Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa
File:                     3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa (raw, json)
Hash identifier:          uQ6DPSWYG4E4DSdacUqPazqH4xVHvS/iBrW6NP3dWzc=
Subject key identifier:   98:6A:34:67:D8:6A:23:CE:47:2A:BB:84:73:7F:C0:E6:96:5E:CF:E7
Certificate issuer:       /CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
Certificate serial:       2F17A2655930F81C0DF88373A51CD87A54747BFE
Authority key identifier: D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa
Signing time:             Tue 02 Apr 2024 02:20:21 +0000
ROA not before:           Tue 02 Apr 2024 02:15:21 +0000
ROA not after:            Tue 01 Apr 2025 02:20:21 +0000
asID:                     264211
IP address blocks:        138.99.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:17:a2:65:59:30:f8:1c:0d:f8:83:73:a5:1c:d8:7a:54:74:7b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D33CE6A3003B1C66B7E4529FD0F8AB30188858BA
        Validity
            Not Before: Apr  2 02:15:21 2024 GMT
            Not After : Apr  1 02:20:21 2025 GMT
        Subject: CN=986A3467D86A23CE472ABB84737FC0E6965ECFE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:86:b0:73:77:99:1d:fb:3e:de:81:52:33:
                    09:a7:e6:5f:c8:2c:7c:43:58:60:4c:80:be:7c:e8:
                    f8:37:f8:fa:0a:c4:16:9d:56:2d:bb:58:38:39:c4:
                    97:e5:32:02:12:17:73:59:92:fa:2c:42:05:5f:fd:
                    40:57:fa:36:e9:82:a9:cd:e4:7f:0e:35:fc:4f:be:
                    e4:25:f3:10:b1:97:6a:f5:46:6d:a6:cc:c7:2f:68:
                    c8:76:5b:b0:cf:5d:66:b5:50:30:90:75:81:00:e1:
                    51:a3:0c:3f:a4:68:ac:02:0b:12:b4:4c:e2:45:70:
                    2b:68:aa:0c:ba:74:85:4b:b1:91:4d:41:e8:5f:0c:
                    62:cb:ee:bb:b0:3b:37:e1:c9:89:e9:7a:cb:72:e3:
                    af:95:32:3f:f6:06:05:68:1a:f7:5a:02:1c:4f:e2:
                    ce:34:2f:66:a3:58:85:f8:87:25:0d:26:70:23:ef:
                    8b:bf:4e:2b:1a:69:10:b7:77:ac:1b:85:cc:b3:69:
                    30:b1:f4:cb:fb:b9:b7:af:c3:3a:95:30:14:83:60:
                    54:61:25:70:b5:36:60:95:9f:70:90:d1:8f:f5:68:
                    3a:5e:38:ac:e7:9c:a8:14:2c:58:22:d3:12:03:07:
                    d4:db:41:5b:d5:01:1e:cc:49:a9:2d:ca:8f:bd:2e:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6A:34:67:D8:6A:23:CE:47:2A:BB:84:73:7F:C0:E6:96:5E:CF:E7
            X509v3 Authority Key Identifier:
                keyid:D3:3C:E6:A3:00:3B:1C:66:B7:E4:52:9F:D0:F8:AB:30:18:88:58:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D33CE6A3003B1C66B7E4529FD0F8AB30188858BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jki5JQbyvWqiUpjc9SDL2LLqYKiQ8h3SBUuty4LckRJ/0/3133382e39392e3136342e302f32322d3332203d3e20323634323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:f4:cf:cd:fd:20:2b:95:9a:f7:3e:b3:f7:df:16:93:33:53:
         b1:bf:ac:9b:3e:54:75:d0:e6:0a:fd:a3:20:77:62:4e:dc:f0:
         06:8a:20:9b:83:d1:1e:7c:f6:fc:62:a0:86:10:30:c1:3e:15:
         61:01:5f:05:36:ad:5b:2c:5b:ac:aa:b5:b7:e8:9a:63:d9:26:
         68:0e:3a:85:60:ec:a4:32:4e:8a:fe:6b:30:1b:cb:36:a7:22:
         75:78:ef:36:7f:b3:2b:5e:9b:da:4a:c4:58:a4:0a:f8:4b:27:
         82:2d:d7:e3:75:49:3d:b8:e3:df:20:c6:9a:53:91:ff:b7:bc:
         95:71:57:6a:40:34:6d:02:da:90:2e:d8:8a:dc:84:88:ae:7f:
         60:1a:73:26:71:21:f6:3f:eb:8c:46:f0:40:8f:9b:03:16:11:
         63:e3:7a:98:c7:a7:f2:4c:a4:ce:01:24:48:4e:b6:db:fc:91:
         df:f1:3f:f4:12:71:c2:19:b9:2c:62:19:15:02:cd:0c:db:f9:
         31:a0:78:17:a5:96:70:6f:2c:d4:c5:71:81:f5:f0:13:c6:ae:
         fe:1f:ce:38:7b:0c:cb:1c:7a:29:63:7c:94:12:5b:9f:78:56:
         2c:87:90:65:16:9b:b6:e2:d3:8b:ad:34:cc:e5:d4:f3:82:42:
         71:30:4e:3f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULxeiZVkw+BwN+INzpRzYelR0e/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMzQ0U2QTMwMDNCMUM2NkI3RTQ1MjlGRDBGOEFCMzAx
ODg4NThCQTAeFw0yNDA0MDIwMjE1MjFaFw0yNTA0MDEwMjIwMjFaMDMxMTAvBgNV
BAMTKDk4NkEzNDY3RDg2QTIzQ0U0NzJBQkI4NDczN0ZDMEU2OTY1RUNGRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6f4awc3eZHfs+3oFSMwmn5l/I
LHxDWGBMgL586Pg3+PoKxBadVi27WDg5xJflMgISF3NZkvosQgVf/UBX+jbpgqnN
5H8ONfxPvuQl8xCxl2r1Rm2mzMcvaMh2W7DPXWa1UDCQdYEA4VGjDD+kaKwCCxK0
TOJFcCtoqgy6dIVLsZFNQehfDGLL7ruwOzfhyYnpesty46+VMj/2BgVoGvdaAhxP
4s40L2ajWIX4hyUNJnAj74u/TisaaRC3d6wbhcyzaTCx9Mv7ubevwzqVMBSDYFRh
JXC1NmCVn3CQ0Y/1aDpeOKznnKgULFgi0xIDB9TbQVvVAR7MSaktyo+9Lj09AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmGo0Z9hqI85HKruEc3/A5pZez+cwHwYDVR0j
BBgwFoAU0zzmowA7HGa35FKf0PirMBiIWLowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmpraTVKUWJ5dldxaVVwamM5U0RMMkxMcVlLaVE4aDNTQlV1dHk0TGNr
UkovMC9EMzNDRTZBMzAwM0IxQzY2QjdFNDUyOUZEMEY4QUIzMDE4ODg1OEJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QzM0NFNkEzMDAzQjFDNjZC
N0U0NTI5RkQwRjhBQjMwMTg4ODU4QkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZqa2k1SlFieXZXcWlVcGpjOVNETDJMTHFZS2lROGgzU0JVdXR5NExja1JKLzAv
MzEzMzM4MmUzOTM5MmUzMTM2MzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKY6QwDQYJKoZIhvcNAQELBQADggEBADb0z839
ICuVmvc+s/ffFpMzU7G/rJs+VHXQ5gr9oyB3Yk7c8AaKIJuD0R589vxioIYQMME+
FWEBXwU2rVssW6yqtbfommPZJmgOOoVg7KQyTor+azAbyzanInV47zZ/sytem9pK
xFikCvhLJ4It1+N1ST24498gxppTkf+3vJVxV2pANG0C2pAu2IrchIiuf2AacyZx
IfY/64xG8ECPmwMWEWPjepjHp/JMpM4BJEhOttv8kd/xP/QSccIZuSxiGRUCzQzb
+TGgeBellnBvLNTFcYH18BPGrv4fzjh7DMsceiljfJQSW594ViyHkGUWm7bi04ut
NMzl1POCQnEwTj8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org