Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa
File:                     3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa (raw, json)
Hash identifier:          yvSnNII5eY2kqXWQxGb8nli1ftlWceNKhg4suw2QiK4=
Subject key identifier:   81:CA:47:84:75:67:FE:0C:20:09:E6:E9:5C:33:B5:74:5A:DD:74:51
Certificate issuer:       /CN=8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0
Certificate serial:       2D513B13C18D27E314B23D52E1235AEB11D43E10
Authority key identifier: 8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa
Signing time:             Wed 31 May 2023 23:00:00 +0000
ROA not before:           Wed 31 May 2023 22:55:00 +0000
ROA not after:            Fri 31 May 2024 23:00:00 +0000
asID:                     264268
IP address blocks:        138.118.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:51:3b:13:c1:8d:27:e3:14:b2:3d:52:e1:23:5a:eb:11:d4:3e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0
        Validity
            Not Before: May 31 22:55:00 2023 GMT
            Not After : May 31 23:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b3:e4:fd:fe:de:c8:9f:1a:30:6c:0a:52:95:
                    7d:23:7b:49:c5:bc:31:3a:e0:96:93:f4:4b:5f:87:
                    7b:a0:1e:4f:ec:6c:31:36:06:cc:6e:50:9b:83:df:
                    62:a3:c1:5d:9d:f3:1b:9c:60:b0:ae:79:62:20:5e:
                    bc:b0:b9:84:67:6f:fb:ac:57:a4:df:f2:17:72:7e:
                    31:45:15:23:96:76:d1:45:07:04:78:6a:da:57:55:
                    94:bc:06:7a:46:52:58:ed:8c:7d:56:5a:dd:79:e8:
                    0e:b7:07:81:35:2c:47:4e:53:4b:0e:e3:32:9c:8c:
                    b0:59:4e:b4:57:50:e3:29:55:3b:e3:e0:05:72:22:
                    26:f8:54:67:a4:dc:99:a5:2c:6a:b9:cb:2a:f9:3d:
                    18:26:c0:10:5a:82:e0:a7:c2:14:bc:72:38:3e:4d:
                    fe:58:e5:c4:aa:39:83:11:a1:f6:c4:b2:fe:2f:5f:
                    8c:a2:6b:3b:e3:6e:2d:2e:de:3d:7f:13:8d:b3:50:
                    84:e5:f4:4e:2f:42:0a:4f:bf:e1:78:49:11:56:b7:
                    ec:d0:d9:ea:b0:3e:45:fa:4d:2e:2a:ab:73:a9:45:
                    22:5e:fc:36:8c:99:e6:5f:3d:54:6d:62:26:e7:ba:
                    29:3e:7e:0f:d8:35:73:2d:5b:e0:8b:57:01:ce:6a:
                    37:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CA:47:84:75:67:FE:0C:20:09:E6:E9:5C:33:B5:74:5A:DD:74:51
            X509v3 Authority Key Identifier:
                keyid:8D:B6:DA:6B:EB:1D:8B:D2:87:39:7D:F4:88:2B:09:6C:D4:CE:C6:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DB6DA6BEB1D8BD287397DF4882B096CD4CEC6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7yhUDfun4XLEAery71nu3j8yScLmE3jw2kJmvRNzb8k/0/3133382e3131382e3137362e302f32322d3234203d3e20323634323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ad:c2:96:2e:c7:b9:1f:6c:a0:ae:6f:51:79:c8:41:52:38:
         f0:6b:ae:1d:4d:dd:da:e9:d0:5f:90:21:84:6a:2e:85:81:2b:
         17:33:e6:fc:68:22:a5:62:a8:ee:a6:76:c3:4f:2d:20:92:8d:
         06:f8:8e:90:f1:6b:ab:bb:60:1b:17:ff:86:d1:cf:49:59:86:
         6a:d0:ae:8a:64:5c:8b:e5:8c:52:a9:9a:bb:96:2a:11:50:8a:
