Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa
File:                     34352e3137322e33392e302f32342d3234203d3e20323638383436.roa (raw, json)
Hash identifier:          jnQiB/gXma1P5BtVpT8lbAk8XE+Nd+Daxv2B0cF47kA=
Subject key identifier:   DB:2B:13:5B:BD:8A:63:CC:F7:01:E2:8C:49:6E:1C:7A:90:E7:56:A2
Certificate issuer:       /CN=3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0
Certificate serial:       2217F876271F337583EEBF0C81AA626857F33295
Authority key identifier: 3E:2A:8B:91:69:E1:2B:4C:53:0D:97:D9:D8:D5:0A:03:C0:2F:93:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa
Signing time:             Thu 14 Sep 2023 15:54:27 +0000
ROA not before:           Thu 14 Sep 2023 15:49:27 +0000
ROA not after:            Thu 12 Sep 2024 15:54:27 +0000
asID:                     268846
IP address blocks:        45.172.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:17:f8:76:27:1f:33:75:83:ee:bf:0c:81:aa:62:68:57:f3:32:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0
        Validity
            Not Before: Sep 14 15:49:27 2023 GMT
            Not After : Sep 12 15:54:27 2024 GMT
        Subject: CN=DB2B135BBD8A63CCF701E28C496E1C7A90E756A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:81:e2:2d:38:c1:97:b4:60:9e:8e:53:63:a6:
                    44:50:e1:15:ee:84:76:83:18:ca:4b:f6:3b:1a:38:
                    53:de:d9:ae:00:ab:8d:ad:ad:04:97:f2:33:5a:a7:
                    7e:7a:89:f3:fd:77:c0:a0:19:77:ae:d4:9b:fa:86:
                    91:ee:2e:0a:d7:48:db:78:09:9c:30:85:3c:5d:71:
                    2a:69:9c:6d:32:65:d9:fb:62:08:11:eb:4f:d0:50:
                    d5:df:70:a1:68:32:e3:1a:af:67:88:a2:fa:cc:cc:
                    5e:a1:28:81:e0:4c:d0:ef:15:c6:0b:84:84:c5:d1:
                    b9:85:c5:cc:48:9c:b8:2e:26:13:91:b5:3b:59:be:
                    6e:b7:38:34:51:26:90:f5:55:69:d1:60:7a:74:3f:
                    6b:76:d0:f5:a2:6f:3a:22:17:67:53:b5:a8:7c:1f:
                    b9:9f:6d:3d:aa:1e:44:c1:ba:e1:cf:43:21:76:6c:
                    be:8d:6c:60:d7:3e:59:b7:03:ab:73:58:47:5f:c7:
                    f5:32:7d:f0:b6:93:1c:81:17:c3:57:59:d2:3c:47:
                    e9:cd:0e:1b:5c:2f:d1:9e:3a:d8:40:69:4d:51:cb:
                    c5:0d:2f:43:5b:09:ff:5e:91:c3:a0:b6:18:0b:c4:
                    88:61:3a:94:57:e1:58:bc:ba:26:de:bc:fd:ba:55:
                    9e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2B:13:5B:BD:8A:63:CC:F7:01:E2:8C:49:6E:1C:7A:90:E7:56:A2
            X509v3 Authority Key Identifier:
                keyid:3E:2A:8B:91:69:E1:2B:4C:53:0D:97:D9:D8:D5:0A:03:C0:2F:93:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3E2A8B9169E12B4C530D97D9D8D50A03C02F93B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/0/34352e3137322e33392e302f32342d3234203d3e20323638383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:c2:8d:17:59:29:53:ef:a8:d9:84:32:47:a7:8c:76:36:e3:
