Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32332d3233203d3e20323632333534.roa
File:                     3133382e3138362e3130382e302f32332d3233203d3e20323632333534.roa (raw, json)
Hash identifier:          07l0Y7IU0N2MJ1SMrDnZ5gY1ze3EdQJ4MnEOabeafhQ=
Subject key identifier:   E8:85:09:87:CF:D0:79:66:0E:E4:F5:7E:3F:1D:56:2A:D5:89:9F:EA
Certificate issuer:       /CN=9445327451CE84E39FB7363BC02549BB0F004F4B
Certificate serial:       0345EF1CE73F8F10EA1F8543923E94CCEDCB1A49
Authority key identifier: 94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32332d3233203d3e20323632333534.roa
Signing time:             Wed 06 Mar 2024 14:14:33 +0000
ROA not before:           Wed 06 Mar 2024 14:09:33 +0000
ROA not after:            Wed 05 Mar 2025 14:14:33 +0000
asID:                     262354
IP address blocks:        138.186.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:45:ef:1c:e7:3f:8f:10:ea:1f:85:43:92:3e:94:cc:ed:cb:1a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9445327451CE84E39FB7363BC02549BB0F004F4B
        Validity
            Not Before: Mar  6 14:09:33 2024 GMT
            Not After : Mar  5 14:14:33 2025 GMT
        Subject: CN=E8850987CFD079660EE4F57E3F1D562AD5899FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6c:6f:d3:9b:f9:20:89:6c:d2:f2:1e:b1:e4:
                    e2:8f:0d:59:6d:f9:6a:05:ea:ca:45:5b:1d:2e:9e:
                    fb:ab:76:6c:a2:fc:9d:57:cc:34:16:b8:7e:c7:6b:
                    20:36:13:7a:d7:90:e7:e5:fa:8f:4d:3a:b4:8b:21:
                    e2:ad:d9:0c:13:4e:78:ea:bb:3c:c4:fe:c5:84:b4:
                    82:fe:24:c0:92:c1:3a:08:bf:2a:6e:9a:16:84:71:
                    0e:23:5a:67:7e:34:58:22:aa:71:48:ab:60:c5:2a:
                    38:88:9d:4a:c3:a4:94:59:48:cb:dc:21:6c:65:65:
                    c0:e7:89:a9:87:12:01:cb:de:80:75:9c:bc:d8:bc:
                    b1:71:1a:9c:4c:19:1a:21:5b:b6:72:cf:ef:41:ec:
                    24:76:80:33:fd:d8:42:09:1e:cb:ac:0c:a5:6c:54:
                    d5:1f:93:e3:97:2a:d3:cf:36:b1:1b:41:04:37:1d:
                    72:b5:84:2e:12:27:1d:3c:69:c5:d9:f1:31:a9:44:
                    f9:19:55:e0:d7:d1:48:2e:cb:84:1b:82:d3:66:e1:
                    39:8c:d3:39:4f:7a:ef:4b:62:3f:bd:3c:4b:1e:8d:
                    c0:e0:4f:c7:01:4e:9b:a8:ae:bf:f1:19:06:51:97:
                    ad:c9:a9:7f:5e:da:61:d1:4b:d7:13:3a:dd:21:c9:
                    c6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:85:09:87:CF:D0:79:66:0E:E4:F5:7E:3F:1D:56:2A:D5:89:9F:EA
            X509v3 Authority Key Identifier:
                keyid:94:45:32:74:51:CE:84:E3:9F:B7:36:3B:C0:25:49:BB:0F:00:4F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/9445327451CE84E39FB7363BC02549BB0F004F4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9445327451CE84E39FB7363BC02549BB0F004F4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/0/3133382e3138362e3130382e302f32332d3233203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:ce:09:66:c6:b8:c9:bf:82:62:86:48:bf:ea:0d:b4:14:c4:
