Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e31312e302f32342d3234203d3e20323633393637.roa
File:                     3133382e3230342e31312e302f32342d3234203d3e20323633393637.roa (raw, json)
Hash identifier:          IRK5NduJC94HpyguxAtMftP12/CHQ9OtN3TNoB55oGc=
Subject key identifier:   41:53:EF:34:C3:02:9F:40:37:01:6E:5B:33:1D:51:D5:BD:82:D5:A1
Certificate issuer:       /CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
Certificate serial:       46A6A250C86BC2FC6CC65743DB76110A952CDC94
Authority key identifier: 18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e31312e302f32342d3234203d3e20323633393637.roa
Signing time:             Tue 05 Mar 2024 23:06:39 +0000
ROA not before:           Tue 05 Mar 2024 23:01:39 +0000
ROA not after:            Tue 04 Mar 2025 23:06:39 +0000
asID:                     263967
IP address blocks:        138.204.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a6:a2:50:c8:6b:c2:fc:6c:c6:57:43:db:76:11:0a:95:2c:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B8146D641EF064D644BBB9F012845DFBA14C4D
        Validity
            Not Before: Mar  5 23:01:39 2024 GMT
            Not After : Mar  4 23:06:39 2025 GMT
        Subject: CN=4153EF34C3029F4037016E5B331D51D5BD82D5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:8d:13:c9:cb:4d:70:e2:e8:a8:8b:f5:95:
                    92:46:98:9f:84:78:d3:4b:12:d9:07:fa:5c:4e:bf:
                    e8:65:6e:eb:d9:cc:c6:7a:ad:0d:57:28:6e:27:54:
                    bf:fd:67:b4:0b:2d:5b:94:6f:45:59:01:d5:58:fc:
                    8e:0a:91:9f:9d:e3:0f:02:ec:37:d6:26:66:ab:e4:
                    63:d2:1f:19:0c:1a:0c:9a:cc:e7:2e:38:dc:8c:fe:
                    d6:f7:b0:d1:83:84:28:df:68:fd:47:03:db:67:4a:
                    4e:d3:f1:8d:37:2a:f0:b0:3f:75:d9:9e:51:7b:ef:
                    56:fb:c6:43:f9:95:e9:88:29:22:7d:b1:3c:a8:65:
                    c9:1a:c2:86:b7:9f:f8:93:f8:82:6b:44:80:d5:c9:
                    b2:88:88:e8:b7:99:81:b9:96:3f:e7:0e:56:a1:23:
                    a8:d7:66:59:c7:66:1b:99:37:46:7f:b8:07:34:c5:
                    b3:63:ea:22:fb:af:6a:0c:e3:2e:88:44:14:79:7c:
                    ae:ef:bb:ec:fa:da:38:81:3a:a0:e1:63:eb:1b:72:
                    8b:79:4d:d3:b0:8f:ea:34:49:b9:b1:cd:d9:00:a9:
                    10:f3:2d:f0:7d:24:b1:d8:1f:8e:b3:97:ce:7c:0c:
                    81:8c:bb:cf:93:7e:42:70:ec:4c:1a:e5:5f:73:94:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:53:EF:34:C3:02:9F:40:37:01:6E:5B:33:1D:51:D5:BD:82:D5:A1
            X509v3 Authority Key Identifier:
                keyid:18:B8:14:6D:64:1E:F0:64:D6:44:BB:B9:F0:12:84:5D:FB:A1:4C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/18B8146D641EF064D644BBB9F012845DFBA14C4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EJUaKhkLJJJa2F8vs4jFtzfTWksoenEjDbJwCfhaXfi8/0/3133382e3230342e31312e302f32342d3234203d3e20323633393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:65:99:aa:3b:e9:56:33:f8:7f:72:37:36:4a:09:5d:13:43:
         78:77:00:0b:eb:05:9a:bb:a0:eb:51:6f:56:55:c3:c7:9b:5d:
         f8:48:5c:7d:1a:81:1a:3d:87:31:82:af:79:e5:6b:46:73:ca:
         58:7f:a7:ef:96:57:3b:10:b3:2e:0f:74:d2:b4:10:be:c5:ce:
         ce:64:8c:22:74:d7:88:d6:1c:b8:a0:cb:c9:1e:10:f8:13:46:
         23:8c:81:94:41:99:d4:05:86:26:40:de:d2:b0:27:e8:8a:ad:
         2c:9a:e6:ce:5d:2f:24:f9:ba:40:8c:81:74:30:ca:b6:7b:7a:
         ff:c0:6e:ec:64:e1:0b:48:3a:89:8b:d3:dd:08:4f:79:94:8b:
         59:83:73:e6:9f:66:b0:97:43:64:bf:da:b5:3f:9a:61:89:bc:
         37:b3:04:05:38:c6:68:d7:2d:19:00:67:19:a2:62:60:1f:b9:
         8e:1b:79:aa:ba:e4:e6:f2:1d:93:c5:4a:b0:2c:4a:5a:1d:a1:
         5a:81:4f:c3:b1:57:38:b0:8e:5d:fa:b2:70:d4:e2:22:6a:38:
         f1:48:68:2b:9b:b0:f2:2d:10:13:96:e7:c6:80:54:bf:e6:b4:
         38:21:af:41:ba:d1:45:9b:ed:26:3f:f0:ec:df:c2:01:af:df:
         31:cd:4f:15
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURqaiUMhrwvxsxldD23YRCpUs3JQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMThCODE0NkQ2NDFFRjA2NEQ2NDRCQkI5RjAxMjg0NURG
QkExNEM0RDAeFw0yNDAzMDUyMzAxMzlaFw0yNTAzMDQyMzA2MzlaMDMxMTAvBgNV
BAMTKDQxNTNFRjM0QzMwMjlGNDAzNzAxNkU1QjMzMUQ1MUQ1QkQ4MkQ1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7v40TyctNcOLoqIv1lZJGmJ+E
eNNLEtkH+lxOv+hlbuvZzMZ6rQ1XKG4nVL/9Z7QLLVuUb0VZAdVY/I4KkZ+d4w8C
7DfWJmar5GPSHxkMGgyazOcuONyM/tb3sNGDhCjfaP1HA9tnSk7T8Y03KvCwP3XZ
nlF771b7xkP5lemIKSJ9sTyoZckawoa3n/iT+IJrRIDVybKIiOi3mYG5lj/nDlah
I6jXZlnHZhuZN0Z/uAc0xbNj6iL7r2oM4y6IRBR5fK7vu+z62jiBOqDhY+sbcot5
TdOwj+o0SbmxzdkAqRDzLfB9JLHYH46zl858DIGMu8+TfkJw7Ewa5V9zlCM1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQVPvNMMCn0A3AW5bMx1R1b2C1aEwHwYDVR0j
BBgwFoAUGLgUbWQe8GTWRLu58BKEXfuhTE0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUpVYUtoa0xKSkphMkY4dnM0akZ0emZUV2tzb2VuRWpEYkp3Q2ZoYVhm
aTgvMC8xOEI4MTQ2RDY0MUVGMDY0RDY0NEJCQjlGMDEyODQ1REZCQTE0QzRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE4QjgxNDZENjQxRUYwNjRE
NjQ0QkJCOUYwMTI4NDVERkJBMTRDNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VKVWFLaGtMSkpKYTJGOHZzNGpGdHpmVFdrc29lbkVqRGJKd0NmaGFYZmk4LzAv
MzEzMzM4MmUzMjMwMzQyZTMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzOTM2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKzAswDQYJKoZIhvcNAQELBQADggEBAFtlmao7
6VYz+H9yNzZKCV0TQ3h3AAvrBZq7oOtRb1ZVw8ebXfhIXH0agRo9hzGCr3nla0Zz
ylh/p++WVzsQsy4PdNK0EL7Fzs5kjCJ014jWHLigy8keEPgTRiOMgZRBmdQFhiZA
3tKwJ+iKrSya5s5dLyT5ukCMgXQwyrZ7ev/Abuxk4QtIOomL090IT3mUi1mDc+af
ZrCXQ2S/2rU/mmGJvDezBAU4xmjXLRkAZxmiYmAfuY4beaq65ObyHZPFSrAsSlod
oVqBT8OxVziwjl36snDU4iJqOPFIaCubsPItEBOW58aAVL/mtDghr0G60UWb7SY/
8OzfwgGv3zHNTxU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org