Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa
File:                     3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa (raw, json)
Hash identifier:          oBXcLmoH/yGuYmogtWPhLXGRkRAHuSLKrdjrv5/VDOg=
Subject key identifier:   3D:7D:C8:4C:46:6F:96:F0:61:0D:60:97:C7:02:CC:D7:9D:12:AD:E6
Certificate issuer:       /CN=AC469910774B2980D687887BD41807B15AA1EED9
Certificate serial:       37F2ED1ACDEA71CF1594D619B5A4DDBC16083D53
Authority key identifier: AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa
Signing time:             Sun 03 Dec 2023 05:58:21 +0000
ROA not before:           Sun 03 Dec 2023 05:53:21 +0000
ROA not after:            Sun 01 Dec 2024 05:58:21 +0000
asID:                     271562
IP address blocks:        181.174.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:ed:1a:cd:ea:71:cf:15:94:d6:19:b5:a4:dd:bc:16:08:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469910774B2980D687887BD41807B15AA1EED9
        Validity
            Not Before: Dec  3 05:53:21 2023 GMT
            Not After : Dec  1 05:58:21 2024 GMT
        Subject: CN=3D7DC84C466F96F0610D6097C702CCD79D12ADE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:fa:56:04:d1:36:63:1c:77:d0:98:21:16:
                    fb:e5:3e:0e:1c:1c:5c:88:a2:cf:a8:d3:8f:21:a4:
                    9a:88:57:9c:04:21:dd:5a:5a:6c:a9:86:78:ee:02:
                    6c:83:cf:7e:2a:eb:60:10:52:9f:a6:ea:5d:d3:1b:
                    a8:b5:8e:55:93:a1:7a:b7:26:a5:ce:c5:db:71:91:
                    a9:09:fc:f3:df:9f:6b:e0:53:c7:7f:78:5b:21:ea:
                    eb:77:7c:02:09:98:44:8e:0b:37:c0:0b:a0:ef:8a:
                    b4:b8:36:68:0d:f6:fe:a3:9c:b2:06:b0:73:1b:27:
                    12:db:04:36:cf:3c:25:09:b3:0c:b7:96:e4:ca:7a:
                    33:95:1b:be:98:49:ce:29:72:64:e6:5d:95:2e:60:
                    30:72:53:64:98:ba:e2:52:71:94:17:1c:23:b3:4d:
                    97:14:27:41:7f:43:01:71:58:bb:e6:7d:51:60:19:
                    28:12:47:43:8c:c5:1d:39:b1:93:26:49:6e:ae:3b:
                    99:df:94:fd:8b:62:cf:3f:a0:d3:73:83:87:89:1d:
                    1f:f5:af:68:ab:ad:3f:fd:f9:9d:24:01:1f:cf:50:
                    3f:e8:1f:99:e9:a7:e6:d2:af:88:d1:de:f3:4d:1d:
                    9c:85:7b:a5:2e:2c:ba:92:5d:69:e5:64:d4:ec:6a:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7D:C8:4C:46:6F:96:F0:61:0D:60:97:C7:02:CC:D7:9D:12:AD:E6
            X509v3 Authority Key Identifier:
                keyid:AC:46:99:10:77:4B:29:80:D6:87:88:7B:D4:18:07:B1:5A:A1:EE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/AC469910774B2980D687887BD41807B15AA1EED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC469910774B2980D687887BD41807B15AA1EED9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BpD19kbsx1Zg4EUGrkhgfcYejMeWPq89JmmXHDpHYL6a/0/3138312e3137342e3232312e302f32342d3234203d3e20323731353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f2:ad:9e:f0:4b:03:a1:86:e1:11:0e:21:9a:e0:ae:9b:f4:db:
         ad:8e:e2:67:74:30:0d:32:58:de:ce:ea:ae:87:28:cc:74:46:
         7e:6a:f3:08:e6:4d:ca:95:ee:7d:9b:8b:c7:f3:ee:b1:dd:17:
         06:bb:61:53:66:13:f1:69:81:31:8b:e4:bf:c5:de:71:37:56:
         e5:1e:74:b5:f4:67:16:0a:dd:d6:14:1b:a1:1b:56:8d:34:24:
         01:ce:f9:b6:d3:b4:40:69:9f:0d:9b:cd:4f:e7:20:ff:3f:97:
         f9:08:b9:82:29:fd:53:77:d3:4d:34:8f:09:c1:56:c6:6a:6a:
         3a:d6:19:a1:71:0e:70:86:9f:72:b7:78:ae:11:b9:49:be:15:
         31:d8:30:5b:09:6b:f5:8d:e9:2b:6f:1c:00:41:14:20:c1:7d:
         b1:e3:0e:5d:bb:ff:8a:55:ee:93:8c:ad:20:ca:6d:60:c1:2c:
         92:0a:50:7b:6e:e6:4c:4a:5a:91:0c:bc:07:00:db:63:0b:fd:
         75:f6:89:3b:02:7c:3d:69:78:6b:e9:0c:63:80:56:94:b1:89:
         e1:37:8d:c5:80:a9:9c:e6:91:c8:f7:42:1a:1a:2b:4f:35:9f:
         0d:30:cb:1f:9a:be:37:3e:76:e1:7b:c3:5b:f0:78:c0:dc:d3:
         a3:1d:4a:e4
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUN/LtGs3qcc8VlNYZtaTdvBYIPVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM0Njk5MTA3NzRCMjk4MEQ2ODc4ODdCRDQxODA3QjE1
QUExRUVEOTAeFw0yMzEyMDMwNTUzMjFaFw0yNDEyMDEwNTU4MjFaMDMxMTAvBgNV
BAMTKDNEN0RDODRDNDY2Rjk2RjA2MTBENjA5N0M3MDJDQ0Q3OUQxMkFERTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQPpWBNE2Yxx30JghFvvlPg4c
HFyIos+o048hpJqIV5wEId1aWmyphnjuAmyDz34q62AQUp+m6l3TG6i1jlWToXq3
JqXOxdtxkakJ/PPfn2vgU8d/eFsh6ut3fAIJmESOCzfAC6DvirS4NmgN9v6jnLIG
sHMbJxLbBDbPPCUJswy3luTKejOVG76YSc4pcmTmXZUuYDByU2SYuuJScZQXHCOz
TZcUJ0F/QwFxWLvmfVFgGSgSR0OMxR05sZMmSW6uO5nflP2LYs8/oNNzg4eJHR/1
r2irrT/9+Z0kAR/PUD/oH5npp+bSr4jR3vNNHZyFe6UuLLqSXWnlZNTsarIFAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPX3ITEZvlvBhDWCXxwLM150SreYwHwYDVR0j
BBgwFoAUrEaZEHdLKYDWh4h71BgHsVqh7tkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnBEMTlrYnN4MVpnNEVVR3JraGdmY1llak1lV1BxODlKbW1YSERwSFlM
NmEvMC9BQzQ2OTkxMDc3NEIyOTgwRDY4Nzg4N0JENDE4MDdCMTVBQTFFRUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDNDY5OTEwNzc0QjI5ODBE
Njg3ODg3QkQ0MTgwN0IxNUFBMUVFRDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JwRDE5a2JzeDFaZzRFVUdya2hnZmNZZWpNZVdQcTg5Sm1tWEhEcEhZTDZhLzAv
MzEzODMxMmUzMTM3MzQyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMTM1MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALWu3TANBgkqhkiG9w0BAQsFAAOCAQEA8q2e
8EsDoYbhEQ4hmuCum/TbrY7iZ3QwDTJY3s7qrocozHRGfmrzCOZNypXufZuLx/Pu
sd0XBrthU2YT8WmBMYvkv8XecTdW5R50tfRnFgrd1hQboRtWjTQkAc75ttO0QGmf
DZvNT+cg/z+X+Qi5gin9U3fTTTSPCcFWxmpqOtYZoXEOcIafcrd4rhG5Sb4VMdgw
Wwlr9Y3pK28cAEEUIMF9seMOXbv/ilXuk4ytIMptYMEskgpQe27mTEpakQy8BwDb
Ywv9dfaJOwJ8PWl4a+kMY4BWlLGJ4TeNxYCpnOaRyPdCGhorTzWfDTDLH5q+Nz52
4XvDW/B4wNzTox1K5A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:57 2024 by rpki-client on console-fra.rpki-client.org