Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231322e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          KwluGpc8AiW6bi1hfJyks7cLwtwpxwXD4K33XB/CFAk=
Subject key identifier:   BF:FC:DE:E2:99:04:86:E6:51:95:F3:FF:DF:69:03:46:DA:DF:C7:42
Certificate issuer:       /CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
Certificate serial:       085077B48A327BBF9BAAC7C34E6C389FF1A12993
Authority key identifier: DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32342d3234203d3e20323634353930.roa
Signing time:             Tue 10 Oct 2023 20:00:00 +0000
ROA not before:           Tue 10 Oct 2023 19:55:00 +0000
ROA not after:            Tue 08 Oct 2024 20:00:00 +0000
asID:                     264590
IP address blocks:        138.36.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:50:77:b4:8a:32:7b:bf:9b:aa:c7:c3:4e:6c:38:9f:f1:a1:29:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50
        Validity
            Not Before: Oct 10 19:55:00 2023 GMT
            Not After : Oct  8 20:00:00 2024 GMT
        Subject: CN=BFFCDEE2990486E65195F3FFDF690346DADFC742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:fe:48:2c:5a:9c:76:34:28:4b:19:77:cf:
                    fb:bb:77:69:ff:4e:35:f7:b3:db:eb:7c:4e:38:d5:
                    59:db:82:0a:0c:dd:33:fb:97:6e:ac:f1:2b:a8:7e:
                    27:fc:38:fb:1a:ee:fc:32:4c:6e:18:73:84:5a:69:
                    17:96:98:b7:d6:0a:15:9a:73:26:d2:3b:b1:55:cf:
                    8d:99:33:fd:ae:cf:55:d7:70:44:4f:b2:3f:c7:1a:
                    17:50:27:94:d6:69:f6:4a:8e:d2:53:34:55:f7:ec:
                    7b:f7:78:32:b4:31:5a:64:74:84:d9:51:72:73:47:
                    93:01:9e:77:55:a8:26:0b:92:e2:7e:10:a3:07:cf:
                    2a:51:42:91:32:a0:25:59:b9:44:eb:17:c0:e7:e4:
                    51:93:60:39:82:76:47:ee:cb:05:56:d6:9e:92:70:
                    c1:52:26:14:8a:cd:ed:00:44:1f:4d:e5:a0:9e:a3:
                    fc:b2:1e:fe:e9:b6:33:32:da:27:25:42:6a:e1:c0:
                    3f:5f:e9:e9:ac:4c:72:87:8c:46:99:a1:89:df:b2:
                    dd:8e:8a:03:5f:d3:ef:e3:aa:5c:f1:a9:21:4f:95:
                    1f:b8:fc:b4:77:4d:ad:d3:ab:ed:fe:06:d0:70:46:
                    b1:48:9f:2a:63:0c:0c:69:62:5c:e6:b7:db:a8:d9:
                    ba:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FC:DE:E2:99:04:86:E6:51:95:F3:FF:DF:69:03:46:DA:DF:C7:42
            X509v3 Authority Key Identifier:
                keyid:DA:9D:8C:17:FD:EE:E9:2B:37:48:6A:9C:BD:AC:6E:B5:BA:7D:BE:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA9D8C17FDEEE92B37486A9CBDAC6EB5BA7DBE50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/0/3133382e33362e3231322e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:70:50:e3:9c:5d:b0:28:d8:fa:7c:af:bc:ad:c5:8a:5d:eb:
