Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32332d3233203d3e20323637323234.roa
File:                     34352e3233312e3139342e302f32332d3233203d3e20323637323234.roa (raw, json)
Hash identifier:          hUMpyowcUPpP+PhFmeLvvJnNgrsUkZMf5bkcUA+3qdQ=
Subject key identifier:   B4:56:B4:FE:B7:AA:BC:6A:5F:26:A0:EA:5F:A3:DE:65:EC:22:C8:99
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       3B9C53CCEBE69515300104B7A6503DAE17A0F2B7
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32332d3233203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:31 +0000
ROA not before:           Tue 14 Nov 2023 19:29:31 +0000
ROA not after:            Tue 12 Nov 2024 19:34:31 +0000
asID:                     267224
IP address blocks:        45.231.194.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9c:53:cc:eb:e6:95:15:30:01:04:b7:a6:50:3d:ae:17:a0:f2:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:31 2023 GMT
            Not After : Nov 12 19:34:31 2024 GMT
        Subject: CN=B456B4FEB7AABC6A5F26A0EA5FA3DE65EC22C899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:7c:2f:46:4f:5d:70:1b:5b:57:be:bc:de:
                    fc:3e:59:86:b9:70:e6:9f:31:b8:ba:44:e9:74:48:
                    03:54:c7:8b:ca:35:4b:8e:7d:1e:b5:f1:d2:2b:70:
                    e8:60:a4:1f:1a:ad:c8:9c:a1:18:75:df:03:db:ba:
                    28:68:98:01:2d:b8:89:26:55:02:70:ec:f4:f5:2d:
                    70:14:02:4a:ab:bc:3a:00:df:84:e5:42:19:ab:a0:
                    24:11:56:cb:f5:b3:c5:7c:78:0f:90:af:c9:84:28:
                    5d:76:72:ce:54:ff:37:45:5a:a2:b5:36:7b:fa:8e:
                    f9:82:31:e2:02:db:fe:7b:66:22:0a:57:68:e2:59:
                    0d:f8:75:7b:1e:c3:4f:24:83:c5:ed:3e:91:88:20:
                    3a:2a:db:21:72:ad:6a:9d:67:94:8c:00:51:1c:dd:
                    e7:ba:a4:23:43:70:3b:3d:75:7e:ee:ac:87:57:da:
                    d4:38:0b:d6:e9:4e:fb:a2:3a:cf:21:4c:4e:7a:5e:
                    48:89:4e:0f:df:cb:0b:06:b0:4d:d0:b3:c5:7f:a3:
                    81:37:6a:fd:ad:00:b8:0a:6f:d0:ca:e7:a2:59:b4:
                    e0:a7:5e:ca:c5:22:21:88:86:33:fc:6f:0e:0d:06:
                    2e:74:a4:7a:7c:03:c5:1c:71:26:a3:b5:cc:76:bb:
                    35:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:56:B4:FE:B7:AA:BC:6A:5F:26:A0:EA:5F:A3:DE:65:EC:22:C8:99
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32332d3233203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:2d:b9:6c:5c:0c:bb:5f:1e:ed:35:a5:f5:ba:51:b7:59:7d:
         3c:e7:81:7d:f0:c0:2b:c1:d8:25:25:98:71:c3:01:38:4e:90:
