Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/3138362e3233352e3132382e302f31392d3233203d3e203533323032.roa
File:                     3138362e3233352e3132382e302f31392d3233203d3e203533323032.roa (raw, json)
Hash identifier:          Lj0gD/6fX5ChDRFHEIhE9ZOwfc7AiLFU6HkdvohAtfw=
Subject key identifier:   A2:C9:9A:DF:07:A2:5F:F5:30:C8:30:1D:07:33:FE:65:C6:25:1C:EE
Certificate issuer:       /CN=9DA8231A907541812F774DA08E01168B1788862A
Certificate serial:       2197A7EB8BF969F0A8A55ED04B07F9C3930F8794
Authority key identifier: 9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DA8231A907541812F774DA08E01168B1788862A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/3138362e3233352e3132382e302f31392d3233203d3e203533323032.roa
Signing time:             Sun 11 Jun 2023 15:56:32 +0000
ROA not before:           Sun 11 Jun 2023 15:51:32 +0000
ROA not after:            Sun 09 Jun 2024 15:56:32 +0000
asID:                     53202
IP address blocks:        186.235.128.0/19 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:97:a7:eb:8b:f9:69:f0:a8:a5:5e:d0:4b:07:f9:c3:93:0f:87:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DA8231A907541812F774DA08E01168B1788862A
        Validity
            Not Before: Jun 11 15:51:32 2023 GMT
            Not After : Jun  9 15:56:32 2024 GMT
        Subject: CN=A2C99ADF07A25FF530C8301D0733FE65C6251CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:6c:54:e7:be:a3:32:12:17:47:72:73:63:
                    86:49:30:0e:0c:11:bd:e4:20:ba:95:d5:fa:a6:be:
                    4a:78:03:4a:b5:e9:f8:41:49:97:ea:d9:d3:e2:85:
                    91:7f:16:1d:32:e3:1c:54:fe:c9:c5:e1:3c:36:95:
                    f2:8e:21:db:58:12:46:e2:a0:84:c0:c7:f7:52:f7:
                    ae:c0:72:06:1d:99:49:cd:bb:60:48:4c:08:18:d3:
                    d9:71:9a:64:4f:79:ef:88:59:65:e1:86:6a:88:c3:
                    4b:69:40:80:fe:e9:ad:93:2c:20:00:c2:0b:26:07:
                    23:b8:fc:d7:be:9f:b6:e7:34:51:94:ee:08:77:86:
                    e9:19:62:93:0d:7a:1a:03:e1:14:17:1d:85:7f:27:
                    c4:c6:03:e5:53:05:95:c9:ba:2c:13:58:ad:25:71:
                    21:e0:81:de:9a:f2:23:b4:e0:1a:0b:15:f1:af:d8:
                    3f:d1:2a:38:95:4c:41:31:fc:28:7d:1f:ab:d0:c1:
                    e0:a8:3f:0a:a9:4f:70:1d:1a:0c:64:7a:2f:1a:10:
                    2f:25:df:bd:9d:9a:6a:b5:ae:e2:fa:a5:9c:3d:0f:
                    a8:0f:37:9c:ab:4a:99:3f:a6:55:ca:cc:96:46:ec:
                    ff:89:bb:b6:25:03:07:dd:96:92:9f:94:27:ab:f3:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C9:9A:DF:07:A2:5F:F5:30:C8:30:1D:07:33:FE:65:C6:25:1C:EE
            X509v3 Authority Key Identifier:
                keyid:9D:A8:23:1A:90:75:41:81:2F:77:4D:A0:8E:01:16:8B:17:88:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/9DA8231A907541812F774DA08E01168B1788862A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DA8231A907541812F774DA08E01168B1788862A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cqcJWksQCUwumB7M3N3VD8G5WEn6wCDWBuKZZakY4Hv/0/3138362e3233352e3132382e302f31392d3233203d3e203533323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:07:23:f7:1c:ce:a0:cc:b1:77:6f:03:a0:4a:81:38:db:f2:
         16:7c:c0:e1:33:ff:fb:3e:58:fe:84:d0:74:fa:01:f4:52:4f:
         65:e9:ae:4a:60:6a:86:cf:ee:0e:f0:a1:db:41:06:16:d3:43:
         fc:1d:2b:79:11:c2:1e:40:f9:0d:f2:72:50:48:df:37:9c:c5:
         97:c0:c8:d5:fa:d2:4a:ee:b3:46:b8:4c:7f:9c:90:58:ff:1e:
         e2:60:99:2f:42:7f:01:d5:7d:09:0d:59:87:80:4a:fc:68:36:
         5c:06:e9:7f:e2:91:a8:b5:53:3a:da:6f:b4:14:b7:c9:f8:83:
         dd:18:ce:f3:47:7c:0b:17:0d:0e:1b:74:2a:bd:a1:cb:af:6a:
         08:28:27:51:4d:b0:32:4a:b5:3f:d4:8c:20:86:ec:79:69:57:
         1d:9f:16:30:98:49:bd:0e:a3:a8:6d:95:29:9f:9d:c8:e2:aa:
         b0:f3:ed:39:f2:1e:42:29:be:2e:82:be:cc:48:f7:5c:c0:34:
         67:21:5a:ed:e4:28:0f:eb:f4:cc:33:a6:c5:97:d5:06:e0:8b:
         46:2d:82:d0:52:45:f6:cb:da:de:32:98:2e:46:3b:48:83:c9:
         eb:94:0f:3f:a8:ad:ca:40:eb:18:f8:82:e3:4b:95:ae:f9:db:
         f9:00:7b:b0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIZen64v5afCopV7QSwf5w5MPh5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURBODIzMUE5MDc1NDE4MTJGNzc0REEwOEUwMTE2OEIx
Nzg4ODYyQTAeFw0yMzA2MTExNTUxMzJaFw0yNDA2MDkxNTU2MzJaMDMxMTAvBgNV
BAMTKEEyQzk5QURGMDdBMjVGRjUzMEM4MzAxRDA3MzNGRTY1QzYyNTFDRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKuWxU576jMhIXR3JzY4ZJMA4M
Eb3kILqV1fqmvkp4A0q16fhBSZfq2dPihZF/Fh0y4xxU/snF4Tw2lfKOIdtYEkbi
oITAx/dS967AcgYdmUnNu2BITAgY09lxmmRPee+IWWXhhmqIw0tpQID+6a2TLCAA
wgsmByO4/Ne+n7bnNFGU7gh3hukZYpMNehoD4RQXHYV/J8TGA+VTBZXJuiwTWK0l
cSHggd6a8iO04BoLFfGv2D/RKjiVTEEx/Ch9H6vQweCoPwqpT3AdGgxkei8aEC8l
372dmmq1ruL6pZw9D6gPN5yrSpk/plXKzJZG7P+Ju7YlAwfdlpKflCer8zRXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUosma3weiX/UwyDAdBzP+ZcYlHO4wHwYDVR0j
BBgwFoAUnagjGpB1QYEvd02gjgEWixeIhiowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNxY0pXa3NRQ1V3dW1CN00zTjNWRDhHNVdFbjZ3Q0RXQnVLWlpha1k0
SHYvMC85REE4MjMxQTkwNzU0MTgxMkY3NzREQTA4RTAxMTY4QjE3ODg4NjJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEQTgyMzFBOTA3NTQxODEy
Rjc3NERBMDhFMDExNjhCMTc4ODg2MkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRjcWNKV2tzUUNVd3VtQjdNM04zVkQ4RzVXRW42d0NEV0J1S1paYWtZNEh2LzAv
MzEzODM2MmUzMjMzMzUyZTMxMzIzODJlMzAyZjMxMzkyZDMyMzMyMDNkM2UyMDM1
MzMzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAW664AwDQYJKoZIhvcNAQELBQADggEBAHQHI/cc
zqDMsXdvA6BKgTjb8hZ8wOEz//s+WP6E0HT6AfRST2XprkpgaobP7g7wodtBBhbT
Q/wdK3kRwh5A+Q3yclBI3zecxZfAyNX60krus0a4TH+ckFj/HuJgmS9CfwHVfQkN
WYeASvxoNlwG6X/ikai1Uzrab7QUt8n4g90YzvNHfAsXDQ4bdCq9ocuvaggoJ1FN
sDJKtT/UjCCG7HlpVx2fFjCYSb0Oo6htlSmfncjiqrDz7TnyHkIpvi6CvsxI91zA
NGchWu3kKA/r9MwzpsWX1Qbgi0YtgtBSRfbL2t4ymC5GO0iDyeuUDz+orcpA6xj4
guNLla752/kAe7A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org