Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/3133382e3231392e3131322e302f32322d3234203d3e20323633393236.roa
File:                     3133382e3231392e3131322e302f32322d3234203d3e20323633393236.roa (raw, json)
Hash identifier:          ozpZ/yj8Xa4dNcXPNoGRQURx+fT7QQH9af4/7ngMTmY=
Subject key identifier:   70:D7:D8:23:9B:FE:14:01:D5:BE:AD:98:24:FE:DB:B0:5A:DF:5F:E3
Certificate issuer:       /CN=F2F9AC7268555302AF30F54A7F45D44170882390
Certificate serial:       38C8419C03CCFAC68B6BAF460458AEC183AA62A8
Authority key identifier: F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F9AC7268555302AF30F54A7F45D44170882390.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/3133382e3231392e3131322e302f32322d3234203d3e20323633393236.roa
Signing time:             Thu 04 Apr 2024 10:37:56 +0000
ROA not before:           Thu 04 Apr 2024 10:32:56 +0000
ROA not after:            Thu 03 Apr 2025 10:37:56 +0000
asID:                     263926
IP address blocks:        138.219.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c8:41:9c:03:cc:fa:c6:8b:6b:af:46:04:58:ae:c1:83:aa:62:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2F9AC7268555302AF30F54A7F45D44170882390
        Validity
            Not Before: Apr  4 10:32:56 2024 GMT
            Not After : Apr  3 10:37:56 2025 GMT
        Subject: CN=70D7D8239BFE1401D5BEAD9824FEDBB05ADF5FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:4f:55:70:a7:8f:bf:c3:92:fc:e3:1c:1b:
                    1c:40:c2:ea:ec:2f:9f:4a:e2:f1:fd:0f:bd:dd:43:
                    3c:a6:63:cb:d6:26:3e:21:54:43:84:be:51:62:7f:
                    a4:34:de:e6:f4:96:ef:bd:a7:ce:e2:f1:f8:9c:11:
                    dd:83:43:85:a3:3d:e3:3a:07:ca:76:ac:b2:e3:64:
                    41:b6:d7:02:f4:78:f4:58:9b:d3:7f:c9:cd:3f:35:
                    0e:65:43:3b:ca:f1:09:84:3d:30:dc:d6:c5:6b:dd:
                    6c:90:e8:82:b0:f4:d5:cb:aa:1a:a6:71:fe:c4:24:
                    3c:3d:c3:da:84:59:27:66:4b:e8:c6:ef:a3:96:68:
                    bb:89:e9:c1:6e:9b:ba:a2:a2:87:92:08:cf:13:43:
                    fa:1f:aa:d9:15:4d:b4:d4:cf:a3:25:48:fc:fa:73:
                    25:55:87:8f:e8:7d:a0:86:bd:d2:54:c8:6a:8d:07:
                    bb:92:db:a8:ca:5b:dd:f6:50:fa:b1:72:72:b9:e4:
                    0f:e9:57:d0:8c:5d:0d:24:ca:c9:10:fd:9e:43:c9:
                    74:cb:14:62:dc:21:43:55:68:97:af:67:b6:22:be:
                    72:88:f3:24:eb:1d:1b:97:db:9c:df:93:69:08:34:
                    bf:82:a1:f6:ea:25:a5:c8:34:9f:6f:08:91:84:2c:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:D8:23:9B:FE:14:01:D5:BE:AD:98:24:FE:DB:B0:5A:DF:5F:E3
            X509v3 Authority Key Identifier:
                keyid:F2:F9:AC:72:68:55:53:02:AF:30:F5:4A:7F:45:D4:41:70:88:23:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/F2F9AC7268555302AF30F54A7F45D44170882390.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2F9AC7268555302AF30F54A7F45D44170882390.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6213qiFXd9Eewa92b9fKD1ezJ3hrqXep6SBPuMva4V5f/1/3133382e3231392e3131322e302f32322d3234203d3e20323633393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:64:98:0f:1f:a7:d0:87:5b:84:6d:39:e1:59:e5:7b:db:06:
         c7:f0:37:fe:3c:30:24:a5:1d:52:a5:f8:20:7f:f6:ba:e8:9a:
         e6:83:4e:f2:29:66:93:29:2f:0b:a3:40:81:09:1d:2c:e0:5f:
         16:c2:7b:d4:4e:8a:8e:ad:4d:6b:e3:70:e3:35:6e:6e:d8:c9:
         88:0f:11:29:85:6b:d5:69:24:da:8e:1d:97:72:33:cc:bf:5f:
         21:99:b7:6e:27:d1:75:14:76:a8:c5:30:d1:51:00:13:15:32:
         b3:1e:4a:c7:9a:6b:4e:ab:6d:dc:bf:54:db:18:cf:c0:cc:78:
         61:28:8f:0f:6e:9c:72:1f:1d:7b:e1:88:87:60:51:3e:31:76:
         9b:31:7f:bb:c6:40:0d:cc:8e:36:5f:dc:e1:40:26:09:ef:d1:
         ef:5f:f7:3c:f4:80:8e:7b:bb:a0:d6:be:d7:12:55:0e:77:a1:
         90:39:e0:91:13:51:87:e6:84:1c:e7:18:47:53:92:3e:20:78:
         33:b7:8d:4a:de:4a:02:9b:8f:49:dc:c8:57:e4:34:67:e8:f0:
         20:35:47:66:48:8c:08:78:ec:2e:97:e3:da:fd:e8:5c:6f:ab:
         b9:17:43:b1:52:26:d1:67:fb:f1:4f:5b:a3:92:c2:22:ee:c2:
         91:5d:01:86
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUOMhBnAPM+saLa69GBFiuwYOqYqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJGOUFDNzI2ODU1NTMwMkFGMzBGNTRBN0Y0NUQ0NDE3
MDg4MjM5MDAeFw0yNDA0MDQxMDMyNTZaFw0yNTA0MDMxMDM3NTZaMDMxMTAvBgNV
BAMTKDcwRDdEODIzOUJGRTE0MDFENUJFQUQ5ODI0RkVEQkIwNUFERjVGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMk9VcKePv8OS/OMcGxxAwurs
L59K4vH9D73dQzymY8vWJj4hVEOEvlFif6Q03ub0lu+9p87i8ficEd2DQ4WjPeM6
B8p2rLLjZEG21wL0ePRYm9N/yc0/NQ5lQzvK8QmEPTDc1sVr3WyQ6IKw9NXLqhqm
cf7EJDw9w9qEWSdmS+jG76OWaLuJ6cFum7qiooeSCM8TQ/ofqtkVTbTUz6MlSPz6
cyVVh4/ofaCGvdJUyGqNB7uS26jKW932UPqxcnK55A/pV9CMXQ0kyskQ/Z5DyXTL
FGLcIUNVaJevZ7YivnKI8yTrHRuX25zfk2kINL+CofbqJaXINJ9vCJGELJ8jAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUcNfYI5v+FAHVvq2YJP7bsFrfX+MwHwYDVR0j
BBgwFoAU8vmscmhVUwKvMPVKf0XUQXCII5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjIxM3FpRlhkOUVld2E5MmI5ZktEMWV6SjNocnFYZXA2U0JQdU12YTRW
NWYvMS9GMkY5QUM3MjY4NTU1MzAyQUYzMEY1NEE3RjQ1RDQ0MTcwODgyMzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyRjlBQzcyNjg1NTUzMDJB
RjMwRjU0QTdGNDVENDQxNzA4ODIzOTAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYyMTNxaUZYZDlFZXdhOTJiOWZLRDFlekozaHJxWGVwNlNCUHVNdmE0VjVmLzEv
MzEzMzM4MmUzMjMxMzkyZTMxMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAorbcDANBgkqhkiG9w0BAQsFAAOCAQEAY2SY
Dx+n0IdbhG054Vnle9sGx/A3/jwwJKUdUqX4IH/2uuia5oNO8ilmkykvC6NAgQkd
LOBfFsJ71E6Kjq1Na+Nw4zVubtjJiA8RKYVr1Wkk2o4dl3IzzL9fIZm3bifRdRR2
qMUw0VEAExUysx5Kx5prTqtt3L9U2xjPwMx4YSiPD26cch8de+GIh2BRPjF2mzF/
u8ZADcyONl/c4UAmCe/R71/3PPSAjnu7oNa+1xJVDnehkDngkRNRh+aEHOcYR1OS
PiB4M7eNSt5KApuPSdzIV+Q0Z+jwIDVHZkiMCHjsLpfj2v3oXG+ruRdDsVIm0Wf7
8U9bo5LCIu7CkV0Bhg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org