Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/34352e3138312e3231322e302f32322d3232203d3e20323639323032.roa
File:                     34352e3138312e3231322e302f32322d3232203d3e20323639323032.roa (raw, json)
Hash identifier:          XORGjsf/YqNHyOmiUA5sxvqzRCJonBEuDPOMQblMGs8=
Subject key identifier:   32:24:83:3F:AD:FE:C1:1F:B1:44:EC:D5:C7:CE:5A:1C:D3:A3:A8:EE
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       4154A3E992B193B86A715C7F487B8FD2A44450AF
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/34352e3138312e3231322e302f32322d3232203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:18:38 +0000
ROA not before:           Mon 06 Feb 2023 22:13:38 +0000
ROA not after:            Mon 05 Feb 2024 22:18:38 +0000
asID:                     269202
IP address blocks:        45.181.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:54:a3:e9:92:b1:93:b8:6a:71:5c:7f:48:7b:8f:d2:a4:44:50:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:13:38 2023 GMT
            Not After : Feb  5 22:18:38 2024 GMT
        Subject: CN=3224833FADFEC11FB144ECD5C7CE5A1CD3A3A8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:4d:9d:6f:8a:06:4b:02:1c:96:c8:49:7d:
                    87:9e:30:c9:9b:79:6d:d8:0d:00:fe:d4:b7:93:32:
                    12:02:92:5d:b4:30:85:3d:70:4b:23:89:28:85:eb:
                    a3:a6:95:bb:b2:dc:5d:ae:59:08:2d:a3:56:9f:8d:
                    1b:de:8c:d9:65:b8:be:3e:e2:2a:d4:5d:c9:3c:32:
                    e6:d4:26:f9:29:f4:83:ba:cc:4b:35:dc:6e:f4:20:
                    5f:c5:9e:d1:80:25:36:40:cd:72:e4:d8:d3:1c:9c:
                    9d:8d:6d:c3:eb:48:da:63:00:37:df:3f:a8:d7:93:
                    8a:f4:3f:2c:4d:de:16:fa:49:0e:93:cc:9a:96:d4:
                    f7:66:48:9b:9f:da:25:18:11:f3:95:66:44:72:6d:
                    30:bf:cc:a3:74:3a:8e:4f:82:53:92:97:26:c5:eb:
                    ec:71:75:fb:0f:79:98:23:60:5c:90:7c:d3:ba:f3:
                    24:9d:28:bd:58:92:0a:d5:ba:15:5d:4b:27:27:a1:
                    31:b8:c1:73:19:2f:2e:41:b1:97:75:cc:9f:5f:86:
                    ef:74:38:bf:73:38:f9:9f:ad:8f:48:85:b4:7e:ea:
                    31:6b:8d:fb:d4:6e:7d:f4:fc:98:bc:68:99:b6:bf:
                    27:04:e9:bd:b8:54:de:12:c9:4f:df:95:9f:21:b8:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:24:83:3F:AD:FE:C1:1F:B1:44:EC:D5:C7:CE:5A:1C:D3:A3:A8:EE
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/34352e3138312e3231322e302f32322d3232203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:00:fe:2d:0b:64:83:af:e3:15:c7:25:bb:92:4a:d2:3c:
         57:cc:90:bf:3e:23:64:6a:ba:87:82:2e:91:51:3e:fa:e3:64:
         e2:48:79:7c:53:19:b2:58:8b:a8:91:e6:b3:ab:31:79:c2:dd:
         0b:ec:f4:07:a1:e1:fe:c4:25:64:a9:4a:37:36:86:18:8c:f1:
         3b:07:a9:89:0c:b9:cb:f2:2f:9f:23:5f:39:ad:b6:fe:03:dc:
         0d:a9:a3:49:55:90:90:f4:36:d7:3c:a1:83:3e:9f:47:7c:48:
         9f:98:82:76:65:1d:50:55:43:b7:39:a4:f3:71:5a:af:3a:b5:
         ce:65:a9:23:91:66:52:a3:ac:2c:c2:d5:45:d8:a3:4b:c1:c3:
         1e:5a:78:4f:24:4e:09:f1:cb:3b:5f:fc:97:0f:50:22:e0:53:
         76:5a:8e:7b:a7:bd:3a:32:9b:49:e1:cf:73:f2:72:8a:54:8f:
         f9:04:7e:a1:2e:d0:34:56:dd:59:9d:05:bd:e8:f6:9f:14:14:
         a3:2d:cc:f2:57:42:e7:f7:80:98:80:12:f9:66:9c:ec:3e:de:
         c0:7f:ce:7b:f6:03:fc:87:4d:8b:2b:be:39:5d:c7:86:4e:c6:
         b1:16:de:5b:4a:32:60:1d:c7:61:ce:e9:a5:24:6c:cb:7e:37:
         c7:9f:5d:95
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQVSj6ZKxk7hqcVx/SHuP0qREUK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjExNTIxODk1QjA5NTNFNjg4M0Q1MTYzRDdDNjU2MkVE
MjE2ODVCRDAeFw0yMzAyMDYyMjEzMzhaFw0yNDAyMDUyMjE4MzhaMDMxMTAvBgNV
BAMTKDMyMjQ4MzNGQURGRUMxMUZCMTQ0RUNENUM3Q0U1QTFDRDNBM0E4RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLpk2db4oGSwIclshJfYeeMMmb
eW3YDQD+1LeTMhICkl20MIU9cEsjiSiF66Omlbuy3F2uWQgto1afjRvejNlluL4+
4irUXck8MubUJvkp9IO6zEs13G70IF/FntGAJTZAzXLk2NMcnJ2NbcPrSNpjADff
P6jXk4r0PyxN3hb6SQ6TzJqW1PdmSJuf2iUYEfOVZkRybTC/zKN0Oo5PglOSlybF
6+xxdfsPeZgjYFyQfNO68ySdKL1YkgrVuhVdSycnoTG4wXMZLy5BsZd1zJ9fhu90
OL9zOPmfrY9IhbR+6jFrjfvUbn30/Ji8aJm2vycE6b24VN4SyU/flZ8huF5hAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUMiSDP63+wR+xROzVx85aHNOjqO4wHwYDVR0j
BBgwFoAUIRUhiVsJU+aIPVFj18ZWLtIWhb0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0tUaXBDUWhIQUtFVWJEakNxM1NQV3FIUG1vUzhyWHhkVDdhUjVnU0hn
NmEvMS8yMTE1MjE4OTVCMDk1M0U2ODgzRDUxNjNEN0M2NTYyRUQyMTY4NUJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxMTUyMTg5NUIwOTUzRTY4
ODNENTE2M0Q3QzY1NjJFRDIxNjg1QkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNLVGlwQ1FoSEFLRVViRGpDcTNTUFdxSFBtb1M4clh4ZFQ3YVI1Z1NIZzZhLzEv
MzQzNTJlMzEzODMxMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttdQwDQYJKoZIhvcNAQELBQADggEBAA3EAP4t
C2SDr+MVxyW7kkrSPFfMkL8+I2RquoeCLpFRPvrjZOJIeXxTGbJYi6iR5rOrMXnC
3Qvs9Aeh4f7EJWSpSjc2hhiM8TsHqYkMucvyL58jXzmttv4D3A2po0lVkJD0Ntc8
oYM+n0d8SJ+YgnZlHVBVQ7c5pPNxWq86tc5lqSORZlKjrCzC1UXYo0vBwx5aeE8k
Tgnxyztf/JcPUCLgU3ZajnunvToym0nhz3PycopUj/kEfqEu0DRW3VmdBb3o9p8U
FKMtzPJXQuf3gJiAEvlmnOw+3sB/znv2A/yHTYsrvjldx4ZOxrEW3ltKMmAdx2HO
6aUkbMt+N8efXZU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org