Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3234203d3e20323632333737.roa
File:                     3133382e3131372e3231362e302f32322d3234203d3e20323632333737.roa (raw, json)
Hash identifier:          FoVGrZcLcXxEhDTt6XjNX2F9XxJYU+D+Ny/o+ByNIIA=
Subject key identifier:   7A:79:22:7A:79:54:3F:70:40:AC:C1:9E:27:D2:B9:11:B9:89:6F:D0
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       13D76A5EC24165145BCB5118F39D67AC76EF1D9A
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3234203d3e20323632333737.roa
Signing time:             Fri 02 Jun 2023 14:13:44 +0000
ROA not before:           Fri 02 Jun 2023 14:08:44 +0000
ROA not after:            Fri 31 May 2024 14:13:44 +0000
asID:                     262377
IP address blocks:        138.117.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d7:6a:5e:c2:41:65:14:5b:cb:51:18:f3:9d:67:ac:76:ef:1d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  2 14:08:44 2023 GMT
            Not After : May 31 14:13:44 2024 GMT
        Subject: CN=7A79227A79543F7040ACC19E27D2B911B9896FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e5:28:92:dc:6b:ca:c5:e6:ce:d8:71:d4:bd:
                    e1:dd:9c:ab:0c:16:ee:ae:45:16:96:fd:b1:10:cb:
                    49:1d:2c:d1:6f:4a:8e:52:a4:28:f8:e3:2a:8a:b8:
                    05:d1:5f:00:80:59:e8:74:3a:4e:7b:9e:20:c2:27:
                    ed:ca:26:c1:f1:cf:a1:1a:f8:45:13:39:d4:db:91:
                    c0:d9:2c:5c:3f:82:8a:41:0a:85:e1:81:be:7e:5c:
                    08:ca:e4:1f:60:85:e0:65:10:18:59:07:20:99:ef:
                    d0:33:fd:bf:51:2f:8d:4b:d8:e2:b1:f3:4f:c0:11:
                    9b:bd:07:63:6b:08:fa:7c:db:87:80:68:27:e6:30:
                    ea:64:63:02:cd:f4:65:b3:9f:09:30:23:ac:42:ec:
                    18:d8:2c:18:ba:8a:7c:2c:0c:47:04:fb:fc:c5:d7:
                    09:0e:a5:7f:89:5b:d7:72:32:d4:61:08:7a:f8:dc:
                    73:67:39:a8:bc:fc:36:dc:7f:1b:6d:94:cf:dd:3e:
                    e0:f3:46:ad:a9:ec:dd:7d:81:4e:cc:90:27:a9:0e:
                    be:09:0b:c4:56:21:63:89:43:ff:c4:f8:13:90:b2:
                    e2:d3:1d:0e:59:6a:82:b1:9b:2f:86:30:ba:bd:cc:
                    ac:f0:f0:17:6d:b3:63:6d:e4:1f:fa:2d:2c:f8:12:
                    5c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:79:22:7A:79:54:3F:70:40:AC:C1:9E:27:D2:B9:11:B9:89:6F:D0
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231362e302f32322d3234203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2a:d5:0b:7f:d9:e2:33:6d:07:35:8f:d7:6f:6e:09:34:36:ff:
         a6:78:02:dd:a5:d0:55:38:71:cc:58:b9:97:c8:f7:2c:64:13:
         25:30:4c:22:1a:d0:04:55:69:7f:cb:10:58:d3:e8:99:b5:de:
         14:cc:c3:3d:c0:86:2c:4a:2b:c7:81:34:44:5a:24:42:26:7f:
         13:de:da:9d:f2:da:3d:ab:ab:76:f2:29:cb:d0:85:02:64:d9:
         23:dc:58:2b:6b:21:a6:d5:f8:00:5b:8a:8e:9a:34:d3:c2:8d:
         24:46:6f:d8:60:dd:77:f8:43:4b:a2:a3:6b:94:19:71:f6:67:
         f4:9c:29:3e:3b:05:62:dd:35:0d:50:e2:63:96:17:7e:27:a1:
         9d:89:48:de:fa:7f:09:b2:65:5d:92:b8:a2:0c:6f:8d:b1:d0:
         35:f0:12:f8:db:04:50:4b:cc:fc:06:c6:e8:12:5e:29:6a:fb:
         69:d1:53:9c:7b:2f:96:60:01:e7:fe:c6:5a:ae:ce:84:9a:3e:
         07:39:08:b3:6e:ea:06:2d:2a:b8:ec:07:31:e2:d5:fe:80:31:
         b0:ad:c0:9e:7c:5a:4c:79:0c:f9:15:5f:ed:cc:b6:3c:75:46:
         f0:24:8c:93:f4:24:78:5c:23:a4:e5:06:41:a9:e0:40:44:5b:
         be:f4:b2:88
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUE9dqXsJBZRRby1EY851nrHbvHZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDMkU4QTYyODRCNTU2QzA2MjhENjBDMjUxODM4NEZE
NTg1OUE0QzAeFw0yMzA2MDIxNDA4NDRaFw0yNDA1MzExNDEzNDRaMDMxMTAvBgNV
BAMTKDdBNzkyMjdBNzk1NDNGNzA0MEFDQzE5RTI3RDJCOTExQjk4OTZGRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5SiS3GvKxebO2HHUveHdnKsM
Fu6uRRaW/bEQy0kdLNFvSo5SpCj44yqKuAXRXwCAWeh0Ok57niDCJ+3KJsHxz6Ea
+EUTOdTbkcDZLFw/gopBCoXhgb5+XAjK5B9gheBlEBhZByCZ79Az/b9RL41L2OKx
80/AEZu9B2NrCPp824eAaCfmMOpkYwLN9GWznwkwI6xC7BjYLBi6inwsDEcE+/zF
1wkOpX+JW9dyMtRhCHr43HNnOai8/DbcfxttlM/dPuDzRq2p7N19gU7MkCepDr4J
C8RWIWOJQ//E+BOQsuLTHQ5ZaoKxmy+GMLq9zKzw8Bdts2Nt5B/6LSz4ElxlAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUenkienlUP3BArMGeJ9K5EbmJb9AwHwYDVR0j
BBgwFoAUkMLopihLVWwGKNYMJRg4T9WFmkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEgxVUo5V1FhMnVIWHpycG8xa1VoUzlpaGJQVFlocDVKMmJ0SlFwOWpk
cWUvMC85MEMyRThBNjI4NEI1NTZDMDYyOEQ2MEMyNTE4Mzg0RkQ1ODU5QTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwQzJFOEE2Mjg0QjU1NkMw
NjI4RDYwQzI1MTgzODRGRDU4NTlBNEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIMVVKOVdRYTJ1SFh6cnBvMWtVaFM5aWhiUFRZaHA1SjJidEpRcDlqZHFlLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAop12DANBgkqhkiG9w0BAQsFAAOCAQEAKtUL
f9niM20HNY/Xb24JNDb/pngC3aXQVThxzFi5l8j3LGQTJTBMIhrQBFVpf8sQWNPo
mbXeFMzDPcCGLEorx4E0RFokQiZ/E97anfLaPaurdvIpy9CFAmTZI9xYK2shptX4
AFuKjpo008KNJEZv2GDdd/hDS6Kja5QZcfZn9JwpPjsFYt01DVDiY5YXfiehnYlI
3vp/CbJlXZK4ogxvjbHQNfAS+NsEUEvM/AbG6BJeKWr7adFTnHsvlmAB5/7GWq7O
hJo+BzkIs27qBi0quOwHMeLV/oAxsK3AnnxaTHkM+RVf7cy2PHVG8CSMk/QkeFwj
pOUGQangQERbvvSyiA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org