Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3332203d3e20323632333737.roa
File:                     3133382e3131372e3231382e302f32342d3332203d3e20323632333737.roa (raw, json)
Hash identifier:          CD/H9axqisQoWhbJr8OFxseG+fOoDUWeev5SK5S1wHc=
Subject key identifier:   15:3D:DF:C4:8B:3B:A7:AC:2E:D1:9F:2A:12:EE:4E:AB:9A:95:CB:3D
Certificate issuer:       /CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
Certificate serial:       6BC9B8ABED3A6119B0DD0530EDB10703BB69B745
Authority key identifier: 90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3332203d3e20323632333737.roa
Signing time:             Fri 02 Jun 2023 13:33:31 +0000
ROA not before:           Fri 02 Jun 2023 13:28:31 +0000
ROA not after:            Fri 31 May 2024 13:33:31 +0000
asID:                     262377
IP address blocks:        138.117.218.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c9:b8:ab:ed:3a:61:19:b0:dd:05:30:ed:b1:07:03:bb:69:b7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C2E8A6284B556C0628D60C2518384FD5859A4C
        Validity
            Not Before: Jun  2 13:28:31 2023 GMT
            Not After : May 31 13:33:31 2024 GMT
        Subject: CN=153DDFC48B3BA7AC2ED19F2A12EE4EAB9A95CB3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:7e:73:f8:e4:ed:ad:e0:d5:c4:c6:e9:5e:
                    1f:69:ee:d7:6d:a4:7c:05:59:f4:cc:c0:f4:12:01:
                    13:01:cd:16:db:94:c7:59:bb:10:19:c5:0d:fb:b1:
                    65:30:2e:09:70:6e:69:e3:f5:ad:bc:7d:23:df:b3:
                    55:96:4c:53:15:66:e5:72:0d:c9:2e:5a:0c:e3:03:
                    60:5c:86:2a:db:d5:99:f6:ac:ab:1e:71:60:3f:54:
                    84:cc:90:04:c8:8f:79:ef:d9:3e:fd:d1:9e:27:aa:
                    8c:e6:80:b8:d9:02:6f:02:28:91:57:65:b1:4f:c3:
                    32:1d:c3:c1:99:39:d1:b3:72:24:ed:0c:0c:87:72:
                    19:5a:95:84:2c:17:93:72:f9:9a:5a:7b:ae:dd:09:
                    c8:66:95:5d:94:bc:75:6f:d5:92:6f:cd:21:70:6e:
                    f7:6e:03:d5:74:f4:a8:dc:61:8e:0b:6a:b1:22:07:
                    e9:da:ec:13:bc:cd:93:4e:01:e0:57:7c:c7:70:37:
                    d0:68:57:12:ac:e3:94:78:e9:5e:e3:f9:97:a2:70:
                    a7:f0:c0:28:44:74:bf:bf:59:68:ab:5a:31:48:86:
                    4e:ba:ed:c1:b0:f9:02:27:9f:1d:91:b4:ab:79:31:
                    f5:a3:58:74:af:65:ae:63:a5:e5:78:4c:b8:c0:f9:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3D:DF:C4:8B:3B:A7:AC:2E:D1:9F:2A:12:EE:4E:AB:9A:95:CB:3D
            X509v3 Authority Key Identifier:
                keyid:90:C2:E8:A6:28:4B:55:6C:06:28:D6:0C:25:18:38:4F:D5:85:9A:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90C2E8A6284B556C0628D60C2518384FD5859A4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H1UJ9WQa2uHXzrpo1kUhS9ihbPTYhp5J2btJQp9jdqe/0/3133382e3131372e3231382e302f32342d3332203d3e20323632333737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:ed:8c:22:ab:34:88:74:4b:46:15:26:49:76:b2:5b:15:
         d8:2e:69:c5:94:b5:78:c0:45:06:1c:bf:79:ee:ed:5a:bf:a7:
         16:ec:28:20:23:73:a8:70:22:00:d0:66:c9:26:d5:55:8d:7d:
         fc:25:49:f0:72:2b:a4:66:ca:aa:ac:6f:cb:9f:44:5e:99:46:
         2b:2a:67:7d:9e:68:56:34:0a:cd:66:8e:5e:c8:2c:d3:66:60:
         1d:96:2c:04:0f:a7:4b:55:43:5a:68:63:8d:1c:c3:48:89:00:
         e0:03:73:20:62:3d:60:ac:d5:c9:ae:20:fe:2a:f5:ab:9c:56:
         c9:7a:64:eb:89:9b:75:65:af:43:01:0a:56:01:5f:af:a1:c1:
         af:54:54:95:b4:6f:be:4a:b3:c0:18:54:dc:e2:7c:47:7c:74:
         24:9f:dc:91:95:e3:2f:cb:40:2a:b4:71:5c:e2:23:2f:64:be:
         34:1f:f2:7d:a4:5b:bf:2d:ab:08:ba:de:24:6e:cb:f6:e7:81:
         2f:02:b0:9e:c7:cc:0e:50:b0:f5:6a:37:75:76:8c:65:d8:be:
         aa:ea:e7:37:1e:69:6c:cf:ce:d3:92:b2:6c:d3:01:e5:89:7e:
         92:f1:54:40:a1:57:3c:68:23:7d:49:74:7a:d4:93:b0:a4:1b:
         01:c6:5b:2c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUa8m4q+06YRmw3QUw7bEHA7tpt0UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDMkU4QTYyODRCNTU2QzA2MjhENjBDMjUxODM4NEZE
NTg1OUE0QzAeFw0yMzA2MDIxMzI4MzFaFw0yNDA1MzExMzMzMzFaMDMxMTAvBgNV
BAMTKDE1M0RERkM0OEIzQkE3QUMyRUQxOUYyQTEyRUU0RUFCOUE5NUNCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CH5z+OTtreDVxMbpXh9p7tdt
pHwFWfTMwPQSARMBzRbblMdZuxAZxQ37sWUwLglwbmnj9a28fSPfs1WWTFMVZuVy
DckuWgzjA2Bchirb1Zn2rKsecWA/VITMkATIj3nv2T790Z4nqozmgLjZAm8CKJFX
ZbFPwzIdw8GZOdGzciTtDAyHchlalYQsF5Ny+Zpae67dCchmlV2UvHVv1ZJvzSFw
bvduA9V09KjcYY4LarEiB+na7BO8zZNOAeBXfMdwN9BoVxKs45R46V7j+ZeicKfw
wChEdL+/WWirWjFIhk667cGw+QInnx2RtKt5MfWjWHSvZa5jpeV4TLjA+clTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUFT3fxIs7p6wu0Z8qEu5Oq5qVyz0wHwYDVR0j
BBgwFoAUkMLopihLVWwGKNYMJRg4T9WFmkwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEgxVUo5V1FhMnVIWHpycG8xa1VoUzlpaGJQVFlocDVKMmJ0SlFwOWpk
cWUvMC85MEMyRThBNjI4NEI1NTZDMDYyOEQ2MEMyNTE4Mzg0RkQ1ODU5QTRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwQzJFOEE2Mjg0QjU1NkMw
NjI4RDYwQzI1MTgzODRGRDU4NTlBNEMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIMVVKOVdRYTJ1SFh6cnBvMWtVaFM5aWhiUFRZaHA1SjJidEpRcDlqZHFlLzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzEzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjMzMzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp12jANBgkqhkiG9w0BAQsFAAOCAQEAeK7t
jCKrNIh0S0YVJkl2slsV2C5pxZS1eMBFBhy/ee7tWr+nFuwoICNzqHAiANBmySbV
VY19/CVJ8HIrpGbKqqxvy59EXplGKypnfZ5oVjQKzWaOXsgs02ZgHZYsBA+nS1VD
WmhjjRzDSIkA4ANzIGI9YKzVya4g/ir1q5xWyXpk64mbdWWvQwEKVgFfr6HBr1RU
lbRvvkqzwBhU3OJ8R3x0JJ/ckZXjL8tAKrRxXOIjL2S+NB/yfaRbvy2rCLreJG7L
9ueBLwKwnsfMDlCw9Wo3dXaMZdi+qurnNx5pbM/O05KybNMB5Yl+kvFUQKFXPGgj
fUl0etSTsKQbAcZbLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org