Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/3133382e3235352e3132342e302f32322d3232203d3e20323633393733.roa
File:                     3133382e3235352e3132342e302f32322d3232203d3e20323633393733.roa (raw, json)
Hash identifier:          nSJp48s0RhVvlIHb9xJU75+dEbx444++k0QcKEyqqFg=
Subject key identifier:   CA:20:EA:AF:95:C6:34:67:E3:F8:F2:84:64:A9:23:A9:30:D6:EA:DD
Certificate issuer:       /CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
Certificate serial:       7038E9AE16080054129A6F3BC13981A5EB9178B3
Authority key identifier: A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/3133382e3235352e3132342e302f32322d3232203d3e20323633393733.roa
Signing time:             Fri 15 Sep 2023 17:36:28 +0000
ROA not before:           Fri 15 Sep 2023 17:31:28 +0000
ROA not after:            Fri 13 Sep 2024 17:36:28 +0000
asID:                     263973
IP address blocks:        138.255.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:38:e9:ae:16:08:00:54:12:9a:6f:3b:c1:39:81:a5:eb:91:78:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8CF5718115B9C05B14F07941D58B618B367CCE3
        Validity
            Not Before: Sep 15 17:31:28 2023 GMT
            Not After : Sep 13 17:36:28 2024 GMT
        Subject: CN=CA20EAAF95C63467E3F8F28464A923A930D6EADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:1d:52:cb:89:2b:42:ac:18:ca:85:cf:a3:
                    33:ab:52:61:af:cb:9d:86:09:d8:4f:b2:d5:40:12:
                    21:d1:c8:4c:6e:6a:8a:33:37:48:c5:4d:e6:b0:e3:
                    a1:db:1a:87:cd:cf:32:6a:c1:11:e7:2c:68:d5:b9:
                    8d:6b:6e:e7:84:fe:f1:94:74:14:f2:d9:0e:68:69:
                    7f:01:74:9a:cb:3b:4c:fe:43:5d:31:84:f0:f7:98:
                    19:53:c5:15:e3:6b:4f:26:68:11:dd:6d:52:57:6e:
                    24:94:f8:53:34:ef:22:b1:ae:34:e0:28:d7:7e:8f:
                    1e:8f:10:db:a8:1c:7d:24:7b:c5:0c:2f:e6:8e:0b:
                    63:7d:63:e4:f6:91:48:e3:8a:a1:53:d0:eb:92:e3:
                    48:fb:95:de:ca:19:85:bb:c7:ed:63:c4:16:71:54:
                    12:71:75:1b:59:95:87:7f:94:a4:14:10:dc:fa:00:
                    cd:89:19:4f:15:1f:41:45:55:6f:59:a7:0b:0d:d2:
                    62:33:88:f5:2e:47:ac:f5:c0:3c:fe:5d:87:dd:88:
                    3f:4b:75:5e:3c:06:70:b9:85:e7:42:3c:11:0e:06:
                    04:8d:a5:e7:0d:4a:ba:d2:f9:03:68:3d:fe:e9:97:
                    d8:1b:f9:bc:5e:c5:ed:c4:f8:7d:84:db:32:0e:d6:
                    45:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:20:EA:AF:95:C6:34:67:E3:F8:F2:84:64:A9:23:A9:30:D6:EA:DD
            X509v3 Authority Key Identifier:
                keyid:A8:CF:57:18:11:5B:9C:05:B1:4F:07:94:1D:58:B6:18:B3:67:CC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8CF5718115B9C05B14F07941D58B618B367CCE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctRNRuNhHtB4WRh2T8m5JLMJSK2YaDWntrZzd3WxSAs/0/3133382e3235352e3132342e302f32322d3232203d3e20323633393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:5f:c5:5f:fb:fd:bd:e0:b1:b8:ed:31:b9:70:60:a3:77:50:
         26:4c:e4:6f:5e:72:ec:5c:85:35:37:f7:29:1a:32:59:80:c5:
         30:5c:19:98:44:c1:fd:2a:99:33:32:52:c3:7f:98:97:96:37:
         62:2e:b1:09:5a:7f:eb:4c:34:c2:84:f6:00:fc:f1:bf:42:dc:
         c7:2c:30:19:c4:3a:62:c4:ce:2d:1c:7e:ac:82:69:e9:e3:9e:
         62:8b:e4:32:27:2c:4f:41:b7:1d:46:85:9c:9b:99:ea:6a:bc:
         c4:a9:04:85:fb:31:d8:60:ef:60:16:52:5a:6a:ed:39:db:e3:
         cf:7c:0a:31:60:54:67:6d:a2:eb:15:42:4e:b7:e0:ce:3a:db:
         8d:62:fd:c7:ca:4b:b1:9b:76:de:25:0f:d1:89:c7:ac:39:ea:
         95:a6:35:6a:65:7f:77:39:47:e9:c2:75:25:4b:a2:bf:0f:77:
         40:4d:3f:12:54:94:19:40:aa:71:30:70:d4:d8:b3:5c:e4:cb:
         e7:21:bf:32:ab:b0:51:71:68:a8:f3:96:39:98:c9:15:47:b5:
         3c:bc:1f:f2:94:5c:2a:bd:10:01:c8:25:a2:85:e3:a7:8f:9e:
         b7:8e:6b:dd:ef:68:fe:22:16:e3:a6:9c:5e:b1:3f:d1:c0:4f:
         81:0e:7f:67
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcDjprhYIAFQSmm87wTmBpeuReLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThDRjU3MTgxMTVCOUMwNUIxNEYwNzk0MUQ1OEI2MThC
MzY3Q0NFMzAeFw0yMzA5MTUxNzMxMjhaFw0yNDA5MTMxNzM2MjhaMDMxMTAvBgNV
BAMTKENBMjBFQUFGOTVDNjM0NjdFM0Y4RjI4NDY0QTkyM0E5MzBENkVBREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAzB1Sy4krQqwYyoXPozOrUmGv
y52GCdhPstVAEiHRyExuaoozN0jFTeaw46HbGofNzzJqwRHnLGjVuY1rbueE/vGU
dBTy2Q5oaX8BdJrLO0z+Q10xhPD3mBlTxRXja08maBHdbVJXbiSU+FM07yKxrjTg
KNd+jx6PENuoHH0ke8UML+aOC2N9Y+T2kUjjiqFT0OuS40j7ld7KGYW7x+1jxBZx
VBJxdRtZlYd/lKQUENz6AM2JGU8VH0FFVW9ZpwsN0mIziPUuR6z1wDz+XYfdiD9L
dV48BnC5hedCPBEOBgSNpecNSrrS+QNoPf7pl9gb+bxexe3E+H2E2zIO1kXLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUyiDqr5XGNGfj+PKEZKkjqTDW6t0wHwYDVR0j
BBgwFoAUqM9XGBFbnAWxTweUHVi2GLNnzOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2N0Uk5SdU5oSHRCNFdSaDJUOG01SkxNSlNLMllhRFdudHJaemQzV3hT
QXMvMC9BOENGNTcxODExNUI5QzA1QjE0RjA3OTQxRDU4QjYxOEIzNjdDQ0UzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4Q0Y1NzE4MTE1QjlDMDVC
MTRGMDc5NDFENThCNjE4QjM2N0NDRTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0djdFJOUnVOaEh0QjRXUmgyVDhtNUpMTUpTSzJZYURXbnRyWnpkM1d4U0FzLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMy
MzYzMzM5MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAor/fDANBgkqhkiG9w0BAQsFAAOCAQEAlV/F
X/v9veCxuO0xuXBgo3dQJkzkb15y7FyFNTf3KRoyWYDFMFwZmETB/SqZMzJSw3+Y
l5Y3Yi6xCVp/60w0woT2APzxv0LcxywwGcQ6YsTOLRx+rIJp6eOeYovkMicsT0G3
HUaFnJuZ6mq8xKkEhfsx2GDvYBZSWmrtOdvjz3wKMWBUZ22i6xVCTrfgzjrbjWL9
x8pLsZt23iUP0YnHrDnqlaY1amV/dzlH6cJ1JUuivw93QE0/ElSUGUCqcTBw1Niz
XOTL5yG/MquwUXFoqPOWOZjJFUe1PLwf8pRcKr0QAcglooXjp4+et45r3e9o/iIW
46acXrE/0cBPgQ5/Zw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org