Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa
File:                     34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa (raw, json)
Hash identifier:          E29iVBP3J7ezxIpXR0nilUZs3L8+GXFYBmo8hP33eNQ=
Subject key identifier:   8A:2D:79:F2:25:CE:5E:26:2B:C2:83:F8:92:27:14:34:48:36:82:FF
Certificate issuer:       /CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
Certificate serial:       09DA02B07BCF7C3BE817F8490C8EA0382EFDF210
Authority key identifier: C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa
Signing time:             Fri 16 Jun 2023 15:03:40 +0000
ROA not before:           Fri 16 Jun 2023 14:58:40 +0000
ROA not after:            Fri 14 Jun 2024 15:03:40 +0000
asID:                     269539
IP address blocks:        45.187.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:da:02:b0:7b:cf:7c:3b:e8:17:f8:49:0c:8e:a0:38:2e:fd:f2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39
        Validity
            Not Before: Jun 16 14:58:40 2023 GMT
            Not After : Jun 14 15:03:40 2024 GMT
        Subject: CN=8A2D79F225CE5E262BC283F892271434483682FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:06:b9:5f:7f:7a:f7:72:37:19:9d:dd:f5:
                    8c:2b:78:d3:07:5d:1b:64:f0:82:c5:26:30:72:19:
                    ce:34:f0:69:16:17:b8:4e:d7:1f:e7:24:dc:bc:1a:
                    aa:e5:25:d9:86:ff:d7:70:69:fd:ad:a7:18:ca:cf:
                    c9:66:7e:27:d9:c3:42:aa:2f:cf:64:a3:3d:1b:2e:
                    66:54:e8:fd:6e:f0:62:e6:cc:85:43:34:90:34:35:
                    72:ae:49:4f:c5:07:25:6d:19:f1:3d:0e:9d:f3:d2:
                    d6:87:e8:8a:c6:4d:93:d2:38:d1:a8:7a:c3:d3:35:
                    3f:cf:3e:d2:32:67:a1:e5:73:e0:ab:bc:0d:f9:4a:
                    e5:1d:f4:48:68:02:4e:07:d6:97:f6:ab:7c:d6:47:
                    1e:7f:82:9d:f8:3d:8a:f4:27:e0:aa:ff:61:dc:1b:
                    2e:be:4e:54:21:37:ae:ff:72:cf:d0:6d:08:f4:75:
                    b9:8c:b6:5f:ab:f6:3e:8b:0d:37:56:f8:70:82:7e:
                    57:3a:8e:31:c9:11:4a:59:47:bc:7e:c7:94:cd:35:
                    18:1f:7f:61:a5:92:52:c9:ec:ca:28:3e:e4:e2:7c:
                    79:c7:01:3a:e3:b3:d3:62:d9:6e:7d:ae:8b:39:e8:
                    46:79:2f:63:ba:97:6d:8d:4e:58:0c:65:78:26:ae:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:79:F2:25:CE:5E:26:2B:C2:83:F8:92:27:14:34:48:36:82:FF
            X509v3 Authority Key Identifier:
                keyid:C7:49:F3:C2:C6:C7:D6:3A:EB:2D:95:7F:D9:83:A8:DE:89:27:AB:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C749F3C2C6C7D63AEB2D957FD983A8DE8927AB39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3tpQio7B97hu8HWK1mqADKNA3Kh3S5mHnvKk61ScRj15/0/34352e3138372e3136312e302f32342d3234203d3e20323639353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:8e:08:c9:5b:cd:dc:bc:3f:86:59:14:eb:04:4d:ab:15:72:
