Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
File:                     3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa (raw, json)
Hash identifier:          FxtBe2/mF8w0X5VdyAC9sTFXskBl0awzJSRME1T+jeI=
Subject key identifier:   40:74:E3:8D:D1:D5:4B:DF:8E:42:7A:04:09:D2:55:B9:E8:D0:5E:3A
Certificate issuer:       /CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
Certificate serial:       39D63E45E09F23702565908169BCFF42A7C1DB7E
Authority key identifier: B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa
Signing time:             Mon 30 Oct 2023 12:47:01 +0000
ROA not before:           Mon 30 Oct 2023 12:42:01 +0000
ROA not after:            Mon 28 Oct 2024 12:47:01 +0000
asID:                     270544
IP address blocks:        187.95.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d6:3e:45:e0:9f:23:70:25:65:90:81:69:bc:ff:42:a7:c1:db:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B224E79ACF8AC68E9C68317AB6507068C8F22F7C
        Validity
            Not Before: Oct 30 12:42:01 2023 GMT
            Not After : Oct 28 12:47:01 2024 GMT
        Subject: CN=4074E38DD1D54BDF8E427A0409D255B9E8D05E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:d3:ab:48:1c:2f:7f:21:53:f6:ac:a6:a5:
                    6a:f4:31:68:e4:5d:ca:1e:7f:57:78:b6:4e:cd:ae:
                    f9:69:0f:a6:97:5f:44:f0:bf:ec:b5:f4:1d:52:d5:
                    ab:c3:3e:52:36:51:66:dc:d3:ba:43:7b:89:77:a9:
                    12:a8:c8:f5:56:07:d7:ae:fe:c6:12:f2:3f:02:45:
                    76:a4:65:f5:5f:36:e6:ac:d9:06:03:8b:66:5e:a1:
                    7d:5b:e2:fb:4e:3b:93:db:24:40:e3:51:c4:6b:ab:
                    bd:0c:24:73:27:5d:48:21:37:91:af:22:f4:0b:68:
                    7d:65:89:e8:33:7a:38:34:99:ec:c6:6d:96:25:df:
                    ab:c2:c0:ce:82:3a:cb:fb:5d:01:52:89:64:a8:af:
                    48:6b:d2:c8:70:b9:90:91:e0:6c:bd:65:17:a4:e2:
                    83:31:ed:38:06:8d:64:77:09:0b:8f:77:e5:c2:3c:
                    d7:0b:fd:d4:13:f3:89:80:27:22:89:06:11:21:f8:
                    83:c0:6f:f8:d7:be:df:57:51:b5:37:04:58:9a:a6:
                    4c:9c:fc:48:12:71:1f:73:77:8f:b0:23:d4:5a:0b:
                    14:3e:26:b2:86:27:7e:48:03:ec:d5:5a:54:da:b4:
                    a7:c7:7c:d0:52:ca:6c:86:4f:4a:fe:f8:d7:a8:c2:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:74:E3:8D:D1:D5:4B:DF:8E:42:7A:04:09:D2:55:B9:E8:D0:5E:3A
            X509v3 Authority Key Identifier:
                keyid:B2:24:E7:9A:CF:8A:C6:8E:9C:68:31:7A:B6:50:70:68:C8:F2:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B224E79ACF8AC68E9C68317AB6507068C8F22F7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EkU9PQkRFcBPNqE5V9G4nHF4sEwQji6ztDqxq5GV3wc8/0/3138372e39352e3230382e302f32322d3232203d3e20323730353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.95.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:23:49:f9:7a:d3:58:83:b8:1b:bb:b4:1f:1e:4a:94:07:
         b3:90:f5:1a:e4:a5:d5:9e:63:ea:9a:1a:62:ef:10:7c:f5:be:
         37:c0:91:4a:1b:00:d8:e7:84:02:10:db:77:55:5a:e3:17:8e:
         1a:c1:c3:bc:93:0e:dd:ee:ef:ce:49:70:fb:ff:52:a3:14:8e:
         85:61:52:e2:1e:03:1f:1b:ba:e2:09:fb:00:a4:3e:a5:e5:71:
         23:b0:4e:cf:b0:49:23:bd:40:0e:b6:de:ab:e0:a0:da:94:73:
         d4:81:53:bb:81:cb:ab:5b:f0:e6:ee:c5:1d:c8:f1:dc:cd:21:
         4c:1d:7a:6e:ba:8b:2a:c7:8d:7c:50:eb:67:ac:07:47:a9:95:
         40:c7:46:dd:40:07:74:20:f6:68:9e:e1:1f:28:42:f8:a1:a9:
         04:ed:2a:ad:05:e7:e4:e7:49:ef:ce:24:ba:8b:ee:0a:db:63:
         af:df:25:7d:49:bc:32:2e:21:e2:6a:60:b3:c2:ab:f1:81:bb:
         a1:ac:74:e4:46:34:b2:4a:3f:cf:b3:1f:c8:64:9a:f6:4a:22:
         b2:3b:39:ef:6d:6f:db:76:82:9f:a8:76:82:8e:37:5f:52:7c:
         11:a3:1a:21:03:8c:61:ba:9c:c9:c4:75:5d:8f:9d:d2:85:d1:
         1b:b6:6d:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOdY+ReCfI3AlZZCBabz/QqfB234wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjIyNEU3OUFDRjhBQzY4RTlDNjgzMTdBQjY1MDcwNjhD
OEYyMkY3QzAeFw0yMzEwMzAxMjQyMDFaFw0yNDEwMjgxMjQ3MDFaMDMxMTAvBgNV
BAMTKDQwNzRFMzhERDFENTRCREY4RTQyN0EwNDA5RDI1NUI5RThEMDVFM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXdOrSBwvfyFT9qympWr0MWjk
Xcoef1d4tk7NrvlpD6aXX0Twv+y19B1S1avDPlI2UWbc07pDe4l3qRKoyPVWB9eu
/sYS8j8CRXakZfVfNuas2QYDi2ZeoX1b4vtOO5PbJEDjUcRrq70MJHMnXUghN5Gv
IvQLaH1liegzejg0mezGbZYl36vCwM6COsv7XQFSiWSor0hr0shwuZCR4Gy9ZRek
4oMx7TgGjWR3CQuPd+XCPNcL/dQT84mAJyKJBhEh+IPAb/jXvt9XUbU3BFiapkyc
/EgScR9zd4+wI9RaCxQ+JrKGJ35IA+zVWlTatKfHfNBSymyGT0r++NeowmKRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQHTjjdHVS9+OQnoECdJVuejQXjowHwYDVR0j
BBgwFoAUsiTnms+Kxo6caDF6tlBwaMjyL3wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRWtVOVBRa1JGY0JQTnFFNVY5RzRuSEY0c0V3UWppNnp0RHF4cTVHVjN3
YzgvMC9CMjI0RTc5QUNGOEFDNjhFOUM2ODMxN0FCNjUwNzA2OEM4RjIyRjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyMjRFNzlBQ0Y4QUM2OEU5
QzY4MzE3QUI2NTA3MDY4QzhGMjJGN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VrVTlQUWtSRmNCUE5xRTVWOUc0bkhGNHNFd1FqaTZ6dERxeHE1R1Yzd2M4LzAv
MzEzODM3MmUzOTM1MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzAzNTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK7X9AwDQYJKoZIhvcNAQELBQADggEBAKVFI0n5
etNYg7gbu7QfHkqUB7OQ9RrkpdWeY+qaGmLvEHz1vjfAkUobANjnhAIQ23dVWuMX
jhrBw7yTDt3u785JcPv/UqMUjoVhUuIeAx8buuIJ+wCkPqXlcSOwTs+wSSO9QA62
3qvgoNqUc9SBU7uBy6tb8ObuxR3I8dzNIUwdem66iyrHjXxQ62esB0eplUDHRt1A
B3Qg9mie4R8oQvihqQTtKq0F5+TnSe/OJLqL7grbY6/fJX1JvDIuIeJqYLPCq/GB
u6GsdORGNLJKP8+zH8hkmvZKIrI7Oe9tb9t2gp+odoKON19SfBGjGiEDjGG6nMnE
dV2PndKF0Ru2bRg=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org