Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/3133382e3231392e3133322e302f32322d3232203d3e20323633393239.roa
File:                     3133382e3231392e3133322e302f32322d3232203d3e20323633393239.roa (raw, json)
Hash identifier:          xhtV3migZ8ud56DiQSIzPCTRL9S9KDbBg5N1GRvwrew=
Subject key identifier:   1E:6E:9F:F7:CF:EE:E1:97:7E:6C:5A:D5:4D:64:AD:6C:99:22:F3:10
Certificate issuer:       /CN=9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315
Certificate serial:       020CE5F3ACD0B9B0795652F081934C1CFDCEBF90
Authority key identifier: 97:93:AA:AD:DB:B4:1B:56:44:D5:96:B5:F7:E7:CB:B6:EC:2D:23:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/3133382e3231392e3133322e302f32322d3232203d3e20323633393239.roa
Signing time:             Thu 20 Jul 2023 14:37:59 +0000
ROA not before:           Thu 20 Jul 2023 14:32:59 +0000
ROA not after:            Thu 18 Jul 2024 14:37:59 +0000
asID:                     263929
IP address blocks:        138.219.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0c:e5:f3:ac:d0:b9:b0:79:56:52:f0:81:93:4c:1c:fd:ce:bf:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315
        Validity
            Not Before: Jul 20 14:32:59 2023 GMT
            Not After : Jul 18 14:37:59 2024 GMT
        Subject: CN=1E6E9FF7CFEEE1977E6C5AD54D64AD6C9922F310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:94:8f:c1:8a:b5:b1:67:e5:64:31:66:26:
                    4c:c1:c5:97:9e:c8:0d:3a:cd:92:81:9c:e7:c9:37:
                    73:af:63:91:a4:3e:ac:cd:3d:9d:e1:3f:43:1c:e2:
                    09:4c:3d:74:2a:98:7d:0b:5f:11:5d:57:e1:09:f6:
                    af:1e:99:b2:0f:81:c8:9c:06:6a:68:e4:ba:f7:a7:
                    7c:ef:1c:65:62:28:b5:31:3b:0d:b6:8c:e5:71:f1:
                    d8:1d:9d:4f:c6:fb:0e:fd:4d:27:26:e0:0b:12:2a:
                    51:b9:e9:09:ba:cf:6a:6a:96:c5:fe:a7:63:0d:6b:
                    32:83:a8:3a:39:a3:bd:44:62:5e:27:5f:cb:1c:79:
                    58:a9:6a:c4:dd:50:4c:e5:0a:3a:1b:d3:03:ef:3f:
                    ad:74:18:51:b6:2f:f6:52:7d:ca:77:9f:57:18:33:
                    fc:bf:51:96:0d:03:76:4e:31:7f:3b:1e:55:c2:da:
                    68:a6:88:97:10:40:a0:94:4f:9c:f2:39:75:ad:3e:
                    f6:a9:c6:a3:46:e6:3a:7a:12:e3:5a:bd:02:24:3b:
                    29:96:f1:f2:91:9b:49:82:3d:71:5c:d9:33:ad:e4:
                    82:b2:e5:6e:33:07:1f:50:b8:31:1b:a4:39:f5:86:
                    19:f1:90:ce:aa:17:a0:09:b6:1b:f5:84:e7:77:b5:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6E:9F:F7:CF:EE:E1:97:7E:6C:5A:D5:4D:64:AD:6C:99:22:F3:10
            X509v3 Authority Key Identifier:
                keyid:97:93:AA:AD:DB:B4:1B:56:44:D5:96:B5:F7:E7:CB:B6:EC:2D:23:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9793AAADDBB41B5644D596B5F7E7CBB6EC2D2315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/99PxTySUvfAP2H6GavmfEwBSEZ9d1sVhV8xPaQ73wNKY/0/3133382e3231392e3133322e302f32322d3232203d3e20323633393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:f4:2d:45:99:45:3c:79:a3:ee:b7:dd:ff:d0:51:42:5d:
         b5:2d:c1:88:37:96:b9:f5:ef:7b:6b:03:fa:a4:bf:59:b5:10:
         52:6c:ec:61:a0:63:e4:da:fe:9f:7e:cf:cd:7c:a5:dd:68:bf:
         e6:f9:a0:6b:30:96:37:39:be:e4:d7:48:d8:55:d4:33:85:19:
         3c:72:4f:80:cc:ff:ae:32:1a:6a:fa:b0:4c:43:6f:15:7a:f9:
         ae:e0:30:fd:c0:04:2a:8e:7a:8e:4e:1b:74:b8:1c:f0:d9:76:
         13:05:b6:d8:0d:f7:c6:91:15:7c:57:03:1a:b5:5f:97:4f:51:
         39:ab:4c:dc:e4:35:f6:63:63:b5:f9:86:7b:c6:6f:3e:51:ea:
         8a:40:2c:01:81:7a:42:4b:d0:6e:bf:c4:4b:0f:55:2d:a5:40:
         8f:56:e5:ed:66:71:f8:58:90:71:6d:0c:9b:96:3a:c5:24:6e:
         ce:a0:e7:1a:25:9c:ae:dc:ad:43:9a:f9:6a:38:05:da:1c:b3:
         86:7b:99:45:40:f9:5d:c4:72:e9:df:ea:c7:9c:96:14:e4:e7:
         df:b8:1d:95:86:9b:72:2c:e6:2e:cf:57:fe:09:74:62:dc:cf:
         b5:70:43:f2:64:56:69:6b:bf:03:31:2b:30:51:cd:c6:3f:1c:
         6f:8f:f5:24
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAgzl86zQubB5VlLwgZNMHP3Ov5AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc5M0FBQUREQkI0MUI1NjQ0RDU5NkI1RjdFN0NCQjZF
QzJEMjMxNTAeFw0yMzA3MjAxNDMyNTlaFw0yNDA3MTgxNDM3NTlaMDMxMTAvBgNV
BAMTKDFFNkU5RkY3Q0ZFRUUxOTc3RTZDNUFENTRENjRBRDZDOTkyMkYzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DJSPwYq1sWflZDFmJkzBxZee
yA06zZKBnOfJN3OvY5GkPqzNPZ3hP0Mc4glMPXQqmH0LXxFdV+EJ9q8embIPgcic
Bmpo5Lr3p3zvHGViKLUxOw22jOVx8dgdnU/G+w79TScm4AsSKlG56Qm6z2pqlsX+
p2MNazKDqDo5o71EYl4nX8sceVipasTdUEzlCjob0wPvP610GFG2L/ZSfcp3n1cY
M/y/UZYNA3ZOMX87HlXC2mimiJcQQKCUT5zyOXWtPvapxqNG5jp6EuNavQIkOymW
8fKRm0mCPXFc2TOt5IKy5W4zBx9QuDEbpDn1hhnxkM6qF6AJthv1hOd3tTzZAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHm6f98/u4Zd+bFrVTWStbJki8xAwHwYDVR0j
BBgwFoAUl5Oqrdu0G1ZE1Za19+fLtuwtIxUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTlQeFR5U1V2ZkFQMkg2R2F2bWZFd0JTRVo5ZDFzVmhWOHhQYVE3M3dO
S1kvMC85NzkzQUFBRERCQjQxQjU2NDRENTk2QjVGN0U3Q0JCNkVDMkQyMzE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3OTNBQUFEREJCNDFCNTY0
NEQ1OTZCNUY3RTdDQkI2RUMyRDIzMTUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk5UHhUeVNVdmZBUDJINkdhdm1mRXdCU0VaOWQxc1ZoVjh4UGFRNzN3TktZLzAv
MzEzMzM4MmUzMjMxMzkyZTMxMzMzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbhDANBgkqhkiG9w0BAQsFAAOCAQEAU7/0
LUWZRTx5o+633f/QUUJdtS3BiDeWufXve2sD+qS/WbUQUmzsYaBj5Nr+n37PzXyl
3Wi/5vmgazCWNzm+5NdI2FXUM4UZPHJPgMz/rjIaavqwTENvFXr5ruAw/cAEKo56
jk4bdLgc8Nl2EwW22A33xpEVfFcDGrVfl09ROatM3OQ19mNjtfmGe8ZvPlHqikAs
AYF6QkvQbr/ESw9VLaVAj1bl7WZx+FiQcW0Mm5Y6xSRuzqDnGiWcrtytQ5r5ajgF
2hyzhnuZRUD5XcRy6d/qx5yWFOTn37gdlYabcizmLs9X/gl0YtzPtXBD8mRWaWu/
AzErMFHNxj8cb4/1JA==
-----END CERTIFICATE-----
Generated at Fri Jun 20 11:56:19 2025 by rpki-client