Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa
File:                     34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa (raw, json)
Hash identifier:          3ThV90N7/Y1MY8odQzkMGLw495ck+JEtjUOdiFprT9E=
Subject key identifier:   72:63:6E:E7:68:D8:A2:68:D1:34:87:3E:FB:14:9F:0A:38:C8:B9:C7
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       2B043E4B7A1B619E50F04DC9A6E04EEED1E5408A
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa
Signing time:             Tue 07 Nov 2023 22:09:57 +0000
ROA not before:           Tue 07 Nov 2023 22:04:57 +0000
ROA not after:            Tue 05 Nov 2024 22:09:57 +0000
asID:                     269495
IP address blocks:        45.187.146.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:04:3e:4b:7a:1b:61:9e:50:f0:4d:c9:a6:e0:4e:ee:d1:e5:40:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Nov  7 22:04:57 2023 GMT
            Not After : Nov  5 22:09:57 2024 GMT
        Subject: CN=72636EE768D8A268D134873EFB149F0A38C8B9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:e9:a6:e3:e1:5f:23:dd:ba:7c:18:e9:0c:
                    cf:78:bb:0c:42:ab:f6:30:b6:8f:18:ea:0c:92:98:
                    9f:80:05:c1:78:f7:58:b3:10:62:58:f8:1e:14:9b:
                    5c:12:e9:40:b2:e0:2b:36:7a:b8:d0:56:c4:b7:e9:
                    d9:87:03:32:4f:93:d5:fe:dc:f0:cf:3d:08:b4:9e:
                    bf:9d:64:a0:a9:4b:de:56:8e:a2:61:68:a1:8f:75:
                    3f:3c:c4:4c:46:58:f7:1f:f7:ee:77:08:7d:76:51:
                    5b:d9:f0:4a:a7:1c:61:09:af:bf:03:40:a0:79:05:
                    82:0c:f9:85:02:66:1a:a6:b5:a0:58:8a:f4:9d:f6:
                    7c:1d:6d:d1:5a:d9:08:07:93:bd:57:33:a7:3f:80:
                    59:53:61:31:5f:e2:97:73:cd:61:ae:9e:ff:a3:59:
                    6a:63:00:1d:cd:20:60:17:a1:63:e4:3d:f1:c8:71:
                    a8:30:38:12:d8:96:a6:2c:7d:c5:aa:32:f8:67:f1:
                    f9:88:64:62:14:ec:81:69:f2:18:cf:11:8b:54:01:
                    a4:b4:b4:7e:7f:28:a0:7f:38:15:e9:74:ab:60:52:
                    0e:78:1f:80:8f:bf:0b:b0:bb:92:35:de:b6:1b:d0:
                    29:45:e9:75:2a:0e:16:fa:b5:f4:19:60:20:a2:33:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:63:6E:E7:68:D8:A2:68:D1:34:87:3E:FB:14:9F:0A:38:C8:B9:C7
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/34352e3138372e3134362e302f32332d3233203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:39:a7:72:36:bc:3c:f1:5f:62:66:00:80:95:f0:69:0c:a3:
         96:5d:27:96:64:3b:a1:b5:1f:7f:f3:8d:e2:8c:20:16:e0:92:
         8c:4a:c5:74:30:9c:dd:4f:ec:00:cf:5f:86:3c:85:45:02:83:
         e1:a9:61:69:01:cd:52:cd:69:ef:87:b9:bc:0d:59:aa:3b:28:
         03:5e:f9:5c:69:19:fe:8a:5d:fd:d4:22:ee:08:25:53:e7:e9:
         99:dc:1f:6d:66:c4:0e:bf:1d:e8:1b:52:3a:39:c2:b3:51:bd:
         e0:9a:31:0a:68:3a:66:4a:67:b0:a9:a1:4b:6d:d2:a5:42:e7:
         9f:5b:f7:0d:3f:ec:ca:91:6e:7e:76:ee:1f:42:fe:cc:48:a0:
         89:0e:73:7f:72:99:d6:0e:a4:bb:97:d7:2a:b1:9f:21:98:47:
         2b:a4:7a:d1:d9:73:57:78:43:71:cb:fe:d5:52:a8:fb:71:27:
         69:d8:6c:17:dc:6e:31:54:5c:94:23:ca:c7:62:29:9c:cf:5e:
         d5:8b:99:5b:a7:b2:b2:20:47:c2:16:f1:b3:00:5f:85:1b:d4:
         94:e5:f6:f5:f5:4c:16:07:a7:31:52:24:ad:e3:d8:3e:30:3a:
         b5:49:74:07:b4:b2:26:55:b8:18:69:97:c6:9a:98:64:83:90:
         07:ee:cd:2b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKwQ+S3obYZ5Q8E3JpuBO7tHlQIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFM0I3RjNGMUIyRjlCQzAxRDAyREYxMkU1RDMxQUEx
NEUwNjBEQjAeFw0yMzExMDcyMjA0NTdaFw0yNDExMDUyMjA5NTdaMDMxMTAvBgNV
BAMTKDcyNjM2RUU3NjhEOEEyNjhEMTM0ODczRUZCMTQ5RjBBMzhDOEI5QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnU+mm4+FfI926fBjpDM94uwxC
q/Ywto8Y6gySmJ+ABcF491izEGJY+B4Um1wS6UCy4Cs2erjQVsS36dmHAzJPk9X+
3PDPPQi0nr+dZKCpS95WjqJhaKGPdT88xExGWPcf9+53CH12UVvZ8EqnHGEJr78D
QKB5BYIM+YUCZhqmtaBYivSd9nwdbdFa2QgHk71XM6c/gFlTYTFf4pdzzWGunv+j
WWpjAB3NIGAXoWPkPfHIcagwOBLYlqYsfcWqMvhn8fmIZGIU7IFp8hjPEYtUAaS0
tH5/KKB/OBXpdKtgUg54H4CPvwuwu5I13rYb0ClF6XUqDhb6tfQZYCCiM01VAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcmNu52jYomjRNIc++xSfCjjIuccwHwYDVR0j
BBgwFoAUn+O38/Gy+bwB0C3xLl0xqhTgYNswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG5KUWtuNUFQdDJnSzJaS1QxRlhWTU4yYXhqdWpxUHJBZzhxWHM1dFJq
aHIvMC85RkUzQjdGM0YxQjJGOUJDMDFEMDJERjEyRTVEMzFBQTE0RTA2MERCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlGRTNCN0YzRjFCMkY5QkMw
MUQwMkRGMTJFNUQzMUFBMTRFMDYwREIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRuSlFrbjVBUHQyZ0syWktUMUZYVk1OMmF4anVqcVByQWc4cVhzNXRSamhyLzAv
MzQzNTJlMzEzODM3MmUzMTM0MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu5IwDQYJKoZIhvcNAQELBQADggEBAF05p3I2
vDzxX2JmAICV8GkMo5ZdJ5ZkO6G1H3/zjeKMIBbgkoxKxXQwnN1P7ADPX4Y8hUUC
g+GpYWkBzVLNae+HubwNWao7KANe+VxpGf6KXf3UIu4IJVPn6ZncH21mxA6/Hegb
Ujo5wrNRveCaMQpoOmZKZ7CpoUtt0qVC559b9w0/7MqRbn527h9C/sxIoIkOc39y
mdYOpLuX1yqxnyGYRyuketHZc1d4Q3HL/tVSqPtxJ2nYbBfcbjFUXJQjysdiKZzP
XtWLmVunsrIgR8IW8bMAX4Ub1JTl9vX1TBYHpzFSJK3j2D4wOrVJdAe0siZVuBhp
l8aamGSDkAfuzSs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org