Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32342d3234203d3e20323637323234.roa
File:                     34352e3233312e3139342e302f32342d3234203d3e20323637323234.roa (raw, json)
Hash identifier:          HAm8l5VEJLcukynRn/lEcbLUfibtUNeBTcUhV1JdNkU=
Subject key identifier:   9A:D4:08:EC:2F:08:2D:CC:EA:6F:24:77:31:8F:03:B6:03:1C:67:E1
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       61C4EFAF6D112CAF46C4593A991B5966E25DFDA5
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32342d3234203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:28 +0000
ROA not before:           Tue 14 Nov 2023 19:29:28 +0000
ROA not after:            Tue 12 Nov 2024 19:34:28 +0000
asID:                     267224
IP address blocks:        45.231.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c4:ef:af:6d:11:2c:af:46:c4:59:3a:99:1b:59:66:e2:5d:fd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:28 2023 GMT
            Not After : Nov 12 19:34:28 2024 GMT
        Subject: CN=9AD408EC2F082DCCEA6F2477318F03B6031C67E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:e9:ca:5b:db:06:af:01:3d:51:4c:37:9a:
                    3d:6e:e2:e3:1c:21:8f:ec:0c:45:a6:b7:46:3f:9b:
                    58:9f:d9:81:fd:aa:46:cf:06:3c:98:c0:5e:85:85:
                    f4:04:ae:58:2f:40:61:43:98:f3:71:33:ca:ef:98:
                    d3:24:1f:41:ec:67:f9:05:b3:ee:f9:8c:c5:95:5d:
                    e5:7d:ae:1d:f2:83:bc:bf:77:0d:4d:ea:27:ac:68:
                    c4:a9:fa:78:f6:62:8d:a1:45:5b:a2:93:9c:9c:0e:
                    ae:7d:38:80:57:af:2f:0f:48:1c:c8:b1:19:08:68:
                    ee:16:3d:32:cd:c1:de:26:73:50:d4:0d:c2:12:18:
                    31:3f:bb:aa:da:d5:65:48:d6:fb:44:1c:56:e2:f0:
                    6f:22:ba:86:f7:39:a5:ec:06:09:ac:8e:5b:2a:98:
                    ef:d0:19:d8:83:b8:66:76:12:65:82:25:aa:4c:1d:
                    1d:14:8f:8b:4e:a5:68:e8:fd:db:54:83:3b:af:e1:
                    05:07:85:16:ae:8d:c2:e8:46:64:87:c0:cb:6f:61:
                    03:95:db:7e:c5:1f:5a:5e:e9:cf:ab:61:15:e1:4c:
                    ee:df:0d:ae:c0:df:5a:c0:8c:be:c1:c7:9d:a7:0f:
                    d8:5b:d7:e1:48:73:0b:96:b8:1f:70:ba:3f:4b:f2:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D4:08:EC:2F:08:2D:CC:EA:6F:24:77:31:8F:03:B6:03:1C:67:E1
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/34352e3233312e3139342e302f32342d3234203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ca:44:af:e2:a0:8a:db:fb:2a:72:f2:24:f5:c7:79:48:9d:
         39:47:0f:7f:19:9b:1a:da:5d:cc:94:2f:19:83:14:5c:94:c8:
