Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
File:                     3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa (raw, json)
Hash identifier:          /WWiw2Cr9AF07NZvHNbaYRgHUgeKMw3I4rKRYFQ6Gok=
Subject key identifier:   AF:8B:F7:57:5C:59:27:39:FB:2C:8A:F7:F7:A4:9A:DC:6F:D4:0D:A9
Certificate issuer:       /CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
Certificate serial:       55458AA2FF48B2846B0A711F1CDE9AAE9E9EE3FB
Authority key identifier: 76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa
Signing time:             Mon 24 Jul 2023 03:26:48 +0000
ROA not before:           Mon 24 Jul 2023 03:21:48 +0000
ROA not after:            Mon 22 Jul 2024 03:26:48 +0000
asID:                     264242
IP address blocks:        138.117.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:45:8a:a2:ff:48:b2:84:6b:0a:71:1f:1c:de:9a:ae:9e:9e:e3:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7667A81C6781430B80742CE2AD77D59D4D691FEE
        Validity
            Not Before: Jul 24 03:21:48 2023 GMT
            Not After : Jul 22 03:26:48 2024 GMT
        Subject: CN=AF8BF7575C592739FB2C8AF7F7A49ADC6FD40DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:5e:1a:fa:0b:df:36:cb:44:73:f1:ce:db:
                    c6:e4:e1:f5:ad:50:44:2f:85:a3:b8:9c:ee:a5:36:
                    24:f3:75:f6:46:7e:a4:4d:56:21:23:bd:34:d9:72:
                    f8:06:8d:25:40:e5:b7:38:da:07:33:4b:39:b5:f9:
                    cb:97:e1:79:da:d7:1d:8a:74:a4:d6:22:d7:f9:07:
                    8c:23:c5:aa:46:cf:0b:fd:66:3c:07:48:c9:41:bb:
                    4a:28:9f:51:89:28:48:43:ee:d2:a3:71:5c:62:5d:
                    dd:79:c0:96:7a:ee:5b:d7:53:bb:b4:61:cb:b3:92:
                    50:b1:f3:03:30:41:c3:e2:fc:29:99:e5:15:88:1d:
                    d5:2a:12:32:56:26:3b:bb:97:f9:02:e3:27:d4:40:
                    86:5f:8b:d1:65:e1:d6:f5:b9:8a:b8:36:df:59:ad:
                    1f:b3:09:4c:89:17:16:e1:3d:fa:2f:27:96:3d:a8:
                    b6:72:0b:a1:11:7b:cb:29:ea:05:64:68:16:d2:91:
                    38:27:04:ff:b7:89:bd:5f:3f:3f:a2:34:5e:b0:ab:
                    dc:cd:e0:6b:52:b5:f9:36:97:ba:26:db:f3:0b:48:
                    b3:0f:40:23:24:58:24:65:09:7a:90:8e:e6:89:15:
                    22:9c:9c:3a:fd:59:11:7c:ac:4c:ef:c3:ca:8f:da:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:F7:57:5C:59:27:39:FB:2C:8A:F7:F7:A4:9A:DC:6F:D4:0D:A9
            X509v3 Authority Key Identifier:
                keyid:76:67:A8:1C:67:81:43:0B:80:74:2C:E2:AD:77:D5:9D:4D:69:1F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7667A81C6781430B80742CE2AD77D59D4D691FEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/0/3133382e3131372e3134342e302f32322d3332203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:83:ab:60:4f:bb:39:6d:b4:64:1d:f5:6f:40:1b:f3:12:75:
