Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
File:                     3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa (raw, json)
Hash identifier:          Qp6qrL3ybozY+gGGla5uvopHP+vHbwzEYUrFiQbBwbE=
Subject key identifier:   D1:FB:24:06:23:0C:06:51:78:79:54:92:F0:14:88:77:41:99:5B:42
Certificate issuer:       /CN=188606675901F040B07DF306712C0B8EAFD6ACFE
Certificate serial:       53F1A67D7EF5C3F042575156BD1497EA9A4247F8
Authority key identifier: 18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa
Signing time:             Fri 05 Apr 2024 03:19:15 +0000
ROA not before:           Fri 05 Apr 2024 03:14:15 +0000
ROA not after:            Fri 04 Apr 2025 03:19:15 +0000
asID:                     263995
IP address blocks:        138.255.229.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f1:a6:7d:7e:f5:c3:f0:42:57:51:56:bd:14:97:ea:9a:42:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188606675901F040B07DF306712C0B8EAFD6ACFE
        Validity
            Not Before: Apr  5 03:14:15 2024 GMT
            Not After : Apr  4 03:19:15 2025 GMT
        Subject: CN=D1FB2406230C065178795492F014887741995B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:cb:7d:79:3f:2a:0a:68:44:23:7b:0d:76:
                    af:61:88:23:c1:5d:d3:3e:8a:a3:41:0c:9f:0e:d6:
                    be:a4:14:cb:54:a3:94:11:17:c5:8e:39:fa:9d:f5:
                    b2:0c:05:f4:42:74:5b:a8:c0:84:0e:94:cf:01:7a:
                    55:a2:fa:de:73:a7:92:24:8e:48:34:8c:27:b1:01:
                    0f:a5:dd:ad:8d:88:8d:5e:ac:54:9b:9c:2c:f1:c3:
                    9d:d4:d7:29:0f:cd:c7:33:cb:27:d3:ae:79:60:78:
                    ae:dc:26:ff:23:60:e0:0a:8f:2f:12:02:ef:59:a3:
                    1a:2e:ad:3d:b1:d1:88:85:36:ad:fd:38:c0:b0:e4:
                    dd:50:38:44:33:86:3d:6c:be:58:bd:d5:49:17:33:
                    30:36:76:ca:eb:01:02:c4:89:0e:7e:1e:0b:93:dd:
                    30:40:01:4e:98:f5:0b:e0:c7:e8:03:42:31:12:79:
                    f2:69:c2:15:ee:c4:46:73:c6:b1:cd:fe:7c:18:ee:
                    c6:d1:dc:20:79:cb:c4:9f:eb:bd:2a:a2:26:08:6d:
                    9c:dd:51:b0:23:5b:c1:4c:cb:91:9d:13:f8:35:90:
                    ad:c7:fa:cc:88:bc:7c:cc:ec:a5:57:f8:c9:19:8f:
                    3d:cc:6b:f4:fa:ef:9b:2e:0c:0d:54:15:12:c0:71:
                    e7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FB:24:06:23:0C:06:51:78:79:54:92:F0:14:88:77:41:99:5B:42
            X509v3 Authority Key Identifier:
                keyid:18:86:06:67:59:01:F0:40:B0:7D:F3:06:71:2C:0B:8E:AF:D6:AC:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/188606675901F040B07DF306712C0B8EAFD6ACFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/188606675901F040B07DF306712C0B8EAFD6ACFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/1/3133382e3235352e3232392e302f32342d3234203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:06:70:6f:9c:8b:82:fe:4c:6a:a5:2b:e8:39:8b:d4:e8:d1:
