Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa
File:                     34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa (raw, json)
Hash identifier:          JH2xKdA5c8ICXgP16a9Y+JS+Vel0YFS3fc5Lt/BNa4Q=
Subject key identifier:   45:D5:4B:F9:F6:1B:06:7A:F9:76:D1:20:D4:CF:D1:07:4D:CE:49:B7
Certificate issuer:       /CN=193E8C36D989BF227A8F02A647519CEE06467E67
Certificate serial:       3A5667AE192562A87C304900C8662E39E4534250
Authority key identifier: 19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa
Signing time:             Thu 11 Jan 2024 13:45:00 +0000
ROA not before:           Thu 11 Jan 2024 13:40:00 +0000
ROA not after:            Thu 09 Jan 2025 13:45:00 +0000
asID:                     269299
IP address blocks:        45.183.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:67:ae:19:25:62:a8:7c:30:49:00:c8:66:2e:39:e4:53:42:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193E8C36D989BF227A8F02A647519CEE06467E67
        Validity
            Not Before: Jan 11 13:40:00 2024 GMT
            Not After : Jan  9 13:45:00 2025 GMT
        Subject: CN=45D54BF9F61B067AF976D120D4CFD1074DCE49B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:20:a5:d5:62:d5:34:9d:39:26:04:4b:25:c0:
                    66:3d:fd:e4:ce:f6:4d:5f:a2:ec:b4:7d:10:95:36:
                    a8:ee:a7:2c:51:46:bf:4f:86:1f:9d:79:d4:01:f1:
                    44:37:9a:47:e4:db:84:33:2f:83:9b:6e:e3:89:93:
                    10:5d:d1:bf:6f:6e:97:b6:ab:6b:e1:4c:b3:16:b2:
                    e9:cb:a1:4d:59:2a:87:8f:50:03:4b:b1:5d:21:3b:
                    f1:28:86:af:7d:ad:05:6d:40:c2:f8:a5:a9:9d:5b:
                    38:96:e3:90:38:e1:9a:4e:fa:98:15:82:7f:d9:60:
                    1a:7f:32:fa:51:a9:62:4d:92:cf:87:2e:69:eb:a7:
                    c4:be:4d:af:c7:10:76:e3:6b:d7:54:9f:8c:d7:22:
                    e2:2b:70:34:f1:4b:90:bd:f1:23:59:49:51:8e:b4:
                    19:d4:00:33:04:49:3a:90:8c:ce:d9:63:f2:3d:04:
                    44:99:66:6d:68:cf:19:83:6d:6a:ba:c1:6a:49:9c:
                    37:1c:53:72:fe:58:61:5c:60:1f:56:1f:8a:82:bc:
                    cf:77:82:2b:0b:b5:c9:0d:90:97:b2:99:b9:74:35:
                    0a:cc:ef:29:47:af:31:d6:5f:ac:fb:18:71:bd:78:
                    2a:5b:b9:cd:86:51:a6:91:42:69:80:53:5e:12:40:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:4B:F9:F6:1B:06:7A:F9:76:D1:20:D4:CF:D1:07:4D:CE:49:B7
            X509v3 Authority Key Identifier:
                keyid:19:3E:8C:36:D9:89:BF:22:7A:8F:02:A6:47:51:9C:EE:06:46:7E:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/193E8C36D989BF227A8F02A647519CEE06467E67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/193E8C36D989BF227A8F02A647519CEE06467E67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/0/34352e3138332e3234302e302f32322d3234203d3e20323639323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:13:fc:de:c4:65:fb:77:d1:2d:0a:3f:aa:4e:de:7f:76:
         84:aa:a6:73:7c:ba:91:67:8e:cb:41:31:cb:28:30:14:34:1e:
         9b:e1:d2:4f:e7:25:7e:a0:9f:18:bb:1b:39:74:cc:83:dd:0b:
         27:6e:ee:2d:6d:a5:05:3b:0f:23:6c:99:4c:42:8b:85:36:96:
         63:f2:ac:a5:95:ee:e8:33:7d:d2:00:81:27:a9:61:45:81:0b:
         60:65:bd:df:91:98:b8:97:3a:0d:62:22:33:41:21:ad:20:bb:
         f2:40:cf:8b:85:47:99:b2:6e:b3:04:e1:f9:f1:6e:16:4d:bf:
         e5:6b:5c:ef:37:d7:87:cb:16:53:e4:14:9b:1c:9e:78:a2:56:
         fe:97:ca:f1:9f:8f:1e:81:ff:c2:03:cf:d7:21:8c:07:93:d8:
         28:62:75:41:47:c6:2a:1b:2e:0c:76:2e:86:4b:08:f9:c2:7b:
         8d:01:58:45:94:28:7c:6c:4f:d7:03:72:f7:04:60:4f:f9:e0:
         d0:2e:0f:8d:f1:12:24:70:ca:c4:83:0e:a3:54:b4:2d:ba:5d:
         c8:95:6c:4d:72:9b:17:9b:df:28:81:ed:6d:d1:74:f7:b4:95:
         af:3d:40:dc:e8:89:d8:d6:73:25:f9:86:9b:0b:b0:3e:1e:e8:
         cc:25:88:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUOlZnrhklYqh8MEkAyGYuOeRTQlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkzRThDMzZEOTg5QkYyMjdBOEYwMkE2NDc1MTlDRUUw
NjQ2N0U2NzAeFw0yNDAxMTExMzQwMDBaFw0yNTAxMDkxMzQ1MDBaMDMxMTAvBgNV
BAMTKDQ1RDU0QkY5RjYxQjA2N0FGOTc2RDEyMEQ0Q0ZEMTA3NERDRTQ5QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IKXVYtU0nTkmBEslwGY9/eTO
9k1fouy0fRCVNqjupyxRRr9Phh+dedQB8UQ3mkfk24QzL4ObbuOJkxBd0b9vbpe2
q2vhTLMWsunLoU1ZKoePUANLsV0hO/Eohq99rQVtQML4pamdWziW45A44ZpO+pgV
gn/ZYBp/MvpRqWJNks+HLmnrp8S+Ta/HEHbja9dUn4zXIuIrcDTxS5C98SNZSVGO
tBnUADMESTqQjM7ZY/I9BESZZm1ozxmDbWq6wWpJnDccU3L+WGFcYB9WH4qCvM93
gisLtckNkJeymbl0NQrM7ylHrzHWX6z7GHG9eCpbuc2GUaaRQmmAU14SQFeRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURdVL+fYbBnr5dtEg1M/RB03OSbcwHwYDVR0j
BBgwFoAUGT6MNtmJvyJ6jwKmR1Gc7gZGfmcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR29BVFhMWTNNZnR2MXVQRmVFSHNZaTl6bzE3ZlVjOXBFTTlFVU55aFRG
SEwvMC8xOTNFOEMzNkQ5ODlCRjIyN0E4RjAyQTY0NzUxOUNFRTA2NDY3RTY3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5M0U4QzM2RDk4OUJGMjI3
QThGMDJBNjQ3NTE5Q0VFMDY0NjdFNjcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dvQVRYTFkzTWZ0djF1UEZlRUhzWWk5em8xN2ZVYzlwRU05RVVOeWhURkhMLzAv
MzQzNTJlMzEzODMzMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItt/AwDQYJKoZIhvcNAQELBQADggEBAJ3EE/ze
xGX7d9EtCj+qTt5/doSqpnN8upFnjstBMcsoMBQ0Hpvh0k/nJX6gnxi7Gzl0zIPd
Cydu7i1tpQU7DyNsmUxCi4U2lmPyrKWV7ugzfdIAgSepYUWBC2Blvd+RmLiXOg1i
IjNBIa0gu/JAz4uFR5mybrME4fnxbhZNv+VrXO8314fLFlPkFJscnniiVv6XyvGf
jx6B/8IDz9chjAeT2ChidUFHxiobLgx2LoZLCPnCe40BWEWUKHxsT9cDcvcEYE/5
4NAuD43xEiRwysSDDqNUtC26XciVbE1ymxeb3yiB7W3RdPe0la89QNzoidjWcyX5
hpsLsD4e6MwliPo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org