Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232382e302f32322d3232203d3e203631353734.roa
File:                     3133382e3138352e3232382e302f32322d3232203d3e203631353734.roa (raw, json)
Hash identifier:          sFkRvQhxWcP1Jhb7Bg5H9iEffcSEKvm0gKGWq5O+fz0=
Subject key identifier:   77:EE:3F:F5:D4:F2:41:A8:6B:F7:8C:37:50:FA:40:A7:6D:C7:A3:75
Certificate issuer:       /CN=B87A89936073CED5E442457650C264A65B276C7A
Certificate serial:       6DDE30BCCA6742B0923466B7B6953C56A6C44FCF
Authority key identifier: B8:7A:89:93:60:73:CE:D5:E4:42:45:76:50:C2:64:A6:5B:27:6C:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B87A89936073CED5E442457650C264A65B276C7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232382e302f32322d3232203d3e203631353734.roa
Signing time:             Wed 14 Sep 2022 20:43:42 +0000
ROA not before:           Wed 14 Sep 2022 20:38:42 +0000
ROA not after:            Wed 13 Sep 2023 20:43:42 +0000
asID:                     61574
IP address blocks:        138.185.228.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:de:30:bc:ca:67:42:b0:92:34:66:b7:b6:95:3c:56:a6:c4:4f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B87A89936073CED5E442457650C264A65B276C7A
        Validity
            Not Before: Sep 14 20:38:42 2022 GMT
            Not After : Sep 13 20:43:42 2023 GMT
        Subject: CN=77EE3FF5D4F241A86BF78C3750FA40A76DC7A375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:13:89:3d:df:5c:02:eb:9a:56:47:db:6b:
                    fb:e2:8f:56:f0:03:4c:de:b1:75:8e:7a:70:f5:fb:
                    bd:b9:5c:27:a1:b8:12:13:5b:ea:f8:6b:53:3a:d2:
                    8c:56:41:cc:73:9b:f7:80:52:98:5f:89:06:70:ad:
                    08:23:26:0e:b6:53:62:0a:0a:47:05:33:56:21:d0:
                    de:de:47:89:f7:70:d3:2d:0c:77:f1:d2:8e:ed:b1:
                    40:ac:d7:13:cf:20:89:75:b3:e5:6d:b3:8b:07:34:
                    2e:d6:ab:e6:62:c6:ca:d4:c1:fb:43:8c:9a:ef:53:
                    bb:2d:93:ca:34:2d:e0:e0:6c:2e:79:1e:1c:2c:1c:
                    25:01:9c:7a:d4:74:ce:d4:c9:64:98:46:b0:5d:5a:
                    67:c8:85:40:e5:6d:d3:6e:b1:93:5a:3d:8f:55:19:
                    0f:86:fa:b8:4d:ed:ab:00:49:d0:86:b0:5e:9d:b4:
                    8c:88:60:35:36:d8:bd:d1:06:3e:de:b2:5d:0c:73:
                    3e:7c:fc:d0:d5:45:0c:30:2c:f6:4c:d8:59:16:7e:
                    af:de:ff:fe:41:98:ed:81:05:f4:4b:ee:ae:99:72:
                    d1:e8:b3:f7:e6:ef:eb:e8:8a:4b:48:ab:ab:62:17:
                    49:db:5d:5f:4a:ea:3b:a8:52:a0:17:bd:da:b5:b0:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:EE:3F:F5:D4:F2:41:A8:6B:F7:8C:37:50:FA:40:A7:6D:C7:A3:75
            X509v3 Authority Key Identifier:
                keyid:B8:7A:89:93:60:73:CE:D5:E4:42:45:76:50:C2:64:A6:5B:27:6C:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/B87A89936073CED5E442457650C264A65B276C7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B87A89936073CED5E442457650C264A65B276C7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HVY42K7YUS649FNZ3DJvGJWWbBJ3v162wSn9Jt7QyNK/1/3133382e3138352e3232382e302f32322d3232203d3e203631353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:11:0b:43:61:b6:39:92:c6:86:41:46:bf:cd:0b:f6:8e:87:
         72:29:9c:fb:7f:7b:32:60:79:0a:35:f3:7f:a3:8b:f3:fd:5b:
         7a:e5:b9:c9:2f:c7:a2:84:12:04:76:4b:c2:8e:4a:8a:3f:8b:
         b7:c6:fd:60:bb:0d:a2:1c:1e:5a:71:28:27:37:b3:a9:08:48:
         8b:1b:53:3b:14:24:53:83:fb:af:8c:63:28:91:35:b9:74:19:
         4d:ac:de:17:73:8a:34:a9:80:58:9e:72:ca:6b:7d:40:d1:63:
         95:24:d9:76:b3:57:f5:a4:7d:1b:85:1d:3d:8a:78:83:48:f8:
         fc:a1:0c:5d:6b:01:f9:59:d7:fb:76:f9:68:f6:5e:5f:77:72:
         2e:7c:05:db:6d:93:2d:46:3e:5a:0a:04:fd:da:f4:42:8e:79:
         00:aa:3c:7b:90:fd:46:36:0b:01:f5:8b:d9:c1:da:27:34:64:
         d8:84:1f:7d:89:a1:b2:f7:5c:d1:35:b0:3d:eb:53:a7:71:56:
         60:c1:eb:4c:c1:7f:44:eb:6b:d2:56:e0:3c:ca:50:01:ad:64:
         4e:73:2e:35:ea:34:fb:1d:38:23:99:da:1e:f6:c2:57:9b:f1:
         2e:2e:53:4d:62:fe:98:7d:22:b3:a9:70:91:0a:62:39:be:06:
         55:4c:fb:ad
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbd4wvMpnQrCSNGa3tpU8VqbET88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg3QTg5OTM2MDczQ0VENUU0NDI0NTc2NTBDMjY0QTY1
QjI3NkM3QTAeFw0yMjA5MTQyMDM4NDJaFw0yMzA5MTMyMDQzNDJaMDMxMTAvBgNV
BAMTKDc3RUUzRkY1RDRGMjQxQTg2QkY3OEMzNzUwRkE0MEE3NkRDN0EzNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fROJPd9cAuuaVkfba/vij1bw
A0zesXWOenD1+725XCehuBITW+r4a1M60oxWQcxzm/eAUphfiQZwrQgjJg62U2IK
CkcFM1Yh0N7eR4n3cNMtDHfx0o7tsUCs1xPPIIl1s+Vts4sHNC7Wq+ZixsrUwftD
jJrvU7stk8o0LeDgbC55HhwsHCUBnHrUdM7UyWSYRrBdWmfIhUDlbdNusZNaPY9V
GQ+G+rhN7asASdCGsF6dtIyIYDU22L3RBj7esl0Mcz58/NDVRQwwLPZM2FkWfq/e
//5BmO2BBfRL7q6ZctHos/fm7+voiktIq6tiF0nbXV9K6juoUqAXvdq1sKJLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd+4/9dTyQahr94w3UPpAp23Ho3UwHwYDVR0j
BBgwFoAUuHqJk2BzztXkQkV2UMJkplsnbHowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhWWTQySzdZVVM2NDlGTlozREp2R0pXV2JCSjN2MTYyd1NuOUp0N1F5
TksvMS9CODdBODk5MzYwNzNDRUQ1RTQ0MjQ1NzY1MEMyNjRBNjVCMjc2QzdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I4N0E4OTkzNjA3M0NFRDVF
NDQyNDU3NjUwQzI2NEE2NUIyNzZDN0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIVlk0Mks3WVVTNjQ5Rk5aM0RKdkdKV1diQkozdjE2MndTbjlKdDdReU5LLzEv
MzEzMzM4MmUzMTM4MzUyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKueQwDQYJKoZIhvcNAQELBQADggEBAJwRC0Nh
tjmSxoZBRr/NC/aOh3IpnPt/ezJgeQo183+ji/P9W3rluckvx6KEEgR2S8KOSoo/
i7fG/WC7DaIcHlpxKCc3s6kISIsbUzsUJFOD+6+MYyiRNbl0GU2s3hdzijSpgFie
csprfUDRY5Uk2XazV/WkfRuFHT2KeINI+PyhDF1rAflZ1/t2+Wj2Xl93ci58Bdtt
ky1GPloKBP3a9EKOeQCqPHuQ/UY2CwH1i9nB2ic0ZNiEH32JobL3XNE1sD3rU6dx
VmDB60zBf0Tra9JW4DzKUAGtZE5zLjXqNPsdOCOZ2h72wleb8S4uU01i/ph9IrOp
cJEKYjm+BlVM+60=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org