         fd:58:bc:af:ca:a4:1f:ba:ed:9a:a2:d6:d1:9f:10:39:84:f1:
         fb:c6:e5:b6:a9:53:d9:83:10:7f:0a:0f:54:70:63:7e:cd:d2:
         2e:8d:6c:92:c9:3a:bf:0c:61:e8:23:9d:2c:f9:9a:14:3e:23:
         2f:71:76:a9:f5:24:95:7d:f1:e5:bf:67:e8:8b:0e:23:63:ea:
         88:42:51:47:96:2e:b5:31:22:00:81:56:fe:d6:86:c4:95:a4:
         e1:0c:d6:64:03:16:a0:d1:51:94:0b:25:59:97:59:e5:44:6d:
         d3:eb:b8:8f:96:20:36:23:72:fa:95:dc:40:c1:2b:cc:82:3a:
         53:e8:d8:56:12:98:ae:fd:8e:a6:a7:c3:8c:e9:b7:e7:ec:cf:
         99:70:24:a9:86:25:e7:d2:b4:3e:1f:a8:45:c4:40:8b:5e:03:
         e8:4e:81:3b:7b:d5:1a:db:21:7a:d1:6f:91:b1:7f:08:8d:3f:
         cc:54:f0:bd:ea:44:f6:47:ce:0b:6e:c7:ea:9b:46:08:eb:26:
         7e:28:93:8e:78:a4:f0:f0:36:74:57:88:39:00:46:b0:7c:2c:
         66:b5:29:94:7f:a3:54:55:a4:75:d8:55:a9:11:3a:87:e1:ac:
         de:d9:41:b7
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUA0XvHOc/jxDqH4VDkj6UzO3LGkkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ0NTMyNzQ1MUNFODRFMzlGQjczNjNCQzAyNTQ5QkIw
RjAwNEY0QjAeFw0yNDAzMDYxNDA5MzNaFw0yNTAzMDUxNDE0MzNaMDMxMTAvBgNV
BAMTKEU4ODUwOTg3Q0ZEMDc5NjYwRUU0RjU3RTNGMUQ1NjJBRDU4OTlGRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bG/Tm/kgiWzS8h6x5OKPDVlt
+WoF6spFWx0unvurdmyi/J1XzDQWuH7HayA2E3rXkOfl+o9NOrSLIeKt2QwTTnjq
uzzE/sWEtIL+JMCSwToIvypumhaEcQ4jWmd+NFgiqnFIq2DFKjiInUrDpJRZSMvc
IWxlZcDniamHEgHL3oB1nLzYvLFxGpxMGRohW7Zyz+9B7CR2gDP92EIJHsusDKVs
VNUfk+OXKtPPNrEbQQQ3HXK1hC4SJx08acXZ8TGpRPkZVeDX0Uguy4QbgtNm4TmM
0zlPeu9LYj+9PEsejcDgT8cBTpuorr/xGQZRl63JqX9e2mHRS9cTOt0hycahAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU6IUJh8/QeWYO5PV+Px1WKtWJn+owHwYDVR0j
BBgwFoAUlEUydFHOhOOftzY7wCVJuw8AT0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjNLRzRtUDFRbjRjV1pYU3d1QTJtM1dFYThKWFVWTkZZQkczSHpLY0ZI
bVkvMC85NDQ1MzI3NDUxQ0U4NEUzOUZCNzM2M0JDMDI1NDlCQjBGMDA0RjRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk0NDUzMjc0NTFDRTg0RTM5
RkI3MzYzQkMwMjU0OUJCMEYwMDRGNEIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzYzS0c0bVAxUW40Y1daWFN3dUEybTNXRWE4SlhVVk5GWUJHM0h6S2NGSG1ZLzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjMzMzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYq6bDANBgkqhkiG9w0BAQsFAAOCAQEAE84J
Zsa4yb+CYoZIv+oNtBTE/Vi8r8qkH7rtmqLW0Z8QOYTx+8bltqlT2YMQfwoPVHBj
fs3SLo1sksk6vwxh6COdLPmaFD4jL3F2qfUklX3x5b9n6IsOI2PqiEJRR5YutTEi
AIFW/taGxJWk4QzWZAMWoNFRlAslWZdZ5URt0+u4j5YgNiNy+pXcQMErzII6U+jY
VhKYrv2OpqfDjOm35+zPmXAkqYYl59K0Ph+oRcRAi14D6E6BO3vVGtshetFvkbF/
CI0/zFTwvepE9kfOC27H6ptGCOsmfiiTjnik8PA2dFeIOQBGsHwsZrUplH+jVFWk
ddhVqRE6h+Gs3tlBtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org