Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa
File:                     3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa (raw, json)
Hash identifier:          KihYGQ7/iOG7d0B3vMXzif3JjvtLl9YjUn9TpaVjdSQ=
Subject key identifier:   C9:A2:E2:EA:93:8C:96:1E:BC:98:F4:88:4B:E7:9D:D4:B4:49:3C:BC
Certificate issuer:       /CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
Certificate serial:       56B25E6655D4CAF8923654BD5590E74BC5A8BB28
Authority key identifier: A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa
Signing time:             Sat 20 Jan 2024 03:30:19 +0000
ROA not before:           Sat 20 Jan 2024 03:25:19 +0000
ROA not after:            Sat 18 Jan 2025 03:30:19 +0000
asID:                     262518
IP address blocks:        138.122.172.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:5e:66:55:d4:ca:f8:92:36:54:bd:55:90:e7:4b:c5:a8:bb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46
        Validity
            Not Before: Jan 20 03:25:19 2024 GMT
            Not After : Jan 18 03:30:19 2025 GMT
        Subject: CN=C9A2E2EA938C961EBC98F4884BE79DD4B4493CBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:48:42:d9:7e:a9:4a:b8:44:5c:76:a4:09:
                    61:d9:cf:3f:89:60:85:4a:51:d1:ff:85:4e:d6:7a:
                    9c:46:d1:42:34:59:15:09:1a:19:81:db:e1:43:e5:
                    7d:1a:e7:d4:d5:dd:06:c8:20:15:d8:cb:a0:42:0e:
                    59:c5:42:bb:b0:f3:c6:bd:bd:50:97:7c:4a:8d:8b:
                    76:ec:c5:b5:89:20:61:cb:82:30:0f:2b:87:22:9e:
                    11:f4:73:14:1e:d0:af:5b:0c:4d:e4:48:d6:ad:18:
                    f1:32:ae:e9:ab:07:21:79:8e:f0:01:82:72:ca:93:
                    fe:bf:02:67:a7:88:3e:3a:62:df:67:2d:c5:45:49:
                    70:d9:c2:5a:0f:86:de:26:5c:fb:26:0f:22:48:f1:
                    24:21:3f:54:0c:6c:ca:f1:1c:cd:5b:60:ef:dd:86:
                    38:60:aa:da:3c:18:ec:5f:a7:60:84:cf:e6:eb:33:
                    9d:8e:2e:b9:68:54:ab:3d:24:df:61:0d:20:b2:5f:
                    06:34:41:b0:8e:90:86:e9:70:12:f3:74:36:c1:99:
                    e4:d6:71:27:32:36:de:f2:49:d7:f5:57:9e:ce:c8:
                    b2:e5:24:fb:16:35:9f:7a:12:38:30:15:c0:73:72:
                    30:e4:30:c3:b3:0d:8d:b6:d2:4a:37:6c:a0:97:84:
                    87:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A2:E2:EA:93:8C:96:1E:BC:98:F4:88:4B:E7:9D:D4:B4:49:3C:BC
            X509v3 Authority Key Identifier:
                keyid:A1:BE:25:BA:AE:90:F7:90:8E:E5:77:C3:C3:75:2F:E0:8A:F3:EC:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1BE25BAAE90F7908EE577C3C3752FE08AF3EC46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/0/3133382e3132322e3137322e302f32332d3234203d3e20323632353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         da:f1:79:52:1f:27:ce:a0:4a:9b:10:bb:8e:79:bd:3b:ec:f4:
         d0:7f:59:70:9a:74:e9:d2:e8:e0:bb:c2:bb:a4:f1:bd:1c:37:
         47:88:93:23:d9:93:8d:53:de:e1:cb:1f:ca:7d:80:98:7c:25:
         09:d9:3c:2a:08:a3:e3:ab:57:1b:3c:43:b8:5b:f5:71:03:2e:
         03:65:45:9c:45:9f:1b:ec:dc:24:69:3c:82:8a:6a:b9:8d:9b:
         f1:93:60:0f:33:6b:99:5e:fa:e1:23:34:56:be:7c:16:4e:d2:
         3c:81:f7:03:b3:e8:80:4f:f7:f1:41:9a:42:e7:22:ad:9c:b9:
         7c:62:22:89:9c:33:f9:c6:c4:f2:d4:a3:49:81:bd:ce:5e:48:
         48:70:09:50:fb:9d:7b:72:43:de:f6:77:f9:38:3e:cc:54:cc:
         cb:b6:0d:5a:7b:0a:cd:82:a0:01:6a:1b:85:5b:02:96:b0:fc:
         19:6e:fa:06:65:f0:98:03:0b:cf:1c:d5:a1:7a:3a:fa:bf:37:
         1a:67:f8:b1:98:45:43:cd:4f:9e:fb:e7:76:c7:51:ff:ed:2b:
         01:bb:08:29:98:12:7c:a4:c1:20:7b:95:00:fa:8e:4b:ee:25:
         2c:bd:63:74:5f:38:6e:80:b6:95:a6:36:30:14:51:4c:6a:38:
         e0:0a:fa:c8
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVrJeZlXUyviSNlS9VZDnS8WouygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFCRTI1QkFBRTkwRjc5MDhFRTU3N0MzQzM3NTJGRTA4
QUYzRUM0NjAeFw0yNDAxMjAwMzI1MTlaFw0yNTAxMTgwMzMwMTlaMDMxMTAvBgNV
BAMTKEM5QTJFMkVBOTM4Qzk2MUVCQzk4RjQ4ODRCRTc5REQ0QjQ0OTNDQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh10hC2X6pSrhEXHakCWHZzz+J
YIVKUdH/hU7WepxG0UI0WRUJGhmB2+FD5X0a59TV3QbIIBXYy6BCDlnFQruw88a9
vVCXfEqNi3bsxbWJIGHLgjAPK4cinhH0cxQe0K9bDE3kSNatGPEyrumrByF5jvAB
gnLKk/6/AmeniD46Yt9nLcVFSXDZwloPht4mXPsmDyJI8SQhP1QMbMrxHM1bYO/d
hjhgqto8GOxfp2CEz+brM52OLrloVKs9JN9hDSCyXwY0QbCOkIbpcBLzdDbBmeTW
cScyNt7ySdf1V57OyLLlJPsWNZ96EjgwFcBzcjDkMMOzDY220ko3bKCXhIflAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyaLi6pOMlh68mPSIS+ed1LRJPLwwHwYDVR0j
BBgwFoAUob4luq6Q95CO5XfDw3Uv4Irz7EYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGg3bXdKTEpCQjRBejRmanpXMnRXUWt3dlhrNXNOcDRqd0R5TlRZckgz
U3IvMC9BMUJFMjVCQUFFOTBGNzkwOEVFNTc3QzNDMzc1MkZFMDhBRjNFQzQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExQkUyNUJBQUU5MEY3OTA4
RUU1NzdDM0MzNzUyRkUwOEFGM0VDNDYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RoN213SkxKQkI0QXo0Zmp6VzJ0V1Frd3ZYazVzTnA0andEeU5UWXJIM1NyLzAv
MzEzMzM4MmUzMTMyMzIyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMy
MzYzMjM1MzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYp6rDANBgkqhkiG9w0BAQsFAAOCAQEA2vF5
Uh8nzqBKmxC7jnm9O+z00H9ZcJp06dLo4LvCu6TxvRw3R4iTI9mTjVPe4csfyn2A
mHwlCdk8Kgij46tXGzxDuFv1cQMuA2VFnEWfG+zcJGk8gopquY2b8ZNgDzNrmV76
4SM0Vr58Fk7SPIH3A7PogE/38UGaQucirZy5fGIiiZwz+cbE8tSjSYG9zl5ISHAJ
UPude3JD3vZ3+Tg+zFTMy7YNWnsKzYKgAWobhVsClrD8GW76BmXwmAMLzxzVoXo6
+r83Gmf4sZhFQ81PnvvndsdR/+0rAbsIKZgSfKTBIHuVAPqOS+4lLL1jdF84boC2
laY2MBRRTGo44Ar6yA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:22 2024 by rpki-client on console-ams.rpki-client.org