Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235302e302f32342d3234203d3e20323730363632.roa
File:                     3133382e3131372e3235302e302f32342d3234203d3e20323730363632.roa (raw, json)
Hash identifier:          RIKJed1NMSVB41LI3QNQodopJpb0QWunmlDFAeS4A70=
Subject key identifier:   DF:49:0E:3A:BC:9C:CF:83:FC:0B:33:A4:38:86:A5:1E:04:4D:C0:18
Certificate issuer:       /CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
Certificate serial:       433E31D3BC1E81E989A529F0DD89B333FF8E9148
Authority key identifier: 4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235302e302f32342d3234203d3e20323730363632.roa
Signing time:             Mon 09 Oct 2023 13:48:23 +0000
ROA not before:           Mon 09 Oct 2023 13:43:23 +0000
ROA not after:            Mon 07 Oct 2024 13:48:23 +0000
asID:                     270662
IP address blocks:        138.117.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3e:31:d3:bc:1e:81:e9:89:a5:29:f0:dd:89:b3:33:ff:8e:91:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D3E59C0293D929E5ECB4594008B198CCFDA9543
        Validity
            Not Before: Oct  9 13:43:23 2023 GMT
            Not After : Oct  7 13:48:23 2024 GMT
        Subject: CN=DF490E3ABC9CCF83FC0B33A43886A51E044DC018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:0d:65:e3:40:59:3e:0f:0f:71:02:3a:61:
                    6c:4b:86:57:6f:25:57:4f:7e:1c:0c:46:ab:ae:96:
                    73:d6:a4:e8:37:5c:b5:db:4c:33:de:3f:3a:6d:cd:
                    46:e0:cd:5a:32:47:26:c4:60:d6:9e:62:d2:33:d5:
                    23:f7:10:1e:a4:69:8a:27:eb:3e:07:bb:e5:1e:e0:
                    40:b6:9a:a0:ad:1b:3d:2a:b2:10:58:ba:ce:c6:2e:
                    ce:9d:ec:25:d7:8c:39:ee:3b:91:b0:48:25:c6:53:
                    54:34:d2:14:a3:d6:62:65:a4:6c:da:86:a3:a5:11:
                    d1:29:bf:f6:aa:4e:a8:36:2f:f8:a8:b3:30:18:df:
                    55:86:e0:c6:dd:b7:87:8e:4d:77:23:b5:36:b3:58:
                    83:bb:6a:74:8a:c7:f1:04:b3:d5:bf:c8:cd:54:da:
                    61:c7:41:4c:2f:11:33:a7:c6:a3:ce:29:f7:7d:61:
                    02:8b:10:df:41:dc:71:d7:49:a2:6b:de:78:6d:7f:
                    d2:c8:05:20:bf:12:a6:a2:1f:dd:b1:d9:48:9c:a2:
                    25:b6:0a:ed:44:c8:cc:98:6e:c4:94:e0:e3:56:46:
                    0a:00:da:0a:81:6d:61:44:13:0e:bb:76:7f:1b:73:
                    ea:16:7b:2b:41:7c:38:ad:be:07:e8:21:12:ed:71:
                    5b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:49:0E:3A:BC:9C:CF:83:FC:0B:33:A4:38:86:A5:1E:04:4D:C0:18
            X509v3 Authority Key Identifier:
                keyid:4D:3E:59:C0:29:3D:92:9E:5E:CB:45:94:00:8B:19:8C:CF:DA:95:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D3E59C0293D929E5ECB4594008B198CCFDA9543.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Yn6xJtFJJYr2xDfzgZsq6h7LdRTxHn1gDbNCDYnG9c4/0/3133382e3131372e3235302e302f32342d3234203d3e20323730363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:82:4c:72:76:89:78:a7:65:8d:d1:a8:51:6e:ff:8a:60:83:
         45:5d:c6:56:0d:1c:76:86:ff:38:38:93:2f:61:43:30:6a:9f:
         80:48:6c:e2:03:45:57:4d:a0:ca:9a:68:f5:9c:bc:04:a7:41:
         a8:2d:3f:7e:b6:54:93:b2:0d:13:60:35:ae:6c:da:33:c3:39:
         11:b5:7f:70:d2:30:8a:54:b9:92:45:86:4c:90:89:7b:53:0c:
         d7:58:64:18:1b:8a:48:b7:a2:1d:8d:fe:52:a9:07:b4:24:d7:
         94:c0:27:4c:b1:bd:83:aa:2a:8f:31:7a:90:f7:43:8b:1f:17:
         86:fb:51:a7:a7:3f:86:58:48:24:8a:2f:33:61:d7:1e:1e:22:
         bc:fd:6b:df:3e:33:0a:6e:68:fb:4f:ee:37:b0:2e:b2:9e:81:
         b9:55:92:3b:be:eb:9a:6f:07:b3:b5:c0:b6:1f:c6:01:98:33:
         2b:21:5e:63:b5:92:cc:ec:6b:10:af:af:bd:91:0d:0e:e5:1c:
         20:15:7b:17:cb:58:5c:c4:a3:95:e0:e4:f2:c4:47:fe:ae:9d:
         5a:4e:8c:83:6c:39:56:21:5c:09:fa:8d:1d:2a:df:76:e4:9a:
         2a:ef:27:be:7c:1b:41:c4:95:c0:14:75:ba:ae:61:bc:af:8a:
         59:73:8c:cf
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQz4x07wegemJpSnw3YmzM/+OkUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQzRTU5QzAyOTNEOTI5RTVFQ0I0NTk0MDA4QjE5OEND
RkRBOTU0MzAeFw0yMzEwMDkxMzQzMjNaFw0yNDEwMDcxMzQ4MjNaMDMxMTAvBgNV
BAMTKERGNDkwRTNBQkM5Q0NGODNGQzBCMzNBNDM4ODZBNTFFMDQ0REMwMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnKg1l40BZPg8PcQI6YWxLhldv
JVdPfhwMRquulnPWpOg3XLXbTDPePzptzUbgzVoyRybEYNaeYtIz1SP3EB6kaYon
6z4Hu+Ue4EC2mqCtGz0qshBYus7GLs6d7CXXjDnuO5GwSCXGU1Q00hSj1mJlpGza
hqOlEdEpv/aqTqg2L/ioszAY31WG4Mbdt4eOTXcjtTazWIO7anSKx/EEs9W/yM1U
2mHHQUwvETOnxqPOKfd9YQKLEN9B3HHXSaJr3nhtf9LIBSC/EqaiH92x2UicoiW2
Cu1EyMyYbsSU4ONWRgoA2gqBbWFEEw67dn8bc+oWeytBfDitvgfoIRLtcVsLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU30kOOrycz4P8CzOkOIalHgRNwBgwHwYDVR0j
BBgwFoAUTT5ZwCk9kp5ey0WUAIsZjM/alUMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFluNnhKdEZKSllyMnhEZnpnWnNxNmg3TGRSVHhIbjFnRGJOQ0RZbkc5
YzQvMC80RDNFNTlDMDI5M0Q5MjlFNUVDQjQ1OTQwMDhCMTk4Q0NGREE5NTQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREM0U1OUMwMjkzRDkyOUU1
RUNCNDU5NDAwOEIxOThDQ0ZEQTk1NDMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhZbjZ4SnRGSkpZcjJ4RGZ6Z1pzcTZoN0xkUlR4SG4xZ0RiTkNEWW5HOWM0LzAv
MzEzMzM4MmUzMTMxMzcyZTMyMzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczMDM2MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIp1+jANBgkqhkiG9w0BAQsFAAOCAQEAjIJM
cnaJeKdljdGoUW7/imCDRV3GVg0cdob/ODiTL2FDMGqfgEhs4gNFV02gyppo9Zy8
BKdBqC0/frZUk7INE2A1rmzaM8M5EbV/cNIwilS5kkWGTJCJe1MM11hkGBuKSLei
HY3+UqkHtCTXlMAnTLG9g6oqjzF6kPdDix8XhvtRp6c/hlhIJIovM2HXHh4ivP1r
3z4zCm5o+0/uN7Ausp6BuVWSO77rmm8Hs7XAth/GAZgzKyFeY7WSzOxrEK+vvZEN
DuUcIBV7F8tYXMSjleDk8sRH/q6dWk6Mg2w5ViFcCfqNHSrfduSaKu8nvnwbQcSV
wBR1uq5hvK+KWXOMzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org