Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa
File:                     3138362e32362e38382e302f32342d3234203d3e20323730393236.roa (raw, json)
Hash identifier:          M1N2tXdj+6gNjRUORCaUcNE0pQDnn4TF+jxcIWZQBO8=
Subject key identifier:   8B:58:61:36:0B:0F:BA:33:CC:20:33:01:87:A9:D9:18:5D:05:BC:62
Certificate issuer:       /CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
Certificate serial:       4CEDCC2E4FC3798B2D675ED0748E07F237E324D2
Authority key identifier: 4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa
Signing time:             Sat 09 Mar 2024 21:53:16 +0000
ROA not before:           Sat 09 Mar 2024 21:48:16 +0000
ROA not after:            Sat 08 Mar 2025 21:53:16 +0000
asID:                     270926
IP address blocks:        186.26.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ed:cc:2e:4f:c3:79:8b:2d:67:5e:d0:74:8e:07:f2:37:e3:24:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC2A51129A554799F35AEF66889E0CA3BF4B1C0
        Validity
            Not Before: Mar  9 21:48:16 2024 GMT
            Not After : Mar  8 21:53:16 2025 GMT
        Subject: CN=8B5861360B0FBA33CC20330187A9D9185D05BC62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:89:6b:b8:1b:a1:c0:df:c5:0d:56:68:17:
                    e5:9d:64:1d:a3:f5:ca:4f:b6:fb:43:78:93:42:09:
                    c8:e7:89:a8:5f:69:49:f3:f7:24:64:e6:a6:b0:4e:
                    82:e7:f5:cc:f3:2e:82:0a:18:67:be:f5:a0:84:87:
                    e9:2a:ab:18:15:c6:d4:d2:62:ec:b6:86:41:23:90:
                    85:fa:b0:45:24:b4:64:5d:0f:ae:4a:55:e7:e3:90:
                    54:9a:3c:9d:11:79:bf:73:71:47:13:c3:d8:eb:31:
                    20:9b:29:b7:8a:37:f4:73:4f:d8:1d:94:d5:3d:ea:
                    73:94:ae:97:5f:24:55:3f:36:72:36:af:66:e3:cb:
                    30:e6:34:8e:66:92:76:93:eb:97:03:03:ca:54:17:
                    9b:28:d9:2b:55:8e:5a:22:bf:17:74:99:f6:82:9d:
                    45:b4:7a:4b:18:39:3c:bf:f8:1a:31:66:f2:81:54:
                    88:a7:2f:e5:2c:cb:7e:af:a5:a7:28:7a:33:c8:7d:
                    ac:4d:a4:3f:93:e0:e5:2d:c2:b1:d1:16:b9:47:e2:
                    60:a0:09:6c:04:13:9f:8f:6f:5f:a3:d2:2c:6d:6c:
                    ae:34:e8:80:ca:85:a9:52:c4:fc:89:99:cc:30:d5:
                    93:4a:94:16:83:69:ef:1b:29:0f:92:69:18:de:d6:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:61:36:0B:0F:BA:33:CC:20:33:01:87:A9:D9:18:5D:05:BC:62
            X509v3 Authority Key Identifier:
                keyid:4C:C2:A5:11:29:A5:54:79:9F:35:AE:F6:68:89:E0:CA:3B:F4:B1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CC2A51129A554799F35AEF66889E0CA3BF4B1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZYRndAaNP6k65VRooujcSpdiY9qbityEf3aMWtT65cS/0/3138362e32362e38382e302f32342d3234203d3e20323730393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:8c:31:b4:85:2d:83:ec:44:57:d7:6a:45:40:b3:9a:26:07:
