Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
File:                     3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa (raw, json)
Hash identifier:          sbAxNTOXhSX2zT50/lNVsv8R1+sWiTfUcMzersShHRU=
Subject key identifier:   50:BF:9E:A7:8A:85:63:49:01:49:B6:F1:27:D9:68:4F:ED:77:1D:86
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       1061351E734E05BA9133650F990BAD559ACA1223
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     264590
IP address blocks:        138.36.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:61:35:1e:73:4e:05:ba:91:33:65:0f:99:0b:ad:55:9a:ca:12:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=50BF9EA78A8563490149B6F127D9684FED771D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:e6:b1:f9:9b:3d:97:81:d2:86:f4:ee:8b:
                    1b:9f:62:48:30:7a:6c:25:d9:93:80:d5:90:f2:d3:
                    83:a0:95:af:30:e6:79:bb:25:d6:c2:76:21:56:19:
                    4d:69:7f:9b:9d:d5:5a:92:fb:03:17:1f:c5:2d:52:
                    1d:7d:c0:13:e8:c8:89:ef:3d:95:97:44:ac:da:71:
                    e8:b4:69:86:60:72:3d:32:5b:e4:f7:cd:9e:77:8a:
                    36:31:91:59:05:4e:ee:41:e0:02:e0:c0:9d:48:f0:
                    b0:c2:70:fc:4d:91:9d:8c:c2:4f:da:56:ac:91:31:
                    85:9c:d6:d5:88:19:8a:a7:e8:66:9f:21:42:4b:40:
                    e1:5b:0b:39:37:39:49:d1:8a:f0:09:81:e2:2e:d0:
                    73:4e:50:79:43:8a:a4:12:c7:c0:bb:25:d5:f9:ca:
                    8f:50:7b:a8:6b:57:e7:7a:70:58:68:ab:c2:ba:d2:
                    e2:dd:c6:6a:20:50:86:fe:35:80:8e:62:dc:ef:1e:
                    d6:6c:f2:e3:a1:55:03:7d:69:99:d9:c3:67:31:71:
                    5d:9c:bc:04:fa:b4:71:9d:0a:85:59:cd:2f:4b:7a:
                    85:89:3d:e3:c2:7a:f3:c5:5a:24:24:11:15:eb:5a:
                    c4:77:aa:23:f9:02:73:65:9f:95:54:93:52:e5:ae:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BF:9E:A7:8A:85:63:49:01:49:B6:F1:27:D9:68:4F:ED:77:1D:86
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231322e302f32332d3233203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:97:44:70:61:3f:4e:ff:f4:b2:25:45:99:7d:57:d5:1b:f3:
         1f:0f:4d:b4:c2:ef:9a:30:ed:0d:06:69:4e:d8:19:25:95:23:
         47:4c:9e:b1:ef:f5:6f:71:9c:8a:07:00:27:c3:07:ec:c3:7a:
         9e:cf:db:c5:ea:42:da:99:ad:63:cc:62:6b:8d:53:76:e9:95:
         b0:2f:46:ae:a7:fc:b8:94:e3:cb:e7:ee:d8:a2:97:36:ee:f0:
         71:76:ec:7b:b1:58:3f:1c:3a:4b:e7:94:31:36:24:c8:34:8d:
         9d:b5:b0:30:26:bc:98:f9:02:bb:ba:be:12:76:bd:e3:5d:89:
         0e:60:c4:12:4c:5e:65:81:53:de:91:10:54:6f:5d:63:4e:b8:
         71:0b:45:a5:4f:28:cd:84:0a:af:fc:07:d0:f1:18:b4:9d:dd:
         2d:f9:9a:b6:6e:c6:57:6d:88:6f:e2:17:fa:06:e9:80:d5:9c:
         f1:89:18:58:65:62:db:d7:2e:2e:cc:9a:80:a6:64:1e:f6:4c:
         da:a7:f4:74:75:f3:63:b9:7f:6f:e8:af:e7:3c:d6:30:78:19:
         11:4e:14:89:16:08:fc:49:1d:d1:95:1d:67:89:44:2f:5b:e5:
         e9:ab:20:1c:70:9d:7e:26:50:51:e2:5e:1f:51:1c:3b:03:e5:
         c8:5f:8b:b3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEGE1HnNOBbqRM2UPmQutVZrKEiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3Q0U1MUUxQUYwMDQ4MzI0OEU4MkM5NUZCREJFOUJC
OUE4NzVEOTAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMDMxMTAvBgNV
BAMTKDUwQkY5RUE3OEE4NTYzNDkwMTQ5QjZGMTI3RDk2ODRGRUQ3NzFEODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbSOax+Zs9l4HShvTuixufYkgw
emwl2ZOA1ZDy04Ogla8w5nm7JdbCdiFWGU1pf5ud1VqS+wMXH8UtUh19wBPoyInv
PZWXRKzacei0aYZgcj0yW+T3zZ53ijYxkVkFTu5B4ALgwJ1I8LDCcPxNkZ2Mwk/a
VqyRMYWc1tWIGYqn6GafIUJLQOFbCzk3OUnRivAJgeIu0HNOUHlDiqQSx8C7JdX5
yo9Qe6hrV+d6cFhoq8K60uLdxmogUIb+NYCOYtzvHtZs8uOhVQN9aZnZw2cxcV2c
vAT6tHGdCoVZzS9LeoWJPePCevPFWiQkERXrWsR3qiP5AnNln5VUk1LlrqZHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUL+ep4qFY0kBSbbxJ9loT+13HYYwHwYDVR0j
BBgwFoAUdHzlHhrwBIMkjoLJX72+m7moddkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSnFqZnhkV1kyRlJXc2kxYTNlUUJwbkc1eW1TRWp2Q1F0dkVZZDFv
cEYvMS83NDdDRTUxRTFBRjAwNDgzMjQ4RTgyQzk1RkJEQkU5QkI5QTg3NUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0N0NFNTFFMUFGMDA0ODMy
NDhFODJDOTVGQkRCRTlCQjlBODc1RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0pxamZ4ZFdZMkZSV3NpMWEzZVFCcG5HNXltU0VqdkNRdHZFWWQxb3BGLzEv
MzEzMzM4MmUzMzM2MmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKJNQwDQYJKoZIhvcNAQELBQADggEBACWXRHBh
P07/9LIlRZl9V9Ub8x8PTbTC75ow7Q0GaU7YGSWVI0dMnrHv9W9xnIoHACfDB+zD
ep7P28XqQtqZrWPMYmuNU3bplbAvRq6n/LiU48vn7tiilzbu8HF27HuxWD8cOkvn
lDE2JMg0jZ21sDAmvJj5Aru6vhJ2veNdiQ5gxBJMXmWBU96REFRvXWNOuHELRaVP
KM2ECq/8B9DxGLSd3S35mrZuxldtiG/iF/oG6YDVnPGJGFhlYtvXLi7MmoCmZB72
TNqn9HR182O5f2/or+c81jB4GRFOFIkWCPxJHdGVHWeJRC9b5emrIBxwnX4mUFHi
Xh9RHDsD5chfi7M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org