Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa
File:                     3133382e33362e32302e302f32322d3232203d3e20323633303236.roa (raw, json)
Hash identifier:          Akd3l2Aq4t87K02NC9OKpFSEu8Um69LM9sg3FQUV7Rg=
Subject key identifier:   D4:79:95:C0:64:E1:23:9C:67:04:C2:E9:9C:80:AA:C0:88:8E:C4:D4
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       47F679D4F4F18C924F65A2123D3C779AC265885B
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:09 +0000
ROA not before:           Thu 15 Jun 2023 19:58:09 +0000
ROA not after:            Thu 13 Jun 2024 20:03:09 +0000
asID:                     263026
IP address blocks:        138.36.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f6:79:d4:f4:f1:8c:92:4f:65:a2:12:3d:3c:77:9a:c2:65:88:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:09 2023 GMT
            Not After : Jun 13 20:03:09 2024 GMT
        Subject: CN=D47995C064E1239C6704C2E99C80AAC0888EC4D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:26:e4:52:df:1c:ad:e2:30:88:c8:10:73:
                    7b:87:f0:2e:32:a0:74:3e:f9:d8:68:1f:ed:0f:eb:
                    f9:b2:7c:3b:0c:6a:25:59:0d:c5:82:ef:da:af:58:
                    5b:25:ac:e2:ea:6d:85:a0:10:e1:f9:9c:fe:10:26:
                    1e:cd:11:6a:5b:ed:48:4d:dc:80:f9:5c:98:8e:36:
                    c0:2e:c6:7f:76:6c:6a:c3:a5:56:33:fc:9c:76:1d:
                    70:df:93:22:5c:04:a3:26:84:83:3d:f4:3e:6b:91:
                    fc:b4:28:43:b4:a9:35:56:a2:73:b7:2d:f2:1e:5e:
                    0e:33:57:69:e3:00:e3:66:73:02:98:18:cd:09:7a:
                    35:c4:f7:bb:eb:54:9d:46:6a:9c:39:c2:3c:64:5d:
                    0a:6e:ef:d8:d5:62:34:d7:31:0e:b2:00:98:a8:a4:
                    8f:90:47:82:50:8f:e2:b8:e4:1b:e7:ae:03:b5:f3:
                    c6:1f:d1:d6:92:23:1b:0f:c5:ca:88:a4:bf:92:8e:
                    27:21:bb:71:1d:e1:5e:a7:77:ae:c8:8d:e0:5b:86:
                    5e:ad:fb:42:a5:ac:5d:77:53:47:b6:a9:a6:c4:68:
                    a5:99:2e:41:bf:63:e8:a5:58:8c:6a:01:7b:85:47:
                    6f:90:81:0e:0a:31:b0:82:be:ff:09:7c:cc:b0:28:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:95:C0:64:E1:23:9C:67:04:C2:E9:9C:80:AA:C0:88:8E:C4:D4
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3133382e33362e32302e302f32322d3232203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:ef:82:35:9f:3f:6d:e1:e1:bd:30:70:f9:ff:b5:4d:db:
         10:61:8b:00:fe:d1:37:1a:11:fb:6d:1a:5a:d0:d2:b5:45:2f:
         53:28:6b:57:46:e2:94:6c:e7:3b:b8:a0:42:91:82:13:85:03:
         ee:55:db:5e:bb:f6:28:b9:48:e6:c7:6e:3f:ba:28:1d:0b:79:
         76:1a:3b:70:33:b5:c9:c9:f9:d4:11:d5:54:eb:c9:24:1f:5f:
         9c:d7:19:7b:11:ef:29:8f:67:09:27:22:72:cc:d0:21:1b:11:
         e7:35:68:ec:e0:d2:34:51:be:77:61:d4:77:2f:36:fc:38:b9:
         10:d4:5e:d1:18:96:68:df:0d:e1:65:26:1d:e4:93:02:7b:b5:
         95:75:11:77:d1:35:24:88:4e:81:4f:08:7a:34:1c:66:8b:15:
         a6:97:94:69:fa:57:03:ed:5a:38:cb:a1:57:bf:15:a1:c3:36:
         58:c0:09:82:d3:6e:c9:3d:47:74:2f:63:3e:c3:ea:58:eb:bb:
         44:f6:57:cb:b0:b0:a3:b1:50:ff:39:34:2d:e0:61:c3:75:e7:
         d3:33:4e:bf:fb:1e:81:8e:8b:0a:2a:ac:15:d7:6c:fe:1d:07:
         38:c2:36:0c:96:f4:e6:3f:31:d3:db:b9:7f:77:af:6f:96:a9:
         07:21:f4:f7
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUR/Z51PTxjJJPZaISPTx3msJliFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBC
M0E5RDAxNzAeFw0yMzA2MTUxOTU4MDlaFw0yNDA2MTMyMDAzMDlaMDMxMTAvBgNV
BAMTKEQ0Nzk5NUMwNjRFMTIzOUM2NzA0QzJFOTlDODBBQUMwODg4RUM0RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCalybkUt8creIwiMgQc3uH8C4y
oHQ++dhoH+0P6/myfDsMaiVZDcWC79qvWFslrOLqbYWgEOH5nP4QJh7NEWpb7UhN
3ID5XJiONsAuxn92bGrDpVYz/Jx2HXDfkyJcBKMmhIM99D5rkfy0KEO0qTVWonO3
LfIeXg4zV2njAONmcwKYGM0JejXE97vrVJ1Gapw5wjxkXQpu79jVYjTXMQ6yAJio
pI+QR4JQj+K45BvnrgO188Yf0daSIxsPxcqIpL+Sjichu3Ed4V6nd67IjeBbhl6t
+0KlrF13U0e2qabEaKWZLkG/Y+ilWIxqAXuFR2+QgQ4KMbCCvv8JfMywKP/zAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1HmVwGThI5xnBMLpnICqwIiOxNQwHwYDVR0j
BBgwFoAUjxLnkOE7oh5pKtRzVp8bkLOp0BcwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby94WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2Jj
LzAvOEYxMkU3OTBFMTNCQTIxRTY5MkFENDczNTY5RjFCOTBCM0E5RDAxNy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84RjEyRTc5MEUxM0JBMjFFNjky
QUQ0NzM1NjlGMUI5MEIzQTlEMDE3LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby94
WHBzQWd2cDY5dEttcDNQNUJFOVlkaWR1QXoyZEJOOEVXYW4xdFZBQ2JjLzAvMzEz
MzM4MmUzMzM2MmUzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMzMzAz
MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCiiQUMA0GCSqGSIb3DQEBCwUAA4IBAQAKQe+CNZ8/beHh
vTBw+f+1TdsQYYsA/tE3GhH7bRpa0NK1RS9TKGtXRuKUbOc7uKBCkYIThQPuVdte
u/YouUjmx24/uigdC3l2GjtwM7XJyfnUEdVU68kkH1+c1xl7Ee8pj2cJJyJyzNAh
GxHnNWjs4NI0Ub53YdR3Lzb8OLkQ1F7RGJZo3w3hZSYd5JMCe7WVdRF30TUkiE6B
Twh6NBxmixWml5Rp+lcD7Vo4y6FXvxWhwzZYwAmC027JPUd0L2M+w+pY67tE9lfL
sLCjsVD/OTQt4GHDdefTM06/+x6BjosKKqwV12z+HQc4wjYMlvTmPzHT27l/d69v
lqkHIfT3
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org