Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
File:                     34352e3233392e3130302e302f32322d3234203d3e203631393432.roa (raw, json)
Hash identifier:          9C29N+PciIHWwcrsZR9yYDfkC7L5A8rI02aHCW7oDL4=
Subject key identifier:   39:07:3C:EB:B2:3B:7F:A7:E2:2B:2E:24:29:BF:7D:F9:35:7D:1A:2E
Certificate issuer:       /CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
Certificate serial:       41E9AD01B60CA62CED1230A8F952AB097A98B485
Authority key identifier: F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa
Signing time:             Thu 04 Apr 2024 02:03:06 +0000
ROA not before:           Thu 04 Apr 2024 01:58:06 +0000
ROA not after:            Thu 03 Apr 2025 02:03:06 +0000
asID:                     61942
IP address blocks:        45.239.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:e9:ad:01:b6:0c:a6:2c:ed:12:30:a8:f9:52:ab:09:7a:98:b4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0
        Validity
            Not Before: Apr  4 01:58:06 2024 GMT
            Not After : Apr  3 02:03:06 2025 GMT
        Subject: CN=39073CEBB23B7FA7E22B2E2429BF7DF9357D1A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:45:dc:b0:e0:cd:cc:0d:9a:82:75:55:db:
                    ef:ff:73:dd:33:44:02:d7:02:0f:70:1c:a1:1a:e6:
                    8f:66:06:bb:82:97:e3:da:f2:15:ca:43:7d:29:67:
                    06:14:15:41:9e:c3:1b:7b:ea:e8:b8:2f:81:b4:b7:
                    e8:71:a7:cc:91:d1:02:28:25:9c:72:56:ec:97:c5:
                    4f:dc:3a:57:03:be:55:4f:aa:17:eb:a6:eb:de:2c:
                    1b:3a:d1:60:fb:fd:d9:56:fd:71:d8:f2:c6:ab:49:
                    d1:21:06:d3:d6:04:b4:27:93:3d:e6:92:62:c2:5a:
                    9a:6b:29:da:84:8a:d2:e5:e2:bc:b0:d5:97:b0:5a:
                    47:96:df:c4:ca:23:5e:ba:35:9a:21:b7:3e:73:65:
                    5c:d1:0b:3e:d1:76:2f:b1:a3:cf:9d:e5:72:0c:7d:
                    4a:da:15:93:e5:ae:c0:10:e3:6d:f7:d2:94:7a:03:
                    d3:15:44:b3:d5:bb:9c:1c:86:bb:b9:0f:0f:17:85:
                    16:35:c3:11:61:9f:fd:90:ae:77:b4:e5:8f:b7:29:
                    8e:97:bb:d4:ce:7a:06:63:a9:b0:9d:34:d6:fa:ec:
                    c6:1d:f1:6c:9b:6b:13:04:7b:0b:85:64:18:88:e4:
                    bf:73:76:cb:56:21:64:86:e6:01:f0:b1:bd:d9:d2:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:07:3C:EB:B2:3B:7F:A7:E2:2B:2E:24:29:BF:7D:F9:35:7D:1A:2E
            X509v3 Authority Key Identifier:
                keyid:F1:18:C0:CD:2D:3D:BF:7D:6E:56:41:53:59:D4:ED:5B:BF:B9:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F118C0CD2D3DBF7D6E56415359D4ED5BBFB9B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Hj6k2YeCvuLHxX9YyC6Afk5dgHiwP6fyKYwjFxLAtgN/1/34352e3233392e3130302e302f32322d3234203d3e203631393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:43:81:c2:8e:5f:b4:93:cb:ef:02:57:cd:6a:0c:b6:99:73:
         ef:21:8c:b5:da:b6:45:45:34:29:1e:37:cc:89:46:32:d8:40:
         1f:74:e2:59:2d:ae:db:c4:f4:9e:ce:34:c1:08:ec:75:3b:71:
         51:71:d9:7d:00:af:e7:33:05:a8:8a:7f:0c:0b:0a:82:72:ad:
         85:74:e0:7d:ce:ab:72:55:27:04:5a:17:69:da:fd:91:34:a9:
         12:41:4e:f8:35:ea:fd:e2:ea:a5:76:ec:92:93:b3:3e:4a:80:
         a2:46:a8:76:72:24:3c:42:f8:91:44:2a:23:db:da:d2:e1:ca:
         13:3f:cc:c9:70:3f:f2:46:0d:af:67:dd:e8:12:62:dc:f2:46:
         43:fd:df:2d:cd:53:6e:8e:52:64:ed:bc:b6:3a:78:66:fd:40:
         19:d0:bc:20:b2:39:3d:4b:19:4d:9c:8c:85:e4:54:72:c5:8d:
         b9:9d:dc:c2:9f:89:27:fe:de:64:fe:11:4b:4b:1c:48:b8:c4:
         b8:e5:99:15:d9:0a:98:0e:2f:a6:c0:3a:8a:68:9c:fe:b0:70:
         25:d1:0b:ae:11:75:6c:8e:74:b1:0f:c0:d7:1a:5b:d2:2e:79:
         b1:29:9b:0c:3c:e4:7a:2b:b4:a1:c9:ee:0b:b3:05:02:25:34:
         6c:21:e7:eb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQemtAbYMpiztEjCo+VKrCXqYtIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjExOEMwQ0QyRDNEQkY3RDZFNTY0MTUzNTlENEVENUJC
RkI5QjlCMDAeFw0yNDA0MDQwMTU4MDZaFw0yNTA0MDMwMjAzMDZaMDMxMTAvBgNV
BAMTKDM5MDczQ0VCQjIzQjdGQTdFMjJCMkUyNDI5QkY3REY5MzU3RDFBMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzkXcsODNzA2agnVV2+//c90z
RALXAg9wHKEa5o9mBruCl+Pa8hXKQ30pZwYUFUGewxt76ui4L4G0t+hxp8yR0QIo
JZxyVuyXxU/cOlcDvlVPqhfrpuveLBs60WD7/dlW/XHY8sarSdEhBtPWBLQnkz3m
kmLCWpprKdqEitLl4ryw1ZewWkeW38TKI166NZohtz5zZVzRCz7Rdi+xo8+d5XIM
fUraFZPlrsAQ42330pR6A9MVRLPVu5wchru5Dw8XhRY1wxFhn/2Qrne05Y+3KY6X
u9TOegZjqbCdNNb67MYd8WybaxMEewuFZBiI5L9zdstWIWSG5gHwsb3Z0lIJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOQc867I7f6fiKy4kKb99+TV9Gi4wHwYDVR0j
BBgwFoAU8RjAzS09v31uVkFTWdTtW7+5ubAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0hqNmsyWWVDdnVMSHhYOVl5QzZBZms1ZGdIaXdQNmZ5S1l3akZ4TEF0
Z04vMS9GMTE4QzBDRDJEM0RCRjdENkU1NjQxNTM1OUQ0RUQ1QkJGQjlCOUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YxMThDMENEMkQzREJGN0Q2
RTU2NDE1MzU5RDRFRDVCQkZCOUI5QjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNIajZrMlllQ3Z1TEh4WDlZeUM2QWZrNWRnSGl3UDZmeUtZd2pGeExBdGdOLzEv
MzQzNTJlMzIzMzM5MmUzMTMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNjMx
MzkzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe9kMA0GCSqGSIb3DQEBCwUAA4IBAQAoQ4HCjl+0
k8vvAlfNagy2mXPvIYy12rZFRTQpHjfMiUYy2EAfdOJZLa7bxPSezjTBCOx1O3FR
cdl9AK/nMwWoin8MCwqCcq2FdOB9zqtyVScEWhdp2v2RNKkSQU74Ner94uqlduyS
k7M+SoCiRqh2ciQ8QviRRCoj29rS4coTP8zJcD/yRg2vZ93oEmLc8kZD/d8tzVNu
jlJk7by2Onhm/UAZ0Lwgsjk9SxlNnIyF5FRyxY25ndzCn4kn/t5k/hFLSxxIuMS4
5ZkV2QqYDi+mwDqKaJz+sHAl0QuuEXVsjnSxD8DXGlvSLnmxKZsMPOR6K7Shye4L
swUCJTRsIefr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org