Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa
File:                     3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa (raw, json)
Hash identifier:          Q9VGaa6f1pJRo3kVTdQX/6tkDwSi1dTbDKju5HpdnVk=
Subject key identifier:   16:6B:5F:FE:57:9C:56:4C:9F:8D:12:27:DF:A8:F1:74:ED:D1:C3:2D
Certificate issuer:       /CN=BC07094343B21CDB967FB8B26A88D14C2D3B7C62
Certificate serial:       0AE7C0FF2A0851B52D5CF59135A733C3195904C9
Authority key identifier: BC:07:09:43:43:B2:1C:DB:96:7F:B8:B2:6A:88:D1:4C:2D:3B:7C:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa
Signing time:             Tue 22 Aug 2023 15:25:33 +0000
ROA not before:           Tue 22 Aug 2023 15:20:33 +0000
ROA not after:            Tue 20 Aug 2024 15:25:33 +0000
asID:                     263932
IP address blocks:        138.219.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e7:c0:ff:2a:08:51:b5:2d:5c:f5:91:35:a7:33:c3:19:59:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC07094343B21CDB967FB8B26A88D14C2D3B7C62
        Validity
            Not Before: Aug 22 15:20:33 2023 GMT
            Not After : Aug 20 15:25:33 2024 GMT
        Subject: CN=166B5FFE579C564C9F8D1227DFA8F174EDD1C32D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:49:39:0c:51:4f:89:c0:07:5f:8e:2a:4e:
                    6a:70:86:a2:a1:79:a4:7f:10:16:57:d1:7b:08:96:
                    d0:c6:ab:0e:70:c5:a4:33:52:9e:9c:75:5a:13:14:
                    77:90:fc:47:9d:83:af:d3:25:a3:53:9c:08:b3:11:
                    70:58:93:36:8d:fa:27:0b:25:42:37:6c:5a:38:ec:
                    3e:4c:5a:4f:6f:80:46:d5:69:42:40:2a:a9:17:5a:
                    48:a9:c3:19:e8:11:ee:00:5c:76:bf:53:f3:1d:1a:
                    00:ad:e9:de:10:ab:1c:6f:43:a6:0a:7d:26:91:de:
                    59:0e:a2:28:d1:63:a9:29:40:65:81:5b:33:52:a3:
                    3a:74:4c:79:66:bc:78:b9:5f:28:30:09:21:0b:7a:
                    21:3b:27:e9:09:7d:d8:cd:07:41:b1:61:66:70:03:
                    a7:88:09:b2:55:8a:83:13:c8:f2:a1:fb:22:7f:16:
                    e7:b1:50:a4:84:ed:40:a1:bf:79:1d:bb:b5:9f:20:
                    23:b0:0c:c2:d6:56:a5:33:32:e9:0c:be:13:86:43:
                    c5:a0:36:db:42:62:fb:b7:39:46:55:30:46:0a:3f:
                    de:e2:84:31:c0:3e:67:a2:d4:0e:52:89:29:91:3f:
                    c6:06:22:4b:80:67:39:c4:17:6a:1d:4b:50:b4:db:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6B:5F:FE:57:9C:56:4C:9F:8D:12:27:DF:A8:F1:74:ED:D1:C3:2D
            X509v3 Authority Key Identifier:
                keyid:BC:07:09:43:43:B2:1C:DB:96:7F:B8:B2:6A:88:D1:4C:2D:3B:7C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BC07094343B21CDB967FB8B26A88D14C2D3B7C62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLx9sJ9FQnk2bVmevSRFxPaaJX8TQLTC7d63UmWHwKxo/0/3133382e3231392e3138382e302f32322d3234203d3e20323633393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a7:40:41:fd:8f:15:10:c0:0b:e1:8b:45:5d:1b:e1:ed:27:
         db:29:40:f9:31:e4:e8:6b:f9:df:73:fc:1f:4c:b0:37:7b:e0:
         1c:13:04:e3:f9:5a:34:f9:74:d5:a1:b3:e2:64:03:02:0e:bc:
         bb:44:57:cb:d1:58:63:23:f5:4e:26:6c:a4:89:cc:2e:2a:fd:
         95:91:fc:26:51:c5:7e:d7:8a:7f:fb:1a:1e:e3:e9:9f:f5:01:
         6c:30:a0:9d:ee:44:49:c5:5f:11:87:1c:5a:fc:c3:65:fd:7c:
         72:49:8c:64:5c:a1:72:e8:47:71:c5:63:e8:32:f3:43:c2:56:
         16:50:7a:55:e6:ac:0b:3d:0f:4c:12:3b:df:d9:37:01:f0:10:
         51:70:0a:7d:98:83:d0:1b:50:14:e2:27:a6:9a:b7:d2:5a:eb:
         49:d1:c0:cb:a0:be:c2:77:5a:f5:6d:3d:80:2c:98:41:73:b0:
         c4:80:74:1e:d9:91:3e:67:c0:3a:78:da:05:99:01:8f:df:c7:
         fb:a8:c3:ab:8c:a4:ba:e7:87:ce:1c:db:c6:45:cd:08:88:4f:
         52:15:7f:65:f0:c2:87:93:3a:01:94:74:60:3c:47:17:9f:d9:
         e6:38:08:59:5c:21:36:4f:bc:eb:38:bf:56:e6:5e:f5:8b:c1:
         47:ba:da:74
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCufA/yoIUbUtXPWRNaczwxlZBMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkMwNzA5NDM0M0IyMUNEQjk2N0ZCOEIyNkE4OEQxNEMy
RDNCN0M2MjAeFw0yMzA4MjIxNTIwMzNaFw0yNDA4MjAxNTI1MzNaMDMxMTAvBgNV
BAMTKDE2NkI1RkZFNTc5QzU2NEM5RjhEMTIyN0RGQThGMTc0RUREMUMzMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCykEk5DFFPicAHX44qTmpwhqKh
eaR/EBZX0XsIltDGqw5wxaQzUp6cdVoTFHeQ/Eedg6/TJaNTnAizEXBYkzaN+icL
JUI3bFo47D5MWk9vgEbVaUJAKqkXWkipwxnoEe4AXHa/U/MdGgCt6d4QqxxvQ6YK
fSaR3lkOoijRY6kpQGWBWzNSozp0THlmvHi5XygwCSELeiE7J+kJfdjNB0GxYWZw
A6eICbJVioMTyPKh+yJ/FuexUKSE7UChv3kdu7WfICOwDMLWVqUzMukMvhOGQ8Wg
NttCYvu3OUZVMEYKP97ihDHAPmei1A5SiSmRP8YGIkuAZznEF2odS1C028kjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFmtf/lecVkyfjRIn36jxdO3Rwy0wHwYDVR0j
BBgwFoAUvAcJQ0OyHNuWf7iyaojRTC07fGIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSEx4OXNKOUZRbmsyYlZtZXZTUkZ4UGFhSlg4VFFMVEM3ZDYzVW1XSHdL
eG8vMC9CQzA3MDk0MzQzQjIxQ0RCOTY3RkI4QjI2QTg4RDE0QzJEM0I3QzYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JDMDcwOTQzNDNCMjFDREI5
NjdGQjhCMjZBODhEMTRDMkQzQjdDNjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMeDlzSjlGUW5rMmJWbWV2U1JGeFBhYUpYOFRRTFRDN2Q2M1VtV0h3S3hvLzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbvDANBgkqhkiG9w0BAQsFAAOCAQEAXadA
Qf2PFRDAC+GLRV0b4e0n2ylA+THk6Gv533P8H0ywN3vgHBME4/laNPl01aGz4mQD
Ag68u0RXy9FYYyP1TiZspInMLir9lZH8JlHFfteKf/saHuPpn/UBbDCgne5EScVf
EYccWvzDZf18ckmMZFyhcuhHccVj6DLzQ8JWFlB6VeasCz0PTBI739k3AfAQUXAK
fZiD0BtQFOInppq30lrrSdHAy6C+wnda9W09gCyYQXOwxIB0HtmRPmfAOnjaBZkB
j9/H+6jDq4ykuueHzhzbxkXNCIhPUhV/ZfDCh5M6AZR0YDxHF5/Z5jgIWVwhNk+8
6zi/VuZe9YvBR7radA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org