Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32342d3234203d3e203532383733.roa
File:                     3133382e3231392e3234342e302f32342d3234203d3e203532383733.roa (raw, json)
Hash identifier:          pj8opbRRyxSMDGbah6ReuNDjATF4mKEfeQUvnN9TE2E=
Subject key identifier:   E4:17:11:76:97:A8:2D:3D:B6:A5:38:01:78:1B:F5:72:E0:28:7E:9F
Certificate issuer:       /CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
Certificate serial:       21A816FA12BACE37005D1C6EB23033C1D0C5C15A
Authority key identifier: 0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32342d3234203d3e203532383733.roa
Signing time:             Sat 27 Jan 2024 23:10:41 +0000
ROA not before:           Sat 27 Jan 2024 23:05:41 +0000
ROA not after:            Sat 25 Jan 2025 23:10:41 +0000
asID:                     52873
IP address blocks:        138.219.244.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:a8:16:fa:12:ba:ce:37:00:5d:1c:6e:b2:30:33:c1:d0:c5:c1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18
        Validity
            Not Before: Jan 27 23:05:41 2024 GMT
            Not After : Jan 25 23:10:41 2025 GMT
        Subject: CN=E417117697A82D3DB6A53801781BF572E0287E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:50:69:58:fa:34:47:9d:d6:0d:b6:00:da:
                    f5:a5:87:c2:29:85:2c:41:d7:e4:61:ca:56:a7:5d:
                    db:b4:f1:f6:9d:56:2c:6f:4b:22:be:5f:2a:df:5a:
                    ca:72:0b:8a:8c:68:d2:11:eb:ea:cb:70:90:b5:09:
                    03:3b:bd:fd:c7:87:dd:3e:46:dd:0a:bd:e1:50:03:
                    8a:8a:34:14:86:c0:86:ee:fa:4e:7f:40:e6:f6:50:
                    3d:54:bb:56:ba:95:69:90:51:e0:2a:d0:ab:27:fa:
                    d2:40:03:1b:ae:47:b0:ca:d5:67:d3:b7:44:d8:b5:
                    a3:80:52:d4:3d:8c:46:81:50:6e:27:07:9b:c1:bc:
                    21:70:97:09:6f:6d:af:b2:e2:30:9e:a6:bc:d3:e7:
                    19:9f:64:c0:c1:11:60:32:5c:2b:17:fe:d3:a8:79:
                    01:88:57:2b:93:ff:71:22:38:df:87:97:2c:14:90:
                    95:16:cb:e8:db:3f:6a:bd:16:9c:19:35:2c:8d:cd:
                    79:d9:7a:0f:36:a7:5e:08:41:75:ec:7e:03:7f:23:
                    a6:62:d2:53:75:e2:74:f5:19:10:da:d0:52:7a:1d:
                    a5:aa:6d:ab:32:d1:7a:0c:d6:88:2b:77:61:37:dc:
                    72:e2:43:17:80:13:c9:b7:75:95:94:c8:89:6a:fc:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:11:76:97:A8:2D:3D:B6:A5:38:01:78:1B:F5:72:E0:28:7E:9F
            X509v3 Authority Key Identifier:
                keyid:0D:9E:AC:DA:81:F9:DF:90:7E:2E:EF:CE:0C:A6:B4:14:3E:4F:FE:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D9EACDA81F9DF907E2EEFCE0CA6B4143E4FFE18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Doju8FLmciHGBE7SQYgjp49ynHZudRRXN91QVRu4nGyE/0/3133382e3231392e3234342e302f32342d3234203d3e203532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:e0:e1:bf:3e:dc:4d:71:5b:8c:aa:61:40:35:12:fb:75:54:
         bf:84:4b:2c:31:b1:42:f4:db:95:b5:bc:51:d6:38:99:40:06:
         63:ea:0a:bd:3e:dd:bc:31:e2:dd:90:07:61:a4:f4:c9:cf:18:
         ef:37:9b:73:1d:81:70:0d:22:1a:de:76:1d:6b:fa:31:1c:3b:
         3c:76:8f:67:d4:92:15:ad:d1:f1:d4:7f:8c:9e:8d:0f:ff:21:
         46:5d:fc:81:38:ca:22:ac:d2:55:60:ae:27:4c:81:c2:fc:f7:
         15:a3:59:f5:12:4a:65:34:4f:43:5d:e6:8c:1d:5a:f1:11:78:
         1d:dd:8b:16:2e:2e:17:a8:45:fa:df:e2:45:34:71:2d:1d:d7:
         53:b7:67:cf:bd:4b:47:2e:2d:07:f3:16:07:85:51:6b:3d:07:
         46:d8:74:3b:81:27:11:e4:11:82:20:19:37:eb:2a:85:8e:7e:
         80:2a:6a:fd:f7:e8:b1:25:75:25:ff:68:f0:16:3f:94:e6:58:
         a6:ee:d3:9d:7c:5a:6b:26:19:96:fb:9e:fb:fb:cb:ed:24:69:
         c7:e2:e1:79:67:07:42:42:cf:42:e1:e9:7f:d3:57:f4:dc:43:
         0f:11:f9:81:4f:50:ad:42:f1:a5:5d:2d:21:03:e6:54:98:ce:
         f9:fa:c5:5b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIagW+hK6zjcAXRxusjAzwdDFwVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQ5RUFDREE4MUY5REY5MDdFMkVFRkNFMENBNkI0MTQz
RTRGRkUxODAeFw0yNDAxMjcyMzA1NDFaFw0yNTAxMjUyMzEwNDFaMDMxMTAvBgNV
BAMTKEU0MTcxMTc2OTdBODJEM0RCNkE1MzgwMTc4MUJGNTcyRTAyODdFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUVBpWPo0R53WDbYA2vWlh8Ip
hSxB1+RhylanXdu08fadVixvSyK+XyrfWspyC4qMaNIR6+rLcJC1CQM7vf3Hh90+
Rt0KveFQA4qKNBSGwIbu+k5/QOb2UD1Uu1a6lWmQUeAq0Ksn+tJAAxuuR7DK1WfT
t0TYtaOAUtQ9jEaBUG4nB5vBvCFwlwlvba+y4jCeprzT5xmfZMDBEWAyXCsX/tOo
eQGIVyuT/3EiON+HlywUkJUWy+jbP2q9FpwZNSyNzXnZeg82p14IQXXsfgN/I6Zi
0lN14nT1GRDa0FJ6HaWqbasy0XoM1ogrd2E33HLiQxeAE8m3dZWUyIlq/BKXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5BcRdpeoLT22pTgBeBv1cuAofp8wHwYDVR0j
BBgwFoAUDZ6s2oH535B+Lu/ODKa0FD5P/hgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRG9qdThGTG1jaUhHQkU3U1FZZ2pwNDl5bkhadWRSUlhOOTFRVlJ1NG5H
eUUvMC8wRDlFQUNEQTgxRjlERjkwN0UyRUVGQ0UwQ0E2QjQxNDNFNEZGRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEOUVBQ0RBODFGOURGOTA3
RTJFRUZDRTBDQTZCNDE0M0U0RkZFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RvanU4RkxtY2lIR0JFN1NRWWdqcDQ5eW5IWnVkUlJYTjkxUVZSdTRuR3lFLzAv
MzEzMzM4MmUzMjMxMzkyZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzIzODM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACK2/QwDQYJKoZIhvcNAQELBQADggEBAEvg4b8+
3E1xW4yqYUA1Evt1VL+ESywxsUL025W1vFHWOJlABmPqCr0+3bwx4t2QB2Gk9MnP
GO83m3MdgXANIhredh1r+jEcOzx2j2fUkhWt0fHUf4yejQ//IUZd/IE4yiKs0lVg
ridMgcL89xWjWfUSSmU0T0Nd5owdWvEReB3dixYuLheoRfrf4kU0cS0d11O3Z8+9
S0cuLQfzFgeFUWs9B0bYdDuBJxHkEYIgGTfrKoWOfoAqav336LEldSX/aPAWP5Tm
WKbu0518WmsmGZb7nvv7y+0kacfi4XlnB0JCz0Lh6X/TV/TcQw8R+YFPUK1C8aVd
LSED5lSYzvn6xVs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:39 2024 by rpki-client on console-ams.rpki-client.org