Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa
File:                     34352e3138312e33382e302f32332d3233203d3e20323639313631.roa (raw, json)
Hash identifier:          TLIsHZ8mQKBVX/bk0emjJx/9SQA0eafpCP79pXgUDPw=
Subject key identifier:   EC:08:67:60:13:11:FB:A8:59:0F:E0:63:7F:90:83:AE:D6:55:E4:53
Certificate issuer:       /CN=391DEBC26509E9D194B7EE34BAA518754DF93098
Certificate serial:       532F59B07AB87EF7B57E68D6A17A8DEF8323D57D
Authority key identifier: 39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa
Signing time:             Thu 29 Jun 2023 17:18:52 +0000
ROA not before:           Thu 29 Jun 2023 17:13:52 +0000
ROA not after:            Thu 27 Jun 2024 17:18:52 +0000
asID:                     269161
IP address blocks:        45.181.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2f:59:b0:7a:b8:7e:f7:b5:7e:68:d6:a1:7a:8d:ef:83:23:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391DEBC26509E9D194B7EE34BAA518754DF93098
        Validity
            Not Before: Jun 29 17:13:52 2023 GMT
            Not After : Jun 27 17:18:52 2024 GMT
        Subject: CN=EC0867601311FBA8590FE0637F9083AED655E453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ab:c3:c8:53:ce:d5:3b:41:2e:f6:18:d6:c5:
                    17:cb:f8:6d:2b:9d:42:4a:c5:9e:ad:d8:28:d4:c3:
                    c2:5d:c3:94:7f:92:12:9f:b6:c8:dd:f5:f4:e2:96:
                    91:99:75:80:50:26:49:d7:b1:aa:76:91:3e:c2:f2:
                    e7:8c:e7:d5:8a:69:e8:4b:97:39:8a:20:4f:13:0d:
                    ec:3b:75:1c:0b:f7:28:41:c5:08:0c:66:76:b2:fb:
                    f2:10:1c:2d:b3:0c:ed:07:f0:d8:fe:0e:c4:03:32:
                    35:77:33:ba:cb:92:1a:8b:c8:21:1b:a0:f0:24:db:
                    04:a0:23:3f:8c:fd:df:df:6f:b5:8f:7d:97:45:24:
                    b2:4a:84:3f:a4:e7:79:a3:85:07:e2:70:5b:7a:c8:
                    3b:3b:a1:c6:a0:6a:c5:44:11:de:eb:ec:18:84:87:
                    c1:6d:77:59:fa:fe:e1:7f:91:6c:5a:ed:f3:22:15:
                    a9:42:31:be:5f:7c:4d:31:06:b1:38:47:5a:a8:9f:
                    ae:33:1d:05:ad:04:87:d6:8a:9b:ab:c5:ea:10:6a:
                    43:2e:33:ad:75:2a:e5:89:a3:4a:1d:56:54:47:a0:
                    82:b0:81:73:5b:95:ec:81:29:26:db:17:cf:11:51:
                    b2:8a:68:10:7d:26:b5:03:d4:12:3e:1b:e7:ec:bb:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:67:60:13:11:FB:A8:59:0F:E0:63:7F:90:83:AE:D6:55:E4:53
            X509v3 Authority Key Identifier:
                keyid:39:1D:EB:C2:65:09:E9:D1:94:B7:EE:34:BA:A5:18:75:4D:F9:30:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/391DEBC26509E9D194B7EE34BAA518754DF93098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/391DEBC26509E9D194B7EE34BAA518754DF93098.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j86wogT3NS2CYwhxDQLXwdEMC7BAXRqyT7sGsYWhodQ/0/34352e3138312e33382e302f32332d3233203d3e20323639313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:33:54:3d:1a:8b:9b:60:c9:72:dc:28:e0:4f:39:0e:41:ad:
         df:6e:d6:2f:84:22:91:64:42:a2:88:f0:d5:f0:b0:c7:ec:80:
         c4:29:45:e4:63:f4:bd:31:78:af:58:ff:43:fc:a6:b1:d4:69:
         f2:75:8a:f5:c0:1f:d8:f3:96:c5:69:1a:71:d9:a4:d3:79:dc:
         d7:af:f2:51:83:21:0a:28:32:b4:d1:27:fa:c4:3b:59:f6:27:
         d9:b5:39:d8:29:0f:b5:02:7a:4e:b0:9c:30:99:a5:7b:7c:bd:
         0b:b0:d5:3e:57:82:3a:55:7e:09:cc:4d:a3:ba:2b:14:bc:e3:
         ce:bb:16:4b:68:94:64:65:8e:a4:08:cc:b5:44:64:7c:48:6c:
         94:84:61:46:a1:c7:28:a1:44:d5:e7:c2:3e:3f:29:7b:63:25:
         7f:f6:48:82:01:86:38:f1:a8:b6:0e:db:8f:bf:a9:f7:5a:15:
         2f:9a:a3:58:0f:53:9e:52:72:52:28:45:af:9b:87:e4:d4:4a:
         d1:24:25:12:34:68:bc:2e:80:fd:de:2e:27:e3:6e:44:b7:a1:
         c6:42:ab:b9:c9:0e:12:cc:3f:a3:3a:fc:7e:7d:1a:3b:ce:79:
         72:04:f0:9f:54:bc:e5:00:4f:48:5e:28:4f:d9:ce:48:99:ae:
         70:b7:7e:f3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUy9ZsHq4fve1fmjWoXqN74Mj1X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzkxREVCQzI2NTA5RTlEMTk0QjdFRTM0QkFBNTE4NzU0
REY5MzA5ODAeFw0yMzA2MjkxNzEzNTJaFw0yNDA2MjcxNzE4NTJaMDMxMTAvBgNV
BAMTKEVDMDg2NzYwMTMxMUZCQTg1OTBGRTA2MzdGOTA4M0FFRDY1NUU0NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKq8PIU87VO0Eu9hjWxRfL+G0r
nUJKxZ6t2CjUw8Jdw5R/khKftsjd9fTilpGZdYBQJknXsap2kT7C8ueM59WKaehL
lzmKIE8TDew7dRwL9yhBxQgMZnay+/IQHC2zDO0H8Nj+DsQDMjV3M7rLkhqLyCEb
oPAk2wSgIz+M/d/fb7WPfZdFJLJKhD+k53mjhQficFt6yDs7ocagasVEEd7r7BiE
h8Ftd1n6/uF/kWxa7fMiFalCMb5ffE0xBrE4R1qon64zHQWtBIfWipurxeoQakMu
M611KuWJo0odVlRHoIKwgXNbleyBKSbbF88RUbKKaBB9JrUD1BI+G+fsuwvDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7AhnYBMR+6hZD+Bjf5CDrtZV5FMwHwYDVR0j
BBgwFoAUOR3rwmUJ6dGUt+40uqUYdU35MJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmo4NndvZ1QzTlMyQ1l3aHhEUUxYd2RFTUM3QkFYUnF5VDdzR3NZV2hv
ZFEvMC8zOTFERUJDMjY1MDlFOUQxOTRCN0VFMzRCQUE1MTg3NTRERjkzMDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM5MURFQkMyNjUwOUU5RDE5
NEI3RUUzNEJBQTUxODc1NERGOTMwOTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqODZ3b2dUM05TMkNZd2h4RFFMWHdkRU1DN0JBWFJxeVQ3c0dzWVdob2RRLzAv
MzQzNTJlMzEzODMxMmUzMzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbUmMA0GCSqGSIb3DQEBCwUAA4IBAQBBM1Q9Goub
YMly3CjgTzkOQa3fbtYvhCKRZEKiiPDV8LDH7IDEKUXkY/S9MXivWP9D/Kax1Gny
dYr1wB/Y85bFaRpx2aTTedzXr/JRgyEKKDK00Sf6xDtZ9ifZtTnYKQ+1AnpOsJww
maV7fL0LsNU+V4I6VX4JzE2juisUvOPOuxZLaJRkZY6kCMy1RGR8SGyUhGFGocco
oUTV58I+Pyl7YyV/9kiCAYY48ai2DtuPv6n3WhUvmqNYD1OeUnJSKEWvm4fk1ErR
JCUSNGi8LoD93i4n425Et6HGQqu5yQ4SzD+jOvx+fRo7znlyBPCfVLzlAE9IXihP
2c5Ima5wt37z
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org