         ea:9e:4f:85:9d:0d:9a:cc:5d:9a:72:05:06:16:92:98:ce:8b:
         ce:02:af:69:99:47:9e:7c:13:90:45:f7:02:36:0b:68:9c:2f:
         92:0e:1f:9c:32:d9:40:dc:98:db:44:65:c0:ab:4c:3a:86:10:
         4e:f1:56:ca:ff:70:1e:19:91:7b:84:a6:96:74:37:b4:31:ed:
         6a:14:45:11:83:4e:6f:f9:e1:ac:a4:06:bc:f9:82:18:78:5f:
         6d:58:0b:03:06:ab:d6:2f:fe:3d:09:2b:31:f6:82:58:a1:51:
         63:e5:06:27:8b:af:6e:a1:12:39:c8:f6:3a:c1:1a:b8:a2:b8:
         68:d9:f3:84:51:b0:05:41:b9:73:6d:9f:35:5b:6a:4f:1c:ed:
         51:ef:73:e5:ea:5e:06:de:0a:c0:50:ac:90:c4:87:53:af:17:
         2f:f5:b2:c7:f5:98:12:82:fc:6c:75:a0:81:36:d4:17:1a:c4:
         9b:69:9b:d2:af:13:cd:f5:f0:36:ea:5c:9f:e3:ed:ce:5a:87:
         c7:4f:35:9b:6a:a6:af:da:c8:e9:f2:f1:d7:c5:f6:2a:4f:98:
         37:73:e2:ec:88:e5:ef:fa:1e:0f:e2:15:3a:c1:c7:ad:32:c3:
         b1:d8:f3:e6
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVUWKov9IsoRrCnEfHN6arp6e4/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0
RDY5MUZFRTAeFw0yMzA3MjQwMzIxNDhaFw0yNDA3MjIwMzI2NDhaMDMxMTAvBgNV
BAMTKEFGOEJGNzU3NUM1OTI3MzlGQjJDOEFGN0Y3QTQ5QURDNkZENDBEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mF4a+gvfNstEc/HO28bk4fWt
UEQvhaO4nO6lNiTzdfZGfqRNViEjvTTZcvgGjSVA5bc42gczSzm1+cuX4Xna1x2K
dKTWItf5B4wjxapGzwv9ZjwHSMlBu0oon1GJKEhD7tKjcVxiXd15wJZ67lvXU7u0
YcuzklCx8wMwQcPi/CmZ5RWIHdUqEjJWJju7l/kC4yfUQIZfi9Fl4db1uYq4Nt9Z
rR+zCUyJFxbhPfovJ5Y9qLZyC6ERe8sp6gVkaBbSkTgnBP+3ib1fPz+iNF6wq9zN
4GtStfk2l7om2/MLSLMPQCMkWCRlCXqQjuaJFSKcnDr9WRF8rEzvw8qP2oIDAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUr4v3V1xZJzn7LIr396Sa3G/UDakwHwYDVR0j
BBgwFoAUdmeoHGeBQwuAdCzirXfVnU1pH+4wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9KbzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6
LzAvNzY2N0E4MUM2NzgxNDMwQjgwNzQyQ0UyQUQ3N0Q1OUQ0RDY5MUZFRS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC83NjY3QTgxQzY3ODE0MzBCODA3
NDJDRTJBRDc3RDU5RDRENjkxRkVFLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9K
bzJKNjdYU0VodlRLRk15WllzN21mTVlMY2J0TjF1aTZkVTFGdkVhWTZ6LzAvMzEz
MzM4MmUzMTMxMzcyZTMxMzQzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYz
NDMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAop1kDANBgkqhkiG9w0BAQsFAAOCAQEAUIOrYE+7
OW20ZB31b0Ab8xJ16p5PhZ0NmsxdmnIFBhaSmM6LzgKvaZlHnnwTkEX3AjYLaJwv
kg4fnDLZQNyY20RlwKtMOoYQTvFWyv9wHhmRe4SmlnQ3tDHtahRFEYNOb/nhrKQG
vPmCGHhfbVgLAwar1i/+PQkrMfaCWKFRY+UGJ4uvbqESOcj2OsEauKK4aNnzhFGw
BUG5c22fNVtqTxztUe9z5epeBt4KwFCskMSHU68XL/Wyx/WYEoL8bHWggTbUFxrE
m2mb0q8TzfXwNupcn+PtzlqHx081m2qmr9rI6fLx18X2Kk+YN3Pi7Ijl7/oeD+IV
OsHHrTLDsdjz5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org