Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133352e302f32342d3234203d3e20323634353830.roa
File:                     3133382e33362e3133352e302f32342d3234203d3e20323634353830.roa (raw, json)
Hash identifier:          dPYgsioc5JYMIfQYtTS3LiQUwyJoQ9VxWvOp1hBVICs=
Subject key identifier:   18:38:14:A8:0B:C9:0E:4B:9C:58:66:85:BA:97:6E:3F:45:7C:C7:85
Certificate issuer:       /CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
Certificate serial:       4DD7E5A9AA3A12F7188AA51A03E8A1AECC1BF31A
Authority key identifier: 2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133352e302f32342d3234203d3e20323634353830.roa
Signing time:             Tue 05 Dec 2023 17:37:39 +0000
ROA not before:           Tue 05 Dec 2023 17:32:39 +0000
ROA not after:            Tue 03 Dec 2024 17:37:39 +0000
asID:                     264580
IP address blocks:        138.36.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d7:e5:a9:aa:3a:12:f7:18:8a:a5:1a:03:e8:a1:ae:cc:1b:f3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5
        Validity
            Not Before: Dec  5 17:32:39 2023 GMT
            Not After : Dec  3 17:37:39 2024 GMT
        Subject: CN=183814A80BC90E4B9C586685BA976E3F457CC785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:95:68:3e:d2:de:4b:4c:36:91:2e:7e:95:
                    e9:39:98:a5:9b:4b:59:f6:bf:33:d7:25:43:1b:ab:
                    da:84:da:2f:48:71:78:66:df:d6:d1:29:99:a4:6c:
                    e1:80:5a:22:87:84:c2:44:03:b0:8b:6e:0b:ed:d8:
                    df:cf:34:f4:f5:9a:e4:a7:d3:d5:d2:1f:7b:72:9a:
                    c3:67:a4:db:22:18:34:09:0c:13:d5:13:bc:31:bb:
                    08:fa:6b:d2:56:e0:72:e0:a5:26:24:45:cc:da:49:
                    d5:a4:f4:0a:73:db:a1:be:9c:40:94:2b:d1:23:29:
                    69:dd:58:38:a4:fd:66:84:6c:8b:4d:69:11:10:53:
                    d6:55:42:df:1f:a1:67:25:0e:e1:1a:9c:19:f1:50:
                    4e:04:af:53:83:36:5d:91:04:98:df:44:31:b4:36:
                    d4:91:f3:6e:d3:d9:05:5a:4b:e3:74:9f:19:16:d1:
                    fc:79:da:c1:2a:52:d7:90:fa:69:b4:13:12:f6:10:
                    bf:17:85:2a:18:eb:f3:09:87:9a:2c:2c:d8:f4:9b:
                    bd:5e:8d:70:a9:f5:50:ac:62:00:67:95:b9:38:52:
                    51:23:cf:e5:ac:e2:51:d8:75:4c:51:e8:03:34:d9:
                    ae:5f:89:27:3f:59:a5:ad:fe:21:44:6d:d9:e1:2a:
                    ce:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:38:14:A8:0B:C9:0E:4B:9C:58:66:85:BA:97:6E:3F:45:7C:C7:85
            X509v3 Authority Key Identifier:
                keyid:2D:06:58:C4:C8:C7:99:13:F8:56:49:FF:D3:BB:F5:D9:CA:BC:23:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D0658C4C8C79913F85649FFD3BBF5D9CABC23B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fasNMsBc8jagWa7e9XwkW3dnn3P1DzTbtDFX8qtd93q/0/3133382e33362e3133352e302f32342d3234203d3e20323634353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:3d:4d:9c:63:19:2c:33:9e:b7:b2:4e:6e:8c:df:b8:b5:02:
         9d:aa:76:46:9f:57:8e:54:16:bf:c6:14:6a:c5:a0:9d:6c:21:
         0f:1e:4e:30:df:2b:10:e8:9a:80:e3:73:5c:d9:49:a3:00:ab:
         83:8a:ca:71:78:3f:0e:81:3a:5a:83:83:86:90:7e:65:33:99:
         fd:9a:98:9a:8c:2b:94:0b:73:47:f1:20:d6:05:98:0e:28:6d:
         dd:06:c4:99:bc:53:9f:d2:54:90:9f:53:72:71:fd:6b:1c:5a:
         e5:dc:ba:cc:59:fd:a0:d5:61:62:9c:0e:4f:43:4a:ff:41:bf:
         c5:c9:e0:41:c5:26:8d:f2:13:8c:0c:c7:dd:d0:71:18:83:85:
         c9:50:f8:52:0b:f8:d3:10:6e:a1:16:8c:c4:e2:ce:c7:20:88:
         72:ff:e6:46:8c:5b:fd:df:1c:20:e7:21:75:4a:91:fb:35:68:
         c6:f9:44:01:a3:13:c9:d7:67:a1:7a:83:11:86:27:d8:90:20:
         0a:ef:52:2b:89:e3:c0:33:92:79:97:e9:03:45:0f:38:d4:4d:
         9d:e0:be:a9:a0:29:a4:18:89:3b:43:2e:d8:ca:18:5c:04:63:
         f1:d8:a9:e4:b8:70:f5:69:18:2e:81:61:22:30:a9:3a:46:3f:
         53:25:b3:a2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTdflqao6EvcYiqUaA+ihrswb8xowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwNjU4QzRDOEM3OTkxM0Y4NTY0OUZGRDNCQkY1RDlD
QUJDMjNCNTAeFw0yMzEyMDUxNzMyMzlaFw0yNDEyMDMxNzM3MzlaMDMxMTAvBgNV
BAMTKDE4MzgxNEE4MEJDOTBFNEI5QzU4NjY4NUJBOTc2RTNGNDU3Q0M3ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyipVoPtLeS0w2kS5+lek5mKWb
S1n2vzPXJUMbq9qE2i9IcXhm39bRKZmkbOGAWiKHhMJEA7CLbgvt2N/PNPT1muSn
09XSH3tymsNnpNsiGDQJDBPVE7wxuwj6a9JW4HLgpSYkRczaSdWk9Apz26G+nECU
K9EjKWndWDik/WaEbItNaREQU9ZVQt8foWclDuEanBnxUE4Er1ODNl2RBJjfRDG0
NtSR827T2QVaS+N0nxkW0fx52sEqUteQ+mm0ExL2EL8XhSoY6/MJh5osLNj0m71e
jXCp9VCsYgBnlbk4UlEjz+Ws4lHYdUxR6AM02a5fiSc/WaWt/iFEbdnhKs4fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGDgUqAvJDkucWGaFupduP0V8x4UwHwYDVR0j
BBgwFoAULQZYxMjHmRP4Vkn/07v12cq8I7UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWZhc05Nc0JjOGphZ1dhN2U5WHdrVzNkbm4zUDFEelRidERGWDhxdGQ5
M3EvMC8yRDA2NThDNEM4Qzc5OTEzRjg1NjQ5RkZEM0JCRjVEOUNBQkMyM0I1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEMDY1OEM0QzhDNzk5MTNG
ODU2NDlGRkQzQkJGNUQ5Q0FCQzIzQjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlmYXNOTXNCYzhqYWdXYTdlOVh3a1czZG5uM1AxRHpUYnRERlg4cXRkOTNxLzAv
MzEzMzM4MmUzMzM2MmUzMTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJIcwDQYJKoZIhvcNAQELBQADggEBAIU9TZxj
GSwznreyTm6M37i1Ap2qdkafV45UFr/GFGrFoJ1sIQ8eTjDfKxDomoDjc1zZSaMA
q4OKynF4Pw6BOlqDg4aQfmUzmf2amJqMK5QLc0fxINYFmA4obd0GxJm8U5/SVJCf
U3Jx/WscWuXcusxZ/aDVYWKcDk9DSv9Bv8XJ4EHFJo3yE4wMx93QcRiDhclQ+FIL
+NMQbqEWjMTizscgiHL/5kaMW/3fHCDnIXVKkfs1aMb5RAGjE8nXZ6F6gxGGJ9iQ
IArvUiuJ48AzknmX6QNFDzjUTZ3gvqmgKaQYiTtDLtjKGFwEY/HYqeS4cPVpGC6B
YSIwqTpGP1Mls6I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org