Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32322d3232203d3e203238353938.roa
File:                     3133382e3132322e38302e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier:          +1BdD0I+dhkwXgY7h7KPPVKUSf4/wNsTKPMd8r3GQhs=
Subject key identifier:   7B:C5:EF:99:D1:2A:8B:8B:88:86:1B:ED:43:30:9F:E7:F7:EC:E8:91
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       4F1E4EE91AB591E0B7740B39375B861AF7261BFF
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32322d3232203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:00 +0000
ROA not before:           Mon 23 Oct 2023 12:56:00 +0000
ROA not after:            Mon 21 Oct 2024 13:01:00 +0000
asID:                     28598
IP address blocks:        138.122.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:1e:4e:e9:1a:b5:91:e0:b7:74:0b:39:37:5b:86:1a:f7:26:1b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:00 2023 GMT
            Not After : Oct 21 13:01:00 2024 GMT
        Subject: CN=7BC5EF99D12A8B8B88861BED43309FE7F7ECE891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:54:49:9d:c7:be:79:14:60:12:a6:2c:25:
                    8e:ff:fb:3f:4e:72:97:c7:df:51:77:76:ea:cc:78:
                    c1:9e:72:ce:75:fe:43:3a:24:ef:96:6d:14:e5:bb:
                    0f:86:12:f4:3e:fc:80:e2:5c:bf:2f:83:25:1a:de:
                    f2:cf:a6:35:2d:e1:42:71:e1:3c:ed:4e:4d:67:9f:
                    80:31:2f:dc:3e:a2:1b:69:8b:64:b7:17:e5:e1:43:
                    ee:1a:f6:41:21:a0:1a:4e:1e:20:b6:a9:01:c2:c8:
                    ff:18:d6:36:72:e4:71:ef:e3:26:d8:db:6c:99:91:
                    07:f3:5f:f3:3d:7c:ff:d8:d5:03:1f:99:a3:fc:1f:
                    c3:77:f3:72:65:a6:ca:f5:89:50:86:dc:dc:5f:36:
                    78:64:b0:7b:ae:1b:b2:2c:f4:28:75:37:d1:8a:55:
                    36:67:ae:9f:fa:42:06:f9:e6:64:0d:82:c0:69:6c:
                    71:41:21:87:4b:95:70:70:76:40:15:83:0f:32:ad:
                    5e:20:d0:d3:4d:85:21:29:12:18:93:76:69:06:b9:
                    48:ad:c6:6a:ff:be:08:69:98:3d:5a:4b:29:c6:51:
                    af:37:f5:f2:e4:85:c1:9c:20:19:c9:fa:f9:ef:64:
                    2e:09:5f:0c:61:b5:39:fa:ab:c5:03:f1:64:4b:11:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C5:EF:99:D1:2A:8B:8B:88:86:1B:ED:43:30:9F:E7:F7:EC:E8:91
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32322d3232203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:b1:45:81:0b:6c:5e:db:09:74:38:da:8c:b3:6a:0f:16:54:
         6a:ae:14:02:2c:e3:d3:16:8a:95:25:22:37:30:c7:f8:d2:f4:
         00:93:ce:de:f9:21:e9:d8:e9:b3:6d:61:9e:38:77:21:bb:eb:
         7b:bc:a5:25:26:36:10:77:63:57:8f:10:8f:e0:8f:80:55:ed:
         f5:32:fb:8c:1d:6c:bc:e6:cc:ec:11:60:9e:6d:5a:7e:6a:e3:
         51:f4:49:ab:b8:26:a6:fe:0e:7c:6d:f4:50:26:64:db:34:ec:
         9b:48:81:c3:44:4b:8a:d4:de:c5:ef:e3:f1:da:0c:73:84:db:
         de:c1:21:f0:07:63:1b:23:15:d1:c9:b4:58:db:b3:1e:53:61:
         e4:16:01:cf:e0:ac:da:8d:f0:40:19:7b:2b:02:ef:cb:c8:a9:
         d8:09:fc:43:7c:b1:6a:7a:12:40:de:b5:1b:79:08:aa:f7:d0:
         dc:69:0e:f5:23:92:be:aa:5f:f6:8e:05:14:b6:68:59:c7:98:
         4b:76:11:d6:3f:82:0e:09:3b:51:71:20:8d:54:7f:f9:95:3c:
         e2:32:61:4b:dc:4d:13:ed:bd:fe:1b:47:a3:a8:ed:5d:b7:d6:
         ce:b8:fe:b7:d6:3e:0d:84:8f:f2:a6:01:bf:68:55:09:3d:70:
         11:00:96:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTx5O6Rq1keC3dAs5N1uGGvcmG/8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU2MDBaFw0yNDEwMjExMzAxMDBaMDMxMTAvBgNV
BAMTKDdCQzVFRjk5RDEyQThCOEI4ODg2MUJFRDQzMzA5RkU3RjdFQ0U4OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAVRJnce+eRRgEqYsJY7/+z9O
cpfH31F3durMeMGecs51/kM6JO+WbRTluw+GEvQ+/IDiXL8vgyUa3vLPpjUt4UJx
4TztTk1nn4AxL9w+ohtpi2S3F+XhQ+4a9kEhoBpOHiC2qQHCyP8Y1jZy5HHv4ybY
22yZkQfzX/M9fP/Y1QMfmaP8H8N383Jlpsr1iVCG3NxfNnhksHuuG7Is9Ch1N9GK
VTZnrp/6Qgb55mQNgsBpbHFBIYdLlXBwdkAVgw8yrV4g0NNNhSEpEhiTdmkGuUit
xmr/vghpmD1aSynGUa839fLkhcGcIBnJ+vnvZC4JXwxhtTn6q8UD8WRLEWBbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUe8XvmdEqi4uIhhvtQzCf5/fs6JEwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzMzM4MmUzMTMyMzIyZTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinpQMA0GCSqGSIb3DQEBCwUAA4IBAQBtsUWBC2xe
2wl0ONqMs2oPFlRqrhQCLOPTFoqVJSI3MMf40vQAk87e+SHp2OmzbWGeOHchu+t7
vKUlJjYQd2NXjxCP4I+AVe31MvuMHWy85szsEWCebVp+auNR9EmruCam/g58bfRQ
JmTbNOybSIHDREuK1N7F7+Px2gxzhNvewSHwB2MbIxXRybRY27MeU2HkFgHP4Kza
jfBAGXsrAu/LyKnYCfxDfLFqehJA3rUbeQiq99DcaQ71I5K+ql/2jgUUtmhZx5hL
dhHWP4IOCTtRcSCNVH/5lTziMmFL3E0T7b3+G0ejqO1dt9bOuP631j4NhI/ypgG/
aFUJPXARAJYD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org