         b3:41:9d:ff:09:bf:cc:de:f1:c4:65:dd:04:14:b3:bb:68:11:
         de:b8:a4:b6:b0:de:93:db:6b:6b:04:77:93:cd:a5:7a:ba:8b:
         94:65:81:e5:fa:ff:c6:ef:b8:6a:df:12:d3:d8:f2:60:4c:f9:
         de:49:1a:db:49:96:c9:39:b2:b6:9e:5d:58:42:81:0e:a8:9a:
         65:6a:b7:f0:bd:18:a2:0f:b3:59:67:19:f2:73:96:02:8f:5a:
         cc:44:77:90:59:f4:d6:ce:92:aa:de:d3:f9:8d:fc:8a:c5:63:
         22:6e:0c:63:35:54:e2:92:8f:13:a4:ab:1a:6e:7f:5c:4a:61:
         53:41:55:ac:33:51:a9:dd:64:e7:f6:2e:bc:be:03:44:65:33:
         c5:34:15:38:9f:0b:5f:d2:67:23:4c:4d:5b:03:0d:a5:56:f3:
         51:2e:2b:e2:12:61:42:fc:b1:47:f5:db:da:8e:5a:b1:ac:f0:
         25:6d:7a:e8:f1:68:82:6a:89:af:42:a2:c8:30:76:72:2e:bf:
         6a:4a:f7:fd:2d:03:f4:5b:32:13:e8:43:f0:f5:3a:e2:5e:84:
         c4:bf:f7:b0:ca:ad:3c:1d:98:92:0f:f1:53:fd:97:e6:59:af:
         af:c9:37:c5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTO3MLk/DeYstZ17QdI4H8jfjJNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMkE1MTEyOUE1NTQ3OTlGMzVBRUY2Njg4OUUwQ0Ez
QkY0QjFDMDAeFw0yNDAzMDkyMTQ4MTZaFw0yNTAzMDgyMTUzMTZaMDMxMTAvBgNV
BAMTKDhCNTg2MTM2MEIwRkJBMzNDQzIwMzMwMTg3QTlEOTE4NUQwNUJDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOxYlruBuhwN/FDVZoF+WdZB2j
9cpPtvtDeJNCCcjniahfaUnz9yRk5qawToLn9czzLoIKGGe+9aCEh+kqqxgVxtTS
Yuy2hkEjkIX6sEUktGRdD65KVefjkFSaPJ0Reb9zcUcTw9jrMSCbKbeKN/RzT9gd
lNU96nOUrpdfJFU/NnI2r2bjyzDmNI5mknaT65cDA8pUF5so2StVjloivxd0mfaC
nUW0eksYOTy/+BoxZvKBVIinL+Usy36vpacoejPIfaxNpD+T4OUtwrHRFrlH4mCg
CWwEE5+Pb1+j0ixtbK406IDKhalSxPyJmcww1ZNKlBaDae8bKQ+SaRje1jSbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUi1hhNgsPujPMIDMBh6nZGF0FvGIwHwYDVR0j
BBgwFoAUTMKlESmlVHmfNa72aIngyjv0scAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFpZUm5kQWFOUDZrNjVWUm9vdWpjU3BkaVk5cWJpdHlFZjNhTVd0VDY1
Y1MvMC80Q0MyQTUxMTI5QTU1NDc5OUYzNUFFRjY2ODg5RTBDQTNCRjRCMUMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDQzJBNTExMjlBNTU0Nzk5
RjM1QUVGNjY4ODlFMENBM0JGNEIxQzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaWVJuZEFhTlA2azY1VlJvb3VqY1NwZGlZOXFiaXR5RWYzYU1XdFQ2NWNTLzAv
MzEzODM2MmUzMjM2MmUzODM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuhpYMA0GCSqGSIb3DQEBCwUAA4IBAQCajDG0hS2D
7ERX12pFQLOaJgezQZ3/Cb/M3vHEZd0EFLO7aBHeuKS2sN6T22trBHeTzaV6uouU
ZYHl+v/G77hq3xLT2PJgTPneSRrbSZbJObK2nl1YQoEOqJplarfwvRiiD7NZZxny
c5YCj1rMRHeQWfTWzpKq3tP5jfyKxWMibgxjNVTiko8TpKsabn9cSmFTQVWsM1Gp
3WTn9i68vgNEZTPFNBU4nwtf0mcjTE1bAw2lVvNRLiviEmFC/LFH9dvajlqxrPAl
bXro8WiCaomvQqLIMHZyLr9qSvf9LQP0WzIT6EPw9TriXoTEv/ewyq08HZiSD/FT
/ZfmWa+vyTfF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org