Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
File:                     3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa (raw, json)
Hash identifier:          EVTTdNQEJKeufNjL99HNpW2zFqEQE0C5/Xdr37OS6yw=
Subject key identifier:   A9:55:82:F3:22:AA:AF:95:95:7E:7F:2E:5D:C3:7B:87:74:63:90:07
Certificate issuer:       /CN=D734736DE25120E6797606BF75F2DB44E938B286
Certificate serial:       6F899464FB70764A580A143878C687EEF03157A8
Authority key identifier: D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa
Signing time:             Fri 22 Mar 2024 17:45:05 +0000
ROA not before:           Fri 22 Mar 2024 17:40:05 +0000
ROA not after:            Fri 21 Mar 2025 17:45:05 +0000
asID:                     264197
IP address blocks:        138.97.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:89:94:64:fb:70:76:4a:58:0a:14:38:78:c6:87:ee:f0:31:57:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D734736DE25120E6797606BF75F2DB44E938B286
        Validity
            Not Before: Mar 22 17:40:05 2024 GMT
            Not After : Mar 21 17:45:05 2025 GMT
        Subject: CN=A95582F322AAAF95957E7F2E5DC37B8774639007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:a5:90:9c:f4:50:a6:78:11:84:86:38:22:
                    a7:fc:74:f7:9c:83:1a:f5:dc:c5:07:46:d0:3c:90:
                    17:4c:5c:95:b2:99:08:43:93:52:e6:46:3d:e8:c3:
                    f9:c9:44:33:89:c4:f9:ce:ed:18:c4:81:34:5c:77:
                    66:1a:49:75:d7:90:45:0b:0c:77:3c:b2:75:1a:78:
                    45:34:56:1e:3d:6d:31:e7:21:19:e9:0d:7f:d9:46:
                    52:54:7d:f2:0e:b6:63:54:dc:ed:9b:a8:97:ba:21:
                    97:aa:51:a9:55:bf:d6:c9:f2:9a:2d:7a:cf:06:16:
                    95:ea:c1:11:d9:23:a0:c3:bf:f9:fa:63:4a:91:c6:
                    f5:85:4a:54:62:66:86:dd:77:13:9f:56:1e:ce:a2:
                    50:4c:b0:14:f7:63:5b:23:31:8b:4d:e7:84:dc:f2:
                    f9:b1:05:45:60:dc:02:f4:48:33:f6:46:32:65:af:
                    84:e3:13:bc:7e:b4:ed:e5:87:3f:bd:56:a7:ae:80:
                    85:b0:c8:d3:d4:bc:28:f5:dc:2a:24:53:9e:a4:fa:
                    95:01:0d:76:88:d3:2f:aa:9a:e4:5e:8e:27:42:0f:
                    a7:fa:04:8c:53:ae:af:c3:2e:06:01:60:ba:0c:2f:
                    fc:be:8c:f7:31:d2:5d:b6:a9:dc:e5:fd:ff:a2:f5:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:55:82:F3:22:AA:AF:95:95:7E:7F:2E:5D:C3:7B:87:74:63:90:07
            X509v3 Authority Key Identifier:
                keyid:D7:34:73:6D:E2:51:20:E6:79:76:06:BF:75:F2:DB:44:E9:38:B2:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/D734736DE25120E6797606BF75F2DB44E938B286.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D734736DE25120E6797606BF75F2DB44E938B286.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/0/3133382e39372e3135302e302f32342d3234203d3e20323634313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:17:df:d7:2e:5a:d6:d2:7b:af:6a:d4:65:13:f2:7c:9f:b5:
         40:d7:95:a4:a4:8a:54:1c:2d:82:06:d6:4e:1c:3f:02:b7:ea:
         d4:9a:fc:9c:10:8f:17:45:12:61:af:ee:0d:47:54:a8:af:f3:
         fd:ee:80:21:97:7e:bc:6d:19:36:06:61:99:05:4d:9d:f8:4d:
         0d:84:53:6f:e8:b8:a9:84:f0:53:99:c7:6a:5c:cc:27:11:25:
         f2:21:be:e9:79:9a:d5:22:70:a3:87:a3:00:ac:57:b4:3e:05:
         c4:ed:e5:6c:df:a5:42:b0:79:3d:0d:7c:14:57:07:a5:73:24:
         c4:ee:d0:8e:13:fb:1f:e9:f2:cb:70:f2:de:af:f0:b9:a0:8b:
         3a:cc:18:6e:75:52:ea:2e:38:a7:47:83:2d:88:29:10:20:f5:
         4d:ff:0c:31:ca:91:ca:d9:e0:a0:b9:8b:7f:76:2a:e9:52:e1:
         3c:44:00:31:31:6c:4e:7e:3f:0b:a3:bb:7f:2e:7a:e1:75:33:
         ac:15:68:1a:bc:3f:81:2c:a1:0f:72:b4:37:f3:16:23:76:bc:
         90:f2:d2:07:31:23:1c:e8:1d:6e:b3:1f:98:bd:41:7e:bd:a3:
         06:f5:dc:45:d7:4f:99:7c:fb:2c:9b:9c:57:12:50:f9:d8:99:
         34:a5:be:bb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUb4mUZPtwdkpYChQ4eMaH7vAxV6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDczNDczNkRFMjUxMjBFNjc5NzYwNkJGNzVGMkRCNDRF
OTM4QjI4NjAeFw0yNDAzMjIxNzQwMDVaFw0yNTAzMjExNzQ1MDVaMDMxMTAvBgNV
BAMTKEE5NTU4MkYzMjJBQUFGOTU5NTdFN0YyRTVEQzM3Qjg3NzQ2MzkwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSqWQnPRQpngRhIY4Iqf8dPec
gxr13MUHRtA8kBdMXJWymQhDk1LmRj3ow/nJRDOJxPnO7RjEgTRcd2YaSXXXkEUL
DHc8snUaeEU0Vh49bTHnIRnpDX/ZRlJUffIOtmNU3O2bqJe6IZeqUalVv9bJ8pot
es8GFpXqwRHZI6DDv/n6Y0qRxvWFSlRiZobddxOfVh7OolBMsBT3Y1sjMYtN54Tc
8vmxBUVg3AL0SDP2RjJlr4TjE7x+tO3lhz+9VqeugIWwyNPUvCj13CokU56k+pUB
DXaI0y+qmuRejidCD6f6BIxTrq/DLgYBYLoML/y+jPcx0l22qdzl/f+i9fpJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUqVWC8yKqr5WVfn8uXcN7h3RjkAcwHwYDVR0j
BBgwFoAU1zRzbeJRIOZ5dga/dfLbROk4soYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMC9ENzM0NzM2REUyNTEyMEU2Nzk3NjA2QkY3NUYyREI0NEU5MzhCMjg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3MzQ3MzZERTI1MTIwRTY3
OTc2MDZCRjc1RjJEQjQ0RTkzOEIyODYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiNU1halU5ZjdwTHlyU2lkVmRaV2JzM0U3RHlucE5UZjNvUWVmRnI5UzVULzAv
MzEzMzM4MmUzOTM3MmUzMTM1MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKYZYwDQYJKoZIhvcNAQELBQADggEBACQX39cu
WtbSe69q1GUT8nyftUDXlaSkilQcLYIG1k4cPwK36tSa/JwQjxdFEmGv7g1HVKiv
8/3ugCGXfrxtGTYGYZkFTZ34TQ2EU2/ouKmE8FOZx2pczCcRJfIhvul5mtUicKOH
owCsV7Q+BcTt5WzfpUKweT0NfBRXB6VzJMTu0I4T+x/p8stw8t6v8LmgizrMGG51
UuouOKdHgy2IKRAg9U3/DDHKkcrZ4KC5i392KulS4TxEADExbE5+Pwuju38ueuF1
M6wVaBq8P4EsoQ9ytDfzFiN2vJDy0gcxIxzoHW6zH5i9QX69owb13EXXT5l8+yyb
nFcSUPnYmTSlvrs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org