Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133362e302f32322d3236203d3e20323636393232.roa
File:                     34352e3232342e3133362e302f32322d3236203d3e20323636393232.roa (raw, json)
Hash identifier:          xLamGUQJNDg5/MLm2aOmJqqsQDWKoz092Rx+VMQiobQ=
Subject key identifier:   CC:B2:B5:A2:2B:A1:58:8C:C1:4C:6C:17:30:B6:C5:40:4F:96:EE:60
Certificate issuer:       /CN=9F7F843091F6FCCC474699A4DFCDBA6B4180142B
Certificate serial:       403D80FFAD85C72D0A92B26E5D4590F72FE79432
Authority key identifier: 9F:7F:84:30:91:F6:FC:CC:47:46:99:A4:DF:CD:BA:6B:41:80:14:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7F843091F6FCCC474699A4DFCDBA6B4180142B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133362e302f32322d3236203d3e20323636393232.roa
Signing time:             Tue 05 Dec 2023 14:44:29 +0000
ROA not before:           Tue 05 Dec 2023 14:39:29 +0000
ROA not after:            Tue 03 Dec 2024 14:44:29 +0000
asID:                     266922
IP address blocks:        45.224.136.0/22 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3d:80:ff:ad:85:c7:2d:0a:92:b2:6e:5d:45:90:f7:2f:e7:94:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F7F843091F6FCCC474699A4DFCDBA6B4180142B
        Validity
            Not Before: Dec  5 14:39:29 2023 GMT
            Not After : Dec  3 14:44:29 2024 GMT
        Subject: CN=CCB2B5A22BA1588CC14C6C1730B6C5404F96EE60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ae:f4:06:46:5f:c3:72:46:21:05:cf:b3:e2:
                    07:9f:55:f6:5f:aa:17:96:db:9c:4b:14:da:d1:35:
                    3c:41:c6:92:8c:b8:07:a0:d7:37:6f:00:03:a6:5a:
                    b0:2c:ce:f0:4e:53:8b:3a:11:4b:c7:17:d5:31:e1:
                    33:00:64:66:bc:c5:ba:b5:52:45:14:79:0e:d2:15:
                    96:a1:d7:c4:c4:de:27:05:3d:21:04:c6:73:9e:98:
                    e5:9e:d1:9c:2b:da:2a:84:09:df:a0:ce:b5:fe:c7:
                    ba:42:4e:e2:28:dd:9c:e4:b7:83:81:ec:86:fa:9a:
                    24:06:f4:5e:6c:da:66:da:e2:a1:e2:91:bd:d2:19:
                    26:a2:68:4c:f1:aa:13:2a:73:ee:bd:2d:6c:76:51:
                    3c:f2:ec:c9:6f:12:cc:e9:02:a9:93:3e:4d:fe:da:
                    a1:63:e7:80:2e:4b:1d:4a:1a:66:80:d6:f3:3e:b0:
                    c2:34:fd:61:63:8e:d3:50:96:d9:1a:15:12:8c:9a:
                    4e:71:e6:ab:a4:e0:4d:3a:b9:5d:b5:04:f3:7c:ce:
                    5c:63:e5:ce:13:42:b0:37:dc:cd:22:a8:42:3f:80:
                    77:e1:66:2d:a7:c2:0b:c6:11:9f:be:73:0d:f7:55:
                    3b:1e:30:79:88:79:db:f0:68:41:f9:82:e0:88:39:
                    6e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B2:B5:A2:2B:A1:58:8C:C1:4C:6C:17:30:B6:C5:40:4F:96:EE:60
            X509v3 Authority Key Identifier:
                keyid:9F:7F:84:30:91:F6:FC:CC:47:46:99:A4:DF:CD:BA:6B:41:80:14:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/9F7F843091F6FCCC474699A4DFCDBA6B4180142B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F7F843091F6FCCC474699A4DFCDBA6B4180142B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2yCi37MTwUGLh1g6waAJw7E8NVHwB5aLME2BUJCHzz/0/34352e3232342e3133362e302f32322d3236203d3e20323636393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:45:cf:3b:73:5a:98:d5:83:14:a1:3e:f2:09:17:7e:06:0c:
         12:d2:fe:d1:33:17:f7:65:a3:15:2c:02:ce:42:1d:fd:d9:d2:
         5c:67:65:b3:3d:dd:8b:be:3e:a0:89:53:f9:46:6c:fc:cd:76:
         cb:45:6c:cf:ba:b5:11:6b:24:ca:07:54:cf:81:24:83:00:09:
         56:d9:34:39:27:6d:30:2d:67:fc:7a:62:60:d0:c6:ae:84:e4:
         db:37:a9:93:8f:a8:77:6e:f8:65:eb:3e:40:ab:4b:b8:09:bb:
         2e:19:ac:7f:65:46:7e:a1:1f:ba:f3:05:81:fa:7e:17:6e:c7:
         31:c4:6e:eb:1e:d5:73:3f:a3:ab:59:bc:17:3c:50:51:95:e5:
         d4:7b:7b:f6:cb:53:ea:2d:09:ad:cb:48:e2:4b:02:22:92:af:
         c9:0c:4a:33:ab:7e:7f:43:49:9e:35:5e:cf:67:f3:02:5e:17:
         cc:ac:61:d8:af:6b:55:13:73:b6:99:13:79:c7:ea:a4:18:79:
         9e:89:c2:2c:07:3f:cd:a6:5f:5a:76:74:cf:64:ba:73:b2:c5:
         39:cc:9f:36:80:f3:07:84:ed:b0:6b:ac:f4:f8:f5:25:a6:f3:
         e2:db:17:fd:15:79:1c:eb:70:a9:99:c1:03:40:18:69:3a:45:
         bb:08:fc:80
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQD2A/62Fxy0KkrJuXUWQ9y/nlDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY3Rjg0MzA5MUY2RkNDQzQ3NDY5OUE0REZDREJBNkI0
MTgwMTQyQjAeFw0yMzEyMDUxNDM5MjlaFw0yNDEyMDMxNDQ0MjlaMDMxMTAvBgNV
BAMTKENDQjJCNUEyMkJBMTU4OENDMTRDNkMxNzMwQjZDNTQwNEY5NkVFNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rvQGRl/DckYhBc+z4gefVfZf
qheW25xLFNrRNTxBxpKMuAeg1zdvAAOmWrAszvBOU4s6EUvHF9Ux4TMAZGa8xbq1
UkUUeQ7SFZah18TE3icFPSEExnOemOWe0Zwr2iqECd+gzrX+x7pCTuIo3Zzkt4OB
7Ib6miQG9F5s2mba4qHikb3SGSaiaEzxqhMqc+69LWx2UTzy7MlvEszpAqmTPk3+
2qFj54AuSx1KGmaA1vM+sMI0/WFjjtNQltkaFRKMmk5x5quk4E06uV21BPN8zlxj
5c4TQrA33M0iqEI/gHfhZi2nwgvGEZ++cw33VTseMHmIedvwaEH5guCIOW6xAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUzLK1oiuhWIzBTGwXMLbFQE+W7mAwHwYDVR0j
BBgwFoAUn3+EMJH2/MxHRpmk3826a0GAFCswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFQyeUNpMzdNVHdVR0xoMWc2d2FBSnc3RThOVkh3QjVhTE1FMkJVSkNI
enovMC85RjdGODQzMDkxRjZGQ0NDNDc0Njk5QTRERkNEQkE2QjQxODAxNDJCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGN0Y4NDMwOTFGNkZDQ0M0
NzQ2OTlBNERGQ0RCQTZCNDE4MDE0MkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRUMnlDaTM3TVR3VUdMaDFnNndhQUp3N0U4TlZId0I1YUxNRTJCVUpDSHp6LzAv
MzQzNTJlMzIzMjM0MmUzMTMzMzYyZTMwMmYzMjMyMmQzMjM2MjAzZDNlMjAzMjM2
MzYzOTMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4IgwDQYJKoZIhvcNAQELBQADggEBAMJFzztz
WpjVgxShPvIJF34GDBLS/tEzF/dloxUsAs5CHf3Z0lxnZbM93Yu+PqCJU/lGbPzN
dstFbM+6tRFrJMoHVM+BJIMACVbZNDknbTAtZ/x6YmDQxq6E5Ns3qZOPqHdu+GXr
PkCrS7gJuy4ZrH9lRn6hH7rzBYH6fhduxzHEbuse1XM/o6tZvBc8UFGV5dR7e/bL
U+otCa3LSOJLAiKSr8kMSjOrfn9DSZ41Xs9n8wJeF8ysYdiva1UTc7aZE3nH6qQY
eZ6JwiwHP82mX1p2dM9kunOyxTnMnzaA8weE7bBrrPT49SWm8+LbF/0VeRzrcKmZ
wQNAGGk6RbsI/IA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org