Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32342d3234203d3e20323634353830.roa
File:                     3133382e33362e3133342e302f32342d3234203d3e20323634353830.roa (raw, json)
Hash identifier:          R+MNjJqIOiinPWN9UPb8WFkUqqOLuNqgb4NMcQznkgo=
Subject key identifier:   0F:CB:63:7E:A7:DD:EB:D7:FB:E9:03:9B:F5:39:82:5B:E0:6E:B1:37
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       2BD296F824D4733EECD0AC90614FD2E35ACD1512
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32342d3234203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:37 +0000
ROA not before:           Tue 05 Dec 2023 17:32:37 +0000
ROA not after:            Tue 03 Dec 2024 17:37:37 +0000
asID:                     264580
IP address blocks:        138.36.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d2:96:f8:24:d4:73:3e:ec:d0:ac:90:61:4f:d2:e3:5a:cd:15:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:37 2023 GMT
            Not After : Dec  3 17:37:37 2024 GMT
        Subject: CN=0FCB637EA7DDEBD7FBE9039BF539825BE06EB137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9a:5e:97:a5:39:72:15:cc:39:fd:b6:96:b9:
                    1d:7c:4c:82:1b:57:5a:54:03:29:cb:4d:04:ca:a8:
                    00:eb:b8:56:e7:97:3c:81:ac:c7:25:cc:53:7e:53:
                    46:7b:94:c4:99:3b:83:13:f4:95:e2:e9:bb:5b:fb:
                    4b:f6:3e:c7:38:41:3e:b4:b4:a7:bc:4d:c2:ec:eb:
                    8b:ba:7c:f8:3e:69:ec:84:3b:84:51:ad:d1:4d:14:
                    24:85:82:ad:e8:1f:33:a7:a6:44:9a:9b:d2:40:81:
                    a7:71:73:e1:41:9e:d6:b5:bf:dc:8d:e8:6c:68:8d:
                    ce:a2:68:21:d0:d6:e1:ad:6d:9d:7f:54:0d:95:eb:
                    3a:7f:f2:15:e4:9f:65:24:8c:be:6a:2d:d0:2f:b8:
                    82:24:d5:7c:5a:06:ce:76:fa:01:4b:d5:eb:65:17:
                    69:55:dc:bc:86:01:bf:e7:56:da:74:73:07:60:5e:
                    09:a6:0e:d7:d4:3d:f5:28:84:be:50:23:51:3d:ae:
                    4a:fb:01:ac:92:4c:65:81:8d:df:5f:e8:a8:d5:cd:
                    31:32:44:10:4e:1d:00:af:75:3a:a6:b1:1e:e5:6c:
                    f3:56:10:85:f3:b1:ec:f4:8b:3c:d3:32:55:34:8c:
                    06:61:8f:ce:38:f7:42:4d:de:69:c1:b4:63:ac:16:
                    8c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CB:63:7E:A7:DD:EB:D7:FB:E9:03:9B:F5:39:82:5B:E0:6E:B1:37
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133342e302f32342d3234203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:77:96:7a:e7:fc:36:40:d2:2d:f7:9b:a0:3a:60:fa:de:d5:
         c7:65:5c:14:1a:af:34:a0:f1:c0:59:f1:2c:cb:14:bb:9b:78:
         ba:5e:17:7f:d3:d9:23:f9:95:27:16:c6:bc:29:27:8c:d8:c9:
         27:69:3b:fa:bc:27:ab:96:8c:ab:f1:10:ec:06:91:b4:eb:45:
         80:be:06:cf:fa:0b:68:01:bb:85:3f:c8:3d:f8:85:08:75:bf:
         e5:e9:9e:74:38:d1:b2:a4:3a:98:7d:6e:1b:a6:f3:e4:be:7c:
         f6:e9:97:3e:56:f2:e0:b5:2f:ff:38:82:b3:fc:03:e2:c0:e4:
         e3:15:13:15:fa:db:16:ce:31:36:74:49:9f:0b:ae:68:d5:54:
         9a:4b:21:d4:78:73:29:fc:c7:8c:29:57:b8:b8:2a:be:21:55:
         ad:7a:4e:92:e6:62:ab:ba:a5:72:32:5f:5e:5c:29:35:8d:08:
         fd:95:13:bb:a2:c8:22:5c:84:1a:7b:40:ed:7d:62:6b:b0:13:
         89:2c:cd:92:d3:ec:65:78:dd:84:a2:2b:21:ee:f1:bd:05:a7:
         24:3c:54:c7:71:cd:6f:48:28:01:43:5c:e6:f4:d0:43:bd:f4:
         a0:84:07:fc:02:8a:b5:db:1f:0b:27:6c:67:ac:4b:72:7b:7a:
         05:3d:75:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUK9KW+CTUcz7s0KyQYU/S41rNFRIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwNjU4QzRDOEM3OTkxM0Y4NTY0OUZGRDNCQkY1RDlD
QUJDMjNCNTAeFw0yMzEyMDUxNzMyMzdaFw0yNDEyMDMxNzM3MzdaMDMxMTAvBgNV
BAMTKDBGQ0I2MzdFQTdEREVCRDdGQkU5MDM5QkY1Mzk4MjVCRTA2RUIxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpml6XpTlyFcw5/baWuR18TIIb
V1pUAynLTQTKqADruFbnlzyBrMclzFN+U0Z7lMSZO4MT9JXi6btb+0v2Psc4QT60
tKe8TcLs64u6fPg+aeyEO4RRrdFNFCSFgq3oHzOnpkSam9JAgadxc+FBnta1v9yN
6Gxojc6iaCHQ1uGtbZ1/VA2V6zp/8hXkn2UkjL5qLdAvuIIk1XxaBs52+gFL1etl
F2lV3LyGAb/nVtp0cwdgXgmmDtfUPfUohL5QI1E9rkr7AaySTGWBjd9f6KjVzTEy
RBBOHQCvdTqmsR7lbPNWEIXzsez0izzTMlU0jAZhj84490JN3mnBtGOsFozFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD8tjfqfd69f76QOb9TmCW+BusTcwHwYDVR0j
BBgwFoAULQZYxMjHmRP4Vkn/07v12cq8I7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZhc05Nc0JjOGphZ1dhN2U5WHdrVzNkbm4zUDFEelRidERGWDhxdGQ5
M3EvMC8yRDA2NThDNEM4Qzc5OTEzRjg1NjQ5RkZEM0JCRjVEOUNBQkMyM0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMDY1OEM0QzhDNzk5MTNG
ODU2NDlGRkQzQkJGNUQ5Q0FCQzIzQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmYXNOTXNCYzhqYWdXYTdlOVh3a1czZG5uM1AxRHpUYnRERlg4cXRkOTNxLzAv
MzEzMzM4MmUzMzM2MmUzMTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJIYwDQYJKoZIhvcNAQELBQADggEBAJJ3lnrn
/DZA0i33m6A6YPre1cdlXBQarzSg8cBZ8SzLFLubeLpeF3/T2SP5lScWxrwpJ4zY
ySdpO/q8J6uWjKvxEOwGkbTrRYC+Bs/6C2gBu4U/yD34hQh1v+XpnnQ40bKkOph9
bhum8+S+fPbplz5W8uC1L/84grP8A+LA5OMVExX62xbOMTZ0SZ8LrmjVVJpLIdR4
cyn8x4wpV7i4Kr4hVa16TpLmYqu6pXIyX15cKTWNCP2VE7uiyCJchBp7QO19Ymuw
E4kszZLT7GV43YSiKyHu8b0FpyQ8VMdxzW9IKAFDXOb00EO99KCEB/wCirXbHwsn
bGesS3J7egU9dR4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org