Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa
File:                     3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa (raw, json)
Hash identifier:          5R9vLDTZ6DWIEKEBoYeIuAtS0G/0WQ90Lnq333vMY5s=
Subject key identifier:   C2:26:9D:F6:B0:94:87:17:08:7D:54:53:36:77:1F:C3:22:80:0E:67
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       2A09CFBF6F8A3FB36E8138E4505AA8AF5ACDC141
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:10 +0000
ROA not before:           Wed 03 Apr 2024 18:26:10 +0000
ROA not after:            Wed 02 Apr 2025 18:31:10 +0000
asID:                     264590
IP address blocks:        138.36.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:09:cf:bf:6f:8a:3f:b3:6e:81:38:e4:50:5a:a8:af:5a:cd:c1:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:10 2024 GMT
            Not After : Apr  2 18:31:10 2025 GMT
        Subject: CN=C2269DF6B0948717087D545336771FC322800E67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:73:40:b0:dd:89:f2:b2:2c:4a:69:4b:eb:
                    f4:ea:b2:ce:dd:90:60:32:b5:38:4a:a8:69:33:c4:
                    54:02:82:b6:5d:4d:2a:28:fb:3d:4f:1e:16:5d:c2:
                    c6:da:d6:b3:86:48:73:ea:3f:d4:2c:80:04:bc:cb:
                    5c:20:87:44:7e:52:bd:dc:89:0c:32:8e:88:7b:66:
                    bd:49:6d:58:47:27:90:15:2e:2d:54:d9:13:83:0b:
                    73:01:cc:d3:5b:fe:1b:5f:0f:7e:24:79:83:16:91:
                    e7:6d:61:bd:5b:ee:8d:4d:6f:b0:2e:23:85:b3:9b:
                    32:25:88:f5:0c:2f:d8:78:ea:2d:b9:b3:a2:2b:b6:
                    c5:95:f5:52:fb:2a:b1:7c:8f:3d:65:b7:1c:a2:cd:
                    59:f7:b1:1a:d5:49:12:d9:c1:e6:d2:8a:c3:15:f5:
                    8c:50:07:27:02:20:2c:f6:e4:f2:df:f3:50:5c:f9:
                    3c:82:f3:2f:ec:62:92:76:e8:3b:1a:e5:49:e6:5f:
                    d5:ce:38:6b:c6:00:70:90:72:0c:55:e4:30:ad:1e:
                    69:83:05:b1:37:9b:7a:df:5d:8c:42:19:3f:98:18:
                    a6:cc:a9:09:43:80:e5:fd:cc:77:23:69:94:6c:40:
                    f2:0c:99:24:35:a1:14:b9:68:e9:05:e0:0d:59:24:
                    91:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:26:9D:F6:B0:94:87:17:08:7D:54:53:36:77:1F:C3:22:80:0E:67
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32332d3233203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:86:e8:7e:98:34:06:a2:ac:7c:81:72:f4:f3:81:1d:a4:5e:
         b1:9b:75:ce:67:5c:cb:ad:78:c2:de:93:b7:85:b8:50:6c:38:
         dc:44:61:a0:03:fa:13:e3:3f:92:b8:9c:19:ba:96:1c:ba:48:
         62:fe:58:85:95:92:85:e0:c9:1b:63:6c:e2:08:63:d0:b0:47:
         c5:15:0d:0e:b2:b8:2c:d3:f2:a6:f6:a7:8e:c0:fc:9e:9a:f5:
         34:0e:c2:56:4f:95:78:72:80:b7:78:09:7d:db:eb:bb:f1:62:
         55:f0:a3:29:51:0a:47:c2:90:50:d8:e2:67:37:d7:3a:c2:1b:
         d4:a1:dc:47:97:21:df:33:53:e0:50:f2:a9:e2:a3:63:49:10:
         d2:1b:12:b9:0b:38:ef:b7:00:93:54:d3:a1:c0:7f:75:85:67:
         e3:d6:dc:f3:5a:3a:1a:e5:e3:87:57:3b:96:8e:2f:0a:39:bb:
         56:7e:7f:63:04:47:2e:14:ad:5d:f0:47:4c:dd:c1:3d:9c:85:
         d3:43:85:e0:b9:2f:0d:1b:05:eb:d1:16:91:bc:f8:08:22:ac:
         7f:46:93:36:0e:db:bc:33:81:e9:b5:ec:04:19:60:c7:6e:b8:
         9b:b1:04:44:32:9a:71:b1:3a:ad:a1:12:e4:09:fd:e4:63:46:
         8c:e0:d4:18
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKgnPv2+KP7NugTjkUFqor1rNwUEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3Q0U1MUUxQUYwMDQ4MzI0OEU4MkM5NUZCREJFOUJC
OUE4NzVEOTAeFw0yNDA0MDMxODI2MTBaFw0yNTA0MDIxODMxMTBaMDMxMTAvBgNV
BAMTKEMyMjY5REY2QjA5NDg3MTcwODdENTQ1MzM2NzcxRkMzMjI4MDBFNjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoN3NAsN2J8rIsSmlL6/Tqss7d
kGAytThKqGkzxFQCgrZdTSoo+z1PHhZdwsba1rOGSHPqP9QsgAS8y1wgh0R+Ur3c
iQwyjoh7Zr1JbVhHJ5AVLi1U2RODC3MBzNNb/htfD34keYMWkedtYb1b7o1Nb7Au
I4WzmzIliPUML9h46i25s6IrtsWV9VL7KrF8jz1ltxyizVn3sRrVSRLZwebSisMV
9YxQBycCICz25PLf81Bc+TyC8y/sYpJ26Dsa5UnmX9XOOGvGAHCQcgxV5DCtHmmD
BbE3m3rfXYxCGT+YGKbMqQlDgOX9zHcjaZRsQPIMmSQ1oRS5aOkF4A1ZJJGZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwiad9rCUhxcIfVRTNncfwyKADmcwHwYDVR0j
BBgwFoAUdHzlHhrwBIMkjoLJX72+m7moddkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSnFqZnhkV1kyRlJXc2kxYTNlUUJwbkc1eW1TRWp2Q1F0dkVZZDFv
cEYvMS83NDdDRTUxRTFBRjAwNDgzMjQ4RTgyQzk1RkJEQkU5QkI5QTg3NUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0N0NFNTFFMUFGMDA0ODMy
NDhFODJDOTVGQkRCRTlCQjlBODc1RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0pxamZ4ZFdZMkZSV3NpMWEzZVFCcG5HNXltU0VqdkNRdHZFWWQxb3BGLzEv
MzEzMzM4MmUzMzM2MmUzMjMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKJNYwDQYJKoZIhvcNAQELBQADggEBAL2G6H6Y
NAairHyBcvTzgR2kXrGbdc5nXMuteMLek7eFuFBsONxEYaAD+hPjP5K4nBm6lhy6
SGL+WIWVkoXgyRtjbOIIY9CwR8UVDQ6yuCzT8qb2p47A/J6a9TQOwlZPlXhygLd4
CX3b67vxYlXwoylRCkfCkFDY4mc31zrCG9Sh3EeXId8zU+BQ8qnio2NJENIbErkL
OO+3AJNU06HAf3WFZ+PW3PNaOhrl44dXO5aOLwo5u1Z+f2MERy4UrV3wR0zdwT2c
hdNDheC5Lw0bBevRFpG8+AgirH9GkzYO27wzgem17AQZYMduuJuxBEQymnGxOq2h
EuQJ/eRjRozg1Bg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org