         93:84:92:35:d4:6e:e6:26:e8:2f:b7:12:80:c5:a8:3a:65:cd:
         3c:ec:86:26:06:46:21:23:90:ae:53:37:29:74:3b:b9:39:2f:
         ce:d1:c6:bd:30:10:3f:62:b2:50:ba:3e:2f:54:15:93:d5:13:
         97:64:a8:9a:7a:32:44:0a:06:7f:2c:cb:0d:05:4c:34:2a:92:
         bf:c9:b6:a3:fb:03:91:18:49:d5:d3:5b:ac:9c:96:e1:81:ff:
         e2:2e:70:50:e8:00:03:bb:60:e1:c8:dd:8e:1a:b7:28:a7:a4:
         2b:84:a6:bb:71:75:d1:c5:a0:bc:d0:ef:f4:d2:39:98:68:a0:
         8a:48:ce:f0:28:85:0c:f6:11:5b:38:1a:34:57:63:c5:af:d8:
         a9:ab:c0:74:3a:e6:d5:b1:c7:9b:30:32:0e:eb:bb:f8:7a:5f:
         e4:1a:70:4c:bf:0e:a4:06:47:f9:a7:79:e5:36:cd:d1:5c:6a:
         14:80:16:77:b9:09:ed:44:55:cf:c3:30:dc:af:75:70:17:92:
         99:a0:c9:75:19:60:7f:44:3a:3f:a0:d9:c0:a3:3e:2c:24:11:
         47:f0:29:90:5f:53:08:42:e2:e4:2e:b8:c1:35:1e:40:97:0a:
         84:6b:89:ea
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIhf4dicfM3WD7r8MgapiaFfzMpUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyQThCOTE2OUUxMkI0QzUzMEQ5N0Q5RDhENTBBMDND
MDJGOTNCMDAeFw0yMzA5MTQxNTQ5MjdaFw0yNDA5MTIxNTU0MjdaMDMxMTAvBgNV
BAMTKERCMkIxMzVCQkQ4QTYzQ0NGNzAxRTI4QzQ5NkUxQzdBOTBFNzU2QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5geItOMGXtGCejlNjpkRQ4RXu
hHaDGMpL9jsaOFPe2a4Aq42trQSX8jNap356ifP9d8CgGXeu1Jv6hpHuLgrXSNt4
CZwwhTxdcSppnG0yZdn7YggR60/QUNXfcKFoMuMar2eIovrMzF6hKIHgTNDvFcYL
hITF0bmFxcxInLguJhORtTtZvm63ODRRJpD1VWnRYHp0P2t20PWibzoiF2dTtah8
H7mfbT2qHkTBuuHPQyF2bL6NbGDXPlm3A6tzWEdfx/UyffC2kxyBF8NXWdI8R+nN
DhtcL9GeOthAaU1Ry8UNL0NbCf9ekcOgthgLxIhhOpRX4Vi8uibevP26VZ4nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2ysTW72KY8z3AeKMSW4cepDnVqIwHwYDVR0j
BBgwFoAUPiqLkWnhK0xTDZfZ2NUKA8Avk7AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3lVNGRjOHNnekZVTGJZZnpBa0gzVWtiMVZxeW5zYnJVenZnNXpnZWFK
WWUvMC8zRTJBOEI5MTY5RTEyQjRDNTMwRDk3RDlEOEQ1MEEwM0MwMkY5M0IwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNFMkE4QjkxNjlFMTJCNEM1
MzBEOTdEOUQ4RDUwQTAzQzAyRjkzQjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0N5VTRkYzhzZ3pGVUxiWWZ6QWtIM1VrYjFWcXluc2JyVXp2ZzV6Z2VhSlllLzAv
MzQzNTJlMzEzNzMyMmUzMzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALawnMA0GCSqGSIb3DQEBCwUAA4IBAQCnwo0XWSlT
76jZhDJHp4x2NuOThJI11G7mJugvtxKAxag6Zc087IYmBkYhI5CuUzcpdDu5OS/O
0ca9MBA/YrJQuj4vVBWT1ROXZKiaejJECgZ/LMsNBUw0KpK/ybaj+wORGEnV01us
nJbhgf/iLnBQ6AADu2DhyN2OGrcop6QrhKa7cXXRxaC80O/00jmYaKCKSM7wKIUM
9hFbOBo0V2PFr9ipq8B0OubVscebMDIO67v4el/kGnBMvw6kBkf5p3nlNs3RXGoU
gBZ3uQntRFXPwzDcr3VwF5KZoMl1GWB/RDo/oNnAoz4sJBFH8CmQX1MIQuLkLrjB
NR5AlwqEa4nq
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org