Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32322d3232203d3e20323634353434.roa (raw, json)
Hash identifier:          yQyrC0drumJNA9P9mWNqqjiJlYSgZ/sWbv9lz0YMkFE=
Subject key identifier:   0B:BD:AB:F1:E2:AA:12:D7:1D:98:29:85:5C:A6:20:3A:57:26:63:9B
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       597ACEA6BC0D294FDE7533BF33E4496E33154119
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa
Signing time:             Tue 18 Apr 2023 23:42:02 +0000
ROA not before:           Tue 18 Apr 2023 23:37:02 +0000
ROA not after:            Tue 16 Apr 2024 23:42:02 +0000
asID:                     264544
IP address blocks:        138.0.112.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:7a:ce:a6:bc:0d:29:4f:de:75:33:bf:33:e4:49:6e:33:15:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 18 23:37:02 2023 GMT
            Not After : Apr 16 23:42:02 2024 GMT
        Subject: CN=0BBDABF1E2AA12D71D9829855CA6203A5726639B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:06:c9:b3:3e:3e:a5:2b:54:3a:77:89:ba:2a:
                    6a:2c:ad:7d:de:d6:4d:9f:ff:31:b9:ec:a7:79:4e:
                    b6:e2:f9:20:cb:2d:2b:5c:c5:04:f0:b5:73:42:18:
                    e9:35:f7:fd:81:9b:a9:83:4d:d9:b9:3c:0c:81:72:
                    bd:6e:b9:c6:13:8a:5a:35:50:65:17:7e:09:a5:91:
                    86:0b:62:2d:0f:47:75:00:7b:2b:8f:1a:95:ef:fb:
                    db:26:05:8c:91:13:6d:f5:e5:8b:5e:52:55:2b:22:
                    9a:f8:33:16:a8:6d:2e:46:53:7b:d2:f8:20:61:56:
                    c6:78:16:9b:77:a0:cf:71:dd:0e:2e:bf:9d:7a:c1:
                    e5:dc:a4:91:18:df:0c:ff:de:f7:d5:e1:1a:4b:02:
                    c1:2e:a4:5e:65:18:56:b8:5b:f9:41:74:51:51:e7:
                    56:a8:9c:e9:ca:c5:27:36:33:45:7f:78:e3:0f:bc:
                    7a:6e:44:bf:0b:89:d4:c7:fb:eb:de:10:cf:ea:dd:
                    04:b2:cc:3d:d0:b7:be:e6:07:e8:39:db:4d:43:98:
                    ea:c9:17:d4:87:8a:4b:90:b8:68:56:a1:bd:06:10:
                    cf:7e:79:a5:c4:ca:44:0c:d9:43:00:80:90:6e:7e:
                    db:1d:69:03:30:2e:dc:ac:b4:7c:72:bc:c7:2d:23:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:AB:F1:E2:AA:12:D7:1D:98:29:85:5C:A6:20:3A:57:26:63:9B
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/3133382e302e3131322e302f32322d3232203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:87:b1:c5:24:c6:0e:a2:77:fc:17:1d:a8:1e:9b:de:b3:1f:
         0d:22:9f:6c:1a:81:1e:7d:e8:52:62:7a:35:73:a1:af:47:ee:
         11:f2:03:94:a9:aa:23:d6:ca:3c:4b:ac:1b:5c:c4:1c:90:66:
         1a:fe:a3:bd:7d:68:9c:bb:b6:58:ec:3e:4a:96:ad:22:82:da:
         f6:f9:36:22:d2:88:55:2e:57:d9:91:f0:9a:c4:38:c7:ea:88:
         15:31:eb:31:7e:70:35:e9:03:2b:59:eb:f7:3b:19:76:76:4b:
         ce:9a:ef:d1:26:c6:e3:d3:b6:69:86:ef:e4:43:98:aa:cb:67:
         71:3d:2c:8b:e1:2a:cc:b9:c5:ee:e6:e9:93:93:1f:5d:53:64:
         d3:1f:76:00:f7:2d:52:90:47:dd:a0:4b:85:c1:27:2e:9c:07:
         78:6f:5d:eb:c7:e5:fd:00:0b:c7:09:1f:25:b8:43:18:27:2c:
         76:be:73:b2:28:da:b8:87:51:90:bb:03:89:30:95:e6:55:72:
         a8:fd:a3:23:88:83:a2:cc:c1:be:38:5c:00:b7:87:3c:6c:0e:
         43:3f:36:74:ae:e4:ba:91:ac:96:4b:53:d8:b1:77:2d:b6:54:
         89:4c:c1:dd:77:d9:07:0a:58:af:e2:da:5d:14:16:75:87:e9:
         4d:94:c8:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWXrOprwNKU/edTO/M+RJbjMVQRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZCQTgzNjEzNDMxMTM3QUZDMEVFQzZGQUM5MkI2REQw
QUY3NDhBMjAeFw0yMzA0MTgyMzM3MDJaFw0yNDA0MTYyMzQyMDJaMDMxMTAvBgNV
BAMTKDBCQkRBQkYxRTJBQTEyRDcxRDk4Mjk4NTVDQTYyMDNBNTcyNjYzOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoBsmzPj6lK1Q6d4m6KmosrX3e
1k2f/zG57Kd5Trbi+SDLLStcxQTwtXNCGOk19/2Bm6mDTdm5PAyBcr1uucYTilo1
UGUXfgmlkYYLYi0PR3UAeyuPGpXv+9smBYyRE2315YteUlUrIpr4MxaobS5GU3vS
+CBhVsZ4Fpt3oM9x3Q4uv516weXcpJEY3wz/3vfV4RpLAsEupF5lGFa4W/lBdFFR
51aonOnKxSc2M0V/eOMPvHpuRL8LidTH++veEM/q3QSyzD3Qt77mB+g5201DmOrJ
F9SHikuQuGhWob0GEM9+eaXEykQM2UMAgJBuftsdaQMwLtystHxyvMctIxR7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUC72r8eKqEtcdmCmFXKYgOlcmY5swHwYDVR0j
BBgwFoAUj7qDYTQxE3r8DuxvrJK23Qr3SKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMC84RkJBODM2MTM0MzExMzdBRkMwRUVDNkZBQzkyQjZERDBBRjc0OEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhGQkE4MzYxMzQzMTEzN0FG
QzBFRUM2RkFDOTJCNkREMEFGNzQ4QTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzAv
MzEzMzM4MmUzMDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM0
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigBwMA0GCSqGSIb3DQEBCwUAA4IBAQAWh7HFJMYO
onf8Fx2oHpvesx8NIp9sGoEefehSYno1c6GvR+4R8gOUqaoj1so8S6wbXMQckGYa
/qO9fWicu7ZY7D5Klq0igtr2+TYi0ohVLlfZkfCaxDjH6ogVMesxfnA16QMrWev3
Oxl2dkvOmu/RJsbj07Zphu/kQ5iqy2dxPSyL4SrMucXu5umTkx9dU2TTH3YA9y1S
kEfdoEuFwScunAd4b13rx+X9AAvHCR8luEMYJyx2vnOyKNq4h1GQuwOJMJXmVXKo
/aMjiIOizMG+OFwAt4c8bA5DPzZ0ruS6kayWS1PYsXcttlSJTMHdd9kHCliv4tpd
FBZ1h+lNlMiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org