Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
File:                     3133382e302e3137322e302f32322d3234203d3e20323634353532.roa (raw, json)
Hash identifier:          t/G0t0E0xn9Td6ebqnGjU05Qi1msIWlOuNEK0b4vK+8=
Subject key identifier:   32:D7:DD:DF:91:14:3D:C1:F3:22:42:A0:53:DA:5D:29:44:04:26:59
Certificate issuer:       /CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
Certificate serial:       3369E7A6598689765157A64A24B0869D749AB0B8
Authority key identifier: A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa
Signing time:             Thu 22 Feb 2024 17:18:50 +0000
ROA not before:           Thu 22 Feb 2024 17:13:50 +0000
ROA not after:            Thu 20 Feb 2025 17:18:50 +0000
asID:                     264552
IP address blocks:        138.0.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:e7:a6:59:86:89:76:51:57:a6:4a:24:b0:86:9d:74:9a:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2E9A763EC2BC4693E8DDF87382BE4193DA4696D
        Validity
            Not Before: Feb 22 17:13:50 2024 GMT
            Not After : Feb 20 17:18:50 2025 GMT
        Subject: CN=32D7DDDF91143DC1F32242A053DA5D2944042659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:71:8d:7f:b9:3c:cf:d2:1b:5f:87:14:4b:
                    59:a5:f9:e6:a6:00:3d:e7:1b:7a:59:12:b7:81:92:
                    12:50:6a:f1:71:49:48:54:f0:5c:c5:ef:8b:a4:cf:
                    9c:33:3a:be:76:ae:91:18:f4:b2:f9:bc:03:c6:64:
                    61:71:7b:b9:17:54:a4:c0:83:c0:32:33:93:af:d3:
                    0d:27:98:81:12:c8:8b:ea:33:0a:fc:94:f8:e2:e5:
                    9e:70:16:cd:de:80:b3:40:e6:7c:6e:fc:5d:5f:17:
                    fe:12:39:31:29:e3:67:5e:e9:ca:97:e2:47:86:0d:
                    ac:71:40:24:5d:91:f3:0b:9d:2a:29:77:29:8b:32:
                    42:9f:cf:9e:12:cc:dd:4d:ca:92:e3:98:fd:7a:eb:
                    19:70:29:cd:c3:10:ca:f8:90:eb:b2:f8:89:34:e3:
                    53:df:03:27:8c:67:e0:24:f3:d8:d2:75:59:6b:12:
                    34:7e:a9:b3:f3:55:fa:af:ff:17:02:09:b6:eb:f1:
                    91:79:91:ed:4c:79:fa:b1:19:b7:a1:5b:93:95:03:
                    01:3f:e2:e9:21:26:4d:a6:ba:78:b6:66:04:11:87:
                    08:fa:fa:8a:67:ce:7f:75:a7:be:e7:48:9e:8f:d6:
                    79:6a:46:85:22:fe:15:e7:05:ab:85:c4:eb:77:21:
                    ee:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D7:DD:DF:91:14:3D:C1:F3:22:42:A0:53:DA:5D:29:44:04:26:59
            X509v3 Authority Key Identifier:
                keyid:A2:E9:A7:63:EC:2B:C4:69:3E:8D:DF:87:38:2B:E4:19:3D:A4:69:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A2E9A763EC2BC4693E8DDF87382BE4193DA4696D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/3133382e302e3137322e302f32322d3234203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:d1:e9:aa:4d:31:22:6e:49:88:4c:09:e1:ea:46:75:48:67:
         73:05:17:91:7a:7f:d9:a3:dd:94:c0:79:19:fb:ff:8e:27:9a:
         21:3e:16:8a:d3:ad:9d:d2:28:bb:24:4a:62:56:5c:f1:20:d9:
         bf:32:11:6d:9a:18:18:46:99:6c:ab:3a:7e:88:15:79:55:44:
         d5:37:0f:12:a4:ca:53:a9:16:33:16:62:24:84:5c:ec:14:17:
         75:81:40:0c:f1:94:52:b0:69:2f:9f:82:1f:cd:15:5a:e4:ac:
         db:33:b6:a1:bd:4c:8e:de:27:89:00:8d:d5:a0:48:0a:09:f1:
         49:cb:fc:77:15:fd:59:5d:f9:29:d6:6b:8a:b8:3b:3e:01:b4:
         fd:ae:ce:76:14:da:8c:bb:03:c7:f7:6b:a6:88:0c:b3:2d:d7:
         28:d5:01:a9:be:4f:d9:ea:66:ad:47:80:64:59:bb:0c:b1:76:
         36:36:0a:e0:7e:97:a4:31:1f:07:e9:47:3f:33:b2:d6:34:6b:
         e2:4d:09:5a:01:3b:f1:2f:ff:ca:3b:92:8e:49:98:95:c6:54:
         6f:13:8c:ed:5b:af:e8:44:c6:bc:36:d1:c5:a3:6f:3f:0d:70:
         06:0a:5a:eb:5b:84:38:cb:69:df:6a:35:b8:43:1c:3f:03:1e:
         3e:eb:e1:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM2nnplmGiXZRV6ZKJLCGnXSasLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFOUE3NjNFQzJCQzQ2OTNFOERERjg3MzgyQkU0MTkz
REE0Njk2RDAeFw0yNDAyMjIxNzEzNTBaFw0yNTAyMjAxNzE4NTBaMDMxMTAvBgNV
BAMTKDMyRDdERERGOTExNDNEQzFGMzIyNDJBMDUzREE1RDI5NDQwNDI2NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu43GNf7k8z9IbX4cUS1ml+eam
AD3nG3pZEreBkhJQavFxSUhU8FzF74ukz5wzOr52rpEY9LL5vAPGZGFxe7kXVKTA
g8AyM5Ov0w0nmIESyIvqMwr8lPji5Z5wFs3egLNA5nxu/F1fF/4SOTEp42de6cqX
4keGDaxxQCRdkfMLnSopdymLMkKfz54SzN1NypLjmP166xlwKc3DEMr4kOuy+Ik0
41PfAyeMZ+Ak89jSdVlrEjR+qbPzVfqv/xcCCbbr8ZF5ke1MefqxGbehW5OVAwE/
4ukhJk2muni2ZgQRhwj6+opnzn91p77nSJ6P1nlqRoUi/hXnBauFxOt3Ie4vAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMtfd35EUPcHzIkKgU9pdKUQEJlkwHwYDVR0j
BBgwFoAUoumnY+wrxGk+jd+HOCvkGT2kaW0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZORWtORW5Xd3pxWGZqVG85aW5Sejh4eTNaVEZuWFRzMWoyUGl0MWRK
d1YvMC9BMkU5QTc2M0VDMkJDNDY5M0U4RERGODczODJCRTQxOTNEQTQ2OTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyRTlBNzYzRUMyQkM0Njkz
RThEREY4NzM4MkJFNDE5M0RBNDY5NkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TkVrTkVuV3d6cVhmalRvOWluUno4eHkzWlRGblhUczFqMlBpdDFkSndWLzAv
MzEzMzM4MmUzMDJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigCsMA0GCSqGSIb3DQEBCwUAA4IBAQCB0emqTTEi
bkmITAnh6kZ1SGdzBReRen/Zo92UwHkZ+/+OJ5ohPhaK062d0ii7JEpiVlzxINm/
MhFtmhgYRplsqzp+iBV5VUTVNw8SpMpTqRYzFmIkhFzsFBd1gUAM8ZRSsGkvn4If
zRVa5KzbM7ahvUyO3ieJAI3VoEgKCfFJy/x3Ff1ZXfkp1muKuDs+AbT9rs52FNqM
uwPH92umiAyzLdco1QGpvk/Z6matR4BkWbsMsXY2NgrgfpekMR8H6Uc/M7LWNGvi
TQlaATvxL//KO5KOSZiVxlRvE4ztW6/oRMa8NtHFo28/DXAGClrrW4Q4y2nfajW4
Qxw/Ax4+6+HN
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org