Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3234203d3e20323639323631.roa
File:                     34352e3138322e31362e302f32322d3234203d3e20323639323631.roa (raw, json)
Hash identifier:          CcoxKIU7tCMVPBnx7xGaC/DEL/D7vuL/nxuvVGelL34=
Subject key identifier:   FD:58:6C:E2:CF:30:13:C3:32:B9:9D:F0:3C:44:31:69:14:E2:CA:AE
Certificate issuer:       /CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
Certificate serial:       10A63B4E44BF7DD7D9CAEA1543579D81D517B184
Authority key identifier: D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3234203d3e20323639323631.roa
Signing time:             Mon 13 Mar 2023 23:01:01 +0000
ROA not before:           Mon 13 Mar 2023 22:56:01 +0000
ROA not after:            Mon 11 Mar 2024 23:01:01 +0000
asID:                     269261
IP address blocks:        45.182.16.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a6:3b:4e:44:bf:7d:d7:d9:ca:ea:15:43:57:9d:81:d5:17:b1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Validity
            Not Before: Mar 13 22:56:01 2023 GMT
            Not After : Mar 11 23:01:01 2024 GMT
        Subject: CN=FD586CE2CF3013C332B99DF03C44316914E2CAAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:c9:28:4a:9c:e4:26:eb:60:a8:13:aa:01:
                    30:c9:80:2f:ea:40:7d:e8:e4:f4:5a:eb:16:44:7f:
                    ad:65:f1:d1:68:8b:22:9f:bc:29:d1:ea:da:3c:ad:
                    3a:40:ed:f5:3f:dc:70:ed:d7:d6:28:bc:bf:b1:b6:
                    20:6f:d1:ba:79:f6:c6:a9:6f:38:11:1d:6f:90:54:
                    83:ae:bf:3b:c7:03:43:42:fc:05:06:e4:eb:1b:06:
                    df:71:dc:52:3c:72:6a:f0:48:1f:b9:08:dd:1a:d4:
                    1d:b9:c8:28:5e:8a:65:07:e2:92:76:26:d9:19:61:
                    af:88:c1:4c:74:9f:35:cb:6c:3e:db:35:23:d7:ec:
                    9a:51:c9:21:43:e1:14:bd:ba:dd:79:46:ab:98:36:
                    71:58:98:1e:b6:18:2b:c4:6a:aa:55:03:98:54:ba:
                    f8:3b:0e:7f:5c:1f:58:16:ee:c1:1a:b0:59:82:b8:
                    d5:98:a4:e7:d8:e8:61:db:12:93:6e:16:30:a6:66:
                    9b:79:ab:eb:38:40:75:48:78:00:ce:ff:e4:cf:45:
                    ff:81:4f:13:cd:c8:4c:11:8a:32:34:2e:13:38:68:
                    21:8a:07:a8:71:85:5a:c1:1d:7b:c3:e1:be:f8:97:
                    e8:53:33:78:40:99:4e:7a:e1:53:fa:76:55:ad:3f:
                    31:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:58:6C:E2:CF:30:13:C3:32:B9:9D:F0:3C:44:31:69:14:E2:CA:AE
            X509v3 Authority Key Identifier:
                keyid:D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3234203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:96:c2:5f:7e:e9:0f:a7:a3:35:53:32:69:49:65:b8:cf:d3:
         2e:18:7e:04:ee:f5:6b:6f:44:65:bc:e8:47:ad:6a:46:6f:88:
         b0:b7:ff:6e:68:13:ea:97:c1:37:96:f0:6a:f8:2b:ea:ca:fb:
         a3:45:e8:07:38:03:e6:c2:36:56:84:b7:67:17:32:e0:d4:33:
         a7:03:e2:b1:25:87:eb:27:06:8c:8d:0a:27:28:a3:ca:43:46:
         d1:57:3b:3b:cf:45:79:35:ab:82:1e:5f:cd:9e:47:8a:ec:d0:
         df:d3:e9:3e:ee:f1:b7:34:13:2a:ce:35:7e:3e:fa:96:09:56:
         89:c4:43:71:19:7f:e7:f8:5e:51:97:64:f3:f7:d1:6e:d7:ac:
         db:02:1d:f1:55:bd:99:8c:cc:04:16:31:cd:52:32:2a:e1:c9:
         d2:70:d0:8d:7f:31:99:15:74:8c:0f:ec:39:0e:ec:58:dd:bc:
         dd:4a:58:af:3b:75:33:bf:95:04:99:a4:f8:3f:ec:d9:63:ef:
         2c:04:8a:93:30:ff:1f:3b:e7:60:62:e9:12:bc:0e:18:e1:70:
         3f:8e:60:d0:45:66:7e:72:04:ed:66:57:3a:0d:27:cf:4e:d3:
         0b:3b:43:50:b4:17:9d:7e:e9:fb:e8:eb:9c:de:49:ec:3c:09:
         b3:8e:3d:98
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEKY7TkS/fdfZyuoVQ1edgdUXsYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MzlERDgwNzdDQkREMjI3NEEzMkE0NTM3NTIwRjhD
MkM5NTdDNjAeFw0yMzAzMTMyMjU2MDFaFw0yNDAzMTEyMzAxMDFaMDMxMTAvBgNV
BAMTKEZENTg2Q0UyQ0YzMDEzQzMzMkI5OURGMDNDNDQzMTY5MTRFMkNBQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXwckoSpzkJutgqBOqATDJgC/q
QH3o5PRa6xZEf61l8dFoiyKfvCnR6to8rTpA7fU/3HDt19YovL+xtiBv0bp59sap
bzgRHW+QVIOuvzvHA0NC/AUG5OsbBt9x3FI8cmrwSB+5CN0a1B25yCheimUH4pJ2
JtkZYa+IwUx0nzXLbD7bNSPX7JpRySFD4RS9ut15RquYNnFYmB62GCvEaqpVA5hU
uvg7Dn9cH1gW7sEasFmCuNWYpOfY6GHbEpNuFjCmZpt5q+s4QHVIeADO/+TPRf+B
TxPNyEwRijI0LhM4aCGKB6hxhVrBHXvD4b74l+hTM3hAmU564VP6dlWtPzF3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/Vhs4s8wE8MyuZ3wPEQxaRTiyq4wHwYDVR0j
BBgwFoAU1oOd2Ad8vdInSjKkU3Ug+MLJV8YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM250YnM1OWtGSGkzdFJoU1pOVzRMODVKeDhwZGNNeXNGQ1ZveDgzYkRH
M0UvMS9ENjgzOUREODA3N0NCREQyMjc0QTMyQTQ1Mzc1MjBGOEMyQzk1N0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2ODM5REQ4MDc3Q0JERDIy
NzRBMzJBNDUzNzUyMEY4QzJDOTU3QzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNudGJzNTlrRkhpM3RSaFNaTlc0TDg1Sng4cGRjTXlzRkNWb3g4M2JERzNFLzEv
MzQzNTJlMzEzODMyMmUzMTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbYQMA0GCSqGSIb3DQEBCwUAA4IBAQADlsJffukP
p6M1UzJpSWW4z9MuGH4E7vVrb0RlvOhHrWpGb4iwt/9uaBPql8E3lvBq+Cvqyvuj
RegHOAPmwjZWhLdnFzLg1DOnA+KxJYfrJwaMjQonKKPKQ0bRVzs7z0V5NauCHl/N
nkeK7NDf0+k+7vG3NBMqzjV+PvqWCVaJxENxGX/n+F5Rl2Tz99Fu16zbAh3xVb2Z
jMwEFjHNUjIq4cnScNCNfzGZFXSMD+w5DuxY3bzdSlivO3Uzv5UEmaT4P+zZY+8s
BIqTMP8fO+dgYukSvA4Y4XA/jmDQRWZ+cgTtZlc6DSfPTtMLO0NQtBedfun76Ouc
3knsPAmzjj2Y
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org