Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa
File:                     3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa (raw, json)
Hash identifier:          796ucLn9qkHDQngwqGdzpPwuGsIorhE5YkvDl4BU7Qk=
Subject key identifier:   73:69:FD:35:2B:4A:3E:BA:52:B3:B9:14:CD:A8:34:E8:D9:92:3E:35
Certificate issuer:       /CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
Certificate serial:       A403AA3D26A8B68FDDD59E735522A9B0710A45
Authority key identifier: CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa
Signing time:             Tue 05 Dec 2023 23:00:01 +0000
ROA not before:           Tue 05 Dec 2023 22:55:01 +0000
ROA not after:            Tue 03 Dec 2024 23:00:01 +0000
asID:                     263994
IP address blocks:        138.255.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a4:03:aa:3d:26:a8:b6:8f:dd:d5:9e:73:55:22:a9:b0:71:0a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6EDF715445E2743F6376C193BA5C67D9812DE8
        Validity
            Not Before: Dec  5 22:55:01 2023 GMT
            Not After : Dec  3 23:00:01 2024 GMT
        Subject: CN=7369FD352B4A3EBA52B3B914CDA834E8D9923E35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:88:24:3f:25:c5:ec:9a:d9:8b:c1:bd:bd:09:
                    65:0f:bc:ec:9c:b5:e3:30:68:63:40:6b:f6:c6:4b:
                    ab:5d:1a:5d:95:cd:4c:ae:68:25:ba:db:93:85:39:
                    00:de:f6:9c:3e:db:7a:10:6a:a1:21:60:53:43:f6:
                    94:1e:ce:59:92:8f:03:2b:82:43:7b:50:35:6a:e9:
                    8e:86:0e:17:99:d2:66:34:c1:a7:4d:1c:78:dd:e2:
                    51:ad:37:2f:c8:6c:fd:fe:78:68:2f:f4:b6:dd:79:
                    e6:1e:34:1a:04:70:32:73:00:81:f4:3e:3c:9c:5e:
                    4f:8a:2a:56:9e:61:ff:c2:5e:a7:4f:4b:08:ba:30:
                    53:82:c9:45:c9:f6:70:34:44:42:66:68:ab:dd:44:
                    c3:04:29:34:aa:fe:bb:a5:90:a2:55:d1:40:be:1a:
                    b5:5b:be:14:b7:98:bd:5a:67:5a:f2:9d:f0:d8:7a:
                    8f:16:4e:03:49:de:99:ee:93:f1:67:40:af:41:ef:
                    5a:92:0b:44:00:1c:2a:81:70:a0:e7:2a:52:c3:39:
                    0b:0d:b1:0c:33:43:39:3a:9f:d6:27:1b:07:c5:d5:
                    4d:ba:14:c3:83:8c:d0:cb:1f:11:1f:2d:70:c2:8c:
                    2e:7d:f2:53:af:59:50:70:cc:ab:ef:b6:69:33:ee:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:69:FD:35:2B:4A:3E:BA:52:B3:B9:14:CD:A8:34:E8:D9:92:3E:35
            X509v3 Authority Key Identifier:
                keyid:CD:6E:DF:71:54:45:E2:74:3F:63:76:C1:93:BA:5C:67:D9:81:2D:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6EDF715445E2743F6376C193BA5C67D9812DE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AhcSVgA7GUH4qkAsksjrCbXFuGNxWSfkCMQZ5LUU6xvi/0/3133382e3235352e3232312e302f32342d3234203d3e20323633393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:24:eb:ec:d1:47:82:38:c9:51:30:40:eb:d1:de:60:96:68:
         6b:52:b0:fc:44:47:19:9c:97:13:d3:93:b1:0d:0e:64:5e:fa:
         ba:55:a7:09:d5:08:17:ef:c1:dc:3e:b7:01:1f:0e:89:30:08:
         af:cd:e4:d9:b5:41:c7:4c:4d:76:e0:7c:3a:59:a9:5c:97:8c:
         44:ce:0a:35:ec:fb:5a:95:19:7c:65:a5:9b:ac:45:ee:44:a8:
         6e:c4:7c:32:ff:4d:b7:3a:53:f7:26:d4:22:c6:28:2a:60:2e:
         3f:fc:b4:54:ce:61:3e:86:fb:e6:6d:e1:78:5b:ae:d6:19:62:
         88:74:02:e1:09:d4:76:f2:36:af:74:21:b0:ed:49:09:9d:ef:
         7b:6c:46:4d:e0:4c:83:0c:f2:45:3d:d1:7a:72:38:0a:73:b4:
         c3:c5:49:c9:71:17:64:58:a2:94:ec:89:01:96:96:f9:48:f6:
         ab:bb:20:0c:b7:d3:0b:b2:ff:e8:da:28:75:3d:de:f6:9a:dc:
         c9:0a:82:e0:cb:a4:07:bd:16:1c:ec:fa:1e:03:c9:70:ab:34:
         32:6d:1c:2c:b0:a9:a7:4a:6c:5e:1e:ed:36:a0:a4:94:61:90:
         8f:0b:75:e5:93:b1:28:f6:94:ab:6f:67:7d:dc:0b:3d:70:8f:
         f3:a4:9f:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAKQDqj0mqLaP3dWec1UiqbBxCkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q2RURGNzE1NDQ1RTI3NDNGNjM3NkMxOTNCQTVDNjdE
OTgxMkRFODAeFw0yMzEyMDUyMjU1MDFaFw0yNDEyMDMyMzAwMDFaMDMxMTAvBgNV
BAMTKDczNjlGRDM1MkI0QTNFQkE1MkIzQjkxNENEQTgzNEU4RDk5MjNFMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiCQ/JcXsmtmLwb29CWUPvOyc
teMwaGNAa/bGS6tdGl2VzUyuaCW625OFOQDe9pw+23oQaqEhYFND9pQezlmSjwMr
gkN7UDVq6Y6GDheZ0mY0wadNHHjd4lGtNy/IbP3+eGgv9LbdeeYeNBoEcDJzAIH0
PjycXk+KKlaeYf/CXqdPSwi6MFOCyUXJ9nA0REJmaKvdRMMEKTSq/rulkKJV0UC+
GrVbvhS3mL1aZ1rynfDYeo8WTgNJ3pnuk/FnQK9B71qSC0QAHCqBcKDnKlLDOQsN
sQwzQzk6n9YnGwfF1U26FMODjNDLHxEfLXDCjC598lOvWVBwzKvvtmkz7mbJAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUc2n9NStKPrpSs7kUzag06NmSPjUwHwYDVR0j
BBgwFoAUzW7fcVRF4nQ/Y3bBk7pcZ9mBLegwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWhjU1ZnQTdHVUg0cWtBc2tzanJDYlhGdUdOeFdTZmtDTVFaNUxVVTZ4
dmkvMC9DRDZFREY3MTU0NDVFMjc0M0Y2Mzc2QzE5M0JBNUM2N0Q5ODEyREU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENkVERjcxNTQ0NUUyNzQz
RjYzNzZDMTkzQkE1QzY3RDk4MTJERTguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FoY1NWZ0E3R1VINHFrQXNrc2pyQ2JYRnVHTnhXU2ZrQ01RWjVMVVU2eHZpLzAv
MzEzMzM4MmUzMjM1MzUyZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM5MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/3TANBgkqhkiG9w0BAQsFAAOCAQEASSTr
7NFHgjjJUTBA69HeYJZoa1Kw/ERHGZyXE9OTsQ0OZF76ulWnCdUIF+/B3D63AR8O
iTAIr83k2bVBx0xNduB8OlmpXJeMRM4KNez7WpUZfGWlm6xF7kSobsR8Mv9NtzpT
9ybUIsYoKmAuP/y0VM5hPob75m3heFuu1hliiHQC4QnUdvI2r3QhsO1JCZ3ve2xG
TeBMgwzyRT3RenI4CnO0w8VJyXEXZFiilOyJAZaW+Uj2q7sgDLfTC7L/6NoodT3e
9prcyQqC4MukB70WHOz6HgPJcKs0Mm0cLLCpp0psXh7tNqCklGGQjwt15ZOxKPaU
q29nfdwLPXCP86Sf6Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org