         cf:04:01:66:84:0f:49:8c:5e:2f:a4:95:2b:14:01:bb:c8:fc:
         b9:e3:10:55:b9:6a:87:b5:a8:85:98:7c:08:0a:de:d3:7a:e7:
         cc:87:65:49:c6:fa:5e:db:2e:45:bb:46:ed:da:ba:83:35:34:
         97:ae:e3:fc:15:47:a3:7c:31:67:8e:de:e9:2a:12:e8:b2:95:
         ac:6c:6a:89:f2:7f:40:6f:70:4c:74:ee:76:34:4f:4b:08:79:
         6d:4b:f9:a4:ee:0e:2b:51:99:80:c8:ff:48:25:0e:83:85:c5:
         68:f1:26:15:66:1c:0c:cb:af:46:43:98:a3:ea:46:25:2f:13:
         5f:ee:9d:25:2b:a1:82:91:57:9c:e8:2b:a0:26:fc:71:f6:9f:
         83:c1:88:82:d8:47:12:4f:92:51:5b:a4:6c:ad:35:2e:5c:3d:
         4c:25:33:d9:90:5e:51:b2:a2:72:d0:dc:7e:1d:6a:75:c4:1c:
         3d:b9:18:28:9a:47:16:23:35:2e:5e:39:0d:b6:a2:92:de:e8:
         01:b9:54:d4:1b:dc:b4:7e:8b:eb:93:70:fe:95:b4:ff:1b:c5:
         4f:b8:e5:e8:98:b5:be:5a:f7:67:c9:e4:65:fb:33:79:f9:30:
         05:58:09:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCFB3tIoye7+bqsfDTmw4n/GhKZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE5RDhDMTdGREVFRTkyQjM3NDg2QTlDQkRBQzZFQjVC
QTdEQkU1MDAeFw0yMzEwMTAxOTU1MDBaFw0yNDEwMDgyMDAwMDBaMDMxMTAvBgNV
BAMTKEJGRkNERUUyOTkwNDg2RTY1MTk1RjNGRkRGNjkwMzQ2REFERkM3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kP5ILFqcdjQoSxl3z/u7d2n/
TjX3s9vrfE441VnbggoM3TP7l26s8Suofif8OPsa7vwyTG4Yc4RaaReWmLfWChWa
cybSO7FVz42ZM/2uz1XXcERPsj/HGhdQJ5TWafZKjtJTNFX37Hv3eDK0MVpkdITZ
UXJzR5MBnndVqCYLkuJ+EKMHzypRQpEyoCVZuUTrF8Dn5FGTYDmCdkfuywVW1p6S
cMFSJhSKze0ARB9N5aCeo/yyHv7ptjMy2iclQmrhwD9f6emsTHKHjEaZoYnfst2O
igNf0+/jqlzxqSFPlR+4/LR3Ta3Tq+3+BtBwRrFInypjDAxpYlzmt9uo2bqBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv/ze4pkEhuZRlfP/32kDRtrfx0IwHwYDVR0j
BBgwFoAU2p2MF/3u6Ss3SGqcvaxutbp9vlAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSnFqZnhkV1kyRlJXc2kxYTNlUUJwbkc1eW1TRWp2Q1F0dkVZZDFv
cEYvMC9EQTlEOEMxN0ZERUVFOTJCMzc0ODZBOUNCREFDNkVCNUJBN0RCRTUwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RBOUQ4QzE3RkRFRUU5MkIz
NzQ4NkE5Q0JEQUM2RUI1QkE3REJFNTAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0pxamZ4ZFdZMkZSV3NpMWEzZVFCcG5HNXltU0VqdkNRdHZFWWQxb3BGLzAv
MzEzMzM4MmUzMzM2MmUzMjMxMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJNQwDQYJKoZIhvcNAQELBQADggEBAJRwUOOc
XbAo2Pp8r7ytxYpd688EAWaED0mMXi+klSsUAbvI/LnjEFW5aoe1qIWYfAgK3tN6
58yHZUnG+l7bLkW7Ru3auoM1NJeu4/wVR6N8MWeO3ukqEuiylaxsaonyf0BvcEx0
7nY0T0sIeW1L+aTuDitRmYDI/0glDoOFxWjxJhVmHAzLr0ZDmKPqRiUvE1/unSUr
oYKRV5zoK6Am/HH2n4PBiILYRxJPklFbpGytNS5cPUwlM9mQXlGyonLQ3H4danXE
HD25GCiaRxYjNS5eOQ22opLe6AG5VNQb3LR+i+uTcP6VtP8bxU+45eiYtb5a92fJ
5GX7M3n5MAVYCV8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org