Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa
File:                     3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa (raw, json)
Hash identifier:          oM+6X97AXhzdOTm0OnR5y6XYGqsgOT96lN78OUrohr0=
Subject key identifier:   68:1A:72:8D:BA:69:B8:73:25:5E:E0:2F:BF:A8:2C:25:4B:5A:80:62
Certificate issuer:       /CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
Certificate serial:       606CD4177F26AED0790011AE7C3024930C3D7466
Authority key identifier: 74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     264590
IP address blocks:        138.36.214.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6c:d4:17:7f:26:ae:d0:79:00:11:ae:7c:30:24:93:0c:3d:74:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747CE51E1AF00483248E82C95FBDBE9BB9A875D9
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=681A728DBA69B873255EE02FBFA82C254B5A8062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:9a:cc:8e:4f:76:49:e6:23:04:a6:29:fb:
                    ed:15:8a:b8:d8:c5:97:3c:c2:e1:4f:40:60:57:40:
                    e5:1e:a7:99:2c:7c:29:f6:fc:59:6e:f0:9e:3b:9c:
                    75:ca:a7:dc:48:34:de:57:55:e1:e3:90:94:e0:32:
                    ee:7f:79:22:2d:21:f0:9f:7a:44:01:a8:3d:6d:23:
                    92:a1:cc:7c:f8:b8:fc:d6:41:0c:66:3f:bc:77:7e:
                    c4:29:e9:90:77:92:ce:4d:76:a2:84:99:45:7c:4f:
                    38:5b:66:dc:8d:5d:f2:5d:ce:f3:e1:12:a0:af:c4:
                    00:39:20:80:7e:18:25:2c:ab:ea:5e:91:9e:35:cf:
                    cb:80:60:6d:08:27:c7:7c:a5:28:e1:54:c1:eb:26:
                    6e:d6:53:34:74:69:81:e9:ef:ff:d2:ea:0c:b8:b2:
                    f9:46:d2:3b:70:6d:ae:bf:55:d1:3a:e1:d7:c5:58:
                    7c:05:6c:fa:89:8e:5d:a2:1f:cb:72:60:a3:a6:a9:
                    3e:09:83:4e:9e:53:46:58:ab:64:4a:25:e2:61:14:
                    3b:4b:a7:12:f6:0f:a0:7b:29:c5:55:ef:81:21:69:
                    ac:0f:8f:da:9f:6b:09:3b:89:29:9b:7d:dc:a6:17:
                    4b:e1:25:7b:19:2a:3e:bd:b9:c7:9d:ab:7f:82:45:
                    b8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1A:72:8D:BA:69:B8:73:25:5E:E0:2F:BF:A8:2C:25:4B:5A:80:62
            X509v3 Authority Key Identifier:
                keyid:74:7C:E5:1E:1A:F0:04:83:24:8E:82:C9:5F:BD:BE:9B:B9:A8:75:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/747CE51E1AF00483248E82C95FBDBE9BB9A875D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSJqjfxdWY2FRWsi1a3eQBpnG5ymSEjvCQtvEYd1opF/1/3133382e33362e3231342e302f32342d3234203d3e20323634353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:80:4e:a5:ff:8a:ee:44:e2:76:f8:d1:58:f4:f9:28:9d:ba:
         61:3e:f3:f6:cb:9a:25:b7:5e:54:3a:fe:9e:1b:4a:a6:da:ee:
         52:24:14:4e:04:47:ba:53:3c:92:72:6b:21:1d:dc:06:76:dd:
         60:64:78:1d:2f:7f:37:13:41:69:a8:a7:5d:0e:17:6b:1f:67:
         95:22:bd:6c:03:e4:f3:01:50:87:17:e4:15:c8:53:20:40:d1:
         7f:15:1b:06:68:04:2b:7f:7c:26:b2:1c:0a:4f:0b:78:ab:ae:
         3f:e4:c2:5f:8f:b7:5c:de:34:a4:4e:58:46:5e:2e:77:b7:a4:
         f8:21:50:57:ec:03:73:d1:f3:e4:d4:5c:bf:0b:e8:f5:db:d2:
         23:8f:32:3d:6f:85:23:b7:5f:bd:89:c7:dc:e2:2e:b0:03:e9:
         8e:ab:73:41:95:20:7f:41:59:79:b8:bf:d8:d8:d8:99:a7:fc:
         42:e9:e9:96:73:86:d9:bc:97:eb:1a:55:4d:35:d8:79:c7:c3:
         fa:1e:34:95:a7:6c:ef:f0:7d:f0:be:4d:db:a9:2c:5a:e8:f0:
         cd:c2:79:14:f0:0a:76:88:bb:41:b7:08:2a:64:9c:44:d2:6b:
         f0:5e:b5:19:aa:b8:1a:ff:12:38:94:aa:bd:9a:f9:fa:5e:be:
         c9:25:92:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYGzUF38mrtB5ABGufDAkkww9dGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQ3Q0U1MUUxQUYwMDQ4MzI0OEU4MkM5NUZCREJFOUJC
OUE4NzVEOTAeFw0yNDA0MDMxODI2MTFaFw0yNTA0MDIxODMxMTFaMDMxMTAvBgNV
BAMTKDY4MUE3MjhEQkE2OUI4NzMyNTVFRTAyRkJGQTgyQzI1NEI1QTgwNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOZrMjk92SeYjBKYp++0VirjY
xZc8wuFPQGBXQOUep5ksfCn2/Flu8J47nHXKp9xINN5XVeHjkJTgMu5/eSItIfCf
ekQBqD1tI5KhzHz4uPzWQQxmP7x3fsQp6ZB3ks5NdqKEmUV8TzhbZtyNXfJdzvPh
EqCvxAA5IIB+GCUsq+pekZ41z8uAYG0IJ8d8pSjhVMHrJm7WUzR0aYHp7//S6gy4
svlG0jtwba6/VdE64dfFWHwFbPqJjl2iH8tyYKOmqT4Jg06eU0ZYq2RKJeJhFDtL
pxL2D6B7KcVV74EhaawPj9qfawk7iSmbfdymF0vhJXsZKj69ucedq3+CRbiFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaBpyjbppuHMlXuAvv6gsJUtagGIwHwYDVR0j
BBgwFoAUdHzlHhrwBIMkjoLJX72+m7moddkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGtTSnFqZnhkV1kyRlJXc2kxYTNlUUJwbkc1eW1TRWp2Q1F0dkVZZDFv
cEYvMS83NDdDRTUxRTFBRjAwNDgzMjQ4RTgyQzk1RkJEQkU5QkI5QTg3NUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc0N0NFNTFFMUFGMDA0ODMy
NDhFODJDOTVGQkRCRTlCQjlBODc1RDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhrU0pxamZ4ZFdZMkZSV3NpMWEzZVFCcG5HNXltU0VqdkNRdHZFWWQxb3BGLzEv
MzEzMzM4MmUzMzM2MmUzMjMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJNYwDQYJKoZIhvcNAQELBQADggEBAEGATqX/
iu5E4nb40Vj0+SidumE+8/bLmiW3XlQ6/p4bSqba7lIkFE4ER7pTPJJyayEd3AZ2
3WBkeB0vfzcTQWmop10OF2sfZ5UivWwD5PMBUIcX5BXIUyBA0X8VGwZoBCt/fCay
HApPC3irrj/kwl+Pt1zeNKROWEZeLne3pPghUFfsA3PR8+TUXL8L6PXb0iOPMj1v
hSO3X72Jx9ziLrAD6Y6rc0GVIH9BWXm4v9jY2Jmn/ELp6ZZzhtm8l+saVU012HnH
w/oeNJWnbO/wffC+TdupLFro8M3CeRTwCnaIu0G3CCpknETSa/BetRmquBr/EjiU
qr2a+fpevsklko4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org