         b1:d4:63:02:a4:7c:60:4c:6f:32:4b:75:a6:51:7b:00:72:df:
         b5:2f:65:32:d3:63:8e:e0:ed:47:3a:45:b5:1d:ed:3b:7f:a5:
         f8:8a:e3:5a:81:25:9e:a6:61:e5:0d:5b:77:a9:10:9f:36:05:
         53:f6:21:7b:fb:79:ed:fd:7f:3e:1e:1c:b8:62:a4:2a:e9:3f:
         76:c8:8b:82:6a:58:08:6d:b0:16:58:75:32:4f:56:15:68:ae:
         bd:7f:f4:7d:0c:61:ca:c5:5c:62:f7:5d:31:59:9f:99:32:9b:
         d8:35:d4:25:9d:10:12:db:1a:83:06:1d:2a:ad:ff:f9:57:c9:
         72:ee:bd:17:e3:13:e9:b6:3d:6e:6c:5c:8e:ca:41:2a:fe:19:
         c5:a2:3b:32:03:f2:1d:f1:64:b9:94:9b:c0:2b:ba:2f:75:3c:
         c5:ae:be:bd:ba:df:85:67:8e:cf:0b:1d:bd:c6:ba:6f:ac:a9:
         4b:a3:26:07:e7:85:d1:4a:8d:e5:e7:d8:64:77:c5:31:d7:37:
         3f:b8:c3:46:00:b6:fd:5d:b2:d4:eb:01:a0:65:71:ca:bb:20:
         18:43:5c:1b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO5xTzOvmlRUwAQS3plA9rheg8rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NEEwQTg1QTc4QzY4OEVENENDOTA3MkI4RjNDQjM3
QUVEOTM4RjAeFw0yMzExMTQxOTI5MzFaFw0yNDExMTIxOTM0MzFaMDMxMTAvBgNV
BAMTKEI0NTZCNEZFQjdBQUJDNkE1RjI2QTBFQTVGQTNERTY1RUMyMkM4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDupHwvRk9dcBtbV7683vw+WYa5
cOafMbi6ROl0SANUx4vKNUuOfR618dIrcOhgpB8arcicoRh13wPbuihomAEtuIkm
VQJw7PT1LXAUAkqrvDoA34TlQhmroCQRVsv1s8V8eA+Qr8mEKF12cs5U/zdFWqK1
Nnv6jvmCMeIC2/57ZiIKV2jiWQ34dXsew08kg8XtPpGIIDoq2yFyrWqdZ5SMAFEc
3ee6pCNDcDs9dX7urIdX2tQ4C9bpTvuiOs8hTE56XkiJTg/fywsGsE3Qs8V/o4E3
av2tALgKb9DK56JZtOCnXsrFIiGIhjP8bw4NBi50pHp8A8UccSajtcx2uzWBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUtFa0/reqvGpfJqDqX6PeZewiyJkwHwYDVR0j
BBgwFoAU+kSgqFp4xojtTMkHK488s3rtk48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBocEpOUGFHUU15NDlyUmZ3OVNYVk1TQ3RDVzdCS2J4NFI0VzRlSDFM
b2cvMC9GQTQ0QTBBODVBNzhDNjg4RUQ0Q0M5MDcyQjhGM0NCMzdBRUQ5MzhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNDRBMEE4NUE3OEM2ODhF
RDRDQzkwNzJCOEYzQ0IzN0FFRDkzOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQaHBKTlBhR1FNeTQ5clJmdzlTWFZNU0N0Q1c3QktieDRSNFc0ZUgxTG9nLzAv
MzQzNTJlMzIzMzMxMmUzMTM5MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt58IwDQYJKoZIhvcNAQELBQADggEBABwtuWxc
DLtfHu01pfW6UbdZfTzngX3wwCvB2CUlmHHDAThOkLHUYwKkfGBMbzJLdaZRewBy
37UvZTLTY47g7Uc6RbUd7Tt/pfiK41qBJZ6mYeUNW3epEJ82BVP2IXv7ee39fz4e
HLhipCrpP3bIi4JqWAhtsBZYdTJPVhVorr1/9H0MYcrFXGL3XTFZn5kym9g11CWd
EBLbGoMGHSqt//lXyXLuvRfjE+m2PW5sXI7KQSr+GcWiOzID8h3xZLmUm8Arui91
PMWuvr2634Vnjs8LHb3Gum+sqUujJgfnhdFKjeXn2GR3xTHXNz+4w0YAtv1dstTr
AaBlccq7IBhDXBs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org