Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
File:                     34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa (raw, json)
Hash identifier:          b0LT1oArIVPWTqardbcTEB0aeROQoZ/ezXhZjfqvvSk=
Subject key identifier:   16:D3:F1:B3:3A:53:32:2E:86:23:66:BA:D0:0F:38:0B:12:BB:C2:18
Certificate issuer:       /CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
Certificate serial:       491A9D9C99730C6A3382D1E87C27F31636F4AEA8
Authority key identifier: 3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa
Signing time:             Thu 28 Mar 2024 22:04:54 +0000
ROA not before:           Thu 28 Mar 2024 21:59:54 +0000
ROA not after:            Thu 27 Mar 2025 22:04:54 +0000
asID:                     271599
IP address blocks:        45.174.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1a:9d:9c:99:73:0c:6a:33:82:d1:e8:7c:27:f3:16:36:f4:ae:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5
        Validity
            Not Before: Mar 28 21:59:54 2024 GMT
            Not After : Mar 27 22:04:54 2025 GMT
        Subject: CN=16D3F1B33A53322E862366BAD00F380B12BBC218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:d2:8b:a9:74:9d:d4:78:19:6a:c9:4e:e3:
                    ce:cc:77:e6:d1:32:76:3a:67:29:ec:17:88:f7:af:
                    0a:c4:a4:5b:7c:30:1c:70:bd:0d:47:7f:f8:d7:4e:
                    12:1a:11:78:44:e4:89:0f:ed:df:56:29:65:d1:16:
                    36:b0:6b:31:ab:e9:83:4a:41:4a:24:b2:5e:5a:5c:
                    ae:07:9e:03:6b:9d:46:d5:da:53:87:b9:fc:97:98:
                    cc:ca:c3:72:9d:16:ec:e0:10:00:d2:e0:bf:58:99:
                    a3:2e:70:79:02:1f:c7:f5:99:65:ee:07:87:c7:e6:
                    9e:8e:6b:15:62:13:63:ef:1d:79:30:2d:64:93:2c:
                    f2:99:57:67:d2:a9:99:3f:4a:ae:21:39:78:98:bd:
                    4b:47:4b:87:ce:44:96:e6:dd:01:ff:d3:b8:d2:f0:
                    35:c3:bc:67:3f:73:58:f2:ac:76:2c:f4:d0:57:a0:
                    88:ef:fb:24:27:aa:4e:48:af:8b:3d:68:63:a9:f5:
                    b3:66:0b:5a:c6:50:b4:3b:d3:cc:71:b2:d1:46:c0:
                    00:1d:4b:29:3a:b1:2d:2d:4c:c4:d7:aa:91:98:c1:
                    73:04:5e:17:cd:ac:44:d7:04:ad:dd:76:8a:82:cd:
                    6d:8f:72:7d:be:1a:81:6f:f0:36:32:d6:09:51:91:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:F1:B3:3A:53:32:2E:86:23:66:BA:D0:0F:38:0B:12:BB:C2:18
            X509v3 Authority Key Identifier:
                keyid:3C:E5:9A:22:55:B0:F6:DB:40:FE:D1:C9:7D:0E:B3:93:55:0A:FA:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CE59A2255B0F6DB40FED1C97D0EB393550AFAA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vPKgoXhoVNBNfX4H2REEFZ1PVmF8R8XmU8q1UUdimGb/0/34352e3137342e3139362e302f32322d3232203d3e20323731353939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:fd:ed:1b:9e:21:25:a1:73:a0:76:75:dc:54:c6:27:40:0d:
         7c:79:fe:13:c7:e0:86:2e:65:fd:e9:63:28:2c:74:97:76:9e:
         18:14:7d:da:b3:0f:76:dd:0a:e4:ee:2d:cd:25:ff:ed:c4:39:
         92:38:ad:d3:8e:9c:95:91:20:cc:8c:17:1d:38:d3:1b:34:da:
         b8:f6:ba:93:91:ec:b8:64:5f:fe:00:30:6e:26:31:c7:b7:53:
         9f:3f:c3:1f:d7:3c:18:75:51:24:41:dd:88:14:e1:7b:75:2c:
         d1:64:8d:de:ff:e6:00:20:ba:93:79:98:df:b8:9a:5b:0b:46:
         64:c0:e1:00:64:1e:31:a6:78:4a:50:9a:4f:83:74:12:0b:3e:
         b3:32:97:a3:85:9b:30:de:05:75:7e:a2:af:cf:15:a5:a0:83:
         6b:c2:a3:09:df:9e:38:7a:4f:0a:95:a1:46:27:2b:d6:ee:b2:
         eb:e2:93:3c:4d:8e:19:4b:f8:72:56:6f:fc:a2:64:a7:17:f7:
         a5:eb:86:8c:1e:bb:f7:f7:84:51:45:0c:85:e8:16:ab:56:b0:
         45:b5:a1:04:8e:30:e9:3d:ec:b6:83:4d:02:b6:6b:eb:68:63:
         5f:6c:ef:12:33:c7:77:65:a9:fd:47:bd:b2:d7:ee:e1:e9:62:
         37:01:93:25
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSRqdnJlzDGozgtHofCfzFjb0rqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NFNTlBMjI1NUIwRjZEQjQwRkVEMUM5N0QwRUIzOTM1
NTBBRkFBNTAeFw0yNDAzMjgyMTU5NTRaFw0yNTAzMjcyMjA0NTRaMDMxMTAvBgNV
BAMTKDE2RDNGMUIzM0E1MzMyMkU4NjIzNjZCQUQwMEYzODBCMTJCQkMyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmttKLqXSd1HgZaslO487Md+bR
MnY6ZynsF4j3rwrEpFt8MBxwvQ1Hf/jXThIaEXhE5IkP7d9WKWXRFjawazGr6YNK
QUoksl5aXK4HngNrnUbV2lOHufyXmMzKw3KdFuzgEADS4L9YmaMucHkCH8f1mWXu
B4fH5p6OaxViE2PvHXkwLWSTLPKZV2fSqZk/Sq4hOXiYvUtHS4fORJbm3QH/07jS
8DXDvGc/c1jyrHYs9NBXoIjv+yQnqk5Ir4s9aGOp9bNmC1rGULQ708xxstFGwAAd
Syk6sS0tTMTXqpGYwXMEXhfNrETXBK3ddoqCzW2Pcn2+GoFv8DYy1glRkZbxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUFtPxszpTMi6GI2a60A84CxK7whgwHwYDVR0j
BBgwFoAUPOWaIlWw9ttA/tHJfQ6zk1UK+qUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZQS2dvWGhvVk5CTmZYNEgyUkVFRloxUFZtRjhSOFhtVThxMVVVZGlt
R2IvMC8zQ0U1OUEyMjU1QjBGNkRCNDBGRUQxQzk3RDBFQjM5MzU1MEFGQUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDRTU5QTIyNTVCMEY2REI0
MEZFRDFDOTdEMEVCMzkzNTUwQUZBQTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2UEtnb1hob1ZOQk5mWDRIMlJFRUZaMVBWbUY4UjhYbVU4cTFVVWRpbUdiLzAv
MzQzNTJlMzEzNzM0MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM3
MzEzNTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrsQwDQYJKoZIhvcNAQELBQADggEBAH/97Rue
ISWhc6B2ddxUxidADXx5/hPH4IYuZf3pYygsdJd2nhgUfdqzD3bdCuTuLc0l/+3E
OZI4rdOOnJWRIMyMFx040xs02rj2upOR7LhkX/4AMG4mMce3U58/wx/XPBh1USRB
3YgU4Xt1LNFkjd7/5gAgupN5mN+4mlsLRmTA4QBkHjGmeEpQmk+DdBILPrMyl6OF
mzDeBXV+oq/PFaWgg2vCownfnjh6TwqVoUYnK9busuvikzxNjhlL+HJWb/yiZKcX
96Xrhoweu/f3hFFFDIXoFqtWsEW1oQSOMOk97LaDTQK2a+toY19s7xIzx3dlqf1H
vbLX7uHpYjcBkyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org