         eb:ab:61:e0:f2:74:7d:67:2d:fb:19:e5:35:6d:56:3c:e3:6d:
         7e:88:24:db:22:82:ee:02:9b:49:66:0d:94:14:f0:46:42:76:
         60:d7:1a:fa:66:45:b5:86:f3:9e:28:59:67:d6:27:d0:64:39:
         f2:45:08:6d:21:1c:73:71:4b:fe:56:0b:cc:48:ea:d3:66:47:
         ef:6d:ce:b7:44:75:a5:77:5a:04:9c:5e:f2:d8:d6:b1:cb:24:
         04:b4:6a:47:96:80:cd:57:06:58:ed:8d:f7:6e:f2:57:c0:8a:
         8e:99:f7:1b:32:6c:5a:4b:f2:42:b8:9f:fc:96:d0:8a:ee:a2:
         29:3a:c5:71:80:10:47:6e:f9:c5:9c:c1:ea:7e:63:99:f1:4d:
         f8:0c:78:25:f2:a2:7d:00:a4:b6:a7:30:7d:ee:73:ad:1d:8d:
         d9:b8:c0:30:11:8c:f2:dd:fa:f3:31:8d:9d:fe:71:cd:12:0e:
         86:a7:f4:d9:a8:38:b4:b1:45:be:58:9e:c7:91:08:75:4a:83:
         99:e5:59:dc:1c:bb:9b:2b:4e:0f:01:76:2b:bd:3f:8f:7b:ad:
         b9:8b:f7:f4:b2:4f:75:0c:1c:af:4d:dd:e3:f2:0b:ff:87:7b:
         85:b6:15:91
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCdoCsHvPfDvoF/hJDI6gOC798hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc0OUYzQzJDNkM3RDYzQUVCMkQ5NTdGRDk4M0E4REU4
OTI3QUIzOTAeFw0yMzA2MTYxNDU4NDBaFw0yNDA2MTQxNTAzNDBaMDMxMTAvBgNV
BAMTKDhBMkQ3OUYyMjVDRTVFMjYyQkMyODNGODkyMjcxNDM0NDgzNjgyRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Xga5X39693I3GZ3d9YwreNMH
XRtk8ILFJjByGc408GkWF7hO1x/nJNy8GqrlJdmG/9dwaf2tpxjKz8lmfifZw0Kq
L89koz0bLmZU6P1u8GLmzIVDNJA0NXKuSU/FByVtGfE9Dp3z0taH6IrGTZPSONGo
esPTNT/PPtIyZ6Hlc+CrvA35SuUd9EhoAk4H1pf2q3zWRx5/gp34PYr0J+Cq/2Hc
Gy6+TlQhN67/cs/QbQj0dbmMtl+r9j6LDTdW+HCCflc6jjHJEUpZR7x+x5TNNRgf
f2GlklLJ7MooPuTifHnHATrjs9Ni2W59ros56EZ5L2O6l22NTlgMZXgmrgDvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUii158iXOXiYrwoP4kicUNEg2gv8wHwYDVR0j
BBgwFoAUx0nzwsbH1jrrLZV/2YOo3oknqzkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3RwUWlvN0I5N2h1OEhXSzFtcUFES05BM0toM1M1bUhudktrNjFTY1Jq
MTUvMC9DNzQ5RjNDMkM2QzdENjNBRUIyRDk1N0ZEOTgzQThERTg5MjdBQjM5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3NDlGM0MyQzZDN0Q2M0FF
QjJEOTU3RkQ5ODNBOERFODkyN0FCMzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN0cFFpbzdCOTdodThIV0sxbXFBREtOQTNLaDNTNW1IbnZLazYxU2NSajE1LzAv
MzQzNTJlMzEzODM3MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu6EwDQYJKoZIhvcNAQELBQADggEBALOOCMlb
zdy8P4ZZFOsETasVcuurYeDydH1nLfsZ5TVtVjzjbX6IJNsigu4Cm0lmDZQU8EZC
dmDXGvpmRbWG854oWWfWJ9BkOfJFCG0hHHNxS/5WC8xI6tNmR+9tzrdEdaV3WgSc
XvLY1rHLJAS0akeWgM1XBljtjfdu8lfAio6Z9xsybFpL8kK4n/yW0Iruoik6xXGA
EEdu+cWcwep+Y5nxTfgMeCXyon0ApLanMH3uc60djdm4wDARjPLd+vMxjZ3+cc0S
Doan9NmoOLSxRb5YnseRCHVKg5nlWdwcu5srTg8Bdiu9P497rbmL9/SyT3UMHK9N
3ePyC/+He4W2FZE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org