Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3133382e33362e302e302f32322d3234203d3e20323634353632.roa
File:                     3133382e33362e302e302f32322d3234203d3e20323634353632.roa (raw, json)
Hash identifier:          kKWG0ltHfcahMyLfWL8rJn0OhV8L6iwnZ+xhgWuANWA=
Subject key identifier:   6C:58:99:AA:51:AE:83:7B:D3:3F:67:93:9C:55:E2:C9:2F:8D:08:C8
Certificate issuer:       /CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
Certificate serial:       34C00A4142796363CE5971DF0935289E2D0823BC
Authority key identifier: D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3133382e33362e302e302f32322d3234203d3e20323634353632.roa
Signing time:             Fri 26 Apr 2024 19:28:45 +0000
ROA not before:           Fri 26 Apr 2024 19:23:45 +0000
ROA not after:            Fri 25 Apr 2025 19:28:45 +0000
asID:                     264562
IP address blocks:        138.36.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c0:0a:41:42:79:63:63:ce:59:71:df:09:35:28:9e:2d:08:23:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7FEB8333E4AA11344E779BB749E8570B27FBCCD
        Validity
            Not Before: Apr 26 19:23:45 2024 GMT
            Not After : Apr 25 19:28:45 2025 GMT
        Subject: CN=6C5899AA51AE837BD33F67939C55E2C92F8D08C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6d:97:28:ee:0a:1d:b7:02:7b:a7:88:36:42:
                    30:87:33:79:88:da:a7:2d:7c:b7:f3:d2:62:b6:ff:
                    f8:fe:e1:75:e2:fa:b1:7a:ed:de:b5:af:73:c1:c3:
                    9c:44:be:5d:9a:e0:2e:57:87:6d:c0:5e:92:59:94:
                    03:19:6f:e2:10:aa:2b:7a:aa:e2:f7:4f:80:81:24:
                    19:ba:73:2b:d4:fd:ee:0a:3f:7b:49:03:7c:d7:0a:
                    85:cd:7f:cf:c8:44:71:5c:ff:3f:e0:0a:1a:41:e0:
                    63:f0:15:00:14:18:f9:c0:c9:35:20:0a:d7:48:72:
                    01:fc:3e:3c:df:da:03:cd:c1:9f:43:77:00:26:77:
                    85:3b:04:98:46:f0:62:b2:77:e6:50:b6:a3:45:f6:
                    17:64:f6:da:09:c7:64:cb:13:55:05:93:bf:53:3d:
                    e9:46:ae:6a:ea:a6:f9:3d:71:48:c8:30:2d:84:32:
                    1f:0d:52:a6:f1:63:9d:95:41:19:ea:fd:90:30:28:
                    6a:02:c6:51:5f:50:6f:02:47:03:60:2b:0f:4e:41:
                    1d:18:e8:8b:dc:c0:1d:aa:91:85:96:d7:84:ce:10:
                    1e:44:02:3f:5f:40:a3:2a:6d:10:1c:58:89:dc:e8:
                    b4:9c:65:98:3e:07:5d:14:04:f4:64:cc:7c:3a:93:
                    f2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:99:AA:51:AE:83:7B:D3:3F:67:93:9C:55:E2:C9:2F:8D:08:C8
            X509v3 Authority Key Identifier:
                keyid:D7:FE:B8:33:3E:4A:A1:13:44:E7:79:BB:74:9E:85:70:B2:7F:BC:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7FEB8333E4AA11344E779BB749E8570B27FBCCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/59jUntcWnN6uJLAnfRi2pJS4imMv17WzDeS7HUkDv8dy/1/3133382e33362e302e302f32322d3234203d3e20323634353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:4d:6c:ca:e0:1b:f5:4d:e0:d9:42:7e:98:5d:77:c7:4e:d0:
         2a:97:5e:ce:2d:5b:05:61:c7:11:d5:eb:93:58:f5:84:56:fc:
         cb:53:f9:9f:98:a0:62:6c:98:88:3c:18:cf:90:ca:95:14:98:
         34:7c:10:c0:2b:6c:bf:14:7a:f6:71:0d:13:a3:cb:3b:31:50:
         d9:33:b9:c6:b6:06:6d:87:d7:69:10:2a:cc:ce:ba:93:4d:05:
         ae:ad:ac:e7:fe:06:31:b4:b3:61:1c:22:c6:6c:f0:93:0c:01:
         58:6d:bf:94:70:e8:b1:f6:4f:02:64:c0:cb:ca:d5:c7:40:c9:
         9a:1f:9b:20:14:33:05:f5:96:f7:2d:2e:ff:d6:39:04:2e:34:
         a9:4c:13:2f:d1:01:7f:58:38:e7:e6:9e:3c:b6:2b:05:03:b0:
         17:62:e8:fe:96:b3:6c:d5:89:ba:f4:85:21:1c:9c:f7:a9:16:
         28:52:bb:41:57:a5:c2:8c:c0:b2:e0:c9:14:ff:fd:9b:5d:7d:
         00:be:b6:20:05:b0:05:06:10:33:55:06:af:70:58:ee:59:dc:
         c7:51:86:9a:ac:3a:88:83:0e:d0:3e:7e:4c:79:7a:3a:94:6e:
         e1:46:65:28:32:85:83:19:10:98:09:57:f2:6c:2a:2d:bb:77:
         57:63:47:64
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNMAKQUJ5Y2POWXHfCTUoni0II7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdGRUI4MzMzRTRBQTExMzQ0RTc3OUJCNzQ5RTg1NzBC
MjdGQkNDRDAeFw0yNDA0MjYxOTIzNDVaFw0yNTA0MjUxOTI4NDVaMDMxMTAvBgNV
BAMTKDZDNTg5OUFBNTFBRTgzN0JEMzNGNjc5MzlDNTVFMkM5MkY4RDA4QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbZco7godtwJ7p4g2QjCHM3mI
2qctfLfz0mK2//j+4XXi+rF67d61r3PBw5xEvl2a4C5Xh23AXpJZlAMZb+IQqit6
quL3T4CBJBm6cyvU/e4KP3tJA3zXCoXNf8/IRHFc/z/gChpB4GPwFQAUGPnAyTUg
CtdIcgH8Pjzf2gPNwZ9DdwAmd4U7BJhG8GKyd+ZQtqNF9hdk9toJx2TLE1UFk79T
PelGrmrqpvk9cUjIMC2EMh8NUqbxY52VQRnq/ZAwKGoCxlFfUG8CRwNgKw9OQR0Y
6IvcwB2qkYWW14TOEB5EAj9fQKMqbRAcWInc6LScZZg+B10UBPRkzHw6k/IhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUbFiZqlGug3vTP2eTnFXiyS+NCMgwHwYDVR0j
BBgwFoAU1/64Mz5KoRNE53m7dJ6FcLJ/vM0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTlqVW50Y1duTjZ1SkxBbmZSaTJwSlM0aW1NdjE3V3pEZVM3SFVrRHY4
ZHkvMS9EN0ZFQjgzMzNFNEFBMTEzNDRFNzc5QkI3NDlFODU3MEIyN0ZCQ0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3RkVCODMzM0U0QUExMTM0
NEU3NzlCQjc0OUU4NTcwQjI3RkJDQ0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzU5alVudGNXbk42dUpMQW5mUmkycEpTNGltTXYxN1d6RGVTN0hVa0R2OGR5LzEv
MzEzMzM4MmUzMzM2MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM1
MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAookADANBgkqhkiG9w0BAQsFAAOCAQEA0U1syuAb9U3g
2UJ+mF13x07QKpdezi1bBWHHEdXrk1j1hFb8y1P5n5igYmyYiDwYz5DKlRSYNHwQ
wCtsvxR69nENE6PLOzFQ2TO5xrYGbYfXaRAqzM66k00Frq2s5/4GMbSzYRwixmzw
kwwBWG2/lHDosfZPAmTAy8rVx0DJmh+bIBQzBfWW9y0u/9Y5BC40qUwTL9EBf1g4
5+aePLYrBQOwF2Lo/pazbNWJuvSFIRyc96kWKFK7QVelwozAsuDJFP/9m119AL62
IAWwBQYQM1UGr3BY7lncx1GGmqw6iIMO0D5+THl6OpRu4UZlKDKFgxkQmAlX8mwq
Lbt3V2NHZA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org