Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634353734.roa
File:                     3133382e3235352e3133362e302f32322d3234203d3e20323634353734.roa (raw, json)
Hash identifier:          zDH96Pc9GTKCQvoMM4MeEEhcDJ68csfdJO1ZuTNI+VU=
Subject key identifier:   2A:AF:6D:17:50:07:73:39:D7:CB:EF:96:ED:CF:28:D2:CF:12:74:0D
Certificate issuer:       /CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
Certificate serial:       565589AFAA9B2F4C766A05E54E5247855A03A1FA
Authority key identifier: D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634353734.roa
Signing time:             Wed 13 Dec 2023 17:24:02 +0000
ROA not before:           Wed 13 Dec 2023 17:19:02 +0000
ROA not after:            Wed 11 Dec 2024 17:24:02 +0000
asID:                     264574
IP address blocks:        138.255.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:55:89:af:aa:9b:2f:4c:76:6a:05:e5:4e:52:47:85:5a:03:a1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9
        Validity
            Not Before: Dec 13 17:19:02 2023 GMT
            Not After : Dec 11 17:24:02 2024 GMT
        Subject: CN=2AAF6D1750077339D7CBEF96EDCF28D2CF12740D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:0a:73:c8:13:fb:76:46:47:98:7f:36:0c:
                    12:5b:f6:f2:76:39:7c:a3:05:3c:3f:d1:20:20:94:
                    3d:78:41:49:72:bb:33:eb:bb:40:77:3c:3e:1e:93:
                    c4:6b:f8:0a:01:80:86:a0:34:aa:19:10:77:cc:c9:
                    1a:33:57:1f:d7:87:1d:0c:0f:f0:89:2a:d7:4f:56:
                    e5:83:88:f4:54:66:ef:55:5b:a9:4a:c9:d8:12:66:
                    b0:81:7f:7f:82:41:a9:71:1e:50:b1:26:8c:e6:7c:
                    b8:f3:15:c0:c0:cb:d5:b0:a8:5e:f6:83:01:41:17:
                    d5:96:70:bb:3b:6f:cb:16:87:22:ba:7f:55:57:da:
                    68:54:fe:ba:73:d4:36:15:36:e0:d2:b6:f8:d0:c9:
                    ce:c2:07:51:c3:a7:50:a2:ac:b0:57:0b:ea:8e:1d:
                    16:23:3c:a9:9b:55:cf:f3:5e:82:ad:ae:97:de:a2:
                    16:25:a2:92:ad:0d:fb:90:92:68:51:99:d6:69:39:
                    26:28:d4:74:58:0d:57:5a:a2:6f:25:47:65:c0:d2:
                    08:ab:97:59:c0:0c:43:fd:04:79:07:76:90:b9:77:
                    0d:78:4a:da:38:c7:ab:4c:0b:f9:30:c1:dc:6f:55:
                    d9:96:0a:26:92:8d:d5:be:97:ba:b5:5c:b8:df:b2:
                    83:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AF:6D:17:50:07:73:39:D7:CB:EF:96:ED:CF:28:D2:CF:12:74:0D
            X509v3 Authority Key Identifier:
                keyid:D7:7B:35:FD:C7:6F:70:6D:76:A2:AD:D5:9A:CF:80:8B:63:AC:F1:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D77B35FDC76F706D76A2ADD59ACF808B63ACF1D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32322d3234203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:78:31:db:c4:83:c3:b0:d8:04:f5:68:17:77:24:00:56:fc:
         43:46:84:bc:75:3d:e6:55:69:6e:d2:96:d6:14:53:2b:1e:bf:
         06:56:f7:75:e4:5e:78:eb:bb:71:9e:5d:a4:88:47:ea:84:fb:
         f0:dc:84:78:aa:6c:2a:b9:e7:f7:fd:32:12:7e:50:5c:76:db:
         c3:a1:62:0f:82:8d:a5:8c:f4:d7:b0:d9:19:4e:85:0f:58:c6:
         c8:33:5f:ec:bd:60:d8:a1:07:95:09:89:3d:51:d5:04:cd:90:
         07:68:24:86:f8:f0:cb:fb:6a:d9:e5:4c:96:70:4d:14:4c:fe:
         d0:7d:e5:27:0d:31:04:62:be:a0:4a:2a:3c:0e:a2:63:b8:21:
         c0:1f:2e:2c:a0:17:60:04:8e:ee:98:17:e9:ab:38:c7:14:dd:
         5a:f6:79:6d:bd:65:cf:2f:2a:59:a3:59:56:51:41:4b:14:2a:
         df:3d:ba:8e:33:cd:ab:78:93:a2:88:eb:f6:87:d9:f1:95:5c:
         67:ef:ae:50:ba:0a:54:01:fc:20:e5:e4:2a:3d:39:b2:d0:ba:
         b6:d1:28:70:24:a2:15:9b:0c:60:3f:f2:07:e0:d8:0c:3f:c8:
         e2:6f:21:ff:1b:29:4f:6e:17:9f:7a:92:14:91:1d:2b:3e:e1:
         2e:99:ad:ce
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUVlWJr6qbL0x2agXlTlJHhVoDofowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc3QjM1RkRDNzZGNzA2RDc2QTJBREQ1OUFDRjgwOEI2
M0FDRjFEOTAeFw0yMzEyMTMxNzE5MDJaFw0yNDEyMTExNzI0MDJaMDMxMTAvBgNV
BAMTKDJBQUY2RDE3NTAwNzczMzlEN0NCRUY5NkVEQ0YyOEQyQ0YxMjc0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDieQpzyBP7dkZHmH82DBJb9vJ2
OXyjBTw/0SAglD14QUlyuzPru0B3PD4ek8Rr+AoBgIagNKoZEHfMyRozVx/Xhx0M
D/CJKtdPVuWDiPRUZu9VW6lKydgSZrCBf3+CQalxHlCxJozmfLjzFcDAy9WwqF72
gwFBF9WWcLs7b8sWhyK6f1VX2mhU/rpz1DYVNuDStvjQyc7CB1HDp1CirLBXC+qO
HRYjPKmbVc/zXoKtrpfeohYlopKtDfuQkmhRmdZpOSYo1HRYDVdaom8lR2XA0gir
l1nADEP9BHkHdpC5dw14Sto4x6tMC/kwwdxvVdmWCiaSjdW+l7q1XLjfsoPPAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUKq9tF1AHcznXy++W7c8o0s8SdA0wHwYDVR0j
BBgwFoAU13s1/cdvcG12oq3Vms+Ai2Os8dkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNHUmh6cWhxUm9kQ290ZXR2RlJCdG52N0hTS29nUFJ2NWk0ejdwdGJv
U2EvMC9ENzdCMzVGREM3NkY3MDZENzZBMkFERDU5QUNGODA4QjYzQUNGMUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3N0IzNUZEQzc2RjcwNkQ3
NkEyQURENTlBQ0Y4MDhCNjNBQ0YxRDkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTR1JoenFocVJvZENvdGV0dkZSQnRudjdIU0tvZ1BSdjVpNHo3cHRib1NhLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMy
MzYzNDM1MzczNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/iDANBgkqhkiG9w0BAQsFAAOCAQEAWHgx
28SDw7DYBPVoF3ckAFb8Q0aEvHU95lVpbtKW1hRTKx6/Blb3deReeOu7cZ5dpIhH
6oT78NyEeKpsKrnn9/0yEn5QXHbbw6FiD4KNpYz017DZGU6FD1jGyDNf7L1g2KEH
lQmJPVHVBM2QB2gkhvjwy/tq2eVMlnBNFEz+0H3lJw0xBGK+oEoqPA6iY7ghwB8u
LKAXYASO7pgX6as4xxTdWvZ5bb1lzy8qWaNZVlFBSxQq3z26jjPNq3iToojr9ofZ
8ZVcZ++uULoKVAH8IOXkKj05stC6ttEocCSiFZsMYD/yB+DYDD/I4m8h/xspT24X
n3qSFJEdKz7hLpmtzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:06 2024 by rpki-client on console-ams.rpki-client.org