Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3234203d3e203631353838.roa
File:                     3133382e3138352e36302e302f32322d3234203d3e203631353838.roa (raw, json)
Hash identifier:          45cA2jzReYc0HfJwmj1Hhqvnb8ssPVSTOwD1jbDXRw8=
Subject key identifier:   4D:D1:54:BE:D4:D0:5A:E2:A7:F7:44:87:04:6E:D5:32:25:8A:77:30
Certificate issuer:       /CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
Certificate serial:       3697E2D823096D306EDF633332358989C776EB78
Authority key identifier: D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3234203d3e203631353838.roa
Signing time:             Fri 18 Nov 2022 17:50:22 +0000
ROA not before:           Fri 18 Nov 2022 17:45:22 +0000
ROA not after:            Fri 17 Nov 2023 17:50:22 +0000
asID:                     61588
IP address blocks:        138.185.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:97:e2:d8:23:09:6d:30:6e:df:63:33:32:35:89:89:c7:76:eb:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D50A97EE54BF86BFD653D98219A161E5CFC502DC
        Validity
            Not Before: Nov 18 17:45:22 2022 GMT
            Not After : Nov 17 17:50:22 2023 GMT
        Subject: CN=4DD154BED4D05AE2A7F74487046ED532258A7730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:e0:e7:70:d3:ba:3c:a5:b4:7d:c4:a5:5f:
                    a9:fd:e3:72:a0:39:c8:a4:89:92:89:26:8f:83:35:
                    5a:b7:04:62:6c:28:61:2d:cd:8c:2f:3d:04:24:bc:
                    6c:cf:64:80:50:a0:01:41:34:4c:ed:19:5d:13:ab:
                    37:a7:44:f2:56:f0:36:93:49:e7:36:1c:4e:c3:3e:
                    f9:7a:b0:c3:8b:07:17:75:23:35:e4:e8:6e:39:99:
                    5a:02:60:f3:85:b5:13:78:55:11:01:ce:76:a6:e4:
                    fa:b1:61:37:ed:66:f4:1e:65:dc:08:20:60:40:ff:
                    ce:04:6a:81:af:59:cc:89:84:8b:33:42:67:a0:87:
                    0d:ba:9f:9d:88:c8:07:3e:89:c4:57:de:28:1b:9c:
                    e0:78:34:cc:1b:b1:8a:4f:ce:d0:26:6b:d5:f6:17:
                    84:77:09:7f:85:2a:99:5b:81:15:9e:d3:3a:b3:e7:
                    d9:0d:41:fc:e9:55:6d:dd:36:54:d4:a8:f9:f5:e7:
                    f5:b9:31:88:b0:ea:14:43:78:54:08:0d:51:3a:63:
                    5a:ba:a7:29:16:c7:60:94:3a:e3:71:f9:4e:29:7d:
                    27:57:68:c1:8d:dd:85:31:5d:85:d8:12:88:bd:16:
                    d8:5f:6c:c0:73:18:e6:8c:26:b5:44:02:29:c3:b1:
                    48:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D1:54:BE:D4:D0:5A:E2:A7:F7:44:87:04:6E:D5:32:25:8A:77:30
            X509v3 Authority Key Identifier:
                keyid:D5:0A:97:EE:54:BF:86:BF:D6:53:D9:82:19:A1:61:E5:CF:C5:02:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D50A97EE54BF86BFD653D98219A161E5CFC502DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DBdVWmNDzArDgU1FonFJKHMiXtp44Yd3bST6NyffGCgg/0/3133382e3138352e36302e302f32322d3234203d3e203631353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:15:31:83:61:20:ae:a8:b6:05:36:ac:9b:bd:0e:3f:f7:35:
         8f:6c:3b:6c:0a:10:50:c2:cc:88:de:4b:2f:2c:a8:fe:3e:d2:
         c4:3c:ac:f3:7e:14:81:6b:17:1a:5b:89:2b:1a:da:5f:fa:a3:
         3d:94:b9:43:e7:ef:28:9e:3f:58:b1:59:ae:cd:eb:f6:87:04:
         82:8b:64:85:26:22:7f:7a:11:f1:5f:32:0b:0a:95:7d:14:e7:
         b7:b0:72:e8:50:27:08:7c:3c:31:fd:98:5d:96:31:67:f4:eb:
         26:56:b3:06:ce:34:7b:20:fd:52:13:96:69:89:32:f4:e5:9e:
         7b:72:b7:08:2a:70:4a:66:fa:11:fa:10:ff:42:03:3b:20:e9:
         a0:22:81:79:97:54:34:cd:c7:0e:f3:47:2f:09:2b:fc:f5:5f:
         29:4a:e2:d6:55:ac:00:2d:4f:8c:a1:1d:72:53:92:b7:50:7b:
         be:c9:a2:3b:f4:d0:03:04:e7:81:3b:b5:00:ba:07:b4:17:51:
         25:12:20:8c:ac:15:8c:09:be:b2:5d:4e:fa:38:59:a3:a8:e9:
         d2:4a:ea:7b:f0:d5:92:c3:e3:35:41:f5:24:d4:0a:7f:27:f0:
         ea:3c:09:56:28:20:e0:4c:d9:88:90:8f:fc:bb:43:37:59:17:
         19:fa:3f:9f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNpfi2CMJbTBu32MzMjWJicd263gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDUwQTk3RUU1NEJGODZCRkQ2NTNEOTgyMTlBMTYxRTVD
RkM1MDJEQzAeFw0yMjExMTgxNzQ1MjJaFw0yMzExMTcxNzUwMjJaMDMxMTAvBgNV
BAMTKDRERDE1NEJFRDREMDVBRTJBN0Y3NDQ4NzA0NkVENTMyMjU4QTc3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS+DncNO6PKW0fcSlX6n943Kg
OcikiZKJJo+DNVq3BGJsKGEtzYwvPQQkvGzPZIBQoAFBNEztGV0TqzenRPJW8DaT
Sec2HE7DPvl6sMOLBxd1IzXk6G45mVoCYPOFtRN4VREBznam5PqxYTftZvQeZdwI
IGBA/84EaoGvWcyJhIszQmeghw26n52IyAc+icRX3igbnOB4NMwbsYpPztAma9X2
F4R3CX+FKplbgRWe0zqz59kNQfzpVW3dNlTUqPn15/W5MYiw6hRDeFQIDVE6Y1q6
pykWx2CUOuNx+U4pfSdXaMGN3YUxXYXYEoi9FthfbMBzGOaMJrVEAinDsUhVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTdFUvtTQWuKn90SHBG7VMiWKdzAwHwYDVR0j
BBgwFoAU1QqX7lS/hr/WU9mCGaFh5c/FAtwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREJkVldtTkR6QXJEZ1UxRm9uRkpLSE1pWHRwNDRZZDNiU1Q2TnlmZkdD
Z2cvMC9ENTBBOTdFRTU0QkY4NkJGRDY1M0Q5ODIxOUExNjFFNUNGQzUwMkRDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q1MEE5N0VFNTRCRjg2QkZE
NjUzRDk4MjE5QTE2MUU1Q0ZDNTAyREMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RCZFZXbU5EekFyRGdVMUZvbkZKS0hNaVh0cDQ0WWQzYlNUNk55ZmZHQ2dnLzAv
MzEzMzM4MmUzMTM4MzUyZTM2MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzUzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCirk8MA0GCSqGSIb3DQEBCwUAA4IBAQA2FTGDYSCu
qLYFNqybvQ4/9zWPbDtsChBQwsyI3ksvLKj+PtLEPKzzfhSBaxcaW4krGtpf+qM9
lLlD5+8onj9YsVmuzev2hwSCi2SFJiJ/ehHxXzILCpV9FOe3sHLoUCcIfDwx/Zhd
ljFn9OsmVrMGzjR7IP1SE5ZpiTL05Z57crcIKnBKZvoR+hD/QgM7IOmgIoF5l1Q0
zccO80cvCSv89V8pSuLWVawALU+MoR1yU5K3UHu+yaI79NADBOeBO7UAuge0F1El
EiCMrBWMCb6yXU76OFmjqOnSSup78NWSw+M1QfUk1Ap/J/DqPAlWKCDgTNmIkI/8
u0M3WRcZ+j+f
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org