Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa
File:                     3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa (raw, json)
Hash identifier:          ekOyaCRIntlu34O0/MopUG2M/gfG0TeEAsMa3yvXdLA=
Subject key identifier:   83:3D:96:C3:F7:0E:AA:45:1B:99:6A:08:49:D8:61:80:74:04:CC:F5
Certificate issuer:       /CN=CAAC5082E3270948C4997CD8918CABFFD0682335
Certificate serial:       06A24CBF7CC834B95612A1C4F644A2237C829FE7
Authority key identifier: CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa
Signing time:             Sat 30 Mar 2024 00:46:21 +0000
ROA not before:           Sat 30 Mar 2024 00:41:21 +0000
ROA not after:            Sat 29 Mar 2025 00:46:21 +0000
asID:                     264269
IP address blocks:        138.118.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a2:4c:bf:7c:c8:34:b9:56:12:a1:c4:f6:44:a2:23:7c:82:9f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAAC5082E3270948C4997CD8918CABFFD0682335
        Validity
            Not Before: Mar 30 00:41:21 2024 GMT
            Not After : Mar 29 00:46:21 2025 GMT
        Subject: CN=833D96C3F70EAA451B996A0849D861807404CCF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:68:17:99:b8:81:29:52:aa:87:19:b2:96:dd:
                    76:43:29:1c:e4:60:df:74:fe:12:62:c5:49:89:2c:
                    9e:76:4a:86:c7:e8:8b:1b:27:bc:fa:87:c6:41:cc:
                    07:3f:5a:ee:b5:91:35:a3:05:b7:2e:ea:85:d6:14:
                    d8:45:72:40:6b:07:ad:e9:55:fb:da:30:46:77:aa:
                    03:16:87:8e:66:c7:e7:71:02:a2:d0:df:8f:ce:38:
                    f4:b1:8e:14:a6:8f:af:0b:3c:2a:b3:30:32:16:4b:
                    da:88:10:1b:86:6e:31:02:af:25:bb:d4:a4:ce:ca:
                    85:34:fd:94:28:a6:fb:f8:77:c8:17:89:5e:35:cf:
                    f4:4c:fa:85:e5:5d:7e:81:db:bc:3e:99:1a:91:55:
                    34:eb:98:04:78:7f:a4:85:dd:d0:8c:84:a4:d6:7e:
                    1d:e7:37:f2:f9:71:3a:18:d0:62:98:f4:49:6e:ee:
                    24:1a:97:49:0c:8c:f2:67:ee:02:46:35:99:f6:50:
                    9f:e8:d5:94:5d:f3:aa:7a:a6:4c:04:d5:d3:61:64:
                    68:3f:78:ec:c7:98:0c:39:51:94:4c:f9:cc:57:87:
                    b1:f7:5f:39:8a:95:8c:dc:24:da:0b:4e:72:6a:2d:
                    26:4d:1a:c6:63:00:11:ee:c1:bf:4d:bb:d2:3c:14:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:96:C3:F7:0E:AA:45:1B:99:6A:08:49:D8:61:80:74:04:CC:F5
            X509v3 Authority Key Identifier:
                keyid:CA:AC:50:82:E3:27:09:48:C4:99:7C:D8:91:8C:AB:FF:D0:68:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/CAAC5082E3270948C4997CD8918CABFFD0682335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAAC5082E3270948C4997CD8918CABFFD0682335.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JEnPBL7tJrnJdnoRwx6cAfTCKL8q74ijrvPeo6Fg1GE/0/3133382e3131382e3235302e302f32332d3233203d3e20323634323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:8a:57:84:0e:19:45:6e:b0:e3:ff:d7:fc:df:c9:46:a1:0c:
         e5:65:ec:77:a5:9c:09:13:3c:c4:8c:61:fb:74:3c:a5:ff:07:
         5a:dc:d1:d2:98:c8:86:ea:a8:05:04:88:1b:04:ea:e8:40:a8:
         b3:fc:22:e5:30:cb:84:c4:32:2a:22:a5:40:60:31:17:2d:e6:
         18:ee:53:98:e3:52:f0:36:18:00:12:c0:b5:17:26:b0:1d:1e:
         24:15:76:35:16:e4:bb:ec:c2:fd:aa:79:82:bd:c4:86:fa:23:
         a0:63:ba:c0:66:05:cd:f4:e7:bd:e0:da:5b:f4:1b:67:f2:c6:
         11:e5:63:1e:ed:fc:48:e0:8c:f3:e3:1d:c1:d2:ac:93:de:c0:
         8c:59:a3:b6:9a:61:02:6d:c4:88:4f:ed:8c:c4:2d:0f:d2:28:
         32:fa:a8:e7:c4:90:03:bd:e8:58:12:c9:c4:7b:e2:43:02:9f:
         6b:ec:0e:fd:2e:8c:49:c6:e9:e4:ca:ce:25:eb:08:24:f4:26:
         50:4b:8a:f5:fc:de:67:06:52:3a:2f:0b:c3:8f:ed:19:e0:7a:
         70:41:fd:f8:15:b2:25:1d:d6:9f:4d:4f:79:73:54:88:de:c9:
         f0:cb:45:1b:2d:1e:da:1f:ed:45:65:af:ed:6d:e8:3f:ab:3e:
         12:cf:00:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBqJMv3zINLlWEqHE9kSiI3yCn+cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FBQzUwODJFMzI3MDk0OEM0OTk3Q0Q4OTE4Q0FCRkZE
MDY4MjMzNTAeFw0yNDAzMzAwMDQxMjFaFw0yNTAzMjkwMDQ2MjFaMDMxMTAvBgNV
BAMTKDgzM0Q5NkMzRjcwRUFBNDUxQjk5NkEwODQ5RDg2MTgwNzQwNENDRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJaBeZuIEpUqqHGbKW3XZDKRzk
YN90/hJixUmJLJ52SobH6IsbJ7z6h8ZBzAc/Wu61kTWjBbcu6oXWFNhFckBrB63p
VfvaMEZ3qgMWh45mx+dxAqLQ34/OOPSxjhSmj68LPCqzMDIWS9qIEBuGbjECryW7
1KTOyoU0/ZQopvv4d8gXiV41z/RM+oXlXX6B27w+mRqRVTTrmAR4f6SF3dCMhKTW
fh3nN/L5cToY0GKY9Elu7iQal0kMjPJn7gJGNZn2UJ/o1ZRd86p6pkwE1dNhZGg/
eOzHmAw5UZRM+cxXh7H3XzmKlYzcJNoLTnJqLSZNGsZjABHuwb9Nu9I8FDXdAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUgz2Ww/cOqkUbmWoISdhhgHQEzPUwHwYDVR0j
BBgwFoAUyqxQguMnCUjEmXzYkYyr/9BoIzUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0pFblBCTDd0SnJuSmRub1J3eDZjQWZUQ0tMOHE3NGlqcnZQZW82Rmcx
R0UvMC9DQUFDNTA4MkUzMjcwOTQ4QzQ5OTdDRDg5MThDQUJGRkQwNjgyMzM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBQUM1MDgyRTMyNzA5NDhD
NDk5N0NEODkxOENBQkZGRDA2ODIzMzUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNKRW5QQkw3dEpybkpkbm9Sd3g2Y0FmVENLTDhxNzRpanJ2UGVvNkZnMUdFLzAv
MzEzMzM4MmUzMTMxMzgyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp2+jANBgkqhkiG9w0BAQsFAAOCAQEARYpX
hA4ZRW6w4//X/N/JRqEM5WXsd6WcCRM8xIxh+3Q8pf8HWtzR0pjIhuqoBQSIGwTq
6ECos/wi5TDLhMQyKiKlQGAxFy3mGO5TmONS8DYYABLAtRcmsB0eJBV2NRbku+zC
/ap5gr3EhvojoGO6wGYFzfTnveDaW/QbZ/LGEeVjHu38SOCM8+MdwdKsk97AjFmj
tpphAm3EiE/tjMQtD9IoMvqo58SQA73oWBLJxHviQwKfa+wO/S6MScbp5MrOJesI
JPQmUEuK9fzeZwZSOi8Lw4/tGeB6cEH9+BWyJR3Wn01PeXNUiN7J8MtFGy0e2h/t
RWWv7W3oP6s+Es8ACA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org