Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32342d3234203d3e20323639313735.roa (raw, json)
Hash identifier:          CEphC6faNSv+h9pWM4L2ZT1UNCU47WV4fucBBI/XGS8=
Subject key identifier:   AF:D6:1A:2D:C5:FB:DD:A1:F3:97:98:FE:B1:FB:97:F4:79:7C:48:A2
Certificate issuer:       /CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
Certificate serial:       08052252BFB3DECBB59FA9DF59308C8C71C15F23
Authority key identifier: E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa
Signing time:             Mon 26 Feb 2024 14:58:06 +0000
ROA not before:           Mon 26 Feb 2024 14:53:06 +0000
ROA not after:            Mon 24 Feb 2025 14:58:06 +0000
asID:                     269175
IP address blocks:        45.181.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:05:22:52:bf:b3:de:cb:b5:9f:a9:df:59:30:8c:8c:71:c1:5f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3E0BE7F45FADF2C1604B1DD7C195996B74858E9
        Validity
            Not Before: Feb 26 14:53:06 2024 GMT
            Not After : Feb 24 14:58:06 2025 GMT
        Subject: CN=AFD61A2DC5FBDDA1F39798FEB1FB97F4797C48A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:68:7f:0f:31:ef:56:2f:a5:62:d0:77:66:
                    de:3f:dd:f2:e9:6f:fa:12:b1:d5:ca:fa:26:42:0a:
                    62:5d:dc:c0:ba:a3:1d:61:af:24:30:d8:c6:47:ae:
                    08:cb:11:24:7f:f0:eb:65:73:5e:69:ed:58:29:43:
                    13:fd:dc:32:d9:9f:f1:6b:6e:7d:da:69:6f:ec:c1:
                    e0:e4:fd:eb:7b:27:1b:bf:f8:be:f3:62:57:d6:89:
                    11:97:e3:fe:2a:fd:da:fe:b4:11:35:ae:51:78:cd:
                    fd:79:bc:45:b8:cd:d4:2a:84:77:63:16:86:84:0b:
                    59:a4:ac:8c:1e:d0:90:a4:c5:87:9f:27:aa:2f:27:
                    da:f7:4f:6b:76:e0:18:f2:d0:6e:e3:e4:b0:6d:ce:
                    6e:e9:59:33:bb:23:ae:6f:de:e7:db:b5:4b:f3:76:
                    95:49:9c:c3:e9:2c:c5:58:ab:fb:3e:f3:cf:ef:81:
                    90:e9:87:e5:f7:ed:e9:9d:7f:56:e0:dd:83:94:89:
                    ae:71:97:4e:9b:b0:a3:f7:c8:b7:ca:ad:20:a7:07:
                    e6:4c:db:5d:a4:3f:13:c4:09:bc:fe:4b:92:9e:bd:
                    4a:06:24:68:13:2d:5f:16:e8:1d:50:0d:1f:0b:c4:
                    e7:cc:7d:97:4b:50:f3:9e:9f:b9:46:5f:84:6b:1e:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D6:1A:2D:C5:FB:DD:A1:F3:97:98:FE:B1:FB:97:F4:79:7C:48:A2
            X509v3 Authority Key Identifier:
                keyid:E3:E0:BE:7F:45:FA:DF:2C:16:04:B1:DD:7C:19:59:96:B7:48:58:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E3E0BE7F45FADF2C1604B1DD7C195996B74858E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32342d3234203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b0:b8:16:7f:64:58:ba:24:ac:da:84:06:09:c0:8b:e2:78:
         ee:1e:58:fa:01:ad:5f:19:c4:15:b1:b6:75:cd:d1:48:3f:97:
         b2:f3:da:e9:7a:55:2b:06:19:57:0b:75:5a:b3:22:be:0b:79:
         a4:12:62:c0:12:32:88:c1:c9:7a:02:98:70:10:06:65:81:e5:
         73:7b:bb:57:b0:fd:fe:3a:6a:28:ac:9b:84:2d:f4:d1:d3:36:
         eb:0c:8d:80:6f:d4:d7:e6:7a:8f:1f:3d:1b:17:22:3a:e7:9f:
         d5:2b:48:c7:cd:f8:a1:b4:f3:4c:08:ee:71:3f:1f:93:5e:ae:
         97:df:6b:6c:b4:6d:8d:ed:9b:9f:c9:72:a7:6a:44:b6:8c:1f:
         ab:4c:f9:15:bb:7f:a1:a9:30:0b:11:82:dd:a8:1e:75:bb:e6:
         ec:d8:fc:b4:eb:83:f2:56:d0:de:ce:cc:a3:bc:4e:f4:7c:ac:
         44:43:e5:0b:9b:0b:8a:68:11:92:cb:7c:0c:65:7d:ca:e3:bd:
         11:94:a6:bb:34:68:e9:9f:c9:56:3d:5d:74:16:69:bd:48:21:
         3a:e7:23:1c:46:69:d4:44:5a:f0:5d:01:a8:41:30:1a:da:93:
         f1:91:ad:d8:3a:47:6c:84:13:d1:44:55:3b:56:d5:b4:12:b0:
         ed:39:c6:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCAUiUr+z3su1n6nfWTCMjHHBXyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTNFMEJFN0Y0NUZBREYyQzE2MDRCMUREN0MxOTU5OTZC
NzQ4NThFOTAeFw0yNDAyMjYxNDUzMDZaFw0yNTAyMjQxNDU4MDZaMDMxMTAvBgNV
BAMTKEFGRDYxQTJEQzVGQkREQTFGMzk3OThGRUIxRkI5N0Y0Nzk3QzQ4QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjcWh/DzHvVi+lYtB3Zt4/3fLp
b/oSsdXK+iZCCmJd3MC6ox1hryQw2MZHrgjLESR/8Otlc15p7VgpQxP93DLZn/Fr
bn3aaW/sweDk/et7Jxu/+L7zYlfWiRGX4/4q/dr+tBE1rlF4zf15vEW4zdQqhHdj
FoaEC1mkrIwe0JCkxYefJ6ovJ9r3T2t24Bjy0G7j5LBtzm7pWTO7I65v3ufbtUvz
dpVJnMPpLMVYq/s+88/vgZDph+X37emdf1bg3YOUia5xl06bsKP3yLfKrSCnB+ZM
212kPxPECbz+S5KevUoGJGgTLV8W6B1QDR8LxOfMfZdLUPOen7lGX4RrHsnJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr9YaLcX73aHzl5j+sfuX9Hl8SKIwHwYDVR0j
BBgwFoAU4+C+f0X63ywWBLHdfBlZlrdIWOkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC9FM0UwQkU3RjQ1RkFERjJDMTYwNEIxREQ3QzE5NTk5NkI3NDg1OEU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzRTBCRTdGNDVGQURGMkMx
NjA0QjFERDdDMTk1OTk2Qjc0ODU4RTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv
MzQzNTJlMzEzODMxMmUzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbVcMA0GCSqGSIb3DQEBCwUAA4IBAQCfsLgWf2RY
uiSs2oQGCcCL4njuHlj6Aa1fGcQVsbZ1zdFIP5ey89rpelUrBhlXC3VasyK+C3mk
EmLAEjKIwcl6AphwEAZlgeVze7tXsP3+OmoorJuELfTR0zbrDI2Ab9TX5nqPHz0b
FyI655/VK0jHzfihtPNMCO5xPx+TXq6X32tstG2N7ZufyXKnakS2jB+rTPkVu3+h
qTALEYLdqB51u+bs2Py064PyVtDezsyjvE70fKxEQ+ULmwuKaBGSy3wMZX3K470R
lKa7NGjpn8lWPV10Fmm9SCE65yMcRmnURFrwXQGoQTAa2pPxka3YOkdshBPRRFU7
VtW0ErDtOca1
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org