Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa
File:                     3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          FFaoeFg6QsnMw/8SmHwt7VFokqstusJvxiI3pTjaxOY=
Subject key identifier:   E6:77:64:64:CF:3E:8D:90:25:D0:F7:36:85:A4:86:83:68:AF:6C:13
Certificate issuer:       /CN=8C50B18948FB749C5395482072FE7285BFCC98F1
Certificate serial:       3575041CC1EF6F4DB67C176C11A4743D72F28A19
Authority key identifier: 8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa
Signing time:             Sat 25 Feb 2023 15:16:00 +0000
ROA not before:           Sat 25 Feb 2023 15:11:00 +0000
ROA not after:            Sat 24 Feb 2024 15:16:00 +0000
asID:                     20473
IP address blocks:        181.233.188.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:75:04:1c:c1:ef:6f:4d:b6:7c:17:6c:11:a4:74:3d:72:f2:8a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C50B18948FB749C5395482072FE7285BFCC98F1
        Validity
            Not Before: Feb 25 15:11:00 2023 GMT
            Not After : Feb 24 15:16:00 2024 GMT
        Subject: CN=E6776464CF3E8D9025D0F73685A4868368AF6C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:de:3b:59:63:28:28:49:1b:22:c0:f0:bb:
                    8e:d7:bd:35:13:97:92:72:d5:aa:7b:bd:e6:16:92:
                    98:b9:0a:2b:0e:6b:c0:5d:01:53:3f:70:de:2f:6a:
                    af:52:60:ff:e7:ff:2f:bf:5a:10:a7:4c:69:81:68:
                    ac:c7:e4:ad:51:41:37:ad:a4:d1:42:f1:7b:93:53:
                    c2:52:3c:a3:57:07:e4:20:30:f2:fb:8a:3c:2b:7c:
                    6b:cf:99:5a:d4:16:0a:24:9e:c5:86:d0:5c:9e:af:
                    1f:85:c5:d9:5b:57:e4:c5:29:47:a0:90:ce:7d:a9:
                    a2:d8:ea:4c:d9:44:e6:e9:19:cf:45:26:09:0c:1d:
                    fd:54:96:94:43:de:c2:38:2e:00:bd:b0:06:6b:4a:
                    60:4b:45:12:3f:c0:cb:0d:00:f2:17:17:4b:71:56:
                    b9:c8:99:56:07:cb:3e:47:ba:6c:b9:a4:84:89:2f:
                    c0:43:5d:f9:27:e7:92:bb:c3:cf:d5:66:b0:ed:80:
                    7f:66:68:9a:d5:bf:eb:75:8d:d9:1c:b7:81:be:33:
                    5e:3a:cc:71:4e:9a:1f:93:6a:10:9d:61:fe:de:da:
                    03:eb:dd:bc:ac:86:cb:47:60:51:27:1e:bc:f9:9e:
                    c0:12:23:15:89:73:6e:c1:73:97:4d:ee:61:0e:e8:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:77:64:64:CF:3E:8D:90:25:D0:F7:36:85:A4:86:83:68:AF:6C:13
            X509v3 Authority Key Identifier:
                keyid:8C:50:B1:89:48:FB:74:9C:53:95:48:20:72:FE:72:85:BF:CC:98:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/8C50B18948FB749C5395482072FE7285BFCC98F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C50B18948FB749C5395482072FE7285BFCC98F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CtaK7ATVdmZWbYNE6dPZWWtH1p6SM7LUYiXKUtdF9DtV/0/3138312e3233332e3138382e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:36:40:20:10:2b:de:2e:47:ce:6b:38:a3:a5:82:95:78:b4:
         42:8a:a2:fd:c8:de:1c:08:de:d4:d2:4c:a8:4a:0b:43:fd:29:
         40:79:3e:32:ab:21:cf:09:9f:cf:fa:ec:bf:cc:74:1e:6c:6f:
         c8:0e:ab:0b:7b:70:bc:6d:27:4c:77:90:5a:db:e1:e1:00:0b:
         e9:d9:94:b9:9f:b6:32:ce:a3:e6:60:c8:88:77:f1:f9:7c:21:
         29:ff:4f:71:04:b8:00:34:12:e0:23:dd:f0:f4:4d:fd:34:15:
         6c:a9:49:17:a7:ce:99:56:8e:79:2d:5d:85:21:61:e1:89:b9:
         6b:23:45:7d:2f:d1:51:c5:a1:2a:a2:f3:f4:af:36:22:cc:a4:
         c9:3a:a5:ac:49:cf:e8:18:a9:c8:03:c1:f6:87:18:ec:93:9f:
         92:11:d3:0f:21:7b:31:65:96:9a:a1:2f:90:e6:d9:76:e1:f0:
         f3:ae:d6:82:3d:97:2d:1a:a4:da:8f:39:25:a0:d8:c3:7c:8c:
         08:64:9c:ae:d4:6f:b8:90:59:6e:a3:2d:f9:2b:04:39:f4:8d:
         f7:0d:2a:a2:a6:63:07:43:b2:5e:4d:88:2e:c2:20:5b:8d:61:
         a2:b5:66:9e:be:e9:21:91:1a:2c:2e:52:a6:fa:fc:9f:31:fc:
         f0:f6:6b:10
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNXUEHMHvb022fBdsEaR0PXLyihkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1MEIxODk0OEZCNzQ5QzUzOTU0ODIwNzJGRTcyODVC
RkNDOThGMTAeFw0yMzAyMjUxNTExMDBaFw0yNDAyMjQxNTE2MDBaMDMxMTAvBgNV
BAMTKEU2Nzc2NDY0Q0YzRThEOTAyNUQwRjczNjg1QTQ4NjgzNjhBRjZDMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0t47WWMoKEkbIsDwu47XvTUT
l5Jy1ap7veYWkpi5CisOa8BdAVM/cN4vaq9SYP/n/y+/WhCnTGmBaKzH5K1RQTet
pNFC8XuTU8JSPKNXB+QgMPL7ijwrfGvPmVrUFgoknsWG0Fyerx+FxdlbV+TFKUeg
kM59qaLY6kzZRObpGc9FJgkMHf1UlpRD3sI4LgC9sAZrSmBLRRI/wMsNAPIXF0tx
VrnImVYHyz5Humy5pISJL8BDXfkn55K7w8/VZrDtgH9maJrVv+t1jdkct4G+M146
zHFOmh+TahCdYf7e2gPr3byshstHYFEnHrz5nsASIxWJc27Bc5dN7mEO6AhTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5ndkZM8+jZAl0Pc2haSGg2ivbBMwHwYDVR0j
BBgwFoAUjFCxiUj7dJxTlUggcv5yhb/MmPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3RhSzdBVFZkbVpXYllORTZkUFpXV3RIMXA2U003TFVZaVhLVXRkRjlE
dFYvMC84QzUwQjE4OTQ4RkI3NDlDNTM5NTQ4MjA3MkZFNzI4NUJGQ0M5OEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhDNTBCMTg5NDhGQjc0OUM1
Mzk1NDgyMDcyRkU3Mjg1QkZDQzk4RjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N0YUs3QVRWZG1aV2JZTkU2ZFBaV1d0SDFwNlNNN0xVWWlYS1V0ZEY5RHRWLzAv
MzEzODMxMmUzMjMzMzMyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzAzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK16bwwDQYJKoZIhvcNAQELBQADggEBAC82QCAQ
K94uR85rOKOlgpV4tEKKov3I3hwI3tTSTKhKC0P9KUB5PjKrIc8Jn8/67L/MdB5s
b8gOqwt7cLxtJ0x3kFrb4eEAC+nZlLmftjLOo+ZgyIh38fl8ISn/T3EEuAA0EuAj
3fD0Tf00FWypSRenzplWjnktXYUhYeGJuWsjRX0v0VHFoSqi8/SvNiLMpMk6paxJ
z+gYqcgDwfaHGOyTn5IR0w8hezFllpqhL5Dm2Xbh8POu1oI9ly0apNqPOSWg2MN8
jAhknK7Ub7iQWW6jLfkrBDn0jfcNKqKmYwdDsl5NiC7CIFuNYaK1Zp6+6SGRGiwu
Uqb6/J8x/PD2axA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:55 2023 by rpki-client on console-fra.rpki-client.org