         f6:9e:8f:94:93:8a:ed:bb:e9:e4:53:b2:47:1e:82:d8:b5:26:
         1b:8f:f0:4e:69:8a:96:33:fa:4d:7a:ea:5f:44:76:1e:3a:4f:
         73:d2:67:ac:47:8a:e5:dd:78:76:59:95:11:a4:33:b4:9f:3a:
         67:12:f3:e5:8b:38:40:72:b0:08:60:87:2b:28:10:02:b2:8a:
         aa:77:59:e7:08:71:ef:c6:d4:b5:c3:88:fb:2b:3f:84:06:0d:
         0a:87:d4:be:2e:9a:79:ca:2e:a3:69:57:54:7f:82:58:93:d2:
         b7:c6:78:05:f5:6c:31:78:16:27:5b:47:83:10:e1:90:d9:d7:
         61:1c:9f:04:60:8c:80:0d:99:17:2b:eb:20:c3:1b:3d:2e:69:
         1b:b4:df:c6:fe:25:b7:4f:e4:75:24:e6:92:88:c3:ab:50:a3:
         90:a8:b3:3d
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIULVE7E8GNJ+MUsj1S4SNa6xHUPhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERCNkRBNkJFQjFEOEJEMjg3Mzk3REY0ODgyQjA5NkNE
NENFQzZGMDAeFw0yMzA1MzEyMjU1MDBaFw0yNDA1MzEyMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjhCM0U0RkRGRURFQzg5RjFB
MzA2QzBBNTI5NTdEMjM3QjQ5QzVCQzMxM0FFMDk2OTNGNDRCNUY4NzdCQTAxRTRG
RUM2QzMxMzYwNkNDNkU1MDlCODNERjYyQTNDMTVEOURGMzFCOUM2MEIwQUU3OTYy
MjA1RUJDQjBCOTg0Njc2RkZCQUM1N0E0REZGMjE3NzI3RTMxNDUxNTIzOTY3NkQx
NDUwNzA0Nzg2QURBNTc1NTk0QkMwNjdBNDY1MjU4RUQ4QzdENTY1QURENzlFODBF
QjcwNzgxMzUyQzQ3NEU1MzRCMEVFMzMyOUM4Q0IwNTk0RUI0NTc1MEUzMjk1NTNC
RTNFMDA1NzIyMjI2Rjg1NDY3QTREQzk5QTUyQzZBQjlDQjJBRjkzRDE4MjZDMDEw
NUE4MkUwQTdDMjE0QkM3MjM4M0U0REZFNThFNUM0QUEzOTgzMTFBMUY2QzRCMkZF
MkY1RjhDQTI2QjNCRTM2RTJEMkVERTNEN0YxMzhEQjM1MDg0RTVGNDRFMkY0MjBB
NEZCRkUxNzg0OTExNTZCN0VDRDBEOUVBQjAzRTQ1RkE0RDJFMkFBQjczQTk0NTIy
NUVGQzM2OEM5OUU2NUYzRDU0NkQ2MjI2RTdCQTI5M0U3RTBGRDgzNTczMkQ1QkUw
OEI1NzAxQ0U2QTM3NTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuLPk/f7eyJ8aMGwKUpV9I3tJxbwxOuCWk/RLX4d7oB5P7GwxNgbM
blCbg99io8FdnfMbnGCwrnliIF68sLmEZ2/7rFek3/IXcn4xRRUjlnbRRQcEeGra
V1WUvAZ6RlJY7Yx9VlrdeegOtweBNSxHTlNLDuMynIywWU60V1DjKVU74+AFciIm
+FRnpNyZpSxqucsq+T0YJsAQWoLgp8IUvHI4Pk3+WOXEqjmDEaH2xLL+L1+Moms7
424tLt49fxONs1CE5fROL0IKT7/heEkRVrfs0NnqsD5F+k0uKqtzqUUiXvw2jJnm
Xz1UbWIm57opPn4P2DVzLVvgi1cBzmo3WQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FIHKR4R1Z/4MIAnm6VwztXRa3XRRMB8GA1UdIwQYMBaAFI222mvrHYvShzl99Igr
CWzUzsbwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0g3eWhVRGZ1bjRYTEVB
ZXJ5NzFudTNqOHlTY0xtRTNqdzJrSm12Uk56YjhrLzAvOERCNkRBNkJFQjFEOEJE
Mjg3Mzk3REY0ODgyQjA5NkNENENFQzZGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84REI2REE2QkVCMUQ4QkQyODczOTdERjQ4ODJCMDk2Q0Q0Q0VD
NkYwLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IN3loVURmdW40WExFQWVyeTcx
bnUzajh5U2NMbUUzancya0ptdlJOemI4ay8wLzMxMzMzODJlMzEzMTM4MmUzMTM3
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzMjM2Mzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAKKdrAwDQYJKoZIhvcNAQELBQADggEBAAWtwpYux7kfbKCub1F5yEFSOPBrrh1N
3drp0F+QIYRqLoWBKxcz5vxoIqViqO6mdsNPLSCSjQb4jpDxa6u7YBsX/4bRz0lZ
hmrQropkXIvljFKpmruWKhFQivaej5STiu276eRTskcegti1JhuP8E5pipYz+k16
6l9Edh46T3PSZ6xHiuXdeHZZlRGkM7SfOmcS8+WLOEBysAhghysoEAKyiqp3WecI
ce/G1LXDiPsrP4QGDQqH1L4umnnKLqNpV1R/gliT0rfGeAX1bDF4FidbR4MQ4ZDZ
12EcnwRgjIANmRcr6yDDGz0uaRu038b+JbdP5HUk5pKIw6tQo5Cosz0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org