Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134352e302f32342d3234203d3e20323639343935.roa
File:                     34352e3138372e3134352e302f32342d3234203d3e20323639343935.roa (raw, json)
Hash identifier:          xH7fxZUR+9wajUVeMr7KjrvIJ1q5PBBefUTKkS0z1Ys=
Subject key identifier:   28:35:A1:5C:71:67:6A:06:FE:90:5B:FA:2D:4E:CA:83:1A:F8:F6:9A
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       66540307D9BAE9FCB72508875D5C82482C6DC253
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134352e302f32342d3234203d3e20323639343935.roa
Signing time:             Mon 30 Oct 2023 23:06:46 +0000
ROA not before:           Mon 30 Oct 2023 23:01:46 +0000
ROA not after:            Mon 28 Oct 2024 23:06:46 +0000
asID:                     269495
IP address blocks:        45.187.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:54:03:07:d9:ba:e9:fc:b7:25:08:87:5d:5c:82:48:2c:6d:c2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Oct 30 23:01:46 2023 GMT
            Not After : Oct 28 23:06:46 2024 GMT
        Subject: CN=2835A15C71676A06FE905BFA2D4ECA831AF8F69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:93:e1:29:f8:40:5a:b4:82:15:94:87:d3:c8:
                    1e:5f:a3:d9:9c:fa:1b:22:2b:74:5f:7b:47:2e:b6:
                    63:9a:94:e6:6c:03:57:6a:cb:9e:14:de:88:1e:93:
                    f9:48:13:2a:36:28:28:ad:5f:60:49:7a:83:75:6c:
                    72:db:b9:2a:de:a1:ab:db:28:76:2f:19:01:a6:82:
                    c6:8e:a8:74:0a:b5:a6:b4:77:dc:61:4b:ef:ee:40:
                    5d:9b:ca:21:31:1d:75:a6:28:20:b9:c0:0c:06:2d:
                    c4:53:78:16:57:a1:fd:d5:a1:0f:87:f1:69:ce:66:
                    0e:d0:00:bd:30:74:64:cf:37:5f:00:d7:07:e2:1c:
                    53:91:93:bc:7b:56:cb:85:71:74:c5:25:65:54:57:
                    0f:be:17:5b:ce:a8:e1:5b:b9:25:c4:04:f1:a9:7b:
                    b9:cf:f4:60:92:3a:74:b5:4b:9b:04:49:5e:de:08:
                    bb:4d:e4:15:42:f4:ac:77:c3:73:04:0e:1d:b0:2f:
                    3e:cc:1d:04:32:e8:86:28:ab:2a:31:a3:1c:02:85:
                    63:26:51:72:54:94:5a:5f:d9:cb:6e:e0:04:03:75:
                    13:38:3e:65:4f:4b:bc:b2:bf:05:e8:55:b9:32:28:
                    7e:81:e3:13:41:c2:26:c2:9d:26:25:17:f5:62:fa:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:35:A1:5C:71:67:6A:06:FE:90:5B:FA:2D:4E:CA:83:1A:F8:F6:9A
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134352e302f32342d3234203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:ae:79:93:e2:70:36:42:ff:d7:12:5b:60:21:81:d3:0e:
         13:be:c7:49:63:1e:7e:92:ed:12:73:e5:20:1c:57:69:50:01:
         c6:0f:6e:0b:6d:76:1c:45:cd:fc:b1:9c:f8:82:c6:64:18:38:
         8c:8f:68:69:ad:29:e3:5e:67:80:fc:ae:87:98:d5:de:b4:e6:
         d2:cc:dc:ab:0b:db:19:9b:7f:07:ed:ed:b8:90:4e:5e:04:bb:
         10:f8:b9:3b:4f:f9:53:5b:4c:13:65:60:61:fb:18:19:56:ce:
         be:8c:66:41:69:fc:d1:5b:eb:3e:c3:09:2c:98:0b:0e:e7:94:
         f7:cd:b6:d9:5c:b9:b7:c5:b2:f7:35:a4:1f:4e:5c:52:bd:34:
         5b:bb:8e:bf:3e:46:5d:6b:5a:c0:11:74:56:04:cd:73:bf:18:
         16:bb:22:dd:28:8c:4d:7a:b2:7e:16:e8:92:5a:fb:ab:91:25:
         c5:cf:00:eb:17:f5:04:05:92:10:dd:4d:0a:f6:8b:13:ba:f9:
         a9:51:d3:d3:ad:70:d2:3d:66:b3:7e:34:75:99:54:f8:19:f3:
         62:d1:e0:71:ff:9c:a9:f1:57:7c:c6:98:21:73:c4:69:36:79:
         87:e7:e7:7f:ff:fb:e2:26:a7:19:60:57:fb:dd:9e:cf:ac:3c:
         fc:52:db:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZlQDB9m66fy3JQiHXVyCSCxtwlMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFM0I3RjNGMUIyRjlCQzAxRDAyREYxMkU1RDMxQUEx
NEUwNjBEQjAeFw0yMzEwMzAyMzAxNDZaFw0yNDEwMjgyMzA2NDZaMDMxMTAvBgNV
BAMTKDI4MzVBMTVDNzE2NzZBMDZGRTkwNUJGQTJENEVDQTgzMUFGOEY2OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvk+Ep+EBatIIVlIfTyB5fo9mc
+hsiK3Rfe0cutmOalOZsA1dqy54U3ogek/lIEyo2KCitX2BJeoN1bHLbuSreoavb
KHYvGQGmgsaOqHQKtaa0d9xhS+/uQF2byiExHXWmKCC5wAwGLcRTeBZXof3VoQ+H
8WnOZg7QAL0wdGTPN18A1wfiHFORk7x7VsuFcXTFJWVUVw++F1vOqOFbuSXEBPGp
e7nP9GCSOnS1S5sESV7eCLtN5BVC9Kx3w3MEDh2wLz7MHQQy6IYoqyoxoxwChWMm
UXJUlFpf2ctu4AQDdRM4PmVPS7yyvwXoVbkyKH6B4xNBwibCnSYlF/Vi+gG/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKDWhXHFnagb+kFv6LU7Kgxr49powHwYDVR0j
BBgwFoAUn+O38/Gy+bwB0C3xLl0xqhTgYNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMC85RkUzQjdGM0YxQjJGOUJDMDFEMDJERjEyRTVEMzFBQTE0RTA2MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGRTNCN0YzRjFCMkY5QkMw
MUQwMkRGMTJFNUQzMUFBMTRFMDYwREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtu5EwDQYJKoZIhvcNAQELBQADggEBAF0WrnmT
4nA2Qv/XEltgIYHTDhO+x0ljHn6S7RJz5SAcV2lQAcYPbgttdhxFzfyxnPiCxmQY
OIyPaGmtKeNeZ4D8roeY1d605tLM3KsL2xmbfwft7biQTl4EuxD4uTtP+VNbTBNl
YGH7GBlWzr6MZkFp/NFb6z7DCSyYCw7nlPfNttlcubfFsvc1pB9OXFK9NFu7jr8+
Rl1rWsARdFYEzXO/GBa7It0ojE16sn4W6JJa+6uRJcXPAOsX9QQFkhDdTQr2ixO6
+alR09OtcNI9ZrN+NHWZVPgZ82LR4HH/nKnxV3zGmCFzxGk2eYfn53//++Impxlg
V/vdns+sPPxS23M=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org