Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
File:                     3133382e302e3131322e302f32322d3233203d3e20323634353434.roa (raw, json)
Hash identifier:          vI31R/3jjUgDFQb8WNPyBGM0ugMkKUKjG4G8ef6fR2A=
Subject key identifier:   18:48:75:1E:5B:05:1B:2C:88:1B:30:8A:83:B4:65:1E:AD:C1:DD:DF
Certificate issuer:       /CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Certificate serial:       2943C4509CFECB6259D3624334A7701B208E7C9C
Authority key identifier: AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa
Signing time:             Mon 22 Jan 2024 15:28:23 +0000
ROA not before:           Mon 22 Jan 2024 15:23:23 +0000
ROA not after:            Mon 20 Jan 2025 15:28:23 +0000
asID:                     264544
IP address blocks:        138.0.112.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:43:c4:50:9c:fe:cb:62:59:d3:62:43:34:a7:70:1b:20:8e:7c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
        Validity
            Not Before: Jan 22 15:23:23 2024 GMT
            Not After : Jan 20 15:28:23 2025 GMT
        Subject: CN=1848751E5B051B2C881B308A83B4651EADC1DDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:a3:ad:f8:c8:b1:47:d1:a0:8a:32:11:db:
                    45:f9:43:01:07:33:2a:d8:c6:1b:95:c3:c8:3e:4c:
                    bb:13:cf:19:83:b7:ed:c0:55:4e:30:f3:79:0c:fe:
                    16:9a:73:f2:e2:8f:c0:e8:93:e5:5a:42:c8:6f:90:
                    9c:a3:5d:b4:3c:4b:e8:58:90:2c:84:22:23:98:6f:
                    6e:b5:b3:3d:6e:5f:ac:f7:7b:72:35:fb:fc:53:b7:
                    3c:c8:ce:f1:45:15:8c:3c:20:ae:5e:92:41:ed:23:
                    7b:3e:b0:5b:ea:3b:88:fd:02:f0:20:cb:51:9d:27:
                    fc:88:99:1c:89:1a:ad:9b:f0:40:fe:15:cc:79:ea:
                    a3:14:2e:f9:8e:4c:ee:3f:3e:e3:5c:8e:76:9b:1f:
                    d9:c5:6c:a7:7b:46:0e:2f:08:bb:87:7c:d3:38:1b:
                    34:ef:8c:8e:4f:73:f5:e6:23:37:df:79:09:ad:88:
                    8c:a9:39:9d:c8:3e:aa:e9:f2:47:00:b1:28:10:ba:
                    8c:68:45:65:04:54:1f:74:1d:a8:51:94:46:48:dc:
                    0b:f3:6e:74:43:aa:5d:c4:95:cb:a3:b5:7f:02:e8:
                    a4:4e:91:3d:c3:5f:b6:6b:90:4c:bb:7f:5c:08:84:
                    de:b5:95:76:9f:22:1d:0d:ae:29:07:d3:87:b4:56:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:75:1E:5B:05:1B:2C:88:1B:30:8A:83:B4:65:1E:AD:C1:DD:DF
            X509v3 Authority Key Identifier:
                keyid:AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/3133382e302e3131322e302f32322d3233203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:b5:7a:6a:90:bb:4f:79:fd:42:89:0d:b6:7f:3c:f8:c3:ec:
         59:88:8d:1a:4e:e9:3f:a5:74:0f:c9:59:f8:f2:1f:a9:b7:e9:
         9d:6e:10:5d:77:88:86:9d:32:60:13:2d:24:25:45:a5:d1:5f:
         a7:ca:89:85:47:ea:76:3e:5e:28:a9:f2:a8:bc:2a:d4:58:5c:
         22:34:f1:fe:81:2d:15:88:16:8f:2e:7f:59:d0:b7:99:5f:ac:
         83:14:75:14:5c:36:1f:ff:3f:ec:4e:fd:8d:a6:61:f8:0b:8a:
         3b:98:a4:4d:da:ee:7f:4b:fd:36:71:2d:a8:cc:6a:df:ba:44:
         85:0a:b0:4a:11:af:5d:f4:a1:5a:f1:82:65:f0:18:59:eb:43:
         fc:0d:89:09:f9:b3:a5:8c:2b:a5:3e:39:56:21:8f:67:2c:14:
         c2:94:e7:49:97:a4:f9:4f:27:ff:99:60:8b:27:de:d3:df:a4:
         75:da:d8:06:4c:65:c2:b8:b3:66:35:01:d5:e4:ca:90:64:01:
         62:c7:ac:07:30:ab:65:a3:6e:ea:45:48:77:fc:2d:19:65:d6:
         24:9a:c2:87:0f:dc:8e:06:da:82:d9:d3:dd:92:cc:10:30:6e:
         42:fa:15:3b:45:9e:77:6a:4a:19:5d:05:55:8b:5e:9e:ad:81:
         16:50:aa:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKUPEUJz+y2JZ02JDNKdwGyCOfJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE0MkRCNzBBREY1MUUxQ0JGNzcxMUQ0QjQyRTQ0MDUw
NTA0QUI4RTAeFw0yNDAxMjIxNTIzMjNaFw0yNTAxMjAxNTI4MjNaMDMxMTAvBgNV
BAMTKDE4NDg3NTFFNUIwNTFCMkM4ODFCMzA4QTgzQjQ2NTFFQURDMUREREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+qOt+MixR9GgijIR20X5QwEH
MyrYxhuVw8g+TLsTzxmDt+3AVU4w83kM/haac/Lij8Dok+VaQshvkJyjXbQ8S+hY
kCyEIiOYb261sz1uX6z3e3I1+/xTtzzIzvFFFYw8IK5ekkHtI3s+sFvqO4j9AvAg
y1GdJ/yImRyJGq2b8ED+Fcx56qMULvmOTO4/PuNcjnabH9nFbKd7Rg4vCLuHfNM4
GzTvjI5Pc/XmIzffeQmtiIypOZ3IPqrp8kcAsSgQuoxoRWUEVB90HahRlEZI3Avz
bnRDql3ElcujtX8C6KROkT3DX7ZrkEy7f1wIhN61lXafIh0NrikH04e0VmoBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGEh1HlsFGyyIGzCKg7RlHq3B3d8wHwYDVR0j
BBgwFoAUqkLbcK31Hhy/dxHUtC5EBQUEq44wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FxZ1lMQjdLbmcyM1ZWMXJ1OXRKVWZSNzdQdnZuTE1CckM2d1hpVXpY
OWIvMS9BQTQyREI3MEFERjUxRTFDQkY3NzExRDRCNDJFNDQwNTA1MDRBQjhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNDJEQjcwQURGNTFFMUNC
Rjc3MTFENEI0MkU0NDA1MDUwNEFCOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhcWdZTEI3S25nMjNWVjFydTl0SlVmUjc3UHZ2bkxNQnJDNndYaVV6WDliLzEv
MzEzMzM4MmUzMDJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM0
MzUzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCigBwMA0GCSqGSIb3DQEBCwUAA4IBAQDLtXpqkLtP
ef1CiQ22fzz4w+xZiI0aTuk/pXQPyVn48h+pt+mdbhBdd4iGnTJgEy0kJUWl0V+n
yomFR+p2Pl4oqfKovCrUWFwiNPH+gS0ViBaPLn9Z0LeZX6yDFHUUXDYf/z/sTv2N
pmH4C4o7mKRN2u5/S/02cS2ozGrfukSFCrBKEa9d9KFa8YJl8BhZ60P8DYkJ+bOl
jCulPjlWIY9nLBTClOdJl6T5Tyf/mWCLJ97T36R12tgGTGXCuLNmNQHV5MqQZAFi
x6wHMKtlo27qRUh3/C0ZZdYkmsKHD9yOBtqC2dPdkswQMG5C+hU7RZ53akoZXQVV
i16erYEWUKr0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org