Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa
File:                     3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa (raw, json)
Hash identifier:          7hsNIgfNNLcWN1hMphVnH2VRvZm7KxgZVzDFlXTCBLk=
Subject key identifier:   ED:9F:25:EF:DA:F9:B7:F9:6F:3E:87:22:CC:DD:ED:C7:71:44:F1:BC
Certificate issuer:       /CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
Certificate serial:       0DAF5EF40FF9D2DAD282C71746FA3B9508E473BE
Authority key identifier: 47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa
Signing time:             Tue 16 May 2023 14:59:42 +0000
ROA not before:           Tue 16 May 2023 14:54:42 +0000
ROA not after:            Tue 14 May 2024 14:59:42 +0000
asID:                     263569
IP address blocks:        138.118.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:af:5e:f4:0f:f9:d2:da:d2:82:c7:17:46:fa:3b:95:08:e4:73:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47598FC43095FBBAC65DD11244210ED67DD9A40E
        Validity
            Not Before: May 16 14:54:42 2023 GMT
            Not After : May 14 14:59:42 2024 GMT
        Subject: CN=ED9F25EFDAF9B7F96F3E8722CCDDEDC77144F1BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:59:be:51:71:0e:4d:a3:76:57:e7:dd:53:
                    4e:be:fe:e2:12:f2:7c:4b:d0:b1:d8:34:20:6c:72:
                    e9:b9:27:f7:2b:98:35:b6:c2:5e:57:7c:a1:aa:ff:
                    52:b5:cd:74:e3:ff:59:73:ff:8d:94:38:42:d9:b4:
                    e7:af:a1:25:01:64:43:a0:2b:4a:5f:09:e2:b6:58:
                    e3:3e:d1:f3:b6:b2:51:2d:95:05:6d:53:d0:c0:32:
                    67:3c:2e:07:6d:28:36:e1:14:2b:a5:cf:dc:e1:f4:
                    26:3a:af:4f:70:5f:21:59:ab:4d:61:8f:8f:47:de:
                    e8:6e:8b:7f:9e:c1:3f:ff:b7:4c:fe:8e:c0:83:48:
                    d4:ab:0a:04:f6:81:7a:e7:37:d8:ab:35:00:78:2a:
                    df:a7:e2:ac:bc:a7:25:ee:18:28:52:10:6a:f8:dc:
                    3f:06:28:fa:08:34:51:df:26:6a:71:c0:d7:95:08:
                    e5:cb:76:22:ac:a4:aa:c8:75:9c:6c:3a:5d:bc:7f:
                    85:5e:bd:63:2f:e9:12:88:09:07:44:e8:e8:b9:91:
                    37:54:79:26:af:e0:7b:4e:0e:25:b6:42:4e:b2:b5:
                    7a:cf:ca:ce:2f:e2:2b:41:94:61:1d:64:d7:e6:00:
                    21:60:ca:89:54:48:91:2a:71:33:21:96:78:7f:ea:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9F:25:EF:DA:F9:B7:F9:6F:3E:87:22:CC:DD:ED:C7:71:44:F1:BC
            X509v3 Authority Key Identifier:
                keyid:47:59:8F:C4:30:95:FB:BA:C6:5D:D1:12:44:21:0E:D6:7D:D9:A4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/47598FC43095FBBAC65DD11244210ED67DD9A40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/47598FC43095FBBAC65DD11244210ED67DD9A40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/2/3133382e3131382e3136382e302f32322d3234203d3e20323633353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:a7:4c:b6:2f:cd:39:a0:8e:e1:b3:a4:86:c1:9f:f4:6e:1c:
         5b:6a:f2:dd:3e:01:b8:ca:3b:5b:b2:e2:d0:4e:3b:e9:f1:85:
         b9:9c:c6:e1:0b:9c:6d:3a:91:6e:f9:9b:6d:e0:77:65:e1:86:
         ff:d9:83:ac:94:a5:38:1f:c5:88:a2:23:2f:60:aa:ab:12:10:
         65:a4:cd:b2:86:44:c4:bd:26:76:aa:86:c9:30:2e:57:3b:7d:
         5a:e0:06:1d:bc:bf:11:18:7f:d8:b2:d9:65:c8:50:ad:24:32:
         61:86:cd:3a:85:08:99:93:ca:93:88:66:cf:c7:06:2f:c1:49:
         d8:0f:d5:b1:37:24:b9:67:b0:c6:a1:2f:6e:f4:09:5e:22:e7:
         3c:5c:f3:87:da:de:6f:f7:4c:e9:d1:a0:f3:eb:6f:41:97:32:
         9a:bf:a5:5f:30:6a:e4:c5:73:e8:26:d4:3a:58:eb:ea:29:d8:
         3b:1f:09:56:06:6d:59:e0:ea:30:0a:e3:7f:ed:db:cb:12:b0:
         71:f1:b3:80:d0:6f:2a:43:32:2b:2f:cc:b7:ef:df:79:bb:72:
         a6:b2:a2:c0:f4:f2:fc:e1:cf:c2:b2:e2:59:79:8e:45:bf:c3:
         e3:db:23:d8:72:08:26:b3:b6:70:08:78:e5:54:d1:83:63:60:
         bd:39:c0:06
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUDa9e9A/50trSgscXRvo7lQjkc74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc1OThGQzQzMDk1RkJCQUM2NUREMTEyNDQyMTBFRDY3
REQ5QTQwRTAeFw0yMzA1MTYxNDU0NDJaFw0yNDA1MTQxNDU5NDJaMDMxMTAvBgNV
BAMTKEVEOUYyNUVGREFGOUI3Rjk2RjNFODcyMkNDRERFREM3NzE0NEYxQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBclm+UXEOTaN2V+fdU06+/uIS
8nxL0LHYNCBscum5J/crmDW2wl5XfKGq/1K1zXTj/1lz/42UOELZtOevoSUBZEOg
K0pfCeK2WOM+0fO2slEtlQVtU9DAMmc8LgdtKDbhFCulz9zh9CY6r09wXyFZq01h
j49H3uhui3+ewT//t0z+jsCDSNSrCgT2gXrnN9irNQB4Kt+n4qy8pyXuGChSEGr4
3D8GKPoINFHfJmpxwNeVCOXLdiKspKrIdZxsOl28f4VevWMv6RKICQdE6Oi5kTdU
eSav4HtODiW2Qk6ytXrPys4v4itBlGEdZNfmACFgyolUSJEqcTMhlnh/6sxdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU7Z8l79r5t/lvPocizN3tx3FE8bwwHwYDVR0j
BBgwFoAUR1mPxDCV+7rGXdESRCEO1n3ZpA4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGNmTGhrcXU3d3dRYzRGRlNXaVNkcjJKZmI1bkNiWHVtb2ZoZkRYUEVM
WHgvMi80NzU5OEZDNDMwOTVGQkJBQzY1REQxMTI0NDIxMEVENjdERDlBNDBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ3NTk4RkM0MzA5NUZCQkFD
NjVERDExMjQ0MjEwRUQ2N0REOUE0MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hjZkxoa3F1N3d3UWM0RkZTV2lTZHIySmZiNW5DYlh1bW9maGZEWFBFTFh4LzIv
MzEzMzM4MmUzMTMxMzgyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop2qDANBgkqhkiG9w0BAQsFAAOCAQEAN6dM
ti/NOaCO4bOkhsGf9G4cW2ry3T4BuMo7W7Li0E476fGFuZzG4QucbTqRbvmbbeB3
ZeGG/9mDrJSlOB/FiKIjL2CqqxIQZaTNsoZExL0mdqqGyTAuVzt9WuAGHby/ERh/
2LLZZchQrSQyYYbNOoUImZPKk4hmz8cGL8FJ2A/VsTckuWewxqEvbvQJXiLnPFzz
h9reb/dM6dGg8+tvQZcymr+lXzBq5MVz6CbUOljr6inYOx8JVgZtWeDqMArjf+3b
yxKwcfGzgNBvKkMyKy/Mt+/febtyprKiwPTy/OHPwrLiWXmORb/D49sj2HIIJrO2
cAh45VTRg2NgvTnABg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org