Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
File:                     3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          46Q3xFpDMHInyfXQFRlWxUl1mhC0BehZvh2FnvbEFYk=
Subject key identifier:   22:7F:F8:03:0E:1D:66:1A:29:62:C7:72:E6:12:6C:DC:EC:D7:94:39
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       65C6768D17A84D1CCDFBA52AE30E8F8CFE478829
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:44 +0000
ROA not before:           Thu 19 Sep 2024 14:06:44 +0000
ROA not after:            Thu 18 Sep 2025 14:11:44 +0000
asID:                     262494
IP address blocks:        138.185.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c6:76:8d:17:a8:4d:1c:cd:fb:a5:2a:e3:0e:8f:8c:fe:47:88:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:44 2024 GMT
            Not After : Sep 18 14:11:44 2025 GMT
        Subject: CN=227FF8030E1D661A2962C772E6126CDCECD79439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:92:12:ed:d9:9f:fd:24:fe:0e:af:76:cd:f0:
                    10:2a:66:ac:93:ed:0c:30:65:8a:cb:45:72:63:cd:
                    55:15:b4:66:f4:48:d2:5f:16:8f:1e:5e:07:de:c4:
                    2e:44:9f:d8:60:4b:aa:25:f1:e6:85:d4:7e:d4:59:
                    63:51:65:ba:0c:ba:71:3e:b8:38:71:6e:5a:5c:5b:
                    98:5c:20:fe:e2:27:7e:ba:52:60:05:8d:79:67:8b:
                    fc:0b:3c:c5:d9:ad:14:34:81:3f:36:47:5f:23:b1:
                    93:46:b8:f3:e0:52:50:4a:87:35:3b:ed:09:fb:d2:
                    10:26:2b:74:98:e2:94:86:25:c9:40:3c:2f:7a:6c:
                    84:de:04:e7:4e:4f:4d:e6:39:70:46:d8:89:d4:c4:
                    45:2f:b3:f5:5b:67:7f:57:09:92:0d:33:4d:45:fe:
                    52:3e:03:b3:bf:d0:94:bd:a1:39:65:b3:4a:eb:3f:
                    56:7e:77:72:23:f6:4f:81:71:4d:52:83:22:b3:63:
                    91:92:35:18:8a:7c:31:1a:68:55:c0:cb:9c:03:3d:
                    e8:92:e6:d3:2c:a7:55:1a:27:f7:f0:a3:f7:3f:f8:
                    3a:8f:88:81:16:26:ba:41:5b:80:fb:a1:f4:5c:3a:
                    ee:6e:8f:c1:b9:67:5c:18:e8:ac:04:e6:43:df:68:
                    86:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7F:F8:03:0E:1D:66:1A:29:62:C7:72:E6:12:6C:DC:EC:D7:94:39
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/3133382e3138352e3138392e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:e7:09:f2:c1:6c:e7:4d:45:59:fb:9e:e1:12:40:9b:89:15:
         9c:ad:ff:bf:28:db:d8:b3:37:6e:23:0a:d0:51:06:ad:09:bc:
         6d:c3:5d:bf:ca:44:43:ab:8d:91:aa:e6:6e:10:a9:0a:91:21:
         76:2a:f8:dd:23:2c:d9:31:75:22:63:90:74:cb:fb:d1:85:aa:
         de:ab:a4:a1:2d:38:0d:d7:89:d6:e3:5e:51:80:04:73:00:bf:
         bc:a0:dc:b5:a5:ef:81:50:c3:25:7f:c3:9a:b2:7b:a8:41:3c:
         83:4d:82:b3:b9:84:02:4a:a8:b8:17:f6:74:42:34:22:94:be:
         b6:07:43:ea:d8:a8:00:0e:f6:a0:94:0f:fe:00:cd:2a:e0:3e:
         aa:af:42:18:e1:7f:26:d2:3a:30:ab:55:60:fb:5f:c6:9d:00:
         d1:13:85:b3:34:cd:0d:62:0d:1a:78:a5:e4:c9:24:ad:27:c5:
         f5:b1:3c:de:0c:9c:cb:2e:b4:c6:04:eb:2a:9d:b9:f2:c5:77:
         0c:67:8f:06:a9:79:3b:d4:66:7d:fd:7f:9b:7b:05:2d:57:fe:
         2f:50:af:f1:94:e4:81:e6:da:f1:a5:88:41:72:6d:bf:49:34:
         4e:f6:51:9d:8c:ca:3c:86:bf:9b:05:d2:25:38:9c:ba:a6:cb:
         2b:17:3a:7a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUZcZ2jReoTRzN+6Uq4w6PjP5HiCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NDRaFw0yNTA5MTgxNDExNDRaMDMxMTAvBgNV
BAMTKDIyN0ZGODAzMEUxRDY2MUEyOTYyQzc3MkU2MTI2Q0RDRUNENzk0MzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtkhLt2Z/9JP4Or3bN8BAqZqyT
7QwwZYrLRXJjzVUVtGb0SNJfFo8eXgfexC5En9hgS6ol8eaF1H7UWWNRZboMunE+
uDhxblpcW5hcIP7iJ366UmAFjXlni/wLPMXZrRQ0gT82R18jsZNGuPPgUlBKhzU7
7Qn70hAmK3SY4pSGJclAPC96bITeBOdOT03mOXBG2InUxEUvs/VbZ39XCZINM01F
/lI+A7O/0JS9oTlls0rrP1Z+d3Ij9k+BcU1SgyKzY5GSNRiKfDEaaFXAy5wDPeiS
5tMsp1UaJ/fwo/c/+DqPiIEWJrpBW4D7ofRcOu5uj8G5Z1wY6KwE5kPfaIarAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUIn/4Aw4dZhopYsdy5hJs3OzXlDkwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzEzMzM4MmUzMTM4MzUyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM0MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIq5vTANBgkqhkiG9w0BAQsFAAOCAQEAB+cJ
8sFs501FWfue4RJAm4kVnK3/vyjb2LM3biMK0FEGrQm8bcNdv8pEQ6uNkarmbhCp
CpEhdir43SMs2TF1ImOQdMv70YWq3qukoS04DdeJ1uNeUYAEcwC/vKDctaXvgVDD
JX/DmrJ7qEE8g02Cs7mEAkqouBf2dEI0IpS+tgdD6tioAA72oJQP/gDNKuA+qq9C
GOF/JtI6MKtVYPtfxp0A0ROFszTNDWINGnil5MkkrSfF9bE83gycyy60xgTrKp25
8sV3DGePBql5O9Rmff1/m3sFLVf+L1Cv8ZTkgeba8aWIQXJtv0k0TvZRnYzKPIa/
mwXSJTicuqbLKxc6eg==
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org