Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
File:                     3133382e39392e31322e302f32322d3234203d3e20323634313530.roa (raw, json)
Hash identifier:          UqnwGp9vRB+58T/yXucqbX0adyz13jT0SwUOjPXDNdA=
Subject key identifier:   73:F6:88:69:AF:7A:CA:A5:AC:D9:B7:15:E3:AB:2C:7E:70:F9:87:CF
Certificate issuer:       /CN=5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0
Certificate serial:       536D6191C6B7031D7E353923B416F3758002D25A
Authority key identifier: 5A:31:ED:F8:5D:2C:2F:70:A0:50:19:D7:EA:6F:5E:04:9D:18:C4:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa
Signing time:             Thu 31 Aug 2023 05:30:03 +0000
ROA not before:           Thu 31 Aug 2023 05:25:03 +0000
ROA not after:            Thu 29 Aug 2024 05:30:03 +0000
asID:                     264150
IP address blocks:        138.99.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6d:61:91:c6:b7:03:1d:7e:35:39:23:b4:16:f3:75:80:02:d2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0
        Validity
            Not Before: Aug 31 05:25:03 2023 GMT
            Not After : Aug 29 05:30:03 2024 GMT
        Subject: CN=73F68869AF7ACAA5ACD9B715E3AB2C7E70F987CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:28:91:62:08:8f:bc:f0:96:7f:77:01:a2:
                    6b:3b:f8:2a:6b:58:21:82:e1:73:b1:0e:eb:ef:81:
                    c6:c9:5f:42:f6:65:36:6e:3a:27:52:f0:21:60:c6:
                    4c:69:61:a4:98:60:7a:96:b7:44:13:fc:f2:f9:16:
                    b0:01:84:55:6d:2c:02:e9:9b:35:77:4e:53:fd:4f:
                    aa:8b:03:e1:b1:fa:be:5f:df:4e:9c:bf:34:3a:83:
                    b1:7a:20:9c:d6:16:bb:04:2d:e5:73:17:a9:c9:b6:
                    15:e8:84:18:d5:66:ce:a7:c3:c2:5e:15:80:03:53:
                    87:88:0c:af:6c:05:e5:0a:9d:c5:82:79:0d:41:f1:
                    c4:b1:cc:67:6e:4f:86:ad:58:63:17:1f:f9:8d:8b:
                    36:83:96:f6:1e:1c:1b:70:d7:f3:c9:73:2b:cb:8d:
                    1c:f3:a7:92:54:a5:7f:14:6e:84:aa:77:43:4b:f5:
                    8b:8c:a4:4b:bf:14:69:e5:a2:15:9a:85:68:a5:08:
                    2c:c5:b3:71:4b:c8:0f:9b:3b:a9:d6:f7:32:54:e3:
                    df:08:43:78:5c:85:9c:fb:02:a8:6b:f0:a6:7d:8d:
                    3d:9b:e4:4b:50:47:7c:2c:c3:05:3d:18:94:2f:68:
                    c5:d7:f0:e9:f9:1a:ee:dc:51:78:fb:29:03:3f:f8:
                    a9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:88:69:AF:7A:CA:A5:AC:D9:B7:15:E3:AB:2C:7E:70:F9:87:CF
            X509v3 Authority Key Identifier:
                keyid:5A:31:ED:F8:5D:2C:2F:70:A0:50:19:D7:EA:6F:5E:04:9D:18:C4:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A31EDF85D2C2F70A05019D7EA6F5E049D18C4C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/1/3133382e39392e31322e302f32322d3234203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:7a:5f:04:d2:28:9c:96:65:b7:1b:c5:98:de:ad:64:66:
