Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa
File:                     34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa (raw, json)
Hash identifier:          pqeAabJ/jTcIIiGegUNcpr/Z1XvQT8rY7h/H63Hgt1M=
Subject key identifier:   11:56:22:E4:DD:F7:EE:5E:3A:51:A4:5E:84:9F:8F:AD:CA:9C:9B:78
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       09196363CD79FADC1F320E62474306E59B536641
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa
Signing time:             Tue 11 Jul 2023 15:19:23 +0000
ROA not before:           Tue 11 Jul 2023 15:14:23 +0000
ROA not after:            Tue 09 Jul 2024 15:19:23 +0000
asID:                     269495
IP address blocks:        45.187.144.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:19:63:63:cd:79:fa:dc:1f:32:0e:62:47:43:06:e5:9b:53:66:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Jul 11 15:14:23 2023 GMT
            Not After : Jul  9 15:19:23 2024 GMT
        Subject: CN=115622E4DDF7EE5E3A51A45E849F8FADCA9C9B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:82:0b:aa:3e:1d:76:f8:26:8b:11:62:4e:36:
                    d5:67:79:41:59:c6:1c:78:31:69:b9:cc:8f:50:2e:
                    fb:8f:a1:f0:af:f4:11:47:da:21:88:81:ad:12:da:
                    b7:47:62:c5:27:6b:e9:ee:19:6b:54:b8:cf:bc:e4:
                    ab:27:73:3d:2e:60:da:88:a6:32:b9:07:dd:d5:22:
                    2e:5b:5f:fd:90:92:20:c0:5b:8c:d8:01:80:98:c6:
                    5f:20:24:b3:de:23:46:04:c4:aa:97:9c:81:7b:14:
                    f8:78:83:1d:a4:5a:8b:8d:b5:4a:f5:11:d2:d2:6e:
                    08:8d:91:ad:00:15:9c:70:9b:9b:53:0c:25:12:cf:
                    53:55:67:c1:f7:0e:9d:59:81:c7:33:40:33:36:7b:
                    08:34:22:96:31:11:a1:4d:e6:df:c9:b9:62:f6:cd:
                    03:f4:40:f0:c1:d7:2a:a6:77:8f:d2:2c:6d:82:ef:
                    f6:3b:b4:b2:06:3e:c0:b8:cd:9f:7b:dd:40:b0:93:
                    0b:ec:2a:74:f6:aa:8b:78:c5:11:2c:43:a3:11:02:
                    67:e4:6f:f5:ee:eb:c5:a1:33:c4:2c:99:17:15:85:
                    53:88:92:d8:99:9e:f0:f2:bc:56:92:ff:7e:99:24:
                    fd:4f:c4:bd:a1:c6:f5:bb:f3:c8:97:aa:28:b0:0d:
                    fd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:22:E4:DD:F7:EE:5E:3A:51:A4:5E:84:9F:8F:AD:CA:9C:9B:78
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134342e302f32332d3233203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:c6:28:6c:7f:c8:56:a2:97:b7:72:e7:ea:ef:a7:c0:f4:
         f6:f8:f9:db:c9:42:89:62:96:27:7c:79:e6:a1:d1:de:fc:37:
         34:f8:a9:2b:68:5f:76:01:c8:34:69:b6:cb:74:20:37:19:cc:
         2e:a5:f2:a7:69:83:11:92:b1:01:cb:62:e3:77:c1:35:48:60:
         6d:b9:1c:28:7a:ef:21:49:c3:3f:18:a6:a2:ec:9e:5d:d2:a9:
         7e:ca:a9:70:0c:b7:b2:2c:63:fa:6f:46:34:0a:a1:de:d5:3c:
         e6:10:48:b9:e5:e0:24:78:2b:fd:85:17:3f:d0:54:02:c1:0d:
         80:f5:04:f6:80:b9:ca:90:81:1a:57:e1:26:f8:7f:2a:5c:b0:
         d9:8b:60:b6:81:66:2d:d8:fd:9e:c6:ba:ec:2b:94:aa:d6:26:
         3a:fe:04:cd:fc:7d:b4:6d:d1:7c:b5:53:39:5f:c1:4f:c4:1f:
         e5:4e:0b:b5:15:3c:ba:41:f0:2f:6a:ec:65:1e:4b:e2:2a:d4:
         e0:a2:d4:ac:99:49:e4:9b:f8:48:9d:99:e3:0c:eb:60:c5:3b:
         23:31:f3:23:72:48:09:31:0f:b5:3b:2f:52:bf:84:f5:dc:55:
         e4:87:38:2f:f5:db:a7:0e:d3:50:db:af:65:7c:e0:ef:d5:0b:
         7c:8a:1b:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCRljY815+twfMg5iR0MG5ZtTZkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFM0I3RjNGMUIyRjlCQzAxRDAyREYxMkU1RDMxQUEx
NEUwNjBEQjAeFw0yMzA3MTExNTE0MjNaFw0yNDA3MDkxNTE5MjNaMDMxMTAvBgNV
BAMTKDExNTYyMkU0RERGN0VFNUUzQTUxQTQ1RTg0OUY4RkFEQ0E5QzlCNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxgguqPh12+CaLEWJONtVneUFZ
xhx4MWm5zI9QLvuPofCv9BFH2iGIga0S2rdHYsUna+nuGWtUuM+85Ksncz0uYNqI
pjK5B93VIi5bX/2QkiDAW4zYAYCYxl8gJLPeI0YExKqXnIF7FPh4gx2kWouNtUr1
EdLSbgiNka0AFZxwm5tTDCUSz1NVZ8H3Dp1ZgcczQDM2ewg0IpYxEaFN5t/JuWL2
zQP0QPDB1yqmd4/SLG2C7/Y7tLIGPsC4zZ973UCwkwvsKnT2qot4xREsQ6MRAmfk
b/Xu68WhM8QsmRcVhVOIktiZnvDyvFaS/36ZJP1PxL2hxvW788iXqiiwDf39AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEVYi5N337l46UaRehJ+Prcqcm3gwHwYDVR0j
BBgwFoAUn+O38/Gy+bwB0C3xLl0xqhTgYNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMC85RkUzQjdGM0YxQjJGOUJDMDFEMDJERjEyRTVEMzFBQTE0RTA2MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGRTNCN0YzRjFCMkY5QkMw
MUQwMkRGMTJFNUQzMUFBMTRFMDYwREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu5AwDQYJKoZIhvcNAQELBQADggEBAEX/xihs
f8hWope3cufq76fA9Pb4+dvJQolilid8eeah0d78NzT4qStoX3YByDRptst0IDcZ
zC6l8qdpgxGSsQHLYuN3wTVIYG25HCh67yFJwz8YpqLsnl3SqX7KqXAMt7IsY/pv
RjQKod7VPOYQSLnl4CR4K/2FFz/QVALBDYD1BPaAucqQgRpX4Sb4fypcsNmLYLaB
Zi3Y/Z7GuuwrlKrWJjr+BM38fbRt0Xy1UzlfwU/EH+VOC7UVPLpB8C9q7GUeS+Iq
1OCi1KyZSeSb+EidmeMM62DFOyMx8yNySAkxD7U7L1K/hPXcVeSHOC/126cO01Db
r2V84O/VC3yKG8c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org