Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
File:                     3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa (raw, json)
Hash identifier:          r9EXZERrgCblpzpwZgnwzmyAY9VStHUn4hCnvDG3Vcc=
Subject key identifier:   45:A6:65:3C:40:A6:27:07:A9:AA:22:65:AE:C9:73:2E:C5:2E:1E:72
Certificate issuer:       /CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
Certificate serial:       264935FBBDA55F411EB19E4733408E0A67CD586B
Authority key identifier: 1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa
Signing time:             Wed 20 Mar 2024 07:10:20 +0000
ROA not before:           Wed 20 Mar 2024 07:05:20 +0000
ROA not after:            Wed 19 Mar 2025 07:10:20 +0000
asID:                     270910
IP address blocks:        138.121.164.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:49:35:fb:bd:a5:5f:41:1e:b1:9e:47:33:40:8e:0a:67:cd:58:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Validity
            Not Before: Mar 20 07:05:20 2024 GMT
            Not After : Mar 19 07:10:20 2025 GMT
        Subject: CN=45A6653C40A62707A9AA2265AEC9732EC52E1E72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:36:1a:9e:3e:ff:0b:de:ef:48:35:b2:7b:37:
                    d5:26:51:3f:40:35:df:51:a2:05:53:80:c6:25:85:
                    79:43:8b:09:af:74:fb:c2:29:e7:e7:b7:54:89:ca:
                    11:34:08:93:69:d1:af:bf:68:30:28:bb:bc:9c:40:
                    6c:4a:32:c1:d7:72:c9:61:82:da:3a:fc:af:f7:9c:
                    89:4d:3c:fe:c9:ee:b7:cd:b7:ef:97:45:8a:20:e1:
                    3b:48:dd:da:66:67:a1:e2:d9:f3:4a:ea:d0:82:15:
                    09:dd:6c:91:79:95:9b:84:53:a4:65:e9:a6:2a:79:
                    a1:a4:1a:09:c0:8d:96:8e:15:a3:58:e0:99:17:30:
                    fa:9b:31:6a:08:c9:f7:e6:ce:d9:50:cb:d4:2d:a3:
                    c0:00:c7:fe:b6:7c:0e:9f:77:56:96:53:a9:75:c8:
                    63:98:03:dd:64:0d:35:1d:ba:5c:a6:05:44:a5:f7:
                    3a:20:a7:d8:61:46:d9:e4:cc:6a:dc:b6:c6:5e:fe:
                    92:e6:8b:12:7e:ba:fc:d6:ea:22:b6:38:08:e5:a1:
                    bd:05:cc:9d:44:16:77:e6:a4:fb:95:a2:05:85:2d:
                    c2:ce:78:c5:ba:3a:fa:ed:cb:a9:a4:0c:6c:5d:c7:
                    56:84:b7:80:ad:8c:35:3c:9d:69:68:5d:4d:26:e3:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:65:3C:40:A6:27:07:A9:AA:22:65:AE:C9:73:2E:C5:2E:1E:72
            X509v3 Authority Key Identifier:
                keyid:1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/3133382e3132312e3136342e302f32332d3233203d3e20323730393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:02:a9:64:38:8c:b1:7c:02:1d:cc:19:6c:0c:ea:4e:f6:
         81:78:9c:de:4a:04:cf:6a:a3:bd:4c:d5:a1:dc:4c:e4:90:f8:
         d3:13:2f:a8:b8:b2:a0:0c:bb:ef:65:8c:35:36:f0:b9:47:62:
         39:1c:95:25:a4:9d:66:de:92:34:ef:f7:41:9b:62:9b:59:a7:
         7c:c5:43:2d:de:6b:93:67:68:7f:4a:ec:60:ef:1b:66:df:80:
         16:1e:c4:22:e0:4d:4d:19:80:aa:b1:ac:53:95:54:74:0b:87:
         79:50:3f:7a:76:15:11:cb:73:d1:06:02:1d:85:6e:85:b7:26:
         14:5b:b0:36:7c:57:b1:70:f4:cb:39:5f:e5:3a:77:d1:07:d6:
         f0:e4:2e:26:57:2c:47:eb:9c:f7:1e:70:4e:11:91:ec:7f:df:
         d3:9d:f4:2c:00:e2:fb:89:e3:0a:c4:d7:8d:ba:29:e0:59:55:
         0d:3e:77:31:e0:23:8a:62:d4:03:9b:82:ec:74:c9:99:47:fc:
         a3:0f:f6:d7:e8:75:b6:86:0e:06:d8:a6:2f:ec:3e:f1:7f:9a:
         cd:3b:f0:97:d9:f2:c4:ab:74:44:c5:25:9e:95:b0:fc:fc:19:
         ee:57:dd:ef:0c:90:5b:b1:2f:d6:78:d7:f8:f0:da:ff:d7:7f:
         14:d2:dd:04
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJkk1+72lX0EesZ5HM0COCmfNWGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUEyOTA4NDhDQjQ4QjIzNjZENkY4NzhDNEEyMTI2RUJB
NTgxRkRFQzAeFw0yNDAzMjAwNzA1MjBaFw0yNTAzMTkwNzEwMjBaMDMxMTAvBgNV
BAMTKDQ1QTY2NTNDNDBBNjI3MDdBOUFBMjI2NUFFQzk3MzJFQzUyRTFFNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClNhqePv8L3u9INbJ7N9UmUT9A
Nd9RogVTgMYlhXlDiwmvdPvCKefnt1SJyhE0CJNp0a+/aDAou7ycQGxKMsHXcslh
gto6/K/3nIlNPP7J7rfNt++XRYog4TtI3dpmZ6Hi2fNK6tCCFQndbJF5lZuEU6Rl
6aYqeaGkGgnAjZaOFaNY4JkXMPqbMWoIyffmztlQy9Qto8AAx/62fA6fd1aWU6l1
yGOYA91kDTUdulymBUSl9zogp9hhRtnkzGrctsZe/pLmixJ+uvzW6iK2OAjlob0F
zJ1EFnfmpPuVogWFLcLOeMW6Ovrty6mkDGxdx1aEt4CtjDU8nWloXU0m47uPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQURaZlPECmJwepqiJlrslzLsUuHnIwHwYDVR0j
BBgwFoAUGikISMtIsjZtb4eMSiEm66WB/ewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDNxRTVIc0NxOEI1SGp0Smc5MXBjeFFZRVRyUnlIUXBCa1VHUmNEaGRU
Q2YvMC8xQTI5MDg0OENCNDhCMjM2NkQ2Rjg3OEM0QTIxMjZFQkE1ODFGREVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFBMjkwODQ4Q0I0OEIyMzY2
RDZGODc4QzRBMjEyNkVCQTU4MUZERUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzcUU1SHNDcThCNUhqdEpnOTFwY3hRWUVUclJ5SFFwQmtVR1JjRGhkVENmLzAv
MzEzMzM4MmUzMTMyMzEyZTMxMzYzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMDM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp5pDANBgkqhkiG9w0BAQsFAAOCAQEAcRoC
qWQ4jLF8Ah3MGWwM6k72gXic3koEz2qjvUzVodxM5JD40xMvqLiyoAy772WMNTbw
uUdiORyVJaSdZt6SNO/3QZtim1mnfMVDLd5rk2dof0rsYO8bZt+AFh7EIuBNTRmA
qrGsU5VUdAuHeVA/enYVEctz0QYCHYVuhbcmFFuwNnxXsXD0yzlf5Tp30QfW8OQu
JlcsR+uc9x5wThGR7H/f0530LADi+4njCsTXjbop4FlVDT53MeAjimLUA5uC7HTJ
mUf8ow/21+h1toYOBtimL+w+8X+azTvwl9nyxKt0RMUlnpWw/PwZ7lfd7wyQW7Ev
1njX+PDa/9d/FNLdBA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org