Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
File:                     3133382e3131382e39322e302f32322d3234203d3e203533313731.roa (raw, json)
Hash identifier:          kqJ00W1UBkN3U8h9zdJaDsgGAtjpuTDa1bjjD+pBYKw=
Subject key identifier:   95:1A:46:6B:9D:C1:EA:66:35:80:32:45:7B:4C:8D:9B:03:F9:32:53
Certificate issuer:       /CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
Certificate serial:       5E7D843AB68076597C0E97BF549B5E456BF3C86B
Authority key identifier: AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
Signing time:             Tue 23 Jul 2024 12:02:31 +0000
ROA not before:           Tue 23 Jul 2024 11:57:31 +0000
ROA not after:            Tue 22 Jul 2025 12:02:31 +0000
asID:                     53171
IP address blocks:        138.118.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7d:84:3a:b6:80:76:59:7c:0e:97:bf:54:9b:5e:45:6b:f3:c8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6
        Validity
            Not Before: Jul 23 11:57:31 2024 GMT
            Not After : Jul 22 12:02:31 2025 GMT
        Subject: CN=951A466B9DC1EA66358032457B4C8D9B03F93253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:10:e8:a4:33:1b:0d:80:f1:f2:1d:c6:e8:ab:
                    f4:cd:3d:a8:e7:ae:ef:53:bb:46:c2:5d:ef:1a:08:
                    ec:86:f2:73:e5:01:84:1d:37:ff:3e:84:e8:61:73:
                    8e:0f:bf:6a:d7:ad:9b:fe:ca:f5:cd:01:b1:91:d7:
                    c0:26:19:07:15:85:01:09:97:88:02:2a:f0:91:c9:
                    d5:83:8b:34:b9:e5:b2:f9:c0:3b:06:32:65:16:54:
                    5a:9c:4a:22:09:c5:0c:1c:15:c0:6c:c1:5e:42:32:
                    b3:b8:aa:c4:56:d5:15:ef:59:ca:85:99:dd:c7:f9:
                    6e:9b:54:a6:3b:fd:72:fd:f1:e9:d0:45:9d:cb:70:
                    df:92:14:e9:ef:c4:2f:22:3c:76:de:7a:6c:be:4d:
                    65:3f:f6:14:cd:4b:12:36:c2:12:e2:8d:e4:10:e2:
                    de:9a:58:6e:58:2f:df:2f:99:ff:8c:65:32:a7:a2:
                    22:4a:37:1f:45:b9:48:f7:41:1b:f7:4a:52:05:3f:
                    e6:df:3f:e8:28:ec:61:50:c1:67:71:d2:df:90:d0:
                    38:80:24:23:ec:27:3d:0c:b7:4c:19:99:a8:12:b5:
                    20:22:56:8d:95:09:1c:7b:15:f0:c6:ce:bc:c8:b3:
                    ab:fa:d8:cd:df:a6:27:c3:76:72:8c:fa:00:d5:d8:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1A:46:6B:9D:C1:EA:66:35:80:32:45:7B:4C:8D:9B:03:F9:32:53
            X509v3 Authority Key Identifier:
                keyid:AC:B8:2B:32:C9:DD:83:C7:E7:2D:B8:8C:0F:91:32:6D:9F:CF:01:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ACB82B32C9DD83C7E72DB88C0F91326D9FCF01D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:7c:aa:56:f5:75:02:dc:ac:67:45:ad:5c:e7:cf:b4:fd:3b:
         bc:7e:e2:45:18:04:4a:c3:a5:6e:e2:da:f1:ec:75:b3:1f:e9:
         32:0c:e0:2a:4b:cc:77:c8:1d:18:d3:49:50:3b:b3:62:01:01:
         1b:58:0a:51:77:c8:81:a8:cd:e3:83:d4:34:a5:3a:be:d2:b1:
         61:b0:dd:fa:14:30:cd:f5:e5:8e:71:55:90:af:91:ce:56:ba:
         ec:f1:d7:48:31:82:d7:5e:e8:0c:4c:1a:74:63:f9:b9:18:ec:
         b1:34:37:b8:72:b4:df:43:73:32:9b:29:61:de:39:d2:37:72:
         b4:0c:4d:07:04:6c:24:78:af:ed:f5:2a:54:68:cf:57:fa:5c:
         d3:62:2d:0c:2c:4f:59:dc:fa:a5:d4:46:a5:5a:cd:03:b8:85:
         94:cf:11:15:a9:75:a7:0c:85:66:a6:59:e7:4c:3c:18:ef:be:
         cd:1e:63:c7:a6:f3:b6:08:7b:40:48:e8:b7:11:4f:85:fb:c8:
         0c:d9:4f:a6:cc:ce:6c:44:62:0b:56:35:e1:78:ed:3b:be:81:
         90:97:43:4b:c3:26:95:68:43:98:85:91:b2:3e:ba:ae:fc:9b:
         c8:62:c7:6f:7c:12:e0:84:b8:66:0c:c9:9e:0f:de:b3:8a:94:
         35:fb:84:1e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXn2EOraAdll8Dpe/VJteRWvzyGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNCODJCMzJDOUREODNDN0U3MkRCODhDMEY5MTMyNkQ5
RkNGMDFENjAeFw0yNDA3MjMxMTU3MzFaFw0yNTA3MjIxMjAyMzFaMDMxMTAvBgNV
BAMTKDk1MUE0NjZCOURDMUVBNjYzNTgwMzI0NTdCNEM4RDlCMDNGOTMyNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcEOikMxsNgPHyHcboq/TNPajn
ru9Tu0bCXe8aCOyG8nPlAYQdN/8+hOhhc44Pv2rXrZv+yvXNAbGR18AmGQcVhQEJ
l4gCKvCRydWDizS55bL5wDsGMmUWVFqcSiIJxQwcFcBswV5CMrO4qsRW1RXvWcqF
md3H+W6bVKY7/XL98enQRZ3LcN+SFOnvxC8iPHbeemy+TWU/9hTNSxI2whLijeQQ
4t6aWG5YL98vmf+MZTKnoiJKNx9FuUj3QRv3SlIFP+bfP+go7GFQwWdx0t+Q0DiA
JCPsJz0Mt0wZmagStSAiVo2VCRx7FfDGzrzIs6v62M3fpifDdnKM+gDV2G+xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUlRpGa53B6mY1gDJFe0yNmwP5MlMwHwYDVR0j
BBgwFoAUrLgrMsndg8fnLbiMD5EybZ/PAdYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjRhZkNMeGtxSHc0c2pOaXNtVE1MNU01dTdUOXVMR0JZbkRtU0w1YTdx
WGYvMi9BQ0I4MkIzMkM5REQ4M0M3RTcyREI4OEMwRjkxMzI2RDlGQ0YwMUQ2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDQjgyQjMyQzlERDgzQzdF
NzJEQjg4QzBGOTEzMjZEOUZDRjAxRDYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y0YWZDTHhrcUh3NHNqTmlzbVRNTDVNNXU3VDl1TEdCWW5EbVNMNWE3cVhmLzIv
MzEzMzM4MmUzMTMxMzgyZTM5MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMz
MzEzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCinZcMA0GCSqGSIb3DQEBCwUAA4IBAQBQfKpW9XUC
3KxnRa1c58+0/Tu8fuJFGARKw6Vu4trx7HWzH+kyDOAqS8x3yB0Y00lQO7NiAQEb
WApRd8iBqM3jg9Q0pTq+0rFhsN36FDDN9eWOcVWQr5HOVrrs8ddIMYLXXugMTBp0
Y/m5GOyxNDe4crTfQ3Mymylh3jnSN3K0DE0HBGwkeK/t9SpUaM9X+lzTYi0MLE9Z
3Pql1EalWs0DuIWUzxEVqXWnDIVmplnnTDwY777NHmPHpvO2CHtASOi3EU+F+8gM
2U+mzM5sRGILVjXheO07voGQl0NLwyaVaEOYhZGyPrqu/JvIYsdvfBLghLhmDMme
D96zipQ1+4Qe
-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org