Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e342e302f32322d3234203d3e20323632383031.roa
File:                     3138362e3235302e342e302f32322d3234203d3e20323632383031.roa (raw, json)
Hash identifier:          er/bsmNfDTiJgI0bvHTPSWo6bqfy4cnh3U6ZZDgtXu4=
Subject key identifier:   57:EE:94:61:82:91:C5:FA:A6:D1:D6:8B:29:06:6E:55:EB:D2:41:9A
Certificate issuer:       /CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
Certificate serial:       2B118A2CCD456FB25DA5F46985178CF901F900A0
Authority key identifier: 7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e342e302f32322d3234203d3e20323632383031.roa
Signing time:             Sun 28 Jan 2024 00:18:12 +0000
ROA not before:           Sun 28 Jan 2024 00:13:12 +0000
ROA not after:            Sun 26 Jan 2025 00:18:12 +0000
asID:                     262801
IP address blocks:        186.250.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:11:8a:2c:cd:45:6f:b2:5d:a5:f4:69:85:17:8c:f9:01:f9:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6
        Validity
            Not Before: Jan 28 00:13:12 2024 GMT
            Not After : Jan 26 00:18:12 2025 GMT
        Subject: CN=57EE94618291C5FAA6D1D68B29066E55EBD2419A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:c0:5c:6f:22:f5:ef:3e:13:f0:bd:96:4f:
                    3c:b4:fd:0e:c1:44:0f:40:27:ca:a7:35:8f:4f:26:
                    73:d8:66:41:3c:10:b8:25:ff:41:44:1f:d6:2c:2a:
                    a6:54:f9:c7:2d:67:36:77:73:e5:39:0a:53:f7:35:
                    2b:94:31:eb:1c:f6:55:78:2c:04:06:43:fd:21:29:
                    55:39:e6:a1:4b:a2:af:a4:53:94:92:e7:a6:83:53:
                    6b:c5:25:44:66:1e:c9:26:62:a2:2d:9d:d2:b6:00:
                    56:dd:6f:f5:b5:9f:69:97:2f:e1:22:4f:66:74:66:
                    5c:e0:32:31:17:df:14:a1:8e:ea:38:d2:3d:7c:6d:
                    2d:bb:d1:ae:60:23:71:99:c2:c4:35:5f:ef:30:b8:
                    63:7c:8f:58:00:d7:74:9d:68:b2:5b:a3:49:b7:f7:
                    58:d2:e1:d8:38:9c:97:99:8c:2c:d8:9c:be:7a:92:
                    01:ac:2a:91:ee:d6:63:2b:b2:7b:fc:78:6b:18:27:
                    6e:cb:5d:61:d0:57:e3:dd:ab:ff:a8:dc:19:ef:bf:
                    99:4e:6b:b6:0a:91:40:f4:96:73:a2:64:2f:8a:be:
                    6b:aa:35:ae:be:ec:db:16:f1:2f:eb:0c:6b:39:10:
                    cc:9a:77:5b:54:1b:e9:db:9e:02:92:5f:ba:90:e1:
                    8e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:94:61:82:91:C5:FA:A6:D1:D6:8B:29:06:6E:55:EB:D2:41:9A
            X509v3 Authority Key Identifier:
                keyid:7D:45:E1:D0:EB:BF:C0:C5:8C:5B:59:B5:14:11:98:B5:B3:2C:99:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D45E1D0EBBFC0C58C5B59B5141198B5B32C99B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du5jZRdEVuiH3AFCGpy9BjmgranPKGwt39kDsiro3te2/0/3138362e3235302e342e302f32322d3234203d3e20323632383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:c6:58:60:8d:84:64:b9:bc:6a:7a:40:4f:ea:be:e6:e6:eb:
         c7:f3:9c:40:ef:37:aa:fa:90:8e:44:d0:53:c3:31:05:6e:4b:
         b9:18:65:82:5d:98:57:85:b1:a4:68:a1:49:bc:81:1e:c1:da:
         14:d1:31:f0:77:f4:2a:9e:24:e7:0e:85:31:b0:cd:4c:aa:7a:
         7e:7b:00:df:e1:64:29:8c:6a:dc:8a:1a:8f:64:1b:a3:67:95:
         e0:1f:a2:de:1c:cb:2f:48:68:0e:98:84:48:be:9b:8c:d4:54:
         43:41:33:f3:69:e9:08:f2:30:4b:31:95:d5:8c:43:d5:57:d5:
         df:d1:1f:d8:3f:e7:25:55:77:f3:7f:7c:92:0a:70:aa:eb:83:
         90:db:66:0d:ef:d5:53:98:7b:8a:56:2b:c2:7c:49:37:48:a1:
         a2:f3:ea:2f:87:f3:90:18:7b:cc:04:b3:b0:37:9f:e1:21:17:
         7e:00:99:0e:21:5b:cf:93:99:b1:a8:c3:de:56:59:0a:32:53:
         26:b9:02:52:73:27:80:5f:71:af:3b:ec:69:54:f2:73:bb:e0:
         62:a5:e4:d1:3b:f3:b3:d0:53:5d:b0:e5:a0:d5:65:63:ba:1b:
         1b:79:86:96:e9:77:96:e0:de:83:6b:07:05:b8:09:ec:20:3a:
         fc:54:f1:e1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKxGKLM1Fb7JdpfRphReM+QH5AKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q0NUUxRDBFQkJGQzBDNThDNUI1OUI1MTQxMTk4QjVC
MzJDOTlCNjAeFw0yNDAxMjgwMDEzMTJaFw0yNTAxMjYwMDE4MTJaMDMxMTAvBgNV
BAMTKDU3RUU5NDYxODI5MUM1RkFBNkQxRDY4QjI5MDY2RTU1RUJEMjQxOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSKMBcbyL17z4T8L2WTzy0/Q7B
RA9AJ8qnNY9PJnPYZkE8ELgl/0FEH9YsKqZU+cctZzZ3c+U5ClP3NSuUMesc9lV4
LAQGQ/0hKVU55qFLoq+kU5SS56aDU2vFJURmHskmYqItndK2AFbdb/W1n2mXL+Ei
T2Z0ZlzgMjEX3xShjuo40j18bS270a5gI3GZwsQ1X+8wuGN8j1gA13SdaLJbo0m3
91jS4dg4nJeZjCzYnL56kgGsKpHu1mMrsnv8eGsYJ27LXWHQV+Pdq/+o3Bnvv5lO
a7YKkUD0lnOiZC+KvmuqNa6+7NsW8S/rDGs5EMyad1tUG+nbngKSX7qQ4Y4nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUV+6UYYKRxfqm0daLKQZuVevSQZowHwYDVR0j
BBgwFoAUfUXh0Ou/wMWMW1m1FBGYtbMsmbYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU1alpSZEVWdWlIM0FGQ0dweTlCam1ncmFuUEtHd3QzOWtEc2lybzN0
ZTIvMC83RDQ1RTFEMEVCQkZDMEM1OEM1QjU5QjUxNDExOThCNUIzMkM5OUI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdENDVFMUQwRUJCRkMwQzU4
QzVCNTlCNTE0MTE5OEI1QjMyQzk5QjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1NWpaUmRFVnVpSDNBRkNHcHk5QmptZ3JhblBLR3d0MzlrRHNpcm8zdGUyLzAv
MzEzODM2MmUzMjM1MzAyZTM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzgzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCuvoEMA0GCSqGSIb3DQEBCwUAA4IBAQAyxlhgjYRk
ubxqekBP6r7m5uvH85xA7zeq+pCORNBTwzEFbku5GGWCXZhXhbGkaKFJvIEewdoU
0THwd/QqniTnDoUxsM1Mqnp+ewDf4WQpjGrcihqPZBujZ5XgH6LeHMsvSGgOmIRI
vpuM1FRDQTPzaekI8jBLMZXVjEPVV9Xf0R/YP+clVXfzf3ySCnCq64OQ22YN79VT
mHuKVivCfEk3SKGi8+ovh/OQGHvMBLOwN5/hIRd+AJkOIVvPk5mxqMPeVlkKMlMm
uQJScyeAX3GvO+xpVPJzu+BipeTRO/Oz0FNdsOWg1WVjuhsbeYaW6XeW4N6DawcF
uAnsIDr8VPHh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org