjFaFw0yNTA3MjExMjUwMjFaMDMxMTAvBgNV
BAMTKEI2NTgwMkMzNkEyMDE2NTg1MERFRTVGNzU5MDM0OUM3QzI5MTM4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRtxGrynrQkZftLM6J57jENuH
UbsV+h1A86s0Vk8C/xEKM320nu9kp6kHwQy52NHoEpET9f1p8xG6IUVO6SdPm0C2
S8FCRUmVTeB7TUdzCdi/vHMvww/tq4OivUpyfH/LutTXD51kzG8ZFHjC8l/MqRMG
3taQYs6RdwuUX0LLBgp3O5EJdXjafAg0zcztklGWbc1kSXglwnf/joEE2ZyCFlmA
Nv02lju8Ekh4k/NGtgt+Sg85aFss99qbWE2wmxWeZnjwKKwZvVEGxcB1YMvsMTGz
eHaxqGtBPYph0MBBHRrGuEiMNVra5es0zFoeylCSgnEZfh3BQ5bq3dV12QD7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtlgCw2ogFlhQ3uX3WQNJx8KROFcwHwYDVR0j
BBgwFoAUabrtuk5JJXuVFmDIQqFu9cc2tJIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzhOQXNXaHBZR0Z1Y0sxcGVjQWV3TkZocTg5TmgzM0duakFCYlFzQzdr
QUEvMC82OUJBRURCQTRFNDkyNTdCOTUxNjYwQzg0MkExNkVGNUM3MzZCNDkyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY5QkFFREJBNEU0OTI1N0I5
NTE2NjBDODQyQTE2RUY1QzczNkI0OTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c4TkFzV2hwWUdGdWNLMXBlY0Fld05GaHE4OU5oMzNHbmpBQmJRc0M3a0FBLzAv
MzEzMzM4MmUzOTM0MmUzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAil4oMA0GCSqGSIb3DQEBCwUAA4IBAQAvehOyZDop
UOfcl5nfLPWDHaiv3CE1tMLeBBja8Xes4Y7RcUT1o+2RhKiImP9L9fwK0Lhs7Mbp
H5vsEWr+yDzXAQ8/kF3UjZTnqqY0jQzDcQtnPz/R0vtn3TrV68oHF7Kub2CTq8Gg
vqOMGWnGNriO9zZexM8qwIfpNjEcDJD+JmgJMSkfbzzTPHrWqJyi3u3/OHuAmjTY
CAprNBD+B6uOTFqKoahNP9i7ShHV3pTyENdP43ZL2ZedtJgmtKUgUbwcsPLDESYx
+gstLYEmZxrSJSM7YFycGlK3qIzRa08ni/k0C/vVzn9BzDcyY0Qj6jUKc4E6Ir1Y
j99tnoBG6z2P
-----END CERTIFICATE-----
Generated at Wed Aug 21 19:41:06 2024 by rpki-client on console-fra.rpki-client.org