Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32342d3234203d3e20323636303030.roa
File:                     3138312e3139312e34302e302f32342d3234203d3e20323636303030.roa (raw, json)
Hash identifier:          OX9lxsxWo5LGrhHZaNYNgQ0Ij9twY6suAK3U6bwcLLM=
Subject key identifier:   5D:4D:9F:88:58:00:66:F6:32:0F:1B:35:1C:4F:29:30:E5:28:12:28
Certificate issuer:       /CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
Certificate serial:       1E46922A857EBD66AEC208F88BB6EF88C2239807
Authority key identifier: D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32342d3234203d3e20323636303030.roa
Signing time:             Mon 18 Dec 2023 16:15:36 +0000
ROA not before:           Mon 18 Dec 2023 16:10:36 +0000
ROA not after:            Mon 16 Dec 2024 16:15:36 +0000
asID:                     266000
IP address blocks:        181.191.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:46:92:2a:85:7e:bd:66:ae:c2:08:f8:8b:b6:ef:88:c2:23:98:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D
        Validity
            Not Before: Dec 18 16:10:36 2023 GMT
            Not After : Dec 16 16:15:36 2024 GMT
        Subject: CN=5D4D9F88580066F6320F1B351C4F2930E5281228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d2:0f:d5:80:e6:f4:ec:5d:4f:f2:53:80:a1:
                    18:96:3a:8c:8a:c6:2a:a1:18:b3:be:9a:02:cf:95:
                    c0:9f:38:4c:2f:6f:d2:f5:00:41:44:9c:ef:85:c1:
                    9a:a3:e4:4a:b2:00:61:49:b8:70:ef:ee:b6:75:a9:
                    cd:73:88:51:a0:92:34:bd:d5:9d:79:9b:f5:e7:4b:
                    97:b0:a5:ce:c9:e3:38:48:1f:ac:e7:69:92:fe:eb:
                    1e:8c:29:c0:53:cd:19:8e:0b:4b:df:8e:40:5d:15:
                    b8:a6:cf:6f:81:fe:73:26:aa:4d:0e:cc:ed:54:fb:
                    a6:27:82:b1:f7:91:2e:ee:f7:32:b7:7e:17:3e:d9:
                    7e:bb:f5:14:60:ab:9c:1f:12:65:38:f0:d4:7b:5c:
                    5b:0d:44:e7:ae:22:e0:7c:39:83:00:11:8b:75:7e:
                    11:39:31:ff:a5:19:a2:ec:c8:37:76:73:03:0c:79:
                    20:79:d6:8b:0b:0e:4a:5b:f5:61:b9:ee:48:b3:4f:
                    24:32:d2:1a:e7:f9:7c:68:e8:44:6d:5a:da:f4:ee:
                    f3:dd:f1:39:1f:8b:c5:11:1b:f3:5e:f1:2c:55:ee:
                    32:7d:f8:94:2f:90:71:3c:0a:66:31:ca:b6:b5:c7:
                    ce:e8:51:7d:14:3b:c4:81:0a:60:57:88:78:6d:79:
                    0b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4D:9F:88:58:00:66:F6:32:0F:1B:35:1C:4F:29:30:E5:28:12:28
            X509v3 Authority Key Identifier:
                keyid:D2:B3:DC:1F:04:CF:1B:73:2C:D3:DE:30:36:5D:DA:1E:05:B5:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2B3DC1F04CF1B732CD3DE30365DDA1E05B5DF4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J84si9JcSgS27zrfUTaLWzjuNSp2XhE8v5W2RQ7HmqzJ/0/3138312e3139312e34302e302f32342d3234203d3e20323636303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:11:5c:32:0f:0c:a9:56:bf:dc:4c:e2:cf:88:2d:e8:b7:
         7b:51:c8:aa:3a:bb:b2:dd:d5:3e:06:b8:09:01:a4:1a:58:a0:
         b8:e2:6c:8b:c1:79:29:d1:a4:58:3e:dd:a3:d6:f5:6e:83:51:
         a5:1b:7f:8f:02:45:6d:ec:3a:ca:47:a5:02:53:1f:49:4a:4c:
         ee:1f:3d:51:cb:21:36:14:71:2e:05:e9:55:17:7c:e5:be:cf:
         38:d5:ce:7b:c3:45:76:e5:2c:40:60:25:cc:1f:fd:1e:a0:b0:
         8d:c2:89:cc:97:a8:23:ca:a7:ac:f2:84:3a:71:ec:1b:6f:bb:
         af:45:94:47:d2:cf:dd:f1:7e:30:b6:37:e3:39:47:3e:00:01:
         11:df:3c:38:03:5f:10:22:69:e6:63:c8:34:62:37:e5:e5:89:
         91:d5:55:d6:b3:c0:c9:45:8e:e9:82:19:54:71:ba:63:12:25:
         5e:73:56:58:fd:22:a6:88:d7:9e:12:60:b4:62:52:37:d7:a7:
         a8:fd:75:0a:19:3d:61:9c:fa:ad:bd:d6:b3:1d:c2:b8:7a:f6:
         89:8f:f3:ff:5e:f3:09:55:36:a5:aa:fc:f2:5e:6e:6c:49:2e:
         22:c3:7e:b6:d6:33:51:7b:9d:ea:a0:b5:d3:7a:84:49:58:3a:
         72:c8:84:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHkaSKoV+vWauwgj4i7bviMIjmAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJCM0RDMUYwNENGMUI3MzJDRDNERTMwMzY1RERBMUUw
NUI1REY0RDAeFw0yMzEyMTgxNjEwMzZaFw0yNDEyMTYxNjE1MzZaMDMxMTAvBgNV
BAMTKDVENEQ5Rjg4NTgwMDY2RjYzMjBGMUIzNTFDNEYyOTMwRTUyODEyMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0g/VgOb07F1P8lOAoRiWOoyK
xiqhGLO+mgLPlcCfOEwvb9L1AEFEnO+FwZqj5EqyAGFJuHDv7rZ1qc1ziFGgkjS9
1Z15m/XnS5ewpc7J4zhIH6znaZL+6x6MKcBTzRmOC0vfjkBdFbimz2+B/nMmqk0O
zO1U+6YngrH3kS7u9zK3fhc+2X679RRgq5wfEmU48NR7XFsNROeuIuB8OYMAEYt1
fhE5Mf+lGaLsyDd2cwMMeSB51osLDkpb9WG57kizTyQy0hrn+Xxo6ERtWtr07vPd
8Tkfi8URG/Ne8SxV7jJ9+JQvkHE8CmYxyra1x87oUX0UO8SBCmBXiHhteQubAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXU2fiFgAZvYyDxs1HE8pMOUoEigwHwYDVR0j
BBgwFoAU0rPcHwTPG3Ms094wNl3aHgW1300wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjg0c2k5SmNTZ1MyN3pyZlVUYUxXemp1TlNwMlhoRTh2NVcyUlE3SG1x
ekovMC9EMkIzREMxRjA0Q0YxQjczMkNEM0RFMzAzNjVEREExRTA1QjVERjRELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QyQjNEQzFGMDRDRjFCNzMy
Q0QzREUzMDM2NUREQTFFMDVCNURGNEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0o4NHNpOUpjU2dTMjd6cmZVVGFMV3pqdU5TcDJYaEU4djVXMlJRN0htcXpKLzAv
MzEzODMxMmUzMTM5MzEyZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC1vygwDQYJKoZIhvcNAQELBQADggEBAD6xEVwy
DwypVr/cTOLPiC3ot3tRyKo6u7Ld1T4GuAkBpBpYoLjibIvBeSnRpFg+3aPW9W6D
UaUbf48CRW3sOspHpQJTH0lKTO4fPVHLITYUcS4F6VUXfOW+zzjVznvDRXblLEBg
Jcwf/R6gsI3CicyXqCPKp6zyhDpx7Btvu69FlEfSz93xfjC2N+M5Rz4AARHfPDgD
XxAiaeZjyDRiN+XliZHVVdazwMlFjumCGVRxumMSJV5zVlj9IqaI154SYLRiUjfX
p6j9dQoZPWGc+q291rMdwrh69omP8/9e8wlVNqWq/PJebmxJLiLDfrbWM1F7neqg
tdN6hElYOnLIhIw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org