Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa
File:                     3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa (raw, json)
Hash identifier:          6+T9WHxVkAExvCSj37Yeoya4QXEv35YoIblngaIygk8=
Subject key identifier:   8E:DB:7E:27:19:58:C6:CC:60:4D:54:A3:AD:A5:46:D5:F8:98:CB:A5
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       7B2696632AA3782BC8F174630D213B714CF59E55
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 21:00:13 +0000
ROA not before:           Wed 12 Jul 2023 20:55:13 +0000
ROA not after:            Wed 10 Jul 2024 21:00:13 +0000
asID:                     263880
IP address blocks:        186.251.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:96:63:2a:a3:78:2b:c8:f1:74:63:0d:21:3b:71:4c:f5:9e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:55:13 2023 GMT
            Not After : Jul 10 21:00:13 2024 GMT
        Subject: CN=8EDB7E271958C6CC604D54A3ADA546D5F898CBA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:98:c6:93:a8:8a:36:6d:77:8b:e2:a8:4a:85:
                    be:75:9a:d0:4e:b1:97:2a:3a:34:15:fd:07:97:ec:
                    8b:96:c0:ef:90:d0:1c:a9:c2:46:40:f2:59:e5:ba:
                    4d:8b:57:ec:f6:4a:c1:1d:97:49:bf:3c:ba:fd:6b:
                    07:f0:46:55:3d:f9:29:19:97:0f:f0:72:1f:ce:45:
                    86:78:d8:b6:9e:2e:b9:3f:16:bc:6d:12:cb:00:25:
                    61:d7:fa:43:b0:0b:9c:22:66:34:ac:93:08:ec:a5:
                    86:8b:5a:72:cb:81:ec:e6:6b:34:5f:d4:54:3f:e8:
                    34:68:4d:56:76:0c:40:9d:50:7d:da:d0:38:1f:11:
                    16:45:3b:6f:d3:c9:25:c9:7a:fa:7a:89:2f:41:a1:
                    0f:5b:71:c7:54:b9:6b:23:d5:75:aa:35:7d:75:f5:
                    7a:45:53:77:12:f9:8d:3c:ee:13:6a:10:66:db:a6:
                    ef:01:45:ab:22:78:7d:3b:bb:76:51:b2:b4:c4:b0:
                    f9:77:36:7c:08:0a:e1:9e:f5:7d:94:4e:6d:3d:dd:
                    4e:6d:bf:b9:08:2f:c9:8a:ff:8b:8d:46:2c:07:0c:
                    17:f9:8f:2c:95:af:a3:95:f3:e6:e7:e8:4d:96:11:
                    74:88:df:9e:85:7f:ce:06:4e:b1:e3:60:87:40:05:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:DB:7E:27:19:58:C6:CC:60:4D:54:A3:AD:A5:46:D5:F8:98:CB:A5
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/3138362e3235312e3137322e302f32322d3234203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:db:c9:5a:e1:4f:7f:49:cd:c1:cc:e0:f9:6a:59:a1:ad:
         55:c7:9f:00:03:cd:61:72:69:a1:f5:09:50:f9:f3:77:29:0b:
         1f:07:45:ed:2b:c1:78:9f:eb:96:78:4c:4d:e2:14:b5:44:92:
         47:49:eb:fb:6a:95:c7:6b:ed:f1:ce:65:82:6e:dc:28:80:0a:
         a3:45:74:ad:3b:14:ef:ff:e7:29:6e:e3:c8:9d:70:fa:de:3a:
         93:7b:59:e3:ec:20:8c:06:fe:91:4a:59:d7:21:ee:7a:8e:df:
         16:b4:8e:7c:f1:d3:ef:be:1e:e7:73:a4:c2:5a:5c:99:49:0f:
         05:3d:50:19:7e:a1:75:46:6e:3b:c5:fe:c0:22:40:2e:e1:9e:
         71:1b:69:50:56:74:db:54:4d:01:5a:44:8b:90:d1:ba:07:34:
         28:c4:1b:80:3e:65:65:9c:97:b2:fd:18:39:75:95:5d:2c:15:
         86:b4:9a:51:9f:a8:7b:ac:d8:1c:15:5f:91:8f:5e:40:a7:57:
         73:52:d3:27:4f:b8:ca:4a:0b:2f:a4:4c:26:aa:36:6e:18:40:
         e5:88:4b:e1:ac:69:a2:ab:c6:b2:3b:9e:bd:38:58:6d:4e:e9:
         c3:7b:c9:80:75:e8:93:a5:49:4a:dc:d9:b1:b7:e4:8b:d4:ef:
         de:c5:5c:31
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeyaWYyqjeCvI8XRjDSE7cUz1nlUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQwMDIyRDY3RkIxRDAxQzdBRjZBRDkxOTMxNkY3NEM2
QkQ2MUVDMzAeFw0yMzA3MTIyMDU1MTNaFw0yNDA3MTAyMTAwMTNaMDMxMTAvBgNV
BAMTKDhFREI3RTI3MTk1OEM2Q0M2MDRENTRBM0FEQTU0NkQ1Rjg5OENCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmmMaTqIo2bXeL4qhKhb51mtBO
sZcqOjQV/QeX7IuWwO+Q0BypwkZA8lnluk2LV+z2SsEdl0m/PLr9awfwRlU9+SkZ
lw/wch/ORYZ42LaeLrk/FrxtEssAJWHX+kOwC5wiZjSskwjspYaLWnLLgezmazRf
1FQ/6DRoTVZ2DECdUH3a0DgfERZFO2/TySXJevp6iS9BoQ9bccdUuWsj1XWqNX11
9XpFU3cS+Y087hNqEGbbpu8BRasieH07u3ZRsrTEsPl3NnwICuGe9X2UTm093U5t
v7kIL8mK/4uNRiwHDBf5jyyVr6OV8+bn6E2WEXSI356Ff84GTrHjYIdABQ5zAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjtt+JxlYxsxgTVSjraVG1fiYy6UwHwYDVR0j
BBgwFoAUTQAi1n+x0Bx69q2Rkxb3TGvWHsMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDlMREJpQ3Y5VWhOZENvQ2diTk5UZGZOWXlwbVg0QjM5QnBjZ1hROWhK
dkovMC80RDAwMjJENjdGQjFEMDFDN0FGNkFEOTE5MzE2Rjc0QzZCRDYxRUMzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzREMDAyMkQ2N0ZCMUQwMUM3
QUY2QUQ5MTkzMTZGNzRDNkJENjFFQzMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5TERCaUN2OVVoTmRDb0NnYk5OVGRmTll5cG1YNEIzOUJwY2dYUTloSnZKLzAv
MzEzODM2MmUzMjM1MzEyZTMxMzczMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzMzM4MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArr7rDANBgkqhkiG9w0BAQsFAAOCAQEAgfLb
yVrhT39JzcHM4PlqWaGtVcefAAPNYXJpofUJUPnzdykLHwdF7SvBeJ/rlnhMTeIU
tUSSR0nr+2qVx2vt8c5lgm7cKIAKo0V0rTsU7//nKW7jyJ1w+t46k3tZ4+wgjAb+
kUpZ1yHueo7fFrSOfPHT774e53OkwlpcmUkPBT1QGX6hdUZuO8X+wCJALuGecRtp
UFZ021RNAVpEi5DRugc0KMQbgD5lZZyXsv0YOXWVXSwVhrSaUZ+oe6zYHBVfkY9e
QKdXc1LTJ0+4ykoLL6RMJqo2bhhA5YhL4axpoqvGsjuevThYbU7pw3vJgHXok6VJ
StzZsbfki9Tv3sVcMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org