Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32322d3232203d3e203533313835.roa
File:                     3138362e3232372e38382e302f32322d3232203d3e203533313835.roa (raw, json)
Hash identifier:          Wn6equr+Vf+p0XsDObiyM9fK6xK400ZWhS8pwGVfrQ0=
Subject key identifier:   29:25:F7:7A:6F:89:86:F7:C6:3C:C7:27:AD:73:8C:67:81:DC:D2:9A
Certificate issuer:       /CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
Certificate serial:       20C424108582725FD11DA280CEB3E76365FEC5CC
Authority key identifier: 44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32322d3232203d3e203533313835.roa
Signing time:             Sat 15 Jul 2023 03:18:50 +0000
ROA not before:           Sat 15 Jul 2023 03:13:50 +0000
ROA not after:            Sat 13 Jul 2024 03:18:50 +0000
asID:                     53185
IP address blocks:        186.227.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:24:10:85:82:72:5f:d1:1d:a2:80:ce:b3:e7:63:65:fe:c5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA
        Validity
            Not Before: Jul 15 03:13:50 2023 GMT
            Not After : Jul 13 03:18:50 2024 GMT
        Subject: CN=2925F77A6F8986F7C63CC727AD738C6781DCD29A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:d1:c1:6f:b6:72:e7:f4:eb:df:0d:08:a3:
                    1a:3f:3a:2c:62:74:00:b6:1a:1f:9f:80:ce:f4:35:
                    71:49:8e:48:9b:a6:ce:6c:13:37:20:8c:07:26:b4:
                    d6:72:62:26:92:ee:b6:82:1e:41:01:ea:28:91:1b:
                    01:5e:2a:0b:94:1b:2f:4d:06:73:3a:5d:2e:85:b0:
                    50:9e:21:db:0e:db:96:42:0d:53:30:9c:a3:cc:82:
                    57:c8:e7:5f:3a:22:4d:d1:69:ba:a9:62:6a:37:a3:
                    38:7b:73:93:b2:54:a6:54:d3:63:73:a0:ab:52:c4:
                    3d:e0:83:7b:6d:c5:69:d8:02:13:7f:ef:c7:98:e3:
                    a6:77:55:79:50:c0:52:ed:bb:dd:3c:b8:6a:d1:bb:
                    b3:ec:67:4b:1c:f1:8c:96:20:a6:12:cc:48:63:71:
                    ff:30:98:ff:cd:ad:34:2b:4a:22:7b:d8:e5:95:37:
                    9f:f7:be:ab:bd:1a:ab:95:81:8a:f8:9c:9c:98:25:
                    0e:2d:b8:73:70:e9:8f:08:3c:1e:b7:1a:2d:de:08:
                    fa:80:ff:fa:52:74:1a:07:b5:48:3f:98:a0:76:fa:
                    28:30:d7:45:b5:2c:59:5d:e7:d6:42:bc:56:d5:c6:
                    c0:b2:92:5d:c3:56:a5:ad:1b:7c:b6:50:52:03:bc:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:25:F7:7A:6F:89:86:F7:C6:3C:C7:27:AD:73:8C:67:81:DC:D2:9A
            X509v3 Authority Key Identifier:
                keyid:44:EC:6B:38:2A:99:D4:F1:25:B2:F0:CD:E4:CC:D0:68:A1:E3:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44EC6B382A99D4F125B2F0CDE4CCD068A1E3FFDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DN1NM2y6cAPHJ9a8fdSNVFQsYmNbjZXShdJQF2BwMKqw/0/3138362e3232372e38382e302f32322d3232203d3e203533313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:54:df:9a:98:a9:10:86:09:16:1d:5d:3d:2c:b0:b3:b9:af:
         a1:a6:5a:96:b7:ba:19:2e:6b:a2:7f:b0:59:65:a6:86:36:3c:
         92:83:97:0f:c1:f3:ad:47:2e:e7:ae:88:c5:b6:dc:65:30:f7:
         2a:16:7d:4a:47:33:ee:66:91:6e:0d:9d:5e:21:22:0d:e1:cb:
         96:c1:e2:91:f4:1d:ec:60:84:df:2e:eb:97:9a:75:ae:b3:7b:
         a2:1c:a2:a2:01:90:2e:22:fa:77:0e:49:1b:a4:60:c7:50:fb:
         ef:65:54:4a:0c:aa:73:9c:8a:1a:f5:de:81:5e:03:15:51:2f:
         f5:9f:4c:8d:f9:7f:8d:57:82:71:c2:20:8e:3d:9a:e0:df:a6:
         9f:5c:8a:07:d7:88:84:77:06:7e:e0:b0:9d:92:f0:30:f8:31:
         ee:35:64:aa:e8:06:3b:63:35:2a:0f:c7:b0:22:7b:2a:7d:40:
         90:96:80:a2:13:ba:04:b4:bb:c0:b6:40:c1:8b:c1:36:1c:0d:
         18:a8:8b:f3:b4:39:3f:05:2a:ba:70:08:d7:c9:9b:21:30:0b:
         3d:a8:46:b8:23:ce:b8:f2:0a:97:76:e9:60:09:69:5a:9b:ce:
         dd:0c:c7:bb:60:46:81:5e:65:f0:13:35:00:72:10:22:d9:da:
         18:97:bb:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIMQkEIWCcl/RHaKAzrPnY2X+xcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRFQzZCMzgyQTk5RDRGMTI1QjJGMENERTRDQ0QwNjhB
MUUzRkZEQTAeFw0yMzA3MTUwMzEzNTBaFw0yNDA3MTMwMzE4NTBaMDMxMTAvBgNV
BAMTKDI5MjVGNzdBNkY4OTg2RjdDNjNDQzcyN0FENzM4QzY3ODFEQ0QyOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWtHBb7Zy5/Tr3w0Ioxo/Oixi
dAC2Gh+fgM70NXFJjkibps5sEzcgjAcmtNZyYiaS7raCHkEB6iiRGwFeKguUGy9N
BnM6XS6FsFCeIdsO25ZCDVMwnKPMglfI5186Ik3RabqpYmo3ozh7c5OyVKZU02Nz
oKtSxD3gg3ttxWnYAhN/78eY46Z3VXlQwFLtu908uGrRu7PsZ0sc8YyWIKYSzEhj
cf8wmP/NrTQrSiJ72OWVN5/3vqu9GquVgYr4nJyYJQ4tuHNw6Y8IPB63Gi3eCPqA
//pSdBoHtUg/mKB2+igw10W1LFld59ZCvFbVxsCykl3DVqWtG3y2UFIDvBABAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKSX3em+JhvfGPMcnrXOMZ4Hc0powHwYDVR0j
BBgwFoAUROxrOCqZ1PElsvDN5MzQaKHj/9owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRE4xTk0yeTZjQVBISjlhOGZkU05WRlFzWW1OYmpaWFNoZEpRRjJCd01L
cXcvMC80NEVDNkIzODJBOTlENEYxMjVCMkYwQ0RFNENDRDA2OEExRTNGRkRBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ0RUM2QjM4MkE5OUQ0RjEy
NUIyRjBDREU0Q0NEMDY4QTFFM0ZGREEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ROMU5NMnk2Y0FQSEo5YThmZFNOVkZRc1ltTmJqWlhTaGRKUUYyQndNS3F3LzAv
MzEzODM2MmUzMjMyMzcyZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMz
MzEzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuuNYMA0GCSqGSIb3DQEBCwUAA4IBAQBrVN+amKkQ
hgkWHV09LLCzua+hplqWt7oZLmuif7BZZaaGNjySg5cPwfOtRy7nrojFttxlMPcq
Fn1KRzPuZpFuDZ1eISIN4cuWweKR9B3sYITfLuuXmnWus3uiHKKiAZAuIvp3Dkkb
pGDHUPvvZVRKDKpznIoa9d6BXgMVUS/1n0yN+X+NV4JxwiCOPZrg36afXIoH14iE
dwZ+4LCdkvAw+DHuNWSq6AY7YzUqD8ewInsqfUCQloCiE7oEtLvAtkDBi8E2HA0Y
qIvztDk/BSq6cAjXyZshMAs9qEa4I8648gqXdulgCWlam87dDMe7YEaBXmXwEzUA
chAi2doYl7t+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org