Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233362e302f32322d3234203d3e20323632393932.roa
File:                     3133382e3132322e3233362e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          epuKZuMFyrI2u0N8/wFTcN2tizDJLQ8aYuv5OZVr2k0=
Subject key identifier:   D6:78:DA:B8:A9:CB:FF:A4:1B:F0:48:71:1D:80:01:E8:C8:7B:2C:8F
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       770067B6EBA0B9DAAF4D2CFB25D416B54B6D49D7
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233362e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 31 Jan 2024 14:31:14 +0000
ROA not before:           Wed 31 Jan 2024 14:26:14 +0000
ROA not after:            Wed 29 Jan 2025 14:31:14 +0000
asID:                     262992
IP address blocks:        138.122.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:00:67:b6:eb:a0:b9:da:af:4d:2c:fb:25:d4:16:b5:4b:6d:49:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Jan 31 14:26:14 2024 GMT
            Not After : Jan 29 14:31:14 2025 GMT
        Subject: CN=D678DAB8A9CBFFA41BF048711D8001E8C87B2C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:44:88:3a:36:e8:95:de:02:39:39:20:7b:
                    10:1a:f0:75:c4:c6:63:97:3c:67:94:e0:ee:68:0d:
                    18:97:a3:0d:dd:e8:71:55:4b:a8:b1:3b:64:d0:e1:
                    8c:c1:de:ca:75:87:55:69:5c:30:d4:b1:72:27:70:
                    a4:50:61:c7:80:05:de:c2:e8:e7:d5:18:67:fd:93:
                    dc:7c:ef:e4:4b:1f:82:e4:27:e9:e9:f0:f8:97:ff:
                    93:4a:57:b7:a2:63:7c:a7:c1:b6:e1:d9:f7:e3:49:
                    a4:69:5c:4d:7e:a4:14:e5:14:fd:ac:10:56:da:87:
                    d4:6b:8b:0d:b6:36:12:09:ca:66:8f:53:3e:cd:cc:
                    b6:d1:06:5d:94:62:ba:d7:9e:45:71:90:35:64:92:
                    da:01:97:76:e9:c9:16:94:4b:2f:8d:0a:93:8c:83:
                    65:0a:e1:48:75:31:52:4e:46:b9:8f:48:03:20:e3:
                    a7:e8:57:8e:e5:e3:2f:69:5c:bb:9a:53:7d:4d:3e:
                    b6:69:87:76:f4:21:30:5b:82:95:f1:d1:fc:cf:0b:
                    aa:85:62:6c:9a:61:5f:74:52:9b:3d:67:fb:2d:70:
                    b0:93:52:87:ea:4b:77:c1:40:ca:4f:fb:4a:7e:08:
                    7c:b6:10:c1:35:84:d4:84:78:62:41:4f:29:17:73:
                    1b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:78:DA:B8:A9:CB:FF:A4:1B:F0:48:71:1D:80:01:E8:C8:7B:2C:8F
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3132322e3233362e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:f1:78:90:16:7a:22:35:59:94:0b:5e:46:36:dd:e3:22:72:
         c3:24:df:7c:00:8d:80:bf:db:d5:27:7d:f2:5d:eb:68:ad:9b:
         ea:c4:50:7f:71:8a:8b:8e:30:fc:fb:0f:18:d2:bd:3a:89:68:
         04:06:0e:3c:d9:59:40:12:4c:1e:1b:bb:a1:00:71:d7:17:d3:
         69:d0:a9:5c:60:48:b8:95:e4:80:28:5f:f2:49:df:0d:10:15:
         21:4d:9c:78:16:42:45:dc:89:71:bd:d2:f9:d9:0d:21:c0:8b:
         fb:0e:76:1a:43:5b:8b:e1:86:74:57:43:4f:43:c0:4a:36:24:
         cf:6c:5b:7d:f2:e2:86:fd:63:e4:4d:00:72:d9:f7:d4:52:b5:
         b0:a7:c0:5b:64:af:2c:2b:75:d7:60:51:8f:8c:b3:ee:64:37:
         93:d8:fe:26:84:20:2b:60:4c:bf:40:28:00:50:9e:32:fa:0a:
         32:57:6c:3d:97:11:d6:9f:5f:d8:57:33:80:33:2e:8c:9d:1e:
         70:e5:98:00:46:fa:12:a6:94:b5:67:21:a2:e8:77:ae:ea:bd:
         93:ce:3e:f6:c1:1a:87:59:d2:3e:28:9c:95:fe:19:2a:e9:d6:
         f3:15:69:f6:77:a0:0c:3c:f8:6f:e7:a3:48:33:87:3e:0c:ad:
         67:f2:5c:fe
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdwBntuugudqvTSz7JdQWtUttSdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURBQzhCNTMwNTE3OEZFN0ZGOEZBRjNEOENCQTI2QTVF
NjI2MzJFRTAeFw0yNDAxMzExNDI2MTRaFw0yNTAxMjkxNDMxMTRaMDMxMTAvBgNV
BAMTKEQ2NzhEQUI4QTlDQkZGQTQxQkYwNDg3MTFEODAwMUU4Qzg3QjJDOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgukSIOjbold4COTkgexAa8HXE
xmOXPGeU4O5oDRiXow3d6HFVS6ixO2TQ4YzB3sp1h1VpXDDUsXIncKRQYceABd7C
6OfVGGf9k9x87+RLH4LkJ+np8PiX/5NKV7eiY3ynwbbh2ffjSaRpXE1+pBTlFP2s
EFbah9Rriw22NhIJymaPUz7NzLbRBl2UYrrXnkVxkDVkktoBl3bpyRaUSy+NCpOM
g2UK4Uh1MVJORrmPSAMg46foV47l4y9pXLuaU31NPrZph3b0ITBbgpXx0fzPC6qF
YmyaYV90Ups9Z/stcLCTUofqS3fBQMpP+0p+CHy2EME1hNSEeGJBTykXcxv/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU1njauKnL/6Qb8EhxHYAB6Mh7LI8wHwYDVR0j
BBgwFoAUrayLUwUXj+f/j689jLompeYmMu4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9BREFDOEI1MzA1MTc4RkU3RkY4RkFGM0Q4Q0JBMjZBNUU2MjYzMkVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FEQUM4QjUzMDUxNzhGRTdG
RjhGQUYzRDhDQkEyNkE1RTYyNjMyRUUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzMzM4MmUzMTMyMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjM5MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop67DANBgkqhkiG9w0BAQsFAAOCAQEA1fF4
kBZ6IjVZlAteRjbd4yJywyTffACNgL/b1Sd98l3raK2b6sRQf3GKi44w/PsPGNK9
OoloBAYOPNlZQBJMHhu7oQBx1xfTadCpXGBIuJXkgChf8knfDRAVIU2ceBZCRdyJ
cb3S+dkNIcCL+w52GkNbi+GGdFdDT0PASjYkz2xbffLihv1j5E0Actn31FK1sKfA
W2SvLCt112BRj4yz7mQ3k9j+JoQgK2BMv0AoAFCeMvoKMldsPZcR1p9f2FczgDMu
jJ0ecOWYAEb6EqaUtWchouh3ruq9k84+9sEah1nSPiiclf4ZKunW8xVp9negDDz4
b+ejSDOHPgytZ/Jc/g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org