Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32332d3233203d3e20323634333533.roa
File:                     3133382e3138362e3130342e302f32332d3233203d3e20323634333533.roa (raw, json)
Hash identifier:          Dgw7e9RL2kAKjJn4mduDVSmTRwzrgQQfCwBKZYkxnA4=
Subject key identifier:   57:A1:03:4B:6C:92:66:15:38:81:03:8A:FC:F1:1A:C5:86:11:32:E8
Certificate issuer:       /CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
Certificate serial:       7966BB5BD2F48FD271EBB829330D1976C3C72896
Authority key identifier: 8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32332d3233203d3e20323634333533.roa
Signing time:             Sun 30 Oct 2022 13:00:07 +0000
ROA not before:           Sun 30 Oct 2022 12:55:07 +0000
ROA not after:            Sun 29 Oct 2023 13:00:07 +0000
asID:                     264353
IP address blocks:        138.186.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:66:bb:5b:d2:f4:8f:d2:71:eb:b8:29:33:0d:19:76:c3:c7:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D73F533955BE76ECBC1190057DAB05442B4A50E
        Validity
            Not Before: Oct 30 12:55:07 2022 GMT
            Not After : Oct 29 13:00:07 2023 GMT
        Subject: CN=57A1034B6C9266153881038AFCF11AC5861132E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:23:04:c1:7b:8c:6f:ed:7a:ed:8c:f4:ab:
                    04:ba:1b:76:86:d6:25:c1:a2:c4:5f:9e:62:a8:ed:
                    63:27:f6:cf:69:cc:42:1a:c4:75:99:64:7e:aa:84:
                    bc:fb:ed:fa:1a:f0:cb:75:c9:6b:7c:b2:e4:8f:7e:
                    53:67:72:ac:d2:9b:b1:b2:58:e0:1c:fa:f5:f3:f1:
                    89:ff:37:b4:ad:26:8b:30:34:98:e1:0c:f5:17:e3:
                    fa:fa:4f:67:47:5e:08:d1:d0:75:46:b8:27:37:4e:
                    22:7c:47:c8:f9:1f:58:5f:72:c2:96:aa:74:33:be:
                    90:c3:3e:36:5d:0d:c6:f0:35:2e:38:d5:2f:ed:6c:
                    55:f1:e9:b7:24:47:0e:f6:7b:8a:e7:ae:0a:14:e5:
                    e5:22:27:6c:aa:03:98:95:17:ef:26:ae:ac:a8:4f:
                    96:d3:08:eb:b4:cb:a3:b7:3e:21:9f:b1:bc:54:c6:
                    41:8b:4b:c7:18:54:8b:a5:c5:1e:a7:f7:89:a2:1d:
                    b3:41:33:6d:11:17:ba:0e:b2:73:fc:5c:ad:d5:62:
                    33:ea:58:e4:30:0a:37:e8:a3:5e:fd:7d:4d:47:88:
                    79:3e:bf:59:e3:3e:7e:4b:92:37:b5:0d:32:1f:5b:
                    22:d2:3c:b9:be:a0:ff:1c:36:95:ca:f4:b1:e9:77:
                    97:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A1:03:4B:6C:92:66:15:38:81:03:8A:FC:F1:1A:C5:86:11:32:E8
            X509v3 Authority Key Identifier:
                keyid:8D:73:F5:33:95:5B:E7:6E:CB:C1:19:00:57:DA:B0:54:42:B4:A5:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D73F533955BE76ECBC1190057DAB05442B4A50E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LpTAe4v7nSY2rRYR89yas4P1aFcwYET9hdpCgimnQku/0/3133382e3138362e3130342e302f32332d3233203d3e20323634333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:71:93:25:70:80:33:5b:6e:96:02:b2:cd:93:39:68:63:c3:
         a1:1d:dc:f3:56:fc:db:93:57:10:95:12:32:d5:1c:fc:ff:e3:
         a1:a0:43:db:22:34:7d:fb:94:a7:8b:d7:33:93:35:98:5d:03:
         1b:f6:d7:f3:64:c6:4e:9f:54:97:b1:dd:46:41:32:f7:2c:ff:
         e1:ef:a9:7e:ca:24:8f:65:fb:75:81:55:d0:54:74:20:87:84:
         a5:00:95:64:a6:b4:6d:a1:71:16:7a:2d:6f:54:35:01:e7:a5:
         07:aa:fa:e6:11:25:aa:82:f6:29:9a:8d:a8:63:d0:73:87:f4:
         a7:ad:d3:bf:ff:c2:e1:91:ce:61:f7:77:89:f3:fc:0d:c0:db:
         f4:b1:cb:5d:9a:d0:cb:5b:f3:42:13:71:c3:37:a8:20:04:79:
         b2:12:6c:3f:1f:b6:ec:50:f1:50:ea:37:e5:e1:0a:38:7b:34:
         a7:8d:7a:ce:05:f5:80:4a:00:59:87:e1:41:79:c5:29:ee:eb:
         ea:56:77:71:c6:5e:07:ac:2e:1c:bf:f6:57:05:95:db:df:4b:
         22:97:27:7b:f7:2a:5b:0b:73:02:03:7c:ba:65:90:9c:0a:b6:
         96:8c:04:43:cb:84:e0:5d:bb:9c:94:53:68:77:4e:bf:39:0a:
         61:75:50:ea
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeWa7W9L0j9Jx67gpMw0ZdsPHKJYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ3M0Y1MzM5NTVCRTc2RUNCQzExOTAwNTdEQUIwNTQ0
MkI0QTUwRTAeFw0yMjEwMzAxMjU1MDdaFw0yMzEwMjkxMzAwMDdaMDMxMTAvBgNV
BAMTKDU3QTEwMzRCNkM5MjY2MTUzODgxMDM4QUZDRjExQUM1ODYxMTMyRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlNyMEwXuMb+167Yz0qwS6G3aG
1iXBosRfnmKo7WMn9s9pzEIaxHWZZH6qhLz77foa8Mt1yWt8suSPflNncqzSm7Gy
WOAc+vXz8Yn/N7StJoswNJjhDPUX4/r6T2dHXgjR0HVGuCc3TiJ8R8j5H1hfcsKW
qnQzvpDDPjZdDcbwNS441S/tbFXx6bckRw72e4rnrgoU5eUiJ2yqA5iVF+8mrqyo
T5bTCOu0y6O3PiGfsbxUxkGLS8cYVIulxR6n94miHbNBM20RF7oOsnP8XK3VYjPq
WOQwCjfoo179fU1HiHk+v1njPn5Lkje1DTIfWyLSPLm+oP8cNpXK9LHpd5dhAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUV6EDS2ySZhU4gQOK/PEaxYYRMugwHwYDVR0j
BBgwFoAUjXP1M5Vb527LwRkAV9qwVEK0pQ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxwVEFlNHY3blNZMnJSWVI4OXlhczRQMWFGY3dZRVQ5aGRwQ2dpbW5R
a3UvMC84RDczRjUzMzk1NUJFNzZFQ0JDMTE5MDA1N0RBQjA1NDQyQjRBNTBFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhENzNGNTMzOTU1QkU3NkVD
QkMxMTkwMDU3REFCMDU0NDJCNEE1MEUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMcFRBZTR2N25TWTJyUllSODl5YXM0UDFhRmN3WUVUOWhkcENnaW1uUWt1LzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMzMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq6aDANBgkqhkiG9w0BAQsFAAOCAQEAiXGT
JXCAM1tulgKyzZM5aGPDoR3c81b825NXEJUSMtUc/P/joaBD2yI0ffuUp4vXM5M1
mF0DG/bX82TGTp9Ul7HdRkEy9yz/4e+pfsokj2X7dYFV0FR0IIeEpQCVZKa0baFx
Fnotb1Q1AeelB6r65hElqoL2KZqNqGPQc4f0p63Tv//C4ZHOYfd3ifP8DcDb9LHL
XZrQy1vzQhNxwzeoIAR5shJsPx+27FDxUOo35eEKOHs0p416zgX1gEoAWYfhQXnF
Ke7r6lZ3ccZeB6wuHL/2VwWV299LIpcne/cqWwtzAgN8umWQnAq2lowEQ8uE4F27
nJRTaHdOvzkKYXVQ6g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org