Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          mAoO99cRBVngxfF0p8vdx1kHtIKM8excrFBIWa2o7s0=
Subject key identifier:   E6:9C:01:0A:28:DC:79:A7:65:AB:58:D0:B6:D0:DF:C9:DD:39:07:D2
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       277291EAD968F56F77B8A8D8C1BE82787AAD45E8
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa
Signing time:             Tue 22 Aug 2023 10:02:06 +0000
ROA not before:           Tue 22 Aug 2023 09:57:06 +0000
ROA not after:            Tue 20 Aug 2024 10:02:06 +0000
asID:                     262518
IP address blocks:        138.122.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:72:91:ea:d9:68:f5:6f:77:b8:a8:d8:c1:be:82:78:7a:ad:45:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Aug 22 09:57:06 2023 GMT
            Not After : Aug 20 10:02:06 2024 GMT
        Subject: CN=E69C010A28DC79A765AB58D0B6D0DFC9DD3907D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:35:b6:42:b3:d1:f4:eb:4a:af:09:9e:e3:40:
                    64:f1:fb:92:fe:b7:b0:f8:03:6b:b6:ba:b8:85:59:
                    b2:40:4f:73:92:d0:b9:f8:cb:dd:c1:1a:05:e0:6a:
                    a1:b6:e9:e0:18:3e:21:df:9b:8d:4b:75:7a:a5:bf:
                    fe:53:e1:9d:4c:c3:88:9f:5d:10:ab:77:d9:f3:05:
                    bb:6f:5d:f6:0d:28:0d:3d:26:59:ee:98:b9:42:76:
                    1b:bc:89:d9:03:c6:c8:d3:89:a9:e0:a6:26:1f:57:
                    8c:10:d7:69:06:b2:94:2b:50:2c:05:e9:6c:81:a8:
                    4b:ac:d4:3f:87:07:41:4d:b3:78:49:8c:15:b3:dd:
                    47:1c:00:10:04:ce:df:58:61:be:ed:d5:0e:e1:d0:
                    b3:dc:35:9e:00:c6:f4:13:12:3a:07:61:d7:ae:00:
                    ee:23:3a:bb:0a:d1:a3:6b:82:e2:de:77:20:e8:56:
                    38:2f:cf:05:d2:8e:d0:1a:ea:6d:4b:72:42:0e:04:
                    5f:84:26:6f:2f:57:5b:c4:1f:16:b1:00:14:3f:6a:
                    0a:c9:49:d4:c8:91:e2:53:2b:68:13:3a:51:e1:a7:
                    66:aa:c8:75:4f:75:4e:ea:66:81:d4:22:55:72:9e:
                    8c:53:e6:48:f6:7a:6c:5f:cb:c6:6e:df:65:15:f4:
                    7d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:01:0A:28:DC:79:A7:65:AB:58:D0:B6:D0:DF:C9:DD:39:07:D2
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137342e302f32342d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:5f:14:17:54:39:ca:d1:4a:07:12:fc:00:4b:5b:40:ca:
         0c:34:ed:2d:a1:79:4f:bf:ce:71:1b:01:1a:4a:5e:c7:c7:b6:
         e6:c1:84:42:3a:c4:52:96:da:81:f3:5a:3f:41:1c:80:59:b0:
         92:e7:fe:c6:b0:9f:c3:51:23:88:83:8c:22:50:8c:4f:92:4b:
         35:01:d3:ed:03:32:48:e6:1f:15:05:82:58:24:38:93:6d:66:
         87:62:d3:d7:89:30:f5:26:da:1f:39:31:6c:4c:1c:25:3d:99:
         b4:e4:d5:06:76:90:46:02:2f:7a:66:b1:7e:7d:e1:13:f1:21:
         d0:04:53:35:a6:43:fb:a7:00:a4:40:74:b0:2a:01:2e:57:05:
         8a:6d:a4:ef:c6:29:c4:5e:cc:b1:6f:a5:86:db:75:69:ba:6f:
         a5:2c:7b:2c:d3:19:39:79:cf:a3:a1:f6:ab:6f:5d:fa:7f:9e:
         32:7e:2b:16:a3:7e:77:20:80:6c:c1:3c:22:d8:33:29:c0:fa:
         75:86:55:40:31:17:14:b8:74:e9:2d:d4:45:d3:55:f4:bc:75:
         f2:8a:a5:99:5f:26:10:41:1d:5b:1a:5c:f5:f1:aa:54:99:eb:
         15:bf:74:34:3a:47:9d:15:18:5a:06:26:31:ba:7b:87:f7:d4:
         8b:17:ff:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUJ3KR6tlo9W93uKjYwb6CeHqtRegwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFCRTI1QkFBRTkwRjc5MDhFRTU3N0MzQzM3NTJGRTA4
QUYzRUM0NjAeFw0yMzA4MjIwOTU3MDZaFw0yNDA4MjAxMDAyMDZaMDMxMTAvBgNV
BAMTKEU2OUMwMTBBMjhEQzc5QTc2NUFCNThEMEI2RDBERkM5REQzOTA3RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYNbZCs9H060qvCZ7jQGTx+5L+
t7D4A2u2uriFWbJAT3OS0Ln4y93BGgXgaqG26eAYPiHfm41LdXqlv/5T4Z1Mw4if
XRCrd9nzBbtvXfYNKA09JlnumLlCdhu8idkDxsjTiangpiYfV4wQ12kGspQrUCwF
6WyBqEus1D+HB0FNs3hJjBWz3UccABAEzt9YYb7t1Q7h0LPcNZ4AxvQTEjoHYdeu
AO4jOrsK0aNrguLedyDoVjgvzwXSjtAa6m1LckIOBF+EJm8vV1vEHxaxABQ/agrJ
SdTIkeJTK2gTOlHhp2aqyHVPdU7qZoHUIlVynoxT5kj2emxfy8Zu32UV9H39AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5pwBCijceadlq1jQttDfyd05B9IwHwYDVR0j
BBgwFoAUob4luq6Q95CO5XfDw3Uv4Irz7EYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMC9BMUJFMjVCQUFFOTBGNzkwOEVFNTc3QzNDMzc1MkZFMDhBRjNFQzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExQkUyNUJBQUU5MEY3OTA4
RUU1NzdDM0MzNzUyRkUwOEFGM0VDNDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp6rjANBgkqhkiG9w0BAQsFAAOCAQEArgNf
FBdUOcrRSgcS/ABLW0DKDDTtLaF5T7/OcRsBGkpex8e25sGEQjrEUpbagfNaP0Ec
gFmwkuf+xrCfw1EjiIOMIlCMT5JLNQHT7QMySOYfFQWCWCQ4k21mh2LT14kw9Sba
HzkxbEwcJT2ZtOTVBnaQRgIvemaxfn3hE/Eh0ARTNaZD+6cApEB0sCoBLlcFim2k
78YpxF7MsW+lhtt1abpvpSx7LNMZOXnPo6H2q29d+n+eMn4rFqN+dyCAbME8Itgz
KcD6dYZVQDEXFLh06S3URdNV9Lx18oqlmV8mEEEdWxpc9fGqVJnrFb90NDpHnRUY
WgYmMbp7h/fUixf/bQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org