Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38322e302f32332d3233203d3e203238353938.roa
File:                     3133382e3132322e38322e302f32332d3233203d3e203238353938.roa (raw, json)
Hash identifier:          mfQPlG8uPJyK7nVEKyG8bKvrFxw7qXyIwDzAasak+No=
Subject key identifier:   44:34:1C:F3:1A:A2:CB:00:63:9B:4A:EC:86:C0:0A:1C:4D:E8:86:1C
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       2AAB1B52ABB7F13F010D5EAAA999D883CBD82E8A
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38322e302f32332d3233203d3e203238353938.roa
Signing time:             Mon 07 Nov 2022 17:00:40 +0000
ROA not before:           Mon 07 Nov 2022 16:55:40 +0000
ROA not after:            Mon 06 Nov 2023 17:00:40 +0000
asID:                     28598
IP address blocks:        138.122.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:ab:1b:52:ab:b7:f1:3f:01:0d:5e:aa:a9:99:d8:83:cb:d8:2e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Nov  7 16:55:40 2022 GMT
            Not After : Nov  6 17:00:40 2023 GMT
        Subject: CN=44341CF31AA2CB00639B4AEC86C00A1C4DE8861C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:46:e1:dc:56:97:38:6c:45:64:81:05:dd:
                    42:fc:84:43:fd:92:3d:02:66:93:8f:81:ea:aa:5c:
                    8e:2f:4e:2e:74:63:19:ab:68:d6:6a:9f:24:0f:d9:
                    87:fe:30:bc:d3:30:2c:ae:16:da:d8:78:f4:2b:de:
                    d1:99:5e:e5:5f:f7:b7:86:55:45:ac:cd:8e:1f:b5:
                    30:31:b4:73:b8:f3:a8:85:26:f2:d8:8a:bc:8c:87:
                    05:8b:49:63:66:1b:15:1e:99:5e:af:db:ec:e2:bf:
                    fc:d7:d8:5a:08:aa:dc:da:6d:a9:56:ea:a4:d5:bc:
                    80:67:83:c7:70:53:b7:ca:c9:48:12:76:fd:d6:f0:
                    cd:f5:48:b4:3f:59:38:71:5d:b1:b7:61:27:c6:b5:
                    e6:5f:d0:89:30:c3:2b:20:97:3d:37:fc:0a:6f:ea:
                    26:e7:8e:11:57:af:b8:51:98:d2:91:83:b8:8a:70:
                    3f:ee:f4:9f:93:f5:6b:8c:d8:a3:1f:4f:c0:6e:ac:
                    25:8f:d3:a9:cd:5c:b4:df:a6:e8:e3:e4:ff:30:d7:
                    7a:28:8e:46:80:03:0b:39:b5:10:12:30:2f:98:91:
                    82:26:c1:3b:35:58:23:84:68:b4:3c:4a:1b:b9:6f:
                    0f:46:e0:ab:6e:40:b0:81:74:0a:16:58:df:33:ab:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:34:1C:F3:1A:A2:CB:00:63:9B:4A:EC:86:C0:0A:1C:4D:E8:86:1C
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38322e302f32332d3233203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:da:71:ce:8f:69:7e:f4:8d:2c:bb:d9:8d:85:72:64:d3:8b:
         32:39:3c:82:0f:7d:33:93:b6:ed:d3:87:2c:fb:90:5e:63:41:
         41:e2:22:35:5d:34:6c:9c:81:d2:99:b8:99:0d:ca:0b:c6:ea:
         15:7f:98:ba:2d:9d:6a:72:55:66:e9:2e:6e:82:3e:b8:66:03:
         8f:17:8b:d0:cc:b7:7a:24:e5:c3:53:64:c1:91:91:a3:46:cf:
         5b:9d:bc:b6:62:60:73:9c:0f:94:fb:3b:bd:18:cb:19:99:c1:
         54:5b:7b:29:7d:fa:f1:e6:eb:6d:d5:75:9f:fe:e8:ad:28:2b:
         c1:80:3d:29:e3:25:42:c5:cf:2a:dd:52:ba:df:e6:b1:e7:5c:
         7d:a8:f1:c4:4d:8c:6b:2b:bd:0c:0f:72:65:be:c8:93:7b:e5:
         18:02:58:c1:c0:01:06:df:8e:64:8e:fb:66:e2:99:91:22:14:
         19:1b:84:d1:02:2d:a0:80:5b:66:31:65:d2:a5:08:ac:4d:00:
         c9:f6:5a:e7:27:3c:22:b7:99:e9:16:3e:a0:a1:c1:52:74:16:
         e9:3d:e6:02:fb:10:b2:0c:97:a1:b5:30:29:49:5c:23:e8:3b:
         b0:71:d8:a0:c3:40:b0:e4:90:5b:39:97:fc:58:b6:93:9e:f8:
         36:8b:8a:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKqsbUqu38T8BDV6qqZnYg8vYLoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMjExMDcxNjU1NDBaFw0yMzExMDYxNzAwNDBaMDMxMTAvBgNV
BAMTKDQ0MzQxQ0YzMUFBMkNCMDA2MzlCNEFFQzg2QzAwQTFDNERFODg2MUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8fEbh3FaXOGxFZIEF3UL8hEP9
kj0CZpOPgeqqXI4vTi50YxmraNZqnyQP2Yf+MLzTMCyuFtrYePQr3tGZXuVf97eG
VUWszY4ftTAxtHO486iFJvLYiryMhwWLSWNmGxUemV6v2+ziv/zX2FoIqtzabalW
6qTVvIBng8dwU7fKyUgSdv3W8M31SLQ/WThxXbG3YSfGteZf0Ikwwysglz03/Apv
6ibnjhFXr7hRmNKRg7iKcD/u9J+T9WuM2KMfT8BurCWP06nNXLTfpujj5P8w13oo
jkaAAws5tRASMC+YkYImwTs1WCOEaLQ8Shu5bw9G4KtuQLCBdAoWWN8zqzhHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURDQc8xqiywBjm0rshsAKHE3ohhwwHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzMzM4MmUzMTMyMzIyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBinpSMA0GCSqGSIb3DQEBCwUAA4IBAQBH2nHOj2l+
9I0su9mNhXJk04syOTyCD30zk7bt04cs+5BeY0FB4iI1XTRsnIHSmbiZDcoLxuoV
f5i6LZ1qclVm6S5ugj64ZgOPF4vQzLd6JOXDU2TBkZGjRs9bnby2YmBznA+U+zu9
GMsZmcFUW3spffrx5utt1XWf/uitKCvBgD0p4yVCxc8q3VK63+ax51x9qPHETYxr
K70MD3JlvsiTe+UYAljBwAEG345kjvtm4pmRIhQZG4TRAi2ggFtmMWXSpQisTQDJ
9lrnJzwit5npFj6gocFSdBbpPeYC+xCyDJehtTApSVwj6Duwcdigw0Cw5JBbOZf8
WLaTnvg2i4pd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org