Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
File:                     3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa (raw, json)
Hash identifier:          ekbjTr+zFNB0ELtZKBn1tNCBitk9Ojlm1qU9UC4AIgs=
Subject key identifier:   72:0E:9F:CD:59:BA:30:77:AD:62:DB:4C:F5:16:9D:E8:83:4D:42:07
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       4890AD4574DF1CB899F07C708BD8247E9DF1F3E3
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa
Signing time:             Wed 25 Oct 2023 00:26:59 +0000
ROA not before:           Wed 25 Oct 2023 00:21:59 +0000
ROA not after:            Wed 23 Oct 2024 00:26:59 +0000
asID:                     264332
IP address blocks:        138.185.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:90:ad:45:74:df:1c:b8:99:f0:7c:70:8b:d8:24:7e:9d:f1:f3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Oct 25 00:21:59 2023 GMT
            Not After : Oct 23 00:26:59 2024 GMT
        Subject: CN=720E9FCD59BA3077AD62DB4CF5169DE8834D4207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:94:0c:c1:23:f8:8a:b6:94:ea:00:63:0d:
                    96:27:5e:a9:b0:8b:9a:3e:2d:2e:51:50:a5:9e:a5:
                    f4:f2:5a:20:57:26:42:93:eb:19:72:b5:5e:05:ab:
                    22:60:44:fc:dd:2b:94:6e:a8:5d:f7:dc:20:46:2c:
                    4c:cb:22:4c:37:9a:09:fb:5a:92:ac:fc:80:c1:3e:
                    f6:1c:31:07:cf:98:c1:98:f2:26:59:cb:fb:d9:e7:
                    b8:80:c4:67:49:4b:1b:ab:f2:04:36:b9:74:79:55:
                    d2:4e:f3:53:a1:8a:12:df:65:b4:fb:29:4e:f0:fe:
                    d3:66:8a:6c:15:f9:a6:53:0a:0e:7c:ac:f3:92:e7:
                    45:cd:80:45:f6:97:c4:29:94:0c:c2:26:c4:3c:ec:
                    9f:e4:84:9d:f9:0d:19:da:c4:89:4a:95:d0:77:77:
                    f9:ee:e2:2c:2d:35:e8:8c:07:4d:fe:70:18:a2:c6:
                    68:53:a9:f7:f4:5c:89:3b:94:7e:52:3e:e9:34:c7:
                    e6:ee:e2:f8:03:4a:75:a0:d9:45:4e:4c:db:fb:01:
                    b4:ab:89:62:e7:55:c2:81:f5:5f:df:86:e9:c8:c5:
                    c0:f4:d0:43:c1:5b:96:1a:60:e2:4e:74:97:69:28:
                    9e:c7:d8:21:63:c7:b0:af:31:5a:2f:56:d1:6f:9d:
                    e7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:9F:CD:59:BA:30:77:AD:62:DB:4C:F5:16:9D:E8:83:4D:42:07
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32332e302f32342d3234203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7c:f5:31:2b:c0:08:16:98:fb:38:92:20:e1:ff:c3:e8:b6:
         bc:33:8f:28:80:92:ee:bd:ee:94:a2:79:11:88:61:27:c7:b1:
         0b:5d:4f:5b:fe:af:be:81:64:62:a7:6e:e4:3f:35:ad:64:66:
         68:56:9e:c6:1f:3f:f7:23:15:d0:3f:32:f7:c3:f7:5d:1b:cd:
         ef:3e:e6:78:fc:5c:3a:7e:c2:7d:fb:72:0a:33:71:57:66:92:
         a9:ce:cf:1d:e4:07:ee:5d:c7:a2:51:ad:b8:e5:28:21:e7:64:
         2e:b7:1c:f5:ab:0e:51:64:ef:93:b5:e6:08:15:5c:4f:43:c8:
         f8:20:32:63:d1:7b:40:75:d2:df:98:6e:21:d8:bd:2d:6e:9d:
         61:59:40:82:fe:16:90:c7:30:c8:bf:12:ff:02:85:fd:cd:c5:
         c0:6d:52:d1:39:4e:81:a3:59:12:32:64:df:c0:ef:c6:9e:cf:
         30:6e:7e:f7:5f:e1:fb:a9:ff:03:70:a5:34:b3:4e:7d:5d:03:
         de:12:5e:d5:5e:ae:d7:ad:b6:84:7c:7a:5f:68:59:45:2d:24:
         53:43:b7:f9:45:37:65:73:14:31:a6:3f:7c:5b:97:54:f9:12:
         d6:f9:93:5d:25:1e:ba:3d:82:e4:ec:8a:08:86:e6:bb:92:3b:
         e0:2c:51:19
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSJCtRXTfHLiZ8Hxwi9gkfp3x8+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjQyN0VCRUQwNEVFQTlFMTRDRDcyNkRFQjNDQzI5OTk5
M0MxODAyRTAeFw0yMzEwMjUwMDIxNTlaFw0yNDEwMjMwMDI2NTlaMDMxMTAvBgNV
BAMTKDcyMEU5RkNENTlCQTMwNzdBRDYyREI0Q0Y1MTY5REU4ODM0RDQyMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjJQMwSP4iraU6gBjDZYnXqmw
i5o+LS5RUKWepfTyWiBXJkKT6xlytV4FqyJgRPzdK5RuqF333CBGLEzLIkw3mgn7
WpKs/IDBPvYcMQfPmMGY8iZZy/vZ57iAxGdJSxur8gQ2uXR5VdJO81OhihLfZbT7
KU7w/tNmimwV+aZTCg58rPOS50XNgEX2l8QplAzCJsQ87J/khJ35DRnaxIlKldB3
d/nu4iwtNeiMB03+cBiixmhTqff0XIk7lH5SPuk0x+bu4vgDSnWg2UVOTNv7AbSr
iWLnVcKB9V/fhunIxcD00EPBW5YaYOJOdJdpKJ7H2CFjx7CvMVovVtFvnefVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcg6fzVm6MHetYttM9Rad6INNQgcwHwYDVR0j
BBgwFoAU9Cfr7QTuqeFM1ybes8wpmZPBgC4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzlOUGZaZWJxZ0hvUDV5TkN6VXhhM0pNU1BqS1ROZURmeFFRdmtwUEpO
Rk0vMC9GNDI3RUJFRDA0RUVBOUUxNENENzI2REVCM0NDMjk5OTkzQzE4MDJFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y0MjdFQkVEMDRFRUE5RTE0
Q0Q3MjZERUIzQ0MyOTk5OTNDMTgwMkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c5TlBmWmVicWdIb1A1eU5DelV4YTNKTVNQaktUTmVEZnhRUXZrcFBKTkZNLzAv
MzEzMzM4MmUzMTM4MzUyZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKuRcwDQYJKoZIhvcNAQELBQADggEBAMR89TEr
wAgWmPs4kiDh/8PotrwzjyiAku697pSieRGIYSfHsQtdT1v+r76BZGKnbuQ/Na1k
ZmhWnsYfP/cjFdA/MvfD910bze8+5nj8XDp+wn37cgozcVdmkqnOzx3kB+5dx6JR
rbjlKCHnZC63HPWrDlFk75O15ggVXE9DyPggMmPRe0B10t+YbiHYvS1unWFZQIL+
FpDHMMi/Ev8Chf3NxcBtUtE5ToGjWRIyZN/A78aezzBufvdf4fup/wNwpTSzTn1d
A94SXtVertettoR8el9oWUUtJFNDt/lFN2VzFDGmP3xbl1T5Etb5k10lHro9guTs
igiG5ruSO+AsURk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org