Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32322d3332203d3e203631373937.roa
File:                     3133382e33362e36382e302f32322d3332203d3e203631373937.roa (raw, json)
Hash identifier:          ycRVq2PS3M/yRdvLx3UEeUIsbytLHGflWpMMzC8awR4=
Subject key identifier:   89:0B:5F:D1:1D:0C:A2:83:7D:E6:17:FC:B1:D7:14:F9:23:72:D4:E8
Certificate issuer:       /CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
Certificate serial:       57C7404E7FE18E23ABD446764214A84CE3D8542A
Authority key identifier: BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32322d3332203d3e203631373937.roa
Signing time:             Thu 31 Aug 2023 14:08:44 +0000
ROA not before:           Thu 31 Aug 2023 14:03:44 +0000
ROA not after:            Thu 29 Aug 2024 14:08:44 +0000
asID:                     61797
IP address blocks:        138.36.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c7:40:4e:7f:e1:8e:23:ab:d4:46:76:42:14:a8:4c:e3:d8:54:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDC7634940E067A4864ED1C399A802F0320CD4A4
        Validity
            Not Before: Aug 31 14:03:44 2023 GMT
            Not After : Aug 29 14:08:44 2024 GMT
        Subject: CN=890B5FD11D0CA2837DE617FCB1D714F92372D4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:55:97:60:0a:0e:d9:53:5c:ed:3f:23:2a:
                    e7:fc:dd:b6:ab:63:20:6a:c4:38:7b:32:f7:1f:02:
                    1b:dc:c1:ab:4a:c1:c5:8d:87:7f:df:90:e7:82:95:
                    d7:1a:97:75:2f:db:6c:52:a4:39:5d:53:81:7a:a1:
                    43:a0:2e:7b:05:34:33:fc:58:f8:2f:dc:10:b9:c8:
                    f5:b5:88:66:4e:be:38:0b:df:0a:35:5a:e9:38:68:
                    12:09:b2:9e:64:f0:11:37:07:36:b2:31:2f:2d:9c:
                    01:75:d5:38:c9:4d:5f:77:27:35:a0:40:87:52:bc:
                    9b:58:ba:f7:29:73:b6:42:f1:0e:ef:6e:f5:fa:eb:
                    f8:5a:7b:d7:65:1b:e7:3c:6e:73:b4:ff:3e:3f:1f:
                    e7:98:b0:16:6d:ff:67:75:c1:0b:b1:92:2c:79:a5:
                    9c:f8:fd:37:90:7f:ad:ae:12:99:77:e2:e6:44:cc:
                    e7:ae:9a:ed:0c:46:55:74:c1:5a:b0:65:1c:90:52:
                    2e:b2:49:f3:db:87:bb:9d:1f:bd:72:09:5f:e1:50:
                    19:bc:43:4b:0f:4c:52:75:e4:e0:e0:65:a0:48:90:
                    70:87:f3:ee:02:e8:4c:ad:c1:2d:31:5a:0b:8a:d8:
                    ba:99:b2:97:dd:df:4b:94:f3:11:14:74:cb:ae:a9:
                    8d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:5F:D1:1D:0C:A2:83:7D:E6:17:FC:B1:D7:14:F9:23:72:D4:E8
            X509v3 Authority Key Identifier:
                keyid:BD:C7:63:49:40:E0:67:A4:86:4E:D1:C3:99:A8:02:F0:32:0C:D4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDC7634940E067A4864ED1C399A802F0320CD4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AN9ws4yotJdPViMkNbEAu873z4v3cuPXzRkpnjgP8FJ1/0/3133382e33362e36382e302f32322d3332203d3e203631373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:56:5e:32:dc:0e:24:c6:13:e2:36:61:4a:5b:d0:06:f4:17:
         5c:c0:7c:37:10:b2:87:07:1f:ee:58:37:6b:ef:d1:26:f0:1d:
         57:d4:e6:4e:04:86:31:be:f8:5c:d8:d9:4f:f7:12:ea:fa:25:
         7d:60:c1:c2:0e:e2:aa:23:6a:a0:6e:ce:a0:77:92:15:f2:d7:
         77:92:05:8d:01:8a:35:8a:f2:1d:19:da:60:09:e9:b2:65:e1:
         84:cd:b9:f2:97:38:56:09:3c:d4:b1:ca:78:ae:38:6c:fd:b6:
         75:ad:04:39:f0:64:69:c7:6c:c6:05:d5:0a:9a:b8:87:db:59:
         2f:34:f4:5d:60:c3:e9:18:16:65:8f:40:f3:e3:3d:ab:c3:9f:
         86:c8:56:36:6b:c6:61:af:04:18:22:2f:48:0f:87:78:80:c1:
         c2:ae:98:db:67:b3:ec:8c:6c:a5:ed:1f:05:02:a4:c7:4a:a6:
         1b:e3:23:74:40:1e:74:7e:9d:a5:8b:1a:86:36:69:7a:a2:53:
         c1:50:8f:ec:9f:a3:61:dd:f9:43:78:ec:cf:90:c1:69:2c:78:
         e8:e5:07:ae:12:c9:14:f7:31:fd:ce:05:8b:5d:0c:36:da:5b:
         ac:63:fc:aa:41:ee:36:72:1b:fe:aa:52:9a:13:55:85:d5:ca:
         55:43:67:28
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUV8dATn/hjiOr1EZ2QhSoTOPYVCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRDNzYzNDk0MEUwNjdBNDg2NEVEMUMzOTlBODAyRjAz
MjBDRDRBNDAeFw0yMzA4MzExNDAzNDRaFw0yNDA4MjkxNDA4NDRaMDMxMTAvBgNV
BAMTKDg5MEI1RkQxMUQwQ0EyODM3REU2MTdGQ0IxRDcxNEY5MjM3MkQ0RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++FWXYAoO2VNc7T8jKuf83bar
YyBqxDh7MvcfAhvcwatKwcWNh3/fkOeCldcal3Uv22xSpDldU4F6oUOgLnsFNDP8
WPgv3BC5yPW1iGZOvjgL3wo1Wuk4aBIJsp5k8BE3BzayMS8tnAF11TjJTV93JzWg
QIdSvJtYuvcpc7ZC8Q7vbvX66/hae9dlG+c8bnO0/z4/H+eYsBZt/2d1wQuxkix5
pZz4/TeQf62uEpl34uZEzOeumu0MRlV0wVqwZRyQUi6ySfPbh7udH71yCV/hUBm8
Q0sPTFJ15ODgZaBIkHCH8+4C6EytwS0xWguK2LqZspfd30uU8xEUdMuuqY0ZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiQtf0R0MooN95hf8sdcU+SNy1OgwHwYDVR0j
BBgwFoAUvcdjSUDgZ6SGTtHDmagC8DIM1KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU45d3M0eW90SmRQVmlNa05iRUF1ODczejR2M2N1UFh6UmtwbmpnUDhG
SjEvMC9CREM3NjM0OTQwRTA2N0E0ODY0RUQxQzM5OUE4MDJGMDMyMENENEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JEQzc2MzQ5NDBFMDY3QTQ4
NjRFRDFDMzk5QTgwMkYwMzIwQ0Q0QTQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOOXdzNHlvdEpkUFZpTWtOYkVBdTg3M3o0djNjdVBYelJrcG5qZ1A4RkoxLzAv
MzEzMzM4MmUzMzM2MmUzNjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMTM3
MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAookRDANBgkqhkiG9w0BAQsFAAOCAQEAklZeMtwOJMYT
4jZhSlvQBvQXXMB8NxCyhwcf7lg3a+/RJvAdV9TmTgSGMb74XNjZT/cS6volfWDB
wg7iqiNqoG7OoHeSFfLXd5IFjQGKNYryHRnaYAnpsmXhhM258pc4Vgk81LHKeK44
bP22da0EOfBkacdsxgXVCpq4h9tZLzT0XWDD6RgWZY9A8+M9q8OfhshWNmvGYa8E
GCIvSA+HeIDBwq6Y22ez7Ixspe0fBQKkx0qmG+MjdEAedH6dpYsahjZpeqJTwVCP
7J+jYd35Q3jsz5DBaSx46OUHrhLJFPcx/c4Fi10MNtpbrGP8qkHuNnIb/qpSmhNV
hdXKVUNnKA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org