Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
File:                     3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa (raw, json)
Hash identifier:          6OieqZgnBNxCzYeUEGaSuPwtFXUMTsb2HtLzzpk4HnY=
Subject key identifier:   73:45:79:63:CB:2D:58:56:0E:45:53:A4:8F:8F:AC:6F:D3:48:9B:E8
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       48E9FAF6B2EDE64FD62F31CEF8011B6550BB3ED7
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:49 +0000
ROA not before:           Thu 04 Apr 2024 12:30:49 +0000
ROA not after:            Thu 03 Apr 2025 12:35:49 +0000
asID:                     262485
IP address blocks:        138.118.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e9:fa:f6:b2:ed:e6:4f:d6:2f:31:ce:f8:01:1b:65:50:bb:3e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:49 2024 GMT
            Not After : Apr  3 12:35:49 2025 GMT
        Subject: CN=73457963CB2D58560E4553A48F8FAC6FD3489BE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8c:11:bc:46:28:ca:41:e3:21:f6:9c:74:a9:
                    82:e6:9f:cb:bd:f9:a6:bb:14:d0:98:b4:7c:aa:f4:
                    2c:0a:3f:1a:a5:7f:06:ad:15:ea:d2:4a:c1:cc:11:
                    22:4a:1e:3e:8d:99:31:94:e7:0b:a0:c3:8e:cc:74:
                    be:82:7b:52:71:d3:5f:e2:e0:17:0b:18:49:6f:26:
                    f0:3b:14:2f:24:3d:6d:0b:c2:b9:41:f8:33:67:c0:
                    ba:3e:84:f6:a1:3f:b5:2b:fe:6c:dd:1f:22:3d:56:
                    11:00:71:29:58:ea:9b:20:a4:a9:0f:70:90:19:93:
                    97:26:4c:50:33:3d:fa:80:26:41:80:1d:66:66:42:
                    90:b6:35:bf:40:00:e6:73:79:48:21:f6:0c:2c:1f:
                    27:78:5c:50:c7:32:8e:3f:ae:d2:62:50:7f:cf:bb:
                    1d:67:a8:21:e4:b5:87:db:36:7f:95:45:d2:66:5e:
                    37:c8:6a:af:6c:8c:7e:a7:11:31:0b:3d:e6:f1:e7:
                    80:cc:b1:d7:85:12:3d:fa:5a:df:6a:57:49:8a:dc:
                    46:bd:57:ba:42:0e:6b:ad:2b:24:40:b1:fc:2b:ea:
                    84:15:26:d0:eb:20:0a:41:c3:f2:c7:85:27:c4:d8:
                    70:5c:7e:3b:34:32:ee:08:4d:e0:3e:80:2b:3f:25:
                    ba:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:45:79:63:CB:2D:58:56:0E:45:53:A4:8F:8F:AC:6F:D3:48:9B:E8
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/3133382e3131382e38392e302f32342d3234203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:4b:39:21:69:3d:4a:4f:de:84:66:13:83:d4:22:6a:f0:1d:
         f7:e8:c1:da:24:72:4b:4a:55:71:2f:03:3c:24:98:67:3f:c9:
         dc:45:5f:0c:63:45:a9:0d:06:87:5f:fb:ef:fc:7d:c9:a6:ad:
         02:71:1d:71:b1:c6:7f:cc:e8:21:25:14:a1:f9:60:f3:22:d4:
         1b:34:fe:23:f8:f3:29:a6:8b:61:b6:67:ba:af:42:4f:87:40:
         ed:5e:17:38:22:5b:da:09:15:fc:79:b5:27:7f:8b:31:4a:d1:
         28:d3:68:93:71:2d:a1:08:3e:42:7a:16:9e:6e:63:4a:a0:f8:
         2e:a1:03:89:8e:97:b3:a5:a6:52:89:8c:97:a5:d6:56:16:b0:
         b5:e8:c5:1b:bc:0b:1d:e4:26:5d:2b:9a:6a:34:79:2d:82:0e:
         d9:ce:5f:5a:51:2a:31:a9:48:c0:a8:18:3f:4b:18:3b:a0:94:
         bd:30:3b:28:55:4a:13:ad:d2:86:97:f3:34:16:d7:1e:29:db:
         7a:d6:e2:20:9a:cc:05:b1:3d:4a:03:0c:ae:45:75:cf:bb:a8:
         74:2b:b4:2b:4b:1d:7d:b5:49:5e:b5:e3:6b:bb:e5:8e:9f:d1:
         5b:6a:60:81:71:4e:07:d1:88:40:ed:19:19:4f:4c:ae:32:64:
         b8:23:d6:a6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSOn69rLt5k/WLzHO+AEbZVC7PtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkEwNjk2NEIxNDIxMDMzNkM3MzVBQTExOTA5RUZCQkYw
QzlGQTdCRDAeFw0yNDA0MDQxMjMwNDlaFw0yNTA0MDMxMjM1NDlaMDMxMTAvBgNV
BAMTKDczNDU3OTYzQ0IyRDU4NTYwRTQ1NTNBNDhGOEZBQzZGRDM0ODlCRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVjBG8RijKQeMh9px0qYLmn8u9
+aa7FNCYtHyq9CwKPxqlfwatFerSSsHMESJKHj6NmTGU5wugw47MdL6Ce1Jx01/i
4BcLGElvJvA7FC8kPW0LwrlB+DNnwLo+hPahP7Ur/mzdHyI9VhEAcSlY6psgpKkP
cJAZk5cmTFAzPfqAJkGAHWZmQpC2Nb9AAOZzeUgh9gwsHyd4XFDHMo4/rtJiUH/P
ux1nqCHktYfbNn+VRdJmXjfIaq9sjH6nETELPebx54DMsdeFEj36Wt9qV0mK3Ea9
V7pCDmutKyRAsfwr6oQVJtDrIApBw/LHhSfE2HBcfjs0Mu4ITeA+gCs/JboPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUc0V5Y8stWFYORVOkj4+sb9NIm+gwHwYDVR0j
BBgwFoAU+gaWSxQhAzbHNaoRkJ77vwyfp70wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWV3eG1vMkROWEc2Unhnd1JnUkFqQ05CbmhxR1RONkU0OVVKWG9kQTJy
NTgvMS9GQTA2OTY0QjE0MjEwMzM2QzczNUFBMTE5MDlFRkJCRjBDOUZBN0JELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZBMDY5NjRCMTQyMTAzMzZD
NzM1QUExMTkwOUVGQkJGMEM5RkE3QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVld3htbzJETlhHNlJ4Z3dSZ1JBakNOQm5ocUdUTjZFNDlVSlhvZEEycjU4LzEv
MzEzMzM4MmUzMTMxMzgyZTM4MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKdlkwDQYJKoZIhvcNAQELBQADggEBAMxLOSFp
PUpP3oRmE4PUImrwHffowdokcktKVXEvAzwkmGc/ydxFXwxjRakNBodf++/8fcmm
rQJxHXGxxn/M6CElFKH5YPMi1Bs0/iP48ymmi2G2Z7qvQk+HQO1eFzgiW9oJFfx5
tSd/izFK0SjTaJNxLaEIPkJ6Fp5uY0qg+C6hA4mOl7OlplKJjJel1lYWsLXoxRu8
Cx3kJl0rmmo0eS2CDtnOX1pRKjGpSMCoGD9LGDuglL0wOyhVShOt0oaX8zQW1x4p
23rW4iCazAWxPUoDDK5Fdc+7qHQrtCtLHX21SV6142u75Y6f0VtqYIFxTgfRiEDt
GRlPTK4yZLgj1qY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org