         24:a6:b9:82:84:94:3c:d2:c5:ab:79:8c:a4:6d:98:c9:91:30:
         74:d9:66:a8:82:6b:f1:6c:b7:8e:59:2e:3a:3f:ac:ad:90:97:
         68:fe:78:45:aa:19:65:05:43:06:71:03:09:92:68:31:7d:15:
         e2:a6:45:40:f7:a6:f4:89:48:32:ff:a4:13:75:90:83:91:37:
         37:63:5f:ee:1a:ab:d7:8c:77:b6:6a:28:a7:66:3b:c9:47:a2:
         a5:d7:ba:1f:64:1c:05:3f:4e:72:61:d7:34:ed:d4:2f:c5:2c:
         21:bf:be:06:0b:c8:f6:53:2a:9e:0b:67:31:e0:0a:f3:76:98:
         1e:6d:1c:da:e7:b0:72:c1:03:e8:7f:8a:2a:e9:05:ef:77:f8:
         32:61:3a:f1:e6:4e:35:41:be:96:63:ee:78:a2:f3:dc:4b:85:
         ee:b0:7e:a3:76:c3:c2:bd:c7:c9:f4:af:d4:05:46:20:a9:b2:
         02:03:44:d0:9e:ba:56:52:b4:59:72:e0:72:53:b2:65:ea:55:
         ce:23:6c:6e:de:43:96:6c:58:da:e4:db:e8:a9:ea:25:8e:78:
         1d:86:78:8e:b4:00:df:50:de:a1:03:ac:4b:3b:44:08:88:8e:
         cc:28:d5:7e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUU/GmfX71w/BCV1FWvRSX6ppCR/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTg4NjA2Njc1OTAxRjA0MEIwN0RGMzA2NzEyQzBCOEVB
RkQ2QUNGRTAeFw0yNDA0MDUwMzE0MTVaFw0yNTA0MDQwMzE5MTVaMDMxMTAvBgNV
BAMTKEQxRkIyNDA2MjMwQzA2NTE3ODc5NTQ5MkYwMTQ4ODc3NDE5OTVCNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBMt9eT8qCmhEI3sNdq9hiCPB
XdM+iqNBDJ8O1r6kFMtUo5QRF8WOOfqd9bIMBfRCdFuowIQOlM8BelWi+t5zp5Ik
jkg0jCexAQ+l3a2NiI1erFSbnCzxw53U1ykPzcczyyfTrnlgeK7cJv8jYOAKjy8S
Au9ZoxourT2x0YiFNq39OMCw5N1QOEQzhj1svli91UkXMzA2dsrrAQLEiQ5+HguT
3TBAAU6Y9Qvgx+gDQjESefJpwhXuxEZzxrHN/nwY7sbR3CB5y8Sf670qoiYIbZzd
UbAjW8FMy5GdE/g1kK3H+syIvHzM7KVX+MkZjz3Ma/T675suDA1UFRLAcedzAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU0fskBiMMBlF4eVSS8BSId0GZW0IwHwYDVR0j
BBgwFoAUGIYGZ1kB8ECwffMGcSwLjq/WrP4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUZoVHBHQnBvV0FMZHBGeUpWcXRTTW91a0VBOXRxOUhZaVd3SFBFakNV
SFMvMS8xODg2MDY2NzU5MDFGMDQwQjA3REYzMDY3MTJDMEI4RUFGRDZBQ0ZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4ODYwNjY3NTkwMUYwNDBC
MDdERjMwNjcxMkMwQjhFQUZENkFDRkUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGaFRwR0Jwb1dBTGRwRnlKVnF0U01vdWtFQTl0cTlIWWlXd0hQRWpDVUhTLzEv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/5TANBgkqhkiG9w0BAQsFAAOCAQEAygZw
b5yLgv5MaqUr6DmL1OjRJKa5goSUPNLFq3mMpG2YyZEwdNlmqIJr8Wy3jlkuOj+s
rZCXaP54RaoZZQVDBnEDCZJoMX0V4qZFQPem9IlIMv+kE3WQg5E3N2Nf7hqr14x3
tmoop2Y7yUeipde6H2QcBT9OcmHXNO3UL8UsIb++BgvI9lMqngtnMeAK83aYHm0c
2uewcsED6H+KKukF73f4MmE68eZONUG+lmPueKLz3EuF7rB+o3bDwr3HyfSv1AVG
IKmyAgNE0J66VlK0WXLgclOyZepVziNsbt5DlmxY2uTb6KnqJY54HYZ4jrQA31De
oQOsSztECIiOzCjVfg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org