Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32332d3233203d3e20323634353632.roa
File:                     3133382e33362e302e302f32332d3233203d3e20323634353632.roa (raw, json)
Hash identifier:          QquxI/orbHHmlhQUxR+UmrMy615o7yuIJpXis2+Id7Q=
Subject key identifier:   83:DC:11:96:45:F7:52:71:18:B1:B2:1F:B4:5E:1F:15:72:95:EF:3B
Certificate issuer:       /CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
Certificate serial:       2631F7821CC797ED84A4D920EBA117150FD81C4E
Authority key identifier: B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32332d3233203d3e20323634353632.roa
Signing time:             Fri 05 May 2023 19:15:35 +0000
ROA not before:           Fri 05 May 2023 19:10:35 +0000
ROA not after:            Fri 03 May 2024 19:15:35 +0000
asID:                     264562
IP address blocks:        138.36.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:31:f7:82:1c:c7:97:ed:84:a4:d9:20:eb:a1:17:15:0f:d8:1c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1FD414C315A51B2503A7D1B9FE2EADA575BB03E
        Validity
            Not Before: May  5 19:10:35 2023 GMT
            Not After : May  3 19:15:35 2024 GMT
        Subject: CN=83DC119645F7527118B1B21FB45E1F157295EF3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:07:9d:2c:63:56:0d:fc:e4:06:7c:88:10:
                    18:89:aa:3a:c3:f7:4f:32:66:2c:6d:44:0e:73:88:
                    65:09:bd:57:5a:26:03:c2:8e:bc:e5:17:93:fa:ee:
                    02:74:9e:ab:14:4a:01:27:03:47:f9:ac:af:8d:54:
                    25:79:9b:95:1e:bb:a3:68:f4:fe:03:97:ac:62:04:
                    82:42:bc:0a:3e:91:33:03:12:f3:a1:cc:64:e5:84:
                    4e:5e:63:42:ad:6f:18:71:c1:d5:d7:9c:d6:42:76:
                    ab:d1:db:12:6d:14:28:6d:df:3b:2f:4c:88:bb:57:
                    7f:01:fd:15:61:7c:c6:94:72:82:b6:3b:3b:ca:8a:
                    b1:1f:08:21:57:ff:29:aa:4a:4d:c7:ce:a1:8d:fe:
                    62:3b:c4:94:4e:48:92:d8:4e:2d:66:e2:2a:d9:7f:
                    b1:e5:44:b8:cf:9e:62:1f:7e:d0:49:7e:1d:f8:7b:
                    10:04:24:c5:ff:6b:26:38:0c:e1:98:dd:6a:11:96:
                    85:14:ab:24:4a:3b:49:30:ee:7f:80:f4:37:d3:fa:
                    5c:81:2b:b4:03:f4:1b:ed:c7:13:b0:7e:99:90:80:
                    c8:b4:1b:52:d9:3d:ef:3a:8e:df:97:f6:0b:f5:b5:
                    72:12:08:22:7c:e6:35:3a:8b:aa:9c:4c:cd:ea:b4:
                    63:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DC:11:96:45:F7:52:71:18:B1:B2:1F:B4:5E:1F:15:72:95:EF:3B
            X509v3 Authority Key Identifier:
                keyid:B1:FD:41:4C:31:5A:51:B2:50:3A:7D:1B:9F:E2:EA:DA:57:5B:B0:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B1FD414C315A51B2503A7D1B9FE2EADA575BB03E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/0/3133382e33362e302e302f32332d3233203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:b4:37:6e:17:f8:f8:6f:7c:34:af:0c:a2:17:e1:e3:e9:98:
         69:72:02:09:c0:53:2d:ab:c6:db:47:9c:68:74:d0:4d:a6:40:
         39:c9:e2:f0:47:57:bd:3a:03:6b:9d:78:4f:7a:6c:5b:e3:ca:
         0e:19:03:69:aa:5f:d3:80:40:29:65:16:6b:c7:35:06:25:3b:
         3d:38:cf:b7:62:9c:30:c0:28:5b:48:44:db:dc:75:b3:63:05:
         7b:37:60:da:6e:9f:45:bd:64:4c:b2:2d:a0:93:a6:c5:9e:8d:
         d1:55:56:cb:4e:91:e5:5b:c4:18:b4:e1:20:2f:3e:9f:6f:84:
         e4:70:15:fa:86:54:8d:7a:f0:d8:b2:71:1d:ba:dd:7e:20:00:
         57:80:73:9e:b7:33:f7:c5:58:59:7b:60:4d:c8:f8:c9:05:3a:
         0b:f2:d4:7d:65:9a:3b:d2:bf:7d:49:62:eb:7e:62:8d:ad:c6:
         16:8c:eb:69:f9:c6:64:a6:22:4d:24:ca:96:0a:df:9d:03:2b:
         1b:95:72:24:18:2c:4b:a9:c7:49:55:9e:f6:d3:d2:43:c2:66:
         4a:07:61:62:db:41:54:c7:b7:bf:e4:2f:4c:18:77:5f:ed:3d:
         ff:e4:a3:fe:25:45:ed:60:a7:a1:e1:d7:af:c9:dd:3b:a1:6a:
         8b:1a:25:fc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJjH3ghzHl+2EpNkg66EXFQ/YHE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGRDQxNEMzMTVBNTFCMjUwM0E3RDFCOUZFMkVBREE1
NzVCQjAzRTAeFw0yMzA1MDUxOTEwMzVaFw0yNDA1MDMxOTE1MzVaMDMxMTAvBgNV
BAMTKDgzREMxMTk2NDVGNzUyNzExOEIxQjIxRkI0NUUxRjE1NzI5NUVGM0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WgedLGNWDfzkBnyIEBiJqjrD
908yZixtRA5ziGUJvVdaJgPCjrzlF5P67gJ0nqsUSgEnA0f5rK+NVCV5m5Ueu6No
9P4Dl6xiBIJCvAo+kTMDEvOhzGTlhE5eY0KtbxhxwdXXnNZCdqvR2xJtFCht3zsv
TIi7V38B/RVhfMaUcoK2OzvKirEfCCFX/ymqSk3HzqGN/mI7xJROSJLYTi1m4irZ
f7HlRLjPnmIfftBJfh34exAEJMX/ayY4DOGY3WoRloUUqyRKO0kw7n+A9DfT+lyB
K7QD9BvtxxOwfpmQgMi0G1LZPe86jt+X9gv1tXISCCJ85jU6i6qcTM3qtGPBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUg9wRlkX3UnEYsbIftF4fFXKV7zswHwYDVR0j
BBgwFoAUsf1BTDFaUbJQOn0bn+Lq2ldbsD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMC9CMUZENDE0QzMxNUE1MUIyNTAzQTdEMUI5RkUyRUFEQTU3NUJCMDNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IxRkQ0MTRDMzE1QTUxQjI1
MDNBN0QxQjlGRTJFQURBNTc1QkIwM0UuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzAv
MzEzMzM4MmUzMzM2MmUzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNDM1
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAYokADANBgkqhkiG9w0BAQsFAAOCAQEAXbQ3bhf4+G98
NK8Mohfh4+mYaXICCcBTLavG20ecaHTQTaZAOcni8EdXvToDa514T3psW+PKDhkD
aapf04BAKWUWa8c1BiU7PTjPt2KcMMAoW0hE29x1s2MFezdg2m6fRb1kTLItoJOm
xZ6N0VVWy06R5VvEGLThIC8+n2+E5HAV+oZUjXrw2LJxHbrdfiAAV4Bznrcz98VY
WXtgTcj4yQU6C/LUfWWaO9K/fUli635ija3GFozrafnGZKYiTSTKlgrfnQMrG5Vy
JBgsS6nHSVWe9tPSQ8JmSgdhYttBVMe3v+QvTBh3X+09/+Sj/iVF7WCnoeHXr8nd
O6Fqixol/A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org