Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130302e302f32342d3234203d3e203533303438.roa
File:                     3138372e37332e3130302e302f32342d3234203d3e203533303438.roa (raw, json)
Hash identifier:          14uWuWiSIXAsHYjtJGrS9yV7dc6u/A+BiY108FftE7o=
Subject key identifier:   31:1B:5A:FE:0D:59:ED:9C:EF:EF:87:E5:3F:45:1F:8F:EB:A0:43:7E
Certificate issuer:       /CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
Certificate serial:       0E6774FAA07D17002ADE4F2F0C725008B28CA8B8
Authority key identifier: 12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130302e302f32342d3234203d3e203533303438.roa
Signing time:             Wed 23 Nov 2022 18:39:17 +0000
ROA not before:           Wed 23 Nov 2022 18:34:17 +0000
ROA not after:            Wed 22 Nov 2023 18:39:17 +0000
asID:                     53048
IP address blocks:        187.73.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:67:74:fa:a0:7d:17:00:2a:de:4f:2f:0c:72:50:08:b2:8c:a8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F
        Validity
            Not Before: Nov 23 18:34:17 2022 GMT
            Not After : Nov 22 18:39:17 2023 GMT
        Subject: CN=311B5AFE0D59ED9CEFEF87E53F451F8FEBA0437E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:dd:32:02:a4:43:52:f2:ff:4a:7c:4c:88:
                    51:a0:7d:6b:38:dc:7a:49:b2:1a:4c:f0:d3:6b:d0:
                    d5:91:6c:84:bd:2e:68:4f:c0:b0:7d:55:0e:f3:f7:
                    a5:41:13:4a:01:a4:f8:f2:06:c7:83:84:c6:b3:1a:
                    b6:b2:e7:f8:62:08:76:99:77:f8:9c:63:08:44:9c:
                    0b:65:90:4d:5b:0a:3b:af:af:05:8e:3c:60:f5:b8:
                    43:f9:62:1b:2b:eb:fe:97:03:3e:8d:ec:61:af:e8:
                    49:bb:e4:54:f2:de:ab:98:90:1a:37:f0:03:77:1f:
                    c0:99:9d:73:0c:5a:87:c0:cc:6d:66:83:8a:7c:ee:
                    78:02:b2:ba:07:69:16:29:f3:c5:dc:41:25:eb:84:
                    dc:f1:94:53:fc:ed:d9:15:62:03:e0:ce:3c:7d:59:
                    cf:72:ae:45:ac:f0:69:47:ef:82:f0:79:cc:9c:c7:
                    ea:bf:a2:03:d5:07:3d:20:4f:b1:c3:12:d0:18:66:
                    75:81:93:08:76:b8:0d:5e:e9:f2:02:5f:b1:a9:f5:
                    17:15:6a:51:af:25:81:f8:4f:52:cd:2c:c1:dd:7e:
                    06:f1:a5:1f:b9:1e:cb:80:67:4b:fa:81:bd:8f:73:
                    e8:0d:31:72:1d:f9:99:c8:21:51:30:20:04:c6:91:
                    93:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1B:5A:FE:0D:59:ED:9C:EF:EF:87:E5:3F:45:1F:8F:EB:A0:43:7E
            X509v3 Authority Key Identifier:
                keyid:12:2D:8C:38:C7:58:C8:FD:5E:CC:77:C5:40:F1:5D:F5:1D:2F:1C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/122D8C38C758C8FD5ECC77C540F15DF51D2F1C3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3X5ufx2nrRCkv7seYquPGe1cHUSpjY1VYVoR4BgNCEAi/0/3138372e37332e3130302e302f32342d3234203d3e203533303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:67:02:c0:03:8e:2a:3d:ad:4f:8c:77:98:48:be:92:e8:11:
         95:20:97:76:30:04:42:2d:83:47:f5:09:92:f4:36:cc:af:49:
         67:77:66:8c:a0:8c:42:c5:8b:fe:80:50:0d:f2:42:65:89:51:
         94:cc:fd:67:b8:d7:20:b8:48:8c:6e:20:9f:67:7a:67:bd:45:
         98:1e:cd:e6:03:4b:35:5d:b5:75:04:97:cc:bc:fc:7f:be:a1:
         e7:1c:41:6a:35:af:62:3b:eb:96:f3:03:91:58:b8:16:8f:b9:
         8b:bc:d1:2b:48:22:ee:1c:67:da:77:a5:2c:c5:5b:a3:fd:97:
         d8:3e:03:b7:f8:04:7e:cc:8b:07:b4:c3:99:48:ef:a4:dc:b1:
         42:2b:7e:45:28:ed:30:ca:14:a7:15:89:58:c3:69:83:42:c8:
         86:38:bf:9d:75:1a:f8:04:80:58:6b:26:4e:26:1a:28:8d:b0:
         d0:e4:8d:26:a3:91:8b:03:f5:45:6d:71:86:a9:3e:bf:61:0c:
         20:55:01:9b:1d:f1:d3:14:d0:29:af:40:75:d2:df:bc:e8:76:
         d1:e0:b2:9f:5e:7f:97:a4:4f:42:54:62:39:45:f6:0b:a3:bb:
         08:0b:48:7c:87:7e:dc:e2:fb:6f:ee:fe:20:b3:a3:91:35:1d:
         2b:dd:72:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDmd0+qB9FwAq3k8vDHJQCLKMqLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTIyRDhDMzhDNzU4QzhGRDVFQ0M3N0M1NDBGMTVERjUx
RDJGMUMzRjAeFw0yMjExMjMxODM0MTdaFw0yMzExMjIxODM5MTdaMDMxMTAvBgNV
BAMTKDMxMUI1QUZFMEQ1OUVEOUNFRkVGODdFNTNGNDUxRjhGRUJBMDQzN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpW90yAqRDUvL/SnxMiFGgfWs4
3HpJshpM8NNr0NWRbIS9LmhPwLB9VQ7z96VBE0oBpPjyBseDhMazGray5/hiCHaZ
d/icYwhEnAtlkE1bCjuvrwWOPGD1uEP5Yhsr6/6XAz6N7GGv6Em75FTy3quYkBo3
8AN3H8CZnXMMWofAzG1mg4p87ngCsroHaRYp88XcQSXrhNzxlFP87dkVYgPgzjx9
Wc9yrkWs8GlH74Lwecycx+q/ogPVBz0gT7HDEtAYZnWBkwh2uA1e6fICX7Gp9RcV
alGvJYH4T1LNLMHdfgbxpR+5HsuAZ0v6gb2Pc+gNMXId+ZnIIVEwIATGkZPJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMRta/g1Z7Zzv74flP0Ufj+ugQ34wHwYDVR0j
BBgwFoAUEi2MOMdYyP1ezHfFQPFd9R0vHD8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1g1dWZ4Mm5yUkNrdjdzZVlxdVBHZTFjSFVTcGpZMVZZVm9SNEJnTkNF
QWkvMC8xMjJEOEMzOEM3NThDOEZENUVDQzc3QzU0MEYxNURGNTFEMkYxQzNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyMkQ4QzM4Qzc1OEM4RkQ1
RUNDNzdDNTQwRjE1REY1MUQyRjFDM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNYNXVmeDJuclJDa3Y3c2VZcXVQR2UxY0hVU3BqWTFWWVZvUjRCZ05DRUFpLzAv
MzEzODM3MmUzNzMzMmUzMTMwMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAu0lkMA0GCSqGSIb3DQEBCwUAA4IBAQBYZwLAA44q
Pa1PjHeYSL6S6BGVIJd2MARCLYNH9QmS9DbMr0lnd2aMoIxCxYv+gFAN8kJliVGU
zP1nuNcguEiMbiCfZ3pnvUWYHs3mA0s1XbV1BJfMvPx/vqHnHEFqNa9iO+uW8wOR
WLgWj7mLvNErSCLuHGfad6UsxVuj/ZfYPgO3+AR+zIsHtMOZSO+k3LFCK35FKO0w
yhSnFYlYw2mDQsiGOL+ddRr4BIBYayZOJhoojbDQ5I0mo5GLA/VFbXGGqT6/YQwg
VQGbHfHTFNApr0B10t+86HbR4LKfXn+XpE9CVGI5RfYLo7sIC0h8h37c4vtv7v4g
s6ORNR0r3XJp
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:56 2023 by rpki-client on console-fra.rpki-client.org