         a9:b1:38:e2:20:08:6a:93:d7:ce:bb:18:03:58:43:4f:38:00:
         b5:e5:e1:d6:2e:43:87:ad:d6:1a:6f:06:26:c0:8c:bc:18:8f:
         33:69:1d:21:ff:d1:49:d2:fd:4c:14:9b:6d:7a:af:87:19:33:
         cb:b9:05:5c:7a:6a:21:63:0e:d2:02:53:3a:b3:88:ca:b7:ab:
         3c:4a:a4:5c:d1:59:f2:d1:35:e7:e0:a7:61:04:d3:af:e4:3a:
         9e:12:06:2e:a2:1f:59:5c:2b:8c:07:c8:10:2f:01:f1:cf:1c:
         cb:d6:58:64:ef:83:2c:77:3c:e3:d7:50:91:de:c6:fd:a0:72:
         f3:20:18:ea:af:6a:69:0b:6b:9e:62:14:2a:97:15:29:1c:d9:
         50:dd:d6:ac:b5:40:c3:92:60:07:9e:e4:74:c4:8d:42:ce:51:
         85:f1:e3:3c:4b:a8:89:77:14:ea:2b:68:82:a4:56:15:c3:6a:
         fd:3d:27:77:42:d2:e2:5d:1b:9c:61:4b:c4:56:16:eb:c2:20:
         ad:77:24:0a:81:73:cd:32:0d:96:bf:1c:b1:4d:a0:10:56:23:
         65:51:b5:85
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYcTvr20RLK9GxFk6mRtZZuJd/aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkE0NEEwQTg1QTc4QzY4OEVENENDOTA3MkI4RjNDQjM3
QUVEOTM4RjAeFw0yMzExMTQxOTI5MjhaFw0yNDExMTIxOTM0MjhaMDMxMTAvBgNV
BAMTKDlBRDQwOEVDMkYwODJEQ0NFQTZGMjQ3NzMxOEYwM0I2MDMxQzY3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+J+nKW9sGrwE9UUw3mj1u4uMc
IY/sDEWmt0Y/m1if2YH9qkbPBjyYwF6FhfQErlgvQGFDmPNxM8rvmNMkH0HsZ/kF
s+75jMWVXeV9rh3yg7y/dw1N6iesaMSp+nj2Yo2hRVuik5ycDq59OIBXry8PSBzI
sRkIaO4WPTLNwd4mc1DUDcISGDE/u6ra1WVI1vtEHFbi8G8iuob3OaXsBgmsjlsq
mO/QGdiDuGZ2EmWCJapMHR0Uj4tOpWjo/dtUgzuv4QUHhRaujcLoRmSHwMtvYQOV
237FH1pe6c+rYRXhTO7fDa7A31rAjL7Bx52nD9hb1+FIcwuWuB9wuj9L8tJVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmtQI7C8ILczqbyR3MY8DtgMcZ+EwHwYDVR0j
BBgwFoAU+kSgqFp4xojtTMkHK488s3rtk48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlBocEpOUGFHUU15NDlyUmZ3OVNYVk1TQ3RDVzdCS2J4NFI0VzRlSDFM
b2cvMC9GQTQ0QTBBODVBNzhDNjg4RUQ0Q0M5MDcyQjhGM0NCMzdBRUQ5MzhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBNDRBMEE4NUE3OEM2ODhF
RDRDQzkwNzJCOEYzQ0IzN0FFRDkzOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJQaHBKTlBhR1FNeTQ5clJmdzlTWFZNU0N0Q1c3QktieDRSNFc0ZUgxTG9nLzAv
MzQzNTJlMzIzMzMxMmUzMTM5MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt58IwDQYJKoZIhvcNAQELBQADggEBAE7KRK/i
oIrb+ypy8iT1x3lInTlHD38ZmxraXcyULxmDFFyUyKmxOOIgCGqT1867GANYQ084
ALXl4dYuQ4et1hpvBibAjLwYjzNpHSH/0UnS/UwUm216r4cZM8u5BVx6aiFjDtIC
UzqziMq3qzxKpFzRWfLRNefgp2EE06/kOp4SBi6iH1lcK4wHyBAvAfHPHMvWWGTv
gyx3POPXUJHexv2gcvMgGOqvamkLa55iFCqXFSkc2VDd1qy1QMOSYAee5HTEjULO
UYXx4zxLqIl3FOoraIKkVhXDav09J3dC0uJdG5xhS8RWFuvCIK13JAqBc80yDZa/
HLFNoBBWI2VRtYU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org