Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32332d3233203d3e20323634313738.roa
File:                     3133382e39392e37322e302f32332d3233203d3e20323634313738.roa (raw, json)
Hash identifier:          e8MiTxv4N8bt5A16tVEXLodcCIsUdES5+lx2PRYGyIc=
Subject key identifier:   0C:4F:5A:CC:EB:A1:ED:DF:A5:24:62:43:79:92:63:1E:F8:B7:58:E5
Certificate issuer:       /CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
Certificate serial:       0D66910BDA6E573026338EBF496DB4B3C81B5855
Authority key identifier: 9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32332d3233203d3e20323634313738.roa
Signing time:             Sat 10 Dec 2022 11:59:58 +0000
ROA not before:           Sat 10 Dec 2022 11:54:58 +0000
ROA not after:            Sat 09 Dec 2023 11:59:58 +0000
asID:                     264178
IP address blocks:        138.99.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:66:91:0b:da:6e:57:30:26:33:8e:bf:49:6d:b4:b3:c8:1b:58:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB
        Validity
            Not Before: Dec 10 11:54:58 2022 GMT
            Not After : Dec  9 11:59:58 2023 GMT
        Subject: CN=0C4F5ACCEBA1EDDFA52462437992631EF8B758E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b2:b7:e3:71:8e:b7:1e:c3:1e:01:b9:0a:d8:
                    d8:62:81:7d:7d:36:d6:35:13:5a:92:a1:b0:22:4c:
                    79:0a:46:3f:02:42:98:21:f6:e0:cc:82:a5:7f:9c:
                    21:83:cf:f2:2c:5b:b2:b4:6a:ea:a0:ed:84:4b:6d:
                    4a:5a:61:9b:d7:1a:7b:b9:4d:5c:05:0c:45:93:67:
                    00:dd:e5:33:d3:56:c1:50:4e:6b:47:61:a3:eb:ab:
                    65:27:22:d5:1a:b0:a8:43:47:25:68:b8:d1:5b:89:
                    99:e7:c6:22:06:93:47:03:e4:22:92:c5:84:86:80:
                    b8:f0:73:8c:a0:34:68:1e:b5:48:17:ce:78:9c:51:
                    ca:53:c4:f4:99:63:31:04:a5:15:49:9c:47:b7:64:
                    7f:d1:25:5d:3d:ce:75:de:0c:30:7d:92:09:db:fe:
                    8b:6d:7a:42:bf:5d:57:d9:18:48:60:04:de:6e:43:
                    d2:6c:05:1b:d3:25:2c:f8:22:97:9d:53:a6:81:70:
                    ff:c4:0e:30:57:fc:51:da:cd:13:63:e8:99:02:cb:
                    f7:01:55:2a:fe:a3:b4:e4:04:21:e1:22:40:ba:b4:
                    1c:b4:4c:3b:e6:70:1c:ea:5d:0d:2b:e1:21:59:31:
                    8d:42:9f:dc:a4:68:81:af:8a:cc:dc:b0:b8:81:b9:
                    f6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:5A:CC:EB:A1:ED:DF:A5:24:62:43:79:92:63:1E:F8:B7:58:E5
            X509v3 Authority Key Identifier:
                keyid:9D:BC:9C:78:87:79:31:A9:B3:0C:34:BE:2D:D6:9C:FA:7F:EC:C4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DBC9C78877931A9B30C34BE2DD69CFA7FECC4BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsoHV4fRLtB4iaHER59fKtij3VBCS6sqLkVxNXZRXeD2/0/3133382e39392e37322e302f32332d3233203d3e20323634313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:86:eb:c9:af:e4:a6:9e:0f:b2:e4:f6:5e:34:cf:4b:0e:
         5d:6e:08:fe:e7:42:ad:52:c4:3c:a2:b8:75:26:60:95:77:ab:
         48:01:29:e8:ae:1d:5b:a0:52:76:19:01:aa:90:6b:61:3e:99:
         a9:55:8a:34:b5:61:53:15:c7:f5:d3:10:19:d7:fe:ed:1a:b5:
         69:1a:57:19:8b:4f:85:8d:01:1d:33:fa:c7:10:84:4d:85:fe:
         73:53:8d:6e:f0:37:5f:11:4a:f3:02:e4:5e:fc:8e:04:ef:e9:
         dc:fb:e1:e6:79:db:c3:5a:16:f8:e1:24:6e:c8:f7:85:14:88:
         e0:bc:3b:32:34:12:13:39:f5:0c:e3:fe:5e:a7:1c:77:bc:ec:
         60:b8:c6:11:f8:a4:53:6c:00:d9:be:60:5b:ee:ee:56:38:62:
         96:02:b7:a0:af:cc:8c:b6:42:18:7b:b2:69:4a:41:a7:49:03:
         b3:c8:65:65:27:6f:be:fa:6c:b4:4f:8f:21:40:0a:f2:4f:65:
         00:83:88:a4:1e:56:b6:03:5c:ab:d7:d2:d1:e5:15:93:08:1c:
         07:31:02:a6:d6:9d:97:2d:99:2f:db:ea:b7:61:f8:72:15:86:
         81:36:79:99:65:96:43:9d:69:4e:9b:ca:88:6c:4f:75:54:eb:
         64:c0:dd:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDWaRC9puVzAmM46/SW20s8gbWFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURCQzlDNzg4Nzc5MzFBOUIzMEMzNEJFMkRENjlDRkE3
RkVDQzRCQjAeFw0yMjEyMTAxMTU0NThaFw0yMzEyMDkxMTU5NThaMDMxMTAvBgNV
BAMTKDBDNEY1QUNDRUJBMUVEREZBNTI0NjI0Mzc5OTI2MzFFRjhCNzU4RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgsrfjcY63HsMeAbkK2NhigX19
NtY1E1qSobAiTHkKRj8CQpgh9uDMgqV/nCGDz/IsW7K0auqg7YRLbUpaYZvXGnu5
TVwFDEWTZwDd5TPTVsFQTmtHYaPrq2UnItUasKhDRyVouNFbiZnnxiIGk0cD5CKS
xYSGgLjwc4ygNGgetUgXznicUcpTxPSZYzEEpRVJnEe3ZH/RJV09znXeDDB9kgnb
/ottekK/XVfZGEhgBN5uQ9JsBRvTJSz4IpedU6aBcP/EDjBX/FHazRNj6JkCy/cB
VSr+o7TkBCHhIkC6tBy0TDvmcBzqXQ0r4SFZMY1Cn9ykaIGviszcsLiBufZpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDE9azOuh7d+lJGJDeZJjHvi3WOUwHwYDVR0j
BBgwFoAUnbyceId5MamzDDS+Ldac+n/sxLswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3NvSFY0ZlJMdEI0aWFIRVI1OWZLdGlqM1ZCQ1M2c3FMa1Z4TlhaUlhl
RDIvMC85REJDOUM3ODg3NzkzMUE5QjMwQzM0QkUyREQ2OUNGQTdGRUNDNEJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEQkM5Qzc4ODc3OTMxQTlC
MzBDMzRCRTJERDY5Q0ZBN0ZFQ0M0QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dzb0hWNGZSTHRCNGlhSEVSNTlmS3RpajNWQkNTNnNxTGtWeE5YWlJYZUQyLzAv
MzEzMzM4MmUzOTM5MmUzNzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzEzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBimNIMA0GCSqGSIb3DQEBCwUAA4IBAQCCn4brya/k
pp4PsuT2XjTPSw5dbgj+50KtUsQ8orh1JmCVd6tIASnorh1boFJ2GQGqkGthPpmp
VYo0tWFTFcf10xAZ1/7tGrVpGlcZi0+FjQEdM/rHEIRNhf5zU41u8DdfEUrzAuRe
/I4E7+nc++HmedvDWhb44SRuyPeFFIjgvDsyNBITOfUM4/5epxx3vOxguMYR+KRT
bADZvmBb7u5WOGKWAregr8yMtkIYe7JpSkGnSQOzyGVlJ2+++my0T48hQAryT2UA
g4ikHla2A1yr19LR5RWTCBwHMQKm1p2XLZkv2+q3YfhyFYaBNnmZZZZDnWlOm8qI
bE91VOtkwN3i
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org