Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32342d3234203d3e203238353938.roa
File:                     3133382e3132322e38302e302f32342d3234203d3e203238353938.roa (raw, json)
Hash identifier:          l9RIpDIaC6Cq6uaU2m+PxWcdzEcKgmF4zrMOaH2GkT4=
Subject key identifier:   9F:64:F4:04:BA:D8:C7:56:08:B8:98:06:3C:42:1A:FD:6C:9D:2F:0F
Certificate issuer:       /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial:       6F4C96F6B0A057EC01F486C9A3320F89A763C842
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32342d3234203d3e203238353938.roa
Signing time:             Mon 23 Oct 2023 13:01:01 +0000
ROA not before:           Mon 23 Oct 2023 12:56:01 +0000
ROA not after:            Mon 21 Oct 2024 13:01:01 +0000
asID:                     28598
IP address blocks:        138.122.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4c:96:f6:b0:a0:57:ec:01:f4:86:c9:a3:32:0f:89:a7:63:c8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
        Validity
            Not Before: Oct 23 12:56:01 2023 GMT
            Not After : Oct 21 13:01:01 2024 GMT
        Subject: CN=9F64F404BAD8C75608B898063C421AFD6C9D2F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8f:34:62:b8:49:75:53:6a:cd:19:c8:d1:7d:
                    8f:b6:2c:45:e8:67:b8:25:62:e9:6b:81:0c:4d:9e:
                    c9:5a:db:2e:41:60:5d:ba:7d:b4:ac:a4:e6:d8:e1:
                    48:1c:2b:37:bb:30:9d:1f:7e:00:f4:29:5b:c5:73:
                    4d:b7:6c:45:47:16:f4:f6:7e:40:48:2a:b4:b4:cd:
                    0e:e9:91:68:29:9b:57:36:93:d9:a0:ba:b3:1e:f2:
                    32:e6:ba:1e:ad:14:53:62:dc:5b:5a:c1:c9:45:ed:
                    44:2b:87:08:a7:31:9f:59:01:68:78:f2:19:10:4f:
                    4d:e9:c3:00:38:25:d5:b4:f4:e9:2a:bf:20:96:5e:
                    52:82:be:75:fb:1f:c1:60:31:9e:47:78:bb:4e:39:
                    76:21:fa:fb:b1:06:8a:6e:90:14:bc:c8:c0:99:ba:
                    54:f3:43:61:b1:02:85:7a:00:6e:67:78:9a:30:f5:
                    6a:8e:9b:e4:5b:ad:9a:3a:2a:d0:8e:c7:16:16:76:
                    5e:b1:0a:7a:bb:0d:4b:74:c4:0b:d9:a1:21:35:e8:
                    85:1f:d0:8d:b2:24:ba:2c:f4:43:57:3c:b8:b9:da:
                    d2:9a:c0:8f:f2:13:9f:c8:94:2e:73:9e:08:14:fd:
                    f0:2d:cd:eb:1d:b3:4d:ed:54:5a:ec:10:d2:5d:8f:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:64:F4:04:BA:D8:C7:56:08:B8:98:06:3C:42:1A:FD:6C:9D:2F:0F
            X509v3 Authority Key Identifier:
                keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/3133382e3132322e38302e302f32342d3234203d3e203238353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:09:69:d2:86:99:98:ae:ea:11:de:fa:79:62:a8:b1:0d:48:
         58:b7:7b:d1:6d:cd:25:7e:fe:57:ec:87:fe:bd:1d:70:dd:46:
         ae:03:ae:b6:59:1d:a7:00:23:db:e5:65:60:e9:c7:72:1d:d5:
         4a:d1:0f:bf:72:fa:07:3b:c3:2f:83:4c:7f:6c:0b:97:73:8f:
         98:94:5d:9c:25:d2:71:a3:1b:84:82:55:50:75:cc:7b:15:e1:
         b9:62:86:f8:16:82:79:00:f3:85:2e:66:68:16:10:ee:a1:8f:
         ac:ff:79:ca:9b:85:51:78:c5:79:a1:8c:26:87:e6:e8:dd:12:
         bf:ff:b6:b3:21:99:a4:ad:08:15:e3:ea:95:46:b6:c6:a7:09:
         cf:2f:d8:6d:33:2e:9b:85:e4:7a:17:35:13:0b:4b:1e:34:c1:
         8b:8d:48:00:9c:e2:26:62:1b:2a:31:76:3a:7b:52:d3:14:c3:
         6e:78:d9:ff:2c:f7:31:1a:29:bd:12:fb:67:31:d0:0c:36:30:
         7a:39:b8:3d:3d:a3:25:46:2b:de:04:90:cd:56:db:16:fc:ab:
         51:56:55:5d:dc:dc:f2:cf:fd:eb:0e:dd:23:d8:d2:55:9b:8b:
         49:26:4c:70:81:08:67:ba:0d:9d:72:bf:4d:df:62:dd:1d:b7:
         dd:41:ec:1c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUb0yW9rCgV+wB9IbJozIPiadjyEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEI5MjRFOEJCNjZDRjgyRTZFQTUyRjlFMjhGRUQyOEI5
MTkxN0IyNjAeFw0yMzEwMjMxMjU2MDFaFw0yNDEwMjExMzAxMDFaMDMxMTAvBgNV
BAMTKDlGNjRGNDA0QkFEOEM3NTYwOEI4OTgwNjNDNDIxQUZENkM5RDJGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3jzRiuEl1U2rNGcjRfY+2LEXo
Z7glYulrgQxNnsla2y5BYF26fbSspObY4UgcKze7MJ0ffgD0KVvFc023bEVHFvT2
fkBIKrS0zQ7pkWgpm1c2k9mgurMe8jLmuh6tFFNi3FtawclF7UQrhwinMZ9ZAWh4
8hkQT03pwwA4JdW09OkqvyCWXlKCvnX7H8FgMZ5HeLtOOXYh+vuxBopukBS8yMCZ
ulTzQ2GxAoV6AG5neJow9WqOm+RbrZo6KtCOxxYWdl6xCnq7DUt0xAvZoSE16IUf
0I2yJLos9ENXPLi52tKawI/yE5/IlC5znggU/fAtzesds03tVFrsENJdj8sJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUn2T0BLrYx1YIuJgGPEIa/WydLw8wHwYDVR0j
BBgwFoAUi5JOi7Zs+C5upS+eKP7Si5GReyYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjVTQ0x5bnJUMXFoeFNXSDI3NWFOeHhWTEN2YjVORk1pMTM5akxLWFFy
TFAvMS84QjkyNEU4QkI2NkNGODJFNkVBNTJGOUUyOEZFRDI4QjkxOTE3QjI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzhCOTI0RThCQjY2Q0Y4MkU2
RUE1MkY5RTI4RkVEMjhCOTE5MTdCMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o1U0NMeW5yVDFxaHhTV0gyNzVhTnh4VkxDdmI1TkZNaTEzOWpMS1hRckxQLzEv
MzEzMzM4MmUzMTMyMzIyZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAinpQMA0GCSqGSIb3DQEBCwUAA4IBAQBYCWnShpmY
ruoR3vp5YqixDUhYt3vRbc0lfv5X7If+vR1w3UauA662WR2nACPb5WVg6cdyHdVK
0Q+/cvoHO8Mvg0x/bAuXc4+YlF2cJdJxoxuEglVQdcx7FeG5Yob4FoJ5APOFLmZo
FhDuoY+s/3nKm4VReMV5oYwmh+bo3RK//7azIZmkrQgV4+qVRrbGpwnPL9htMy6b
heR6FzUTC0seNMGLjUgAnOImYhsqMXY6e1LTFMNueNn/LPcxGim9EvtnMdAMNjB6
Obg9PaMlRiveBJDNVtsW/KtRVlVd3Nzyz/3rDt0j2NJVm4tJJkxwgQhnug2dcr9N
32LdHbfdQewc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org