Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138322e302f32332d3233203d3e20323639353239.roa
File:                     34352e3138382e3138322e302f32332d3233203d3e20323639353239.roa (raw, json)
Hash identifier:          sIfGd8AHgJ0cEGBXurfmNruNIFrmU/SGiEBGGpD/ptw=
Subject key identifier:   12:D8:F3:13:36:E3:23:C8:84:1E:65:F9:13:D6:61:FC:98:FA:57:5B
Certificate issuer:       /CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
Certificate serial:       BC669FCBF7E1486FB6610BA77397690968A5D7
Authority key identifier: E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138322e302f32332d3233203d3e20323639353239.roa
Signing time:             Mon 25 Mar 2024 20:25:17 +0000
ROA not before:           Mon 25 Mar 2024 20:20:17 +0000
ROA not after:            Mon 24 Mar 2025 20:25:17 +0000
asID:                     269529
IP address blocks:        45.188.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            bc:66:9f:cb:f7:e1:48:6f:b6:61:0b:a7:73:97:69:09:68:a5:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
        Validity
            Not Before: Mar 25 20:20:17 2024 GMT
            Not After : Mar 24 20:25:17 2025 GMT
        Subject: CN=12D8F31336E323C8841E65F913D661FC98FA575B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:79:df:ab:89:81:2d:02:d5:20:26:d6:6a:
                    0f:79:95:e7:c7:65:d9:bc:c5:ce:f7:ac:76:85:67:
                    9f:e6:e0:d8:f2:67:e8:1b:0a:25:92:61:71:be:4e:
                    3c:a5:f2:1d:ca:d5:10:e6:72:6f:94:4d:0d:c5:ab:
                    03:6a:8d:40:24:a8:a8:92:da:cf:0e:9f:4f:8f:51:
                    62:77:b8:00:be:1b:9f:77:16:9a:42:d4:51:7c:96:
                    46:a5:18:f4:46:e8:d3:2f:f4:fa:78:6c:3a:9d:6d:
                    e0:2f:dc:f8:e0:87:86:36:13:af:fa:5f:67:9c:c3:
                    53:d1:1e:d8:c4:68:18:79:e7:6a:45:70:26:23:42:
                    11:21:4a:36:4b:d4:c9:6d:4c:3e:63:56:f3:18:b8:
                    77:30:e1:42:43:08:06:e2:36:91:b2:df:6f:e9:10:
                    32:53:bb:a3:2b:bf:8b:db:6f:e5:dd:ae:7d:55:43:
                    af:da:8b:e5:de:59:60:c8:80:88:b9:bc:2b:3d:8e:
                    98:3e:77:36:23:0b:cc:87:dd:74:72:1f:3e:5d:a9:
                    31:3a:1e:91:ce:4a:a9:ef:93:01:55:db:07:bd:37:
                    c1:4b:ab:f1:3b:c1:4b:25:7d:57:c5:9c:a7:c2:12:
                    1c:66:f5:d9:6b:ae:bf:82:35:35:20:9f:ba:db:6a:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:F3:13:36:E3:23:C8:84:1E:65:F9:13:D6:61:FC:98:FA:57:5B
            X509v3 Authority Key Identifier:
                keyid:E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/34352e3138382e3138322e302f32332d3233203d3e20323639353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:26:3b:da:80:1a:60:b2:58:bc:47:2a:93:d5:08:82:41:9c:
         f0:47:3d:bd:06:c2:2f:38:4e:20:7a:3f:1b:a2:70:9f:39:6c:
         5b:94:6a:12:ec:1c:f4:31:b8:5a:65:3a:5b:5a:73:66:90:d8:
         30:94:8f:f3:cb:a9:92:c0:7c:7e:8a:a7:06:a1:10:ff:49:d9:
         85:42:cc:81:f4:c6:55:b0:35:c0:3b:45:95:8f:f9:e3:9b:2c:
         c8:6a:b7:38:c8:3a:e9:13:c1:27:8c:04:d9:56:7b:72:d2:f7:
         b0:eb:92:73:dc:45:5d:ec:a7:43:15:e1:88:02:cd:da:e5:03:
         4a:df:8c:a3:4b:97:fb:bd:be:5b:41:7b:db:2e:dd:7a:05:9e:
         8e:e8:26:a1:c6:30:db:6c:f8:6a:9a:eb:cc:fb:0b:f6:15:2b:
         50:ea:91:ff:6b:f0:77:16:11:23:c2:d6:16:06:9c:72:5d:7d:
         13:0c:65:b3:fe:5e:5f:a9:d0:68:aa:09:1a:a7:4e:d4:ad:be:
         92:ef:f7:f6:e4:3a:a5:55:8a:6c:24:df:84:07:63:36:e3:17:
         fa:de:40:12:51:74:7d:00:5d:9d:c9:ab:dc:8e:19:28:fc:cb:
         0d:79:11:20:d0:b6:5c:d4:78:b9:b1:df:35:5e:ca:11:49:f7:
         15:5e:a5:5d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUALxmn8v34UhvtmELp3OXaQlopdcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM5MUQ0NUJBOUQzMjkyREJGQjIyRjQxNTI0MzlCMDNG
NTk5OTZGMzAeFw0yNDAzMjUyMDIwMTdaFw0yNTAzMjQyMDI1MTdaMDMxMTAvBgNV
BAMTKDEyRDhGMzEzMzZFMzIzQzg4NDFFNjVGOTEzRDY2MUZDOThGQTU3NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrVHnfq4mBLQLVICbWag95lefH
Zdm8xc73rHaFZ5/m4NjyZ+gbCiWSYXG+Tjyl8h3K1RDmcm+UTQ3FqwNqjUAkqKiS
2s8On0+PUWJ3uAC+G593FppC1FF8lkalGPRG6NMv9Pp4bDqdbeAv3Pjgh4Y2E6/6
X2ecw1PRHtjEaBh552pFcCYjQhEhSjZL1MltTD5jVvMYuHcw4UJDCAbiNpGy32/p
EDJTu6Mrv4vbb+Xdrn1VQ6/ai+XeWWDIgIi5vCs9jpg+dzYjC8yH3XRyHz5dqTE6
HpHOSqnvkwFV2we9N8FLq/E7wUslfVfFnKfCEhxm9dlrrr+CNTUgn7rbanAvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEtjzEzbjI8iEHmX5E9Zh/Jj6V1swHwYDVR0j
BBgwFoAU45HUW6nTKS2/si9BUkObA/WZlvMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NBUzh0emZaMVRCbUFxUzR1ejNQUGhRMWFOSmM0dW1yeGtaa3kxQVRn
alEvMC9FMzkxRDQ1QkE5RDMyOTJEQkZCMjJGNDE1MjQzOUIwM0Y1OTk5NkYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UzOTFENDVCQTlEMzI5MkRC
RkIyMkY0MTUyNDM5QjAzRjU5OTk2RjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTQVM4dHpmWjFUQm1BcVM0dXozUFBoUTFhTkpjNHVtcnhrWmt5MUFUZ2pRLzAv
MzQzNTJlMzEzODM4MmUzMTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNTMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtvLYwDQYJKoZIhvcNAQELBQADggEBABgmO9qA
GmCyWLxHKpPVCIJBnPBHPb0Gwi84TiB6PxuicJ85bFuUahLsHPQxuFplOltac2aQ
2DCUj/PLqZLAfH6KpwahEP9J2YVCzIH0xlWwNcA7RZWP+eObLMhqtzjIOukTwSeM
BNlWe3LS97DrknPcRV3sp0MV4YgCzdrlA0rfjKNLl/u9vltBe9su3XoFno7oJqHG
MNts+Gqa68z7C/YVK1Dqkf9r8HcWESPC1hYGnHJdfRMMZbP+Xl+p0GiqCRqnTtSt
vpLv9/bkOqVVimwk34QHYzbjF/reQBJRdH0AXZ3Jq9yOGSj8yw15ESDQtlzUeLmx
3zVeyhFJ9xVepV0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org