Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32332d3233203d3e20323633303236.roa
File:                     3133382e33362e32302e302f32332d3233203d3e20323633303236.roa (raw, json)
Hash identifier:          hmx1b1QHAB37P5g42r28ht6SsyFMI3gE09nbwvB5Lp4=
Subject key identifier:   73:14:18:F7:FA:24:28:0D:58:EF:26:2B:BB:60:03:BA:BF:13:84:BC
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       27EB1AA7100407DE8D8B256537076F7F1A4CC415
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32332d3233203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:09 +0000
ROA not before:           Thu 15 Jun 2023 19:58:09 +0000
ROA not after:            Thu 13 Jun 2024 20:03:09 +0000
asID:                     263026
IP address blocks:        138.36.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:eb:1a:a7:10:04:07:de:8d:8b:25:65:37:07:6f:7f:1a:4c:c4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:09 2023 GMT
            Not After : Jun 13 20:03:09 2024 GMT
        Subject: CN=731418F7FA24280D58EF262BBB6003BABF1384BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:eb:8c:09:00:b8:07:d7:3d:36:5c:53:4a:f3:
                    f3:b2:0c:74:0e:a3:3b:92:16:ab:b2:06:5a:6a:b5:
                    af:a4:3a:86:04:ef:7c:15:e2:2e:6a:ba:9e:7c:d9:
                    ed:65:91:16:6c:20:7e:65:6c:aa:4c:ed:26:ee:c2:
                    05:89:0c:1f:63:d0:e9:12:1e:b4:51:fa:80:b5:c5:
                    58:20:46:72:4a:ad:36:bb:7e:36:d0:06:e4:1d:a7:
                    4e:e0:33:05:79:ad:e6:21:de:45:1a:42:f5:e6:be:
                    c5:69:b2:1d:9c:af:ed:1c:6a:5c:88:54:6a:8d:df:
                    aa:67:1d:46:a1:c1:56:b3:d7:b3:a7:eb:dc:79:b3:
                    dd:3b:87:ee:e3:59:cc:25:9d:58:ba:11:d3:99:fa:
                    db:ac:4a:e8:9f:b2:80:35:cf:a0:dd:00:8c:85:43:
                    e1:e9:3b:21:e2:ad:25:d8:2f:c2:2c:b6:90:6f:0f:
                    ee:97:c1:11:89:50:54:74:a0:b1:8a:60:96:c0:0e:
                    a9:43:ea:5b:ce:43:14:b8:ee:63:40:77:7b:20:6e:
                    e8:29:c0:3e:d3:89:09:b6:35:ce:ea:00:90:6d:d5:
                    8d:20:a1:4f:4a:e0:3a:53:b4:44:23:5f:79:47:e3:
                    cd:05:95:c9:19:14:d2:b5:43:d1:a9:9e:72:7c:12:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:14:18:F7:FA:24:28:0D:58:EF:26:2B:BB:60:03:BA:BF:13:84:BC
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32332d3233203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:21:25:ab:13:ca:eb:92:25:ca:fb:11:e9:75:d3:6e:6a:c7:
         d0:d0:fd:8c:96:62:9e:a3:9e:25:9a:5d:cf:cf:d6:1a:62:0a:
         f6:37:ee:92:55:a0:df:6d:a3:fd:83:15:30:3a:07:52:66:93:
         47:0f:95:36:74:a4:98:28:70:39:13:6c:93:2a:7c:aa:4b:47:
         86:ac:76:81:23:c3:e5:cf:39:46:8d:1a:17:e1:16:3b:5e:a5:
         25:1e:b4:77:e6:49:c1:32:81:77:ae:0e:bd:8a:7d:d7:17:30:
         85:d6:2f:4b:c3:f2:01:76:5d:71:29:41:a4:4b:2e:01:6d:6c:
         f1:65:62:7d:c8:22:5a:e7:9e:fe:f7:9e:a7:21:05:d6:91:bf:
         0e:7b:c7:97:1c:35:91:37:f1:b9:37:91:be:f0:21:bf:03:e8:
         01:23:13:93:c4:0c:6a:9f:69:e2:d1:84:75:2c:df:f0:5f:1b:
         93:3e:d2:6f:d3:93:75:57:14:f7:80:e8:75:cd:a5:8e:db:2b:
         6d:c1:a3:37:b5:60:77:5f:a4:2d:11:5b:3d:5f:69:fb:92:58:
         87:15:9a:42:a0:b0:0d:26:f2:21:c6:c0:d0:39:f5:d3:c1:c1:
         46:bf:51:70:02:64:a5:cf:aa:95:89:67:92:f9:07:22:99:ae:
         72:eb:8f:4a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUJ+sapxAEB96NiyVlNwdvfxpMxBUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBC
M0E5RDAxNzAeFw0yMzA2MTUxOTU4MDlaFw0yNDA2MTMyMDAzMDlaMDMxMTAvBgNV
BAMTKDczMTQxOEY3RkEyNDI4MEQ1OEVGMjYyQkJCNjAwM0JBQkYxMzg0QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ64wJALgH1z02XFNK8/OyDHQO
ozuSFquyBlpqta+kOoYE73wV4i5qup582e1lkRZsIH5lbKpM7SbuwgWJDB9j0OkS
HrRR+oC1xVggRnJKrTa7fjbQBuQdp07gMwV5reYh3kUaQvXmvsVpsh2cr+0calyI
VGqN36pnHUahwVaz17On69x5s907h+7jWcwlnVi6EdOZ+tusSuifsoA1z6DdAIyF
Q+HpOyHirSXYL8IstpBvD+6XwRGJUFR0oLGKYJbADqlD6lvOQxS47mNAd3sgbugp
wD7TiQm2Nc7qAJBt1Y0goU9K4DpTtEQjX3lH480FlckZFNK1Q9GpnnJ8EtFFAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUcxQY9/okKA1Y7yYru2ADur8ThLwwHwYDVR0j
BBgwFoAUjxLnkOE7oh5pKtRzVp8bkLOp0BcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBCM0E5RDAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RjEyRTc5MEUxM0JBMjFFNjky
QUQ0NzM1NjlGMUI5MEIzQTlEMDE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz
MzM4MmUzMzM2MmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMzMzAz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBiiQUMA0GCSqGSIb3DQEBCwUAA4IBAQBOISWrE8rrkiXK
+xHpddNuasfQ0P2MlmKeo54lml3Pz9YaYgr2N+6SVaDfbaP9gxUwOgdSZpNHD5U2
dKSYKHA5E2yTKnyqS0eGrHaBI8PlzzlGjRoX4RY7XqUlHrR35knBMoF3rg69in3X
FzCF1i9Lw/IBdl1xKUGkSy4BbWzxZWJ9yCJa557+956nIQXWkb8Oe8eXHDWRN/G5
N5G+8CG/A+gBIxOTxAxqn2ni0YR1LN/wXxuTPtJv05N1VxT3gOh1zaWO2yttwaM3
tWB3X6QtEVs9X2n7kliHFZpCoLANJvIhxsDQOfXTwcFGv1FwAmSlz6qViWeS+Qci
ma5y649K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org