Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa
File:                     3133382e3138352e34342e302f32322d3234203d3e203532353430.roa (raw, json)
Hash identifier:          4LZvokvRzkatOWK8cmmvNOPnw0ilkbDVW7w4XgaD3/Y=
Subject key identifier:   79:A5:BA:84:4E:CE:D2:32:F3:62:6A:0E:E1:DC:23:B6:FE:25:89:68
Certificate issuer:       /CN=8C004D33839E9718AC5A43521533E7535258D419
Certificate serial:       6CB60CFE07CA90207CC6458510A073FA3148CF09
Authority key identifier: 8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa
Signing time:             Thu 19 Oct 2023 19:09:49 +0000
ROA not before:           Thu 19 Oct 2023 19:04:49 +0000
ROA not after:            Thu 17 Oct 2024 19:09:49 +0000
asID:                     52540
IP address blocks:        138.185.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b6:0c:fe:07:ca:90:20:7c:c6:45:85:10:a0:73:fa:31:48:cf:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C004D33839E9718AC5A43521533E7535258D419
        Validity
            Not Before: Oct 19 19:04:49 2023 GMT
            Not After : Oct 17 19:09:49 2024 GMT
        Subject: CN=79A5BA844ECED232F3626A0EE1DC23B6FE258968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:83:eb:b7:5e:24:f2:d6:e2:b4:23:3d:e3:
                    b9:2b:51:ff:8c:3b:65:bd:c5:17:27:2d:b9:1c:bb:
                    c9:4d:8a:1a:e4:2d:8b:b8:bd:af:9c:b6:f3:f0:02:
                    8b:35:af:c7:6f:fb:73:dc:8c:2d:38:98:d4:2f:a8:
                    ce:9e:03:16:18:4b:42:6b:7a:cd:e7:75:8a:cc:05:
                    a6:2b:0f:82:a0:e4:98:ef:d1:ca:e0:fd:38:b7:02:
                    2f:9c:68:67:b2:04:58:a4:3f:ce:05:9d:b6:5b:6e:
                    06:25:0f:cb:16:62:ea:7f:8a:9c:ca:a1:66:2b:fe:
                    47:c1:a8:52:55:59:6a:06:d0:48:42:96:5a:7c:5c:
                    e3:f2:f6:45:79:18:0e:f9:96:81:f0:7b:eb:15:f7:
                    ee:92:98:42:4b:8c:61:95:3f:18:90:79:a3:f5:8d:
                    b3:07:7f:0e:57:38:49:7d:8e:1e:66:5b:07:f0:11:
                    c1:24:02:75:f2:a5:ee:d3:0c:08:23:a3:2d:03:1b:
                    b7:08:39:54:9d:78:cc:da:b2:18:fd:a2:ef:bc:ad:
                    33:06:a5:5c:98:2d:c1:63:2d:90:ed:3d:25:16:e6:
                    5d:2d:40:51:69:a5:aa:4d:78:9f:52:72:52:83:06:
                    86:14:97:f8:27:3f:f3:59:b5:25:52:74:12:e6:c4:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:BA:84:4E:CE:D2:32:F3:62:6A:0E:E1:DC:23:B6:FE:25:89:68
            X509v3 Authority Key Identifier:
                keyid:8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/8C004D33839E9718AC5A43521533E7535258D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/3133382e3138352e34342e302f32322d3234203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:8d:ff:47:67:b3:d7:9d:ff:1d:bd:e7:c2:09:7f:e4:12:
         ff:0b:07:29:c4:62:e0:d6:c3:e2:14:32:80:70:89:09:9e:7a:
         58:61:a5:74:c1:f5:57:e3:c0:3c:82:81:ca:94:b8:ff:45:0e:
         22:b9:a2:5e:ee:30:24:8c:7f:1b:0f:eb:6e:ea:2c:ad:3b:49:
         95:c2:01:12:83:49:74:38:0e:89:1c:0e:2c:04:2b:0b:16:4b:
         4d:24:dc:48:fd:bc:ac:1e:7b:94:98:24:15:2a:f9:6c:30:02:
         4d:2b:0b:be:e5:36:06:fd:b6:a1:b3:4c:75:d5:22:8c:52:13:
         33:3a:70:fe:63:86:38:bc:18:c3:51:87:ab:32:51:13:5a:a7:
         da:a0:02:c5:4f:12:c1:48:da:bf:39:48:78:dc:68:e8:fc:c4:
         80:21:95:f3:70:44:d0:30:1f:07:b8:e5:40:5c:af:be:61:59:
         a1:d4:f9:32:c9:f7:f2:51:a8:51:37:f9:62:d3:4f:9d:ba:5b:
         b0:d8:f0:9a:dd:aa:c5:8f:62:55:6b:65:a4:a9:f1:85:38:12:
         df:4c:ba:d0:80:b0:4c:f5:89:27:25:99:29:ba:a5:9a:48:55:
         8a:0b:9f:79:75:ac:b6:eb:38:82:31:63:78:cc:18:f5:0e:54:
         e5:ff:65:04
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbLYM/gfKkCB8xkWFEKBz+jFIzwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwMDREMzM4MzlFOTcxOEFDNUE0MzUyMTUzM0U3NTM1
MjU4RDQxOTAeFw0yMzEwMTkxOTA0NDlaFw0yNDEwMTcxOTA5NDlaMDMxMTAvBgNV
BAMTKDc5QTVCQTg0NEVDRUQyMzJGMzYyNkEwRUUxREMyM0I2RkUyNTg5NjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wYPrt14k8tbitCM947krUf+M
O2W9xRcnLbkcu8lNihrkLYu4va+ctvPwAos1r8dv+3PcjC04mNQvqM6eAxYYS0Jr
es3ndYrMBaYrD4Kg5Jjv0crg/Ti3Ai+caGeyBFikP84FnbZbbgYlD8sWYup/ipzK
oWYr/kfBqFJVWWoG0EhCllp8XOPy9kV5GA75loHwe+sV9+6SmEJLjGGVPxiQeaP1
jbMHfw5XOEl9jh5mWwfwEcEkAnXype7TDAgjoy0DG7cIOVSdeMzashj9ou+8rTMG
pVyYLcFjLZDtPSUW5l0tQFFppapNeJ9SclKDBoYUl/gnP/NZtSVSdBLmxBU7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeaW6hE7O0jLzYmoO4dwjtv4liWgwHwYDVR0j
BBgwFoAUjABNM4OelxisWkNSFTPnU1JY1BkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEsxak0yNmlOZnJGTVkycHdHVzJ1MUpMSkRtVGVzd0YxVThHeWk3YkRB
VjUvMS84QzAwNEQzMzgzOUU5NzE4QUM1QTQzNTIxNTMzRTc1MzUyNThENDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDMDA0RDMzODM5RTk3MThB
QzVBNDM1MjE1MzNFNzUzNTI1OEQ0MTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRLMWpNMjZpTmZyRk1ZMnB3R1cydTFKTEpEbVRlc3dGMVU4R3lpN2JEQVY1LzEv
MzEzMzM4MmUzMTM4MzUyZTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzUzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirksMA0GCSqGSIb3DQEBCwUAA4IBAQBx/Y3/R2ez
153/Hb3nwgl/5BL/CwcpxGLg1sPiFDKAcIkJnnpYYaV0wfVX48A8goHKlLj/RQ4i
uaJe7jAkjH8bD+tu6iytO0mVwgESg0l0OA6JHA4sBCsLFktNJNxI/bysHnuUmCQV
KvlsMAJNKwu+5TYG/bahs0x11SKMUhMzOnD+Y4Y4vBjDUYerMlETWqfaoALFTxLB
SNq/OUh43Gjo/MSAIZXzcETQMB8HuOVAXK++YVmh1PkyyffyUahRN/li00+duluw
2PCa3arFj2JVa2WkqfGFOBLfTLrQgLBM9YknJZkpuqWaSFWKC595day26ziCMWN4
zBj1DlTl/2UE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org