Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa
File:                     3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa (raw, json)
Hash identifier:          r86kPiOvhTn2nXx+z5eELqtP5l7ZhaYBTHP2abDpmiM=
Subject key identifier:   02:D3:2A:D2:ED:EB:FC:94:C7:0A:89:98:B3:4A:3A:8A:C7:0E:84:8A
Certificate issuer:       /CN=2BBCF2A0D185734F83F19232C290BC973C03F390
Certificate serial:       4D2A6E94E4F2D4BED247F04AF9BFD6EAF19A40A0
Authority key identifier: 2B:BC:F2:A0:D1:85:73:4F:83:F1:92:32:C2:90:BC:97:3C:03:F3:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BBCF2A0D185734F83F19232C290BC973C03F390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa
Signing time:             Tue 26 Mar 2024 19:59:48 +0000
ROA not before:           Tue 26 Mar 2024 19:54:48 +0000
ROA not after:            Tue 25 Mar 2025 19:59:48 +0000
asID:                     264331
IP address blocks:        138.122.104.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2a:6e:94:e4:f2:d4:be:d2:47:f0:4a:f9:bf:d6:ea:f1:9a:40:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BBCF2A0D185734F83F19232C290BC973C03F390
        Validity
            Not Before: Mar 26 19:54:48 2024 GMT
            Not After : Mar 25 19:59:48 2025 GMT
        Subject: CN=02D32AD2EDEBFC94C70A8998B34A3A8AC70E848A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:b4:dc:4d:22:4d:35:a3:a1:4c:bd:49:a1:
                    72:b3:c0:50:3e:e2:0c:eb:0b:ab:ca:46:84:8f:ba:
                    01:ab:71:bb:2c:a2:49:45:59:4e:d2:f4:a0:4a:b4:
                    75:4c:2e:06:82:6f:d0:05:23:96:1f:72:24:ba:5c:
                    04:59:54:b4:f8:f9:b7:b0:54:b9:63:15:7a:ae:b9:
                    ea:36:3c:30:59:0d:79:43:32:bb:ac:f2:61:2d:8e:
                    5d:31:d9:75:64:2f:58:e3:4e:e7:2a:24:9d:9b:1e:
                    34:71:c1:6a:1c:dd:e2:6c:65:9c:d2:46:93:6b:12:
                    6b:27:fc:00:c6:42:96:72:57:7b:f5:f0:90:db:62:
                    20:c3:6a:02:1c:77:a7:91:28:af:4a:b3:30:82:49:
                    2c:b0:f6:dd:0c:9c:7c:b8:45:83:04:5b:1b:20:dd:
                    1d:77:b4:97:bb:d9:f5:e4:92:9b:12:00:f6:78:48:
                    b3:6a:1d:4e:a2:b1:28:43:ed:f8:e2:20:40:84:df:
                    72:e3:c8:d3:90:c4:ff:85:3a:5f:86:a8:3d:1c:68:
                    7f:c6:1a:ea:59:dc:5f:8a:e1:d1:5a:a5:2a:9c:41:
                    8a:b3:16:51:49:06:f3:b8:7f:17:53:4a:2a:ee:d6:
                    d1:07:19:c5:90:14:a9:e8:19:7f:d7:cf:77:d4:03:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:2A:D2:ED:EB:FC:94:C7:0A:89:98:B3:4A:3A:8A:C7:0E:84:8A
            X509v3 Authority Key Identifier:
                keyid:2B:BC:F2:A0:D1:85:73:4F:83:F1:92:32:C2:90:BC:97:3C:03:F3:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/2BBCF2A0D185734F83F19232C290BC973C03F390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2BBCF2A0D185734F83F19232C290BC973C03F390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpVrUihZaLxxgQi1cZ8C9sCckRrawjUm1QtA7sY62pfF/0/3133382e3132322e3130342e302f32322d3332203d3e20323634333331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:83:6d:26:24:ce:0f:04:61:85:59:20:c3:15:2b:11:15:
         8f:f3:69:7a:0f:77:8d:d4:16:d1:36:45:17:72:59:f5:fd:50:
         0d:5a:09:af:e6:f7:53:b7:5e:90:da:51:be:6d:cd:ef:7d:60:
         7a:8b:43:56:3c:70:72:4c:b8:24:87:ab:b2:d2:49:26:7c:8e:
         f6:97:26:3e:0a:1d:23:e8:8a:99:7b:36:11:93:af:a0:c2:57:
         14:ee:68:ee:fa:8a:57:ef:71:bf:77:dc:02:a2:50:5f:67:52:
         ff:ad:98:f6:21:5f:46:4f:10:d9:5b:6c:f3:df:86:dc:f0:d2:
         08:5b:f9:a9:e4:ca:39:ea:d8:07:8d:d1:b8:c0:06:51:c1:b6:
         4b:ef:23:8a:6e:a4:da:b6:6b:36:16:b1:6e:e8:24:fe:ed:a5:
         2d:02:a5:0f:df:5b:be:5a:71:fb:da:22:78:33:12:18:8c:46:
         30:5d:d1:c3:a1:7c:d7:eb:b1:39:c5:86:83:44:87:a9:bc:69:
         ca:4c:53:7e:ca:8e:2f:8a:9b:a0:43:e4:4a:c5:6e:1b:33:ef:
         77:36:f0:ee:45:46:8b:60:01:ff:94:5c:75:16:fc:42:93:60:
         e6:10:a6:27:62:4f:ff:76:9b:df:fd:ff:57:b4:08:e2:ca:2a:
         44:6a:bf:e5
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTSpulOTy1L7SR/BK+b/W6vGaQKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCQ0YyQTBEMTg1NzM0RjgzRjE5MjMyQzI5MEJDOTcz
QzAzRjM5MDAeFw0yNDAzMjYxOTU0NDhaFw0yNTAzMjUxOTU5NDhaMDMxMTAvBgNV
BAMTKDAyRDMyQUQyRURFQkZDOTRDNzBBODk5OEIzNEEzQThBQzcwRTg0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtrTcTSJNNaOhTL1JoXKzwFA+
4gzrC6vKRoSPugGrcbssoklFWU7S9KBKtHVMLgaCb9AFI5YfciS6XARZVLT4+bew
VLljFXquueo2PDBZDXlDMrus8mEtjl0x2XVkL1jjTucqJJ2bHjRxwWoc3eJsZZzS
RpNrEmsn/ADGQpZyV3v18JDbYiDDagIcd6eRKK9KszCCSSyw9t0MnHy4RYMEWxsg
3R13tJe72fXkkpsSAPZ4SLNqHU6isShD7fjiIECE33LjyNOQxP+FOl+GqD0caH/G
GupZ3F+K4dFapSqcQYqzFlFJBvO4fxdTSiru1tEHGcWQFKnoGX/Xz3fUAyefAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAtMq0u3r/JTHComYs0o6iscOhIowHwYDVR0j
BBgwFoAUK7zyoNGFc0+D8ZIywpC8lzwD85AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BWclVpaFphTHh4Z1FpMWNaOEM5c0Nja1JyYXdqVW0xUXRBN3NZNjJw
ZkYvMC8yQkJDRjJBMEQxODU3MzRGODNGMTkyMzJDMjkwQkM5NzNDMDNGMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJCQkNGMkEwRDE4NTczNEY4
M0YxOTIzMkMyOTBCQzk3M0MwM0YzOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwVnJVaWhaYUx4eGdRaTFjWjhDOXNDY2tScmF3alVtMVF0QTdzWTYycGZGLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzAzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDMzMzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop6aDANBgkqhkiG9w0BAQsFAAOCAQEAjQaD
bSYkzg8EYYVZIMMVKxEVj/Npeg93jdQW0TZFF3JZ9f1QDVoJr+b3U7dekNpRvm3N
731geotDVjxwcky4JIerstJJJnyO9pcmPgodI+iKmXs2EZOvoMJXFO5o7vqKV+9x
v3fcAqJQX2dS/62Y9iFfRk8Q2Vts89+G3PDSCFv5qeTKOerYB43RuMAGUcG2S+8j
im6k2rZrNhaxbugk/u2lLQKlD99bvlpx+9oieDMSGIxGMF3Rw6F81+uxOcWGg0SH
qbxpykxTfsqOL4qboEPkSsVuGzPvdzbw7kVGi2AB/5RcdRb8QpNg5hCmJ2JP/3ab
3/3/V7QI4soqRGq/5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org