         be:88:b6:bc:09:03:3d:6f:7f:46:e4:de:dd:a8:40:fd:3d:a8:
         13:77:c3:42:8e:7a:9e:67:e4:03:fe:73:0a:50:3e:63:42:1f:
         45:32:da:5e:2b:5e:28:d0:bb:3b:7b:cb:2c:3e:31:e0:17:90:
         5b:5c:d0:9a:e5:9e:ea:b8:97:9d:6a:5f:05:d6:4e:3e:19:02:
         84:ce:a4:e9:77:21:98:a1:45:ac:d2:2f:fa:9a:78:11:98:14:
         66:82:10:b8:e9:28:ce:71:ff:27:de:6f:2e:2f:5c:9a:ab:43:
         6a:5d:e8:17:6b:32:3c:fe:f2:eb:63:f9:c9:17:3f:a9:8b:3b:
         a5:3a:48:a8:c3:b3:b1:ae:50:1b:74:de:25:67:44:86:f3:84:
         25:72:8b:68:c0:aa:ab:e9:e1:2f:e2:b4:e6:d4:97:9d:41:ea:
         e8:c9:35:51:0a:28:62:6c:69:93:a1:4c:7d:34:0b:7a:47:12:
         14:b7:2b:91:13:8e:bc:39:cb:52:75:7f:3c:67:a0:eb:a0:c0:
         0b:d4:d7:c7:f3:bf:96:b9:53:23:13:3e:87:7a:36:d3:bf:99:
         8f:e0:0d:5e:b0:1e:ef:19:73:bd:d7:0e:59:c8:28:a9:69:37:
         c6:2b:72:f1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU21hkca3Ax1+NTkjtBbzdYAC0lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzMUVERjg1RDJDMkY3MEEwNTAxOUQ3RUE2RjVFMDQ5
RDE4QzRDMDAeFw0yMzA4MzEwNTI1MDNaFw0yNDA4MjkwNTMwMDNaMDMxMTAvBgNV
BAMTKDczRjY4ODY5QUY3QUNBQTVBQ0Q5QjcxNUUzQUIyQzdFNzBGOTg3Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfiiRYgiPvPCWf3cBoms7+Cpr
WCGC4XOxDuvvgcbJX0L2ZTZuOidS8CFgxkxpYaSYYHqWt0QT/PL5FrABhFVtLALp
mzV3TlP9T6qLA+Gx+r5f306cvzQ6g7F6IJzWFrsELeVzF6nJthXohBjVZs6nw8Je
FYADU4eIDK9sBeUKncWCeQ1B8cSxzGduT4atWGMXH/mNizaDlvYeHBtw1/PJcyvL
jRzzp5JUpX8UboSqd0NL9YuMpEu/FGnlohWahWilCCzFs3FLyA+bO6nW9zJU498I
Q3hchZz7Aqhr8KZ9jT2b5EtQR3wswwU9GJQvaMXX8On5Gu7cUXj7KQM/+KnTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUc/aIaa96yqWs2bcV46ssfnD5h88wHwYDVR0j
BBgwFoAUWjHt+F0sL3CgUBnX6m9eBJ0YxMAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTl2RlNlS1RQcTE3UFpRNEhtQlFSVUZzZ1h1TFAyNlRYeDUxNHduRnhH
czEvMS81QTMxRURGODVEMkMyRjcwQTA1MDE5RDdFQTZGNUUwNDlEMThDNEMwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVBMzFFREY4NUQyQzJGNzBB
MDUwMTlEN0VBNkY1RTA0OUQxOEM0QzAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U5dkZTZUtUUHExN1BaUTRIbUJRUlVGc2dYdUxQMjZUWHg1MTR3bkZ4R3MxLzEv
MzEzMzM4MmUzOTM5MmUzMTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCimMMMA0GCSqGSIb3DQEBCwUAA4IBAQBR+3pfBNIo
nJZltxvFmN6tZGa+iLa8CQM9b39G5N7dqED9PagTd8NCjnqeZ+QD/nMKUD5jQh9F
MtpeK14o0Ls7e8ssPjHgF5BbXNCa5Z7quJedal8F1k4+GQKEzqTpdyGYoUWs0i/6
mngRmBRmghC46SjOcf8n3m8uL1yaq0NqXegXazI8/vLrY/nJFz+pizulOkiow7Ox
rlAbdN4lZ0SG84QlcotowKqr6eEv4rTm1JedQeroyTVRCihibGmToUx9NAt6RxIU
tyuRE468OctSdX88Z6DroMAL1NfH87+WuVMjEz6HejbTv5mP4A1esB7vGXO91w5Z
yCipaTfGK3Lx
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org