Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3232203d3e20323634353636.roa
File:                     3133382e302e3134342e302f32322d3232203d3e20323634353636.roa (raw, json)
Hash identifier:          dEvJA9UX2qQQkG6v4tXTzoiwAyj+MZ2nkmdzfAXebtc=
Subject key identifier:   30:5E:DA:74:3A:97:5A:57:7F:A3:9D:17:36:9D:FE:F6:78:2C:9B:00
Certificate issuer:       /CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
Certificate serial:       4CBBABA8B28F16C49BB12F98B03D1F09A5323950
Authority key identifier: E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3232203d3e20323634353636.roa
Signing time:             Wed 23 Feb 2022 19:11:00 +0000
ROA not before:           Wed 23 Feb 2022 19:06:00 +0000
ROA not after:            Wed 22 Feb 2023 19:11:00 +0000
asID:                     264566
IP address blocks:        138.0.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bb:ab:a8:b2:8f:16:c4:9b:b1:2f:98:b0:3d:1f:09:a5:32:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC
        Validity
            Not Before: Feb 23 19:06:00 2022 GMT
            Not After : Feb 22 19:11:00 2023 GMT
        Subject: CN=305EDA743A975A577FA39D17369DFEF6782C9B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:3c:32:d1:db:22:d4:fd:1a:39:70:4f:3f:
                    d2:74:4b:57:95:a1:e9:48:83:1d:de:df:27:45:5c:
                    cd:c6:61:b4:c7:fd:22:2e:d8:71:c4:64:b1:75:44:
                    ed:ce:a3:42:c3:47:11:fa:71:0c:35:bc:e7:01:af:
                    11:ff:c0:f0:eb:66:b5:4b:45:b7:70:44:b9:b0:a1:
                    fa:bb:40:a2:0e:17:be:3b:18:fc:37:ce:8e:ea:f3:
                    8c:49:6c:a6:b2:85:0d:50:89:6a:3a:a5:ec:97:04:
                    fd:cd:ee:99:74:bc:df:07:a4:75:7e:5e:b6:67:4a:
                    9b:a4:5a:12:dc:3e:fa:08:17:86:a9:31:29:9a:20:
                    d9:4f:b0:ed:50:0d:96:be:49:4e:41:49:83:49:62:
                    88:f3:6b:3b:f8:50:95:f0:fb:eb:6d:1e:b8:c0:bf:
                    64:b6:03:b8:a4:6e:75:15:a0:de:6b:a6:cc:df:f9:
                    c3:d1:bf:32:31:43:56:c7:5f:24:ba:72:86:2c:8a:
                    bf:e7:dc:5a:e5:ec:1f:94:e9:00:04:28:fa:c2:51:
                    44:f2:4a:bf:3b:3f:b4:e6:d6:2f:ca:d5:f9:2c:b7:
                    ec:18:8f:7b:c1:52:e5:ca:86:e1:f1:35:f9:66:f6:
                    d4:af:47:33:07:90:ce:5d:a9:02:7c:8b:5e:73:07:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5E:DA:74:3A:97:5A:57:7F:A3:9D:17:36:9D:FE:F6:78:2C:9B:00
            X509v3 Authority Key Identifier:
                keyid:E3:46:EF:66:14:9C:32:F3:C2:D1:BE:E0:69:FF:CE:EB:D8:7B:11:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E346EF66149C32F3C2D1BEE069FFCEEBD87B11EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z9UrFU87FmHxPc3cAaKAJc6jE6SbmbZ4BQnVasHhNUc/0/3133382e302e3134342e302f32322d3232203d3e20323634353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:09:2a:a0:50:45:fd:fd:f5:f0:38:c5:f3:aa:62:bf:65:49:
         13:83:1b:73:d7:09:4f:d4:d1:5f:81:4b:93:f2:46:8d:49:94:
         3b:a3:58:58:8e:1f:05:6a:6e:cc:d1:4f:70:6c:a9:a8:8c:0b:
         4f:53:1d:96:0d:d4:d8:21:09:6a:0e:d9:1d:73:87:89:f0:df:
         ea:b1:00:46:71:39:fb:5d:15:1c:02:2a:29:2c:b5:93:31:6e:
         29:ea:74:2b:6e:24:68:6b:c0:2a:9b:11:b5:88:97:5e:0b:87:
         39:60:c0:99:f7:fa:38:ca:f5:fe:8d:c2:00:e9:28:74:43:45:
         0d:b7:89:48:b3:90:73:e7:51:67:e8:5f:3c:4a:87:6f:60:6d:
         e3:f2:6c:50:e3:3a:cf:8b:0f:88:61:10:72:b4:71:8a:b2:0d:
         6c:1f:ce:05:35:c9:90:b9:a0:9f:ea:34:82:46:b0:e9:9f:5a:
         3f:36:8a:74:c8:13:ea:0e:e0:8f:94:6b:5c:26:c6:00:4c:d8:
         a5:4c:8a:78:4d:67:18:7e:f9:e4:b7:e2:c9:51:ee:37:3b:4d:
         cb:08:1b:72:f6:a3:3d:07:12:a8:15:9a:3d:47:39:df:8d:7f:
         4e:23:83:64:e5:27:14:2d:5d:f3:4d:60:9f:ab:d0:1b:3d:53:
         1d:97:15:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTLurqLKPFsSbsS+YsD0fCaUyOVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM0NkVGNjYxNDlDMzJGM0MyRDFCRUUwNjlGRkNFRUJE
ODdCMTFFQzAeFw0yMjAyMjMxOTA2MDBaFw0yMzAyMjIxOTExMDBaMDMxMTAvBgNV
BAMTKDMwNUVEQTc0M0E5NzVBNTc3RkEzOUQxNzM2OURGRUY2NzgyQzlCMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuzDwy0dsi1P0aOXBPP9J0S1eV
oelIgx3e3ydFXM3GYbTH/SIu2HHEZLF1RO3Oo0LDRxH6cQw1vOcBrxH/wPDrZrVL
RbdwRLmwofq7QKIOF747GPw3zo7q84xJbKayhQ1QiWo6peyXBP3N7pl0vN8HpHV+
XrZnSpukWhLcPvoIF4apMSmaINlPsO1QDZa+SU5BSYNJYojzazv4UJXw++ttHrjA
v2S2A7ikbnUVoN5rpszf+cPRvzIxQ1bHXyS6coYsir/n3Frl7B+U6QAEKPrCUUTy
Sr87P7Tm1i/K1fkst+wYj3vBUuXKhuHxNflm9tSvRzMHkM5dqQJ8i15zB/NlAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMF7adDqXWld/o50XNp3+9ngsmwAwHwYDVR0j
BBgwFoAU40bvZhScMvPC0b7gaf/O69h7EewwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFo5VXJGVTg3Rm1IeFBjM2NBYUtBSmM2akU2U2JtYlo0QlFuVmFzSGhO
VWMvMC9FMzQ2RUY2NjE0OUMzMkYzQzJEMUJFRTA2OUZGQ0VFQkQ4N0IxMUVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzNDZFRjY2MTQ5QzMyRjND
MkQxQkVFMDY5RkZDRUVCRDg3QjExRUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaOVVyRlU4N0ZtSHhQYzNjQWFLQUpjNmpFNlNibWJaNEJRblZhc0hoTlVjLzAv
MzEzMzM4MmUzMDJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzUzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigCQMA0GCSqGSIb3DQEBCwUAA4IBAQCSCSqgUEX9
/fXwOMXzqmK/ZUkTgxtz1wlP1NFfgUuT8kaNSZQ7o1hYjh8Fam7M0U9wbKmojAtP
Ux2WDdTYIQlqDtkdc4eJ8N/qsQBGcTn7XRUcAiopLLWTMW4p6nQrbiRoa8AqmxG1
iJdeC4c5YMCZ9/o4yvX+jcIA6Sh0Q0UNt4lIs5Bz51Fn6F88SodvYG3j8mxQ4zrP
iw+IYRBytHGKsg1sH84FNcmQuaCf6jSCRrDpn1o/Nop0yBPqDuCPlGtcJsYATNil
TIp4TWcYfvnkt+LJUe43O03LCBty9qM9BxKoFZo9RznfjX9OI4Nk5ScULV3zTWCf
q9AbPVMdlxUG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org