Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa
File:                     3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa (raw, json)
Hash identifier:          usBo9lWnzo1317rPTuEXGv2wwKGw1STF6QewWZFklFI=
Subject key identifier:   29:33:6B:62:DD:60:19:9B:72:3C:3D:09:D3:E8:21:57:5B:8F:68:CA
Certificate issuer:       /CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
Certificate serial:       5E6B34A3FD2BB4CFD2827773410867D503BDF137
Authority key identifier: A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa
Signing time:             Tue 12 Mar 2024 12:48:29 +0000
ROA not before:           Tue 12 Mar 2024 12:43:29 +0000
ROA not after:            Tue 11 Mar 2025 12:48:29 +0000
asID:                     264340
IP address blocks:        138.185.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6b:34:a3:fd:2b:b4:cf:d2:82:77:73:41:08:67:d5:03:bd:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A257B01974D35AFB5E96E170F25E9F0AE4726A04
        Validity
            Not Before: Mar 12 12:43:29 2024 GMT
            Not After : Mar 11 12:48:29 2025 GMT
        Subject: CN=29336B62DD60199B723C3D09D3E821575B8F68CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:0f:cb:fc:e0:59:4f:ea:54:e6:a0:58:c8:
                    96:e6:fc:e8:76:e7:61:08:48:3e:16:60:2b:b4:71:
                    70:ad:cb:61:ad:9b:aa:68:cc:9c:a4:9f:4f:2e:ef:
                    19:0a:71:59:46:38:c8:ca:ce:5c:43:06:7c:c4:18:
                    fc:ab:cb:92:bb:68:b7:32:3a:36:4a:2b:f7:8f:6a:
                    bc:6f:2f:a3:2f:82:ae:3f:5f:1f:cf:30:3b:4e:69:
                    6a:c4:72:61:45:25:e5:7a:dd:6b:b6:13:9d:3a:9d:
                    52:f6:93:04:df:c4:90:80:c7:0e:e0:f0:f9:60:02:
                    1b:bd:f2:70:7f:e3:09:9b:74:d7:70:12:07:68:55:
                    91:a8:1c:d9:97:a8:e5:4e:41:15:0b:51:8a:40:41:
                    7d:de:15:76:f3:ca:45:a1:6d:0e:06:6c:0d:85:3d:
                    f7:2e:16:44:f2:d9:20:08:33:78:f8:a8:52:c9:42:
                    64:36:d7:ea:33:df:05:0b:82:e1:68:24:4f:7a:7e:
                    57:9c:e7:90:14:5f:c3:b7:76:2c:4a:76:22:66:3a:
                    e7:5b:bb:92:e4:86:a9:b7:8e:5f:82:f4:45:ef:48:
                    f6:d0:2f:58:8b:88:e0:39:3d:67:43:54:d7:62:7f:
                    86:b6:d9:71:11:06:6e:a7:8e:52:e0:46:74:f2:aa:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:33:6B:62:DD:60:19:9B:72:3C:3D:09:D3:E8:21:57:5B:8F:68:CA
            X509v3 Authority Key Identifier:
                keyid:A2:57:B0:19:74:D3:5A:FB:5E:96:E1:70:F2:5E:9F:0A:E4:72:6A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A257B01974D35AFB5E96E170F25E9F0AE4726A04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JZQ8nrC8RHSADgZCgd3rfrCPzumxyfyVRTEJh1WWwWf/0/3133382e3138352e35362e302f32322d3234203d3e20323634333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:2a:a1:5c:e7:bd:9b:3b:c1:35:54:4f:17:13:ff:bb:1d:
         10:b6:d1:df:e1:2d:23:82:d5:1d:8a:5d:94:38:1c:a1:18:af:
         7d:18:be:4d:57:6a:9b:c2:68:52:dd:b1:f4:80:02:4e:00:b4:
         87:27:df:5a:09:5f:20:5d:6d:68:05:22:c0:ef:81:1a:e4:11:
         12:1a:00:d8:fe:b2:2e:e0:ba:93:44:9e:c3:f4:8e:74:cd:3d:
         fe:d4:5e:2b:22:64:ab:13:c6:41:68:53:9e:34:ee:26:98:c5:
         4e:3c:d5:08:09:fe:de:5a:be:5b:6e:32:96:5d:86:ac:f0:68:
         e7:4a:f3:be:e0:84:ce:7f:42:49:2c:59:85:0b:bd:33:be:bb:
         67:ea:94:fe:7c:eb:46:08:23:31:5e:43:c2:db:7f:38:79:dd:
         d7:82:7c:82:1c:84:80:9c:1d:e1:45:c6:40:28:c3:f4:a6:c7:
         ca:06:d9:c0:d9:7e:9a:10:a9:a4:66:0d:7a:40:97:a6:78:9f:
         93:ea:bb:ab:c4:71:d7:4a:e7:81:c4:7e:3b:a2:01:6e:d6:32:
         19:02:8c:0d:56:60:f7:81:2d:98:c2:b6:b8:04:46:c5:41:c7:
         f0:ab:eb:21:3e:ae:71:a3:8d:6c:2f:5d:ee:bf:a7:01:50:82:
         23:ac:2c:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXms0o/0rtM/SgndzQQhn1QO98TcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI1N0IwMTk3NEQzNUFGQjVFOTZFMTcwRjI1RTlGMEFF
NDcyNkEwNDAeFw0yNDAzMTIxMjQzMjlaFw0yNTAzMTExMjQ4MjlaMDMxMTAvBgNV
BAMTKDI5MzM2QjYyREQ2MDE5OUI3MjNDM0QwOUQzRTgyMTU3NUI4RjY4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBDA/L/OBZT+pU5qBYyJbm/Oh2
52EISD4WYCu0cXCty2Gtm6pozJykn08u7xkKcVlGOMjKzlxDBnzEGPyry5K7aLcy
OjZKK/eParxvL6Mvgq4/Xx/PMDtOaWrEcmFFJeV63Wu2E506nVL2kwTfxJCAxw7g
8PlgAhu98nB/4wmbdNdwEgdoVZGoHNmXqOVOQRULUYpAQX3eFXbzykWhbQ4GbA2F
PfcuFkTy2SAIM3j4qFLJQmQ21+oz3wULguFoJE96flec55AUX8O3dixKdiJmOudb
u5Lkhqm3jl+C9EXvSPbQL1iLiOA5PWdDVNdif4a22XERBm6njlLgRnTyqpFlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKTNrYt1gGZtyPD0J0+ghV1uPaMowHwYDVR0j
BBgwFoAUolewGXTTWvteluFw8l6fCuRyagQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkpaUThuckM4UkhTQURnWkNnZDNyZnJDUHp1bXh5ZnlWUlRFSmgxV1d3
V2YvMC9BMjU3QjAxOTc0RDM1QUZCNUU5NkUxNzBGMjVFOUYwQUU0NzI2QTA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EyNTdCMDE5NzREMzVBRkI1
RTk2RTE3MEYyNUU5RjBBRTQ3MjZBMDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJKWlE4bnJDOFJIU0FEZ1pDZ2QzcmZyQ1B6dW14eWZ5VlJURUpoMVdXd1dmLzAv
MzEzMzM4MmUzMTM4MzUyZTM1MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzQzMzM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKuTgwDQYJKoZIhvcNAQELBQADggEBAGm7KqFc
572bO8E1VE8XE/+7HRC20d/hLSOC1R2KXZQ4HKEYr30Yvk1XapvCaFLdsfSAAk4A
tIcn31oJXyBdbWgFIsDvgRrkERIaANj+si7gupNEnsP0jnTNPf7UXisiZKsTxkFo
U5407iaYxU481QgJ/t5avltuMpZdhqzwaOdK877ghM5/QkksWYULvTO+u2fqlP58
60YIIzFeQ8Lbfzh53deCfIIchICcHeFFxkAow/Smx8oG2cDZfpoQqaRmDXpAl6Z4
n5Pqu6vEcddK54HEfjuiAW7WMhkCjA1WYPeBLZjCtrgERsVBx/Cr6yE+rnGjjWwv
Xe6/pwFQgiOsLOM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org