Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
File:                     3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa (raw, json)
Hash identifier:          JxN5xCiYploSNR9eoCGMNijwEeg03XMzNT+xIv2owrM=
Subject key identifier:   D4:08:E4:70:92:AB:DA:3E:B7:60:8E:71:89:32:D0:27:71:F6:52:2C
Certificate issuer:       /CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
Certificate serial:       73E9146A8157BAEA3B5F262B8503F562D5E70592
Authority key identifier: B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa
Signing time:             Mon 18 Dec 2023 17:26:30 +0000
ROA not before:           Mon 18 Dec 2023 17:21:30 +0000
ROA not after:            Mon 16 Dec 2024 17:26:30 +0000
asID:                     263940
IP address blocks:        138.185.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e9:14:6a:81:57:ba:ea:3b:5f:26:2b:85:03:f5:62:d5:e7:05:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B554F9183DD50D422F8B2C261FCB73CB7E6FC392
        Validity
            Not Before: Dec 18 17:21:30 2023 GMT
            Not After : Dec 16 17:26:30 2024 GMT
        Subject: CN=D408E47092ABDA3EB7608E718932D02771F6522C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f8:af:58:dd:de:0b:9f:f4:82:6f:2e:ee:ce:
                    ea:2d:8b:97:ad:0d:70:1b:12:68:7d:41:71:14:a5:
                    55:a7:97:6e:e5:33:45:3e:2b:88:7f:ee:73:57:c3:
                    58:53:1e:75:a4:e7:bb:cf:c8:ad:01:8b:b7:93:c2:
                    67:3d:10:b4:48:67:16:d1:76:56:f8:24:07:00:f7:
                    04:86:54:d0:89:32:af:41:40:a5:a1:13:78:84:10:
                    43:47:6a:0d:ab:55:0e:33:cc:71:42:c3:38:54:2b:
                    bc:9a:c5:67:53:6e:d6:36:e6:bd:9e:fc:20:37:e8:
                    21:67:ab:d0:77:35:8f:25:d1:e1:45:cf:97:ea:ee:
                    05:3a:83:5e:2e:da:32:6a:6a:f9:89:81:9b:2f:17:
                    94:f2:d4:4e:b5:f1:14:35:04:25:ee:bd:c0:2a:56:
                    a5:bc:8a:44:8b:3e:9e:10:4a:6d:13:c4:79:8e:42:
                    90:c1:0e:0c:d7:19:cc:a4:c6:60:c8:ea:a9:2b:58:
                    5c:bf:99:e9:69:a0:f6:57:63:25:57:99:a8:73:60:
                    fb:25:18:1c:da:80:fc:7c:f7:cf:6c:18:19:86:d3:
                    d2:a6:e1:8d:49:8a:fd:0d:bf:ca:61:95:84:22:74:
                    b6:66:f3:f9:20:97:79:ff:61:97:c3:04:29:90:0d:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:08:E4:70:92:AB:DA:3E:B7:60:8E:71:89:32:D0:27:71:F6:52:2C
            X509v3 Authority Key Identifier:
                keyid:B5:54:F9:18:3D:D5:0D:42:2F:8B:2C:26:1F:CB:73:CB:7E:6F:C3:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B554F9183DD50D422F8B2C261FCB73CB7E6FC392.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/3133382e3138352e3235352e302f32342d3234203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:13:da:07:f6:56:69:21:06:ba:7f:a5:48:5e:0a:85:00:a7:
         58:f8:be:12:ca:77:08:d6:6b:f5:82:ba:77:89:07:f0:2b:ee:
         13:e7:06:c0:34:ae:47:50:10:df:6e:87:a5:96:79:7c:68:75:
         dd:51:1c:c9:78:b7:f7:bd:64:5f:2e:bd:dd:9e:bf:78:87:70:
         6d:8f:99:71:0c:53:0a:69:93:eb:4f:8b:e8:e5:1d:b8:15:89:
         b6:c5:12:70:da:f1:7f:d4:dc:25:55:fc:d7:84:e1:93:f2:96:
         01:03:93:12:f0:c6:c7:be:d9:35:59:53:59:53:cd:49:bb:0a:
         e3:2b:e0:8c:a7:8e:26:12:34:11:2b:50:b1:6c:64:dc:e0:de:
         35:11:66:b3:7e:c8:ab:d2:10:bd:e2:35:ac:69:6c:97:b6:1f:
         39:0f:5f:ae:14:fc:51:d6:3a:62:04:1a:9f:de:b6:f1:76:ec:
         78:ea:e6:51:bb:5a:e8:15:dc:d3:62:27:79:f1:ec:5d:77:0c:
         f1:07:00:da:2e:23:bd:b8:34:ee:64:e2:aa:55:cb:ce:3a:02:
         f8:3b:f0:84:11:1c:ba:5c:7c:e5:4a:58:aa:9b:39:98:9b:9c:
         2e:d8:b5:24:7b:d9:ab:8d:c5:a7:31:d2:e4:b1:d0:21:84:7a:
         73:29:43:19
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUc+kUaoFXuuo7XyYrhQP1YtXnBZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU1NEY5MTgzREQ1MEQ0MjJGOEIyQzI2MUZDQjczQ0I3
RTZGQzM5MjAeFw0yMzEyMTgxNzIxMzBaFw0yNDEyMTYxNzI2MzBaMDMxMTAvBgNV
BAMTKEQ0MDhFNDcwOTJBQkRBM0VCNzYwOEU3MTg5MzJEMDI3NzFGNjUyMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+K9Y3d4Ln/SCby7uzuoti5et
DXAbEmh9QXEUpVWnl27lM0U+K4h/7nNXw1hTHnWk57vPyK0Bi7eTwmc9ELRIZxbR
dlb4JAcA9wSGVNCJMq9BQKWhE3iEEENHag2rVQ4zzHFCwzhUK7yaxWdTbtY25r2e
/CA36CFnq9B3NY8l0eFFz5fq7gU6g14u2jJqavmJgZsvF5Ty1E618RQ1BCXuvcAq
VqW8ikSLPp4QSm0TxHmOQpDBDgzXGcykxmDI6qkrWFy/melpoPZXYyVXmahzYPsl
GBzagPx8989sGBmG09Km4Y1Jiv0Nv8phlYQidLZm8/kgl3n/YZfDBCmQDcejAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU1AjkcJKr2j63YI5xiTLQJ3H2UiwwHwYDVR0j
BBgwFoAUtVT5GD3VDUIviywmH8tzy35vw5IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZbzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFI
LzAvQjU1NEY5MTgzREQ1MEQ0MjJGOEIyQzI2MUZDQjczQ0I3RTZGQzM5Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC9CNTU0RjkxODNERDUwRDQyMkY4
QjJDMjYxRkNCNzNDQjdFNkZDMzkyLmNlcjCBrwYIKwYBBQUHAQsEgaIwgZ8wgZwG
CCsGAQUFBzALhoGPcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
bzhRZVRidUtaMjU5aTVxU1lqZWVVOG9rS0FLVTZMOFpGdTFHNVdMVDFILzAvMzEz
MzM4MmUzMTM4MzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYz
MzM5MzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIq5/zANBgkqhkiG9w0BAQsFAAOCAQEAHRPaB/ZW
aSEGun+lSF4KhQCnWPi+Esp3CNZr9YK6d4kH8CvuE+cGwDSuR1AQ326HpZZ5fGh1
3VEcyXi3971kXy693Z6/eIdwbY+ZcQxTCmmT60+L6OUduBWJtsUScNrxf9TcJVX8
14Thk/KWAQOTEvDGx77ZNVlTWVPNSbsK4yvgjKeOJhI0EStQsWxk3ODeNRFms37I
q9IQveI1rGlsl7YfOQ9frhT8UdY6YgQan9628XbseOrmUbta6BXc02InefHsXXcM
8QcA2i4jvbg07mTiqlXLzjoC+DvwhBEculx85UpYqps5mJucLti1JHvZq43FpzHS
5LHQIYR6cylDGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:13 2024 by rpki-client on console-fra.rpki-client.org