Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133342e302f32342d3234203d3e20323634323135.roa
File:                     3133382e39392e3133342e302f32342d3234203d3e20323634323135.roa (raw, json)
Hash identifier:          EXrp9ZNJg3vOK3BB7cWAh9jj2pJFKYShdnCJUXfDgLE=
Subject key identifier:   CD:22:2A:08:F9:7A:35:C8:FD:B5:F8:6C:45:BA:A8:7E:C8:14:32:F4
Certificate issuer:       /CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
Certificate serial:       238791EFBB665E7995CBBF8C813C12464BE47FA8
Authority key identifier: 2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133342e302f32342d3234203d3e20323634323135.roa
Signing time:             Thu 10 Nov 2022 18:35:36 +0000
ROA not before:           Thu 10 Nov 2022 18:30:36 +0000
ROA not after:            Thu 09 Nov 2023 18:35:36 +0000
asID:                     264215
IP address blocks:        138.99.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:87:91:ef:bb:66:5e:79:95:cb:bf:8c:81:3c:12:46:4b:e4:7f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DF36E21FC15570CFC6C54CBD4D83166CE94B44E
        Validity
            Not Before: Nov 10 18:30:36 2022 GMT
            Not After : Nov  9 18:35:36 2023 GMT
        Subject: CN=CD222A08F97A35C8FDB5F86C45BAA87EC81432F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:91:9d:eb:df:d7:98:79:02:cc:e9:06:d5:8b:
                    b0:22:eb:06:08:62:fd:b0:74:ce:ab:32:1e:2b:ec:
                    c7:ee:9f:79:b8:87:df:10:52:14:d7:95:80:ec:ab:
                    f6:16:25:0b:83:0e:64:9e:bf:96:8f:f7:f8:cd:bd:
                    b6:8b:44:e8:d3:05:bc:0c:b6:e2:68:1a:7d:30:9c:
                    2d:d3:cd:8e:e9:73:cd:82:85:ea:8f:11:65:b6:d5:
                    5d:71:d8:b5:ac:f4:26:f7:39:ce:d6:69:30:04:ac:
                    49:b9:f7:d5:57:6c:fb:9b:f7:3a:1b:07:e7:9a:f5:
                    5d:3e:c8:13:23:06:c8:83:15:cd:da:f1:7a:71:37:
                    d9:83:67:2a:0d:96:1c:13:9d:c0:14:33:6e:69:08:
                    d7:d1:d2:97:8b:ad:6b:5e:7e:89:66:58:1f:f6:ef:
                    59:ee:17:b9:04:3b:be:87:9b:09:b2:8a:c5:00:b5:
                    65:7a:f7:26:eb:ae:4e:9c:db:71:9f:0b:85:dd:bf:
                    68:d5:ad:24:2e:41:d4:02:af:15:78:2b:81:60:56:
                    78:49:57:85:a7:97:bb:21:48:60:ca:b5:59:51:f7:
                    8e:a6:52:af:a7:25:e6:8f:d5:49:e7:65:97:2c:48:
                    93:0e:10:0f:85:cd:8c:7c:a0:3b:ce:da:b4:6a:cb:
                    0b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:22:2A:08:F9:7A:35:C8:FD:B5:F8:6C:45:BA:A8:7E:C8:14:32:F4
            X509v3 Authority Key Identifier:
                keyid:2D:F3:6E:21:FC:15:57:0C:FC:6C:54:CB:D4:D8:31:66:CE:94:B4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DF36E21FC15570CFC6C54CBD4D83166CE94B44E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNDvJKWhwcFyWrYXoY7Yx6RhFjXxEiMEstvNVvFY7qJR/0/3133382e39392e3133342e302f32342d3234203d3e20323634323135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:d7:32:6b:58:f6:a4:09:3f:1e:65:51:ee:a1:01:58:2d:
         45:a0:4e:91:a1:46:4e:6c:69:89:e4:3d:fa:24:aa:44:fd:22:
         fb:97:3e:fd:cb:8d:95:72:2a:60:12:94:a5:f6:ec:00:1d:82:
         31:8d:c7:25:74:b2:bc:3d:d9:0d:46:28:a1:66:bb:ea:83:e0:
         a5:63:7d:3c:81:e1:1a:fb:4c:15:ec:90:99:ba:1c:01:22:0f:
         fc:1b:19:b6:ef:fe:b7:84:1a:68:17:f2:c9:db:92:99:45:b5:
         01:26:e9:af:8a:6f:f5:01:6e:99:5a:4b:a6:2c:dc:a2:f7:55:
         17:64:86:07:0a:3b:ce:5b:c6:18:ab:43:38:71:d6:73:10:5b:
         6a:1a:41:3e:a4:ea:a4:67:05:ba:26:00:0e:45:14:cb:4c:bd:
         a1:2c:2f:53:78:83:8d:fc:16:b5:9e:dd:24:c1:62:86:0d:71:
         1c:09:5a:a7:71:03:ef:df:f2:9b:b3:56:c3:34:19:fe:85:44:
         71:23:b0:2a:0e:60:af:43:32:74:1c:8b:61:8b:ce:79:cf:12:
         90:d2:f6:ec:6f:b7:40:28:85:3c:25:55:fe:ec:4b:c1:db:f6:
         b5:60:9a:9a:6c:28:69:2c:ba:3b:0a:a3:b6:60:55:8d:76:ea:
         4b:4c:f9:75
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUI4eR77tmXnmVy7+MgTwSRkvkf6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRGMzZFMjFGQzE1NTcwQ0ZDNkM1NENCRDREODMxNjZD
RTk0QjQ0RTAeFw0yMjExMTAxODMwMzZaFw0yMzExMDkxODM1MzZaMDMxMTAvBgNV
BAMTKENEMjIyQTA4Rjk3QTM1QzhGREI1Rjg2QzQ1QkFBODdFQzgxNDMyRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokZ3r39eYeQLM6QbVi7Ai6wYI
Yv2wdM6rMh4r7Mfun3m4h98QUhTXlYDsq/YWJQuDDmSev5aP9/jNvbaLROjTBbwM
tuJoGn0wnC3TzY7pc82CheqPEWW21V1x2LWs9Cb3Oc7WaTAErEm599VXbPub9zob
B+ea9V0+yBMjBsiDFc3a8XpxN9mDZyoNlhwTncAUM25pCNfR0peLrWtefolmWB/2
71nuF7kEO76HmwmyisUAtWV69ybrrk6c23GfC4Xdv2jVrSQuQdQCrxV4K4FgVnhJ
V4Wnl7shSGDKtVlR946mUq+nJeaP1UnnZZcsSJMOEA+FzYx8oDvO2rRqywsfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzSIqCPl6Ncj9tfhsRbqofsgUMvQwHwYDVR0j
BBgwFoAULfNuIfwVVwz8bFTL1NgxZs6UtE4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR05EdkpLV2h3Y0Z5V3JZWG9ZN1l4NlJoRmpYeEVpTUVzdHZOVnZGWTdx
SlIvMC8yREYzNkUyMUZDMTU1NzBDRkM2QzU0Q0JENEQ4MzE2NkNFOTRCNDRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJERjM2RTIxRkMxNTU3MENG
QzZDNTRDQkQ0RDgzMTY2Q0U5NEI0NEUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dORHZKS1dod2NGeVdyWVhvWTdZeDZSaEZqWHhFaU1Fc3R2TlZ2Rlk3cUpSLzAv
MzEzMzM4MmUzOTM5MmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMjMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKY4YwDQYJKoZIhvcNAQELBQADggEBALSK1zJr
WPakCT8eZVHuoQFYLUWgTpGhRk5saYnkPfokqkT9IvuXPv3LjZVyKmASlKX27AAd
gjGNxyV0srw92Q1GKKFmu+qD4KVjfTyB4Rr7TBXskJm6HAEiD/wbGbbv/reEGmgX
8snbkplFtQEm6a+Kb/UBbplaS6Ys3KL3VRdkhgcKO85bxhirQzhx1nMQW2oaQT6k
6qRnBbomAA5FFMtMvaEsL1N4g438FrWe3STBYoYNcRwJWqdxA+/f8puzVsM0Gf6F
RHEjsCoOYK9DMnQci2GLznnPEpDS9uxvt0AohTwlVf7sS8Hb9rVgmppsKGksujsK
o7ZgVY126ktM+XU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org