Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32372e302f32342d3234203d3e20323637363336.roa
File:                     34352e3232342e32372e302f32342d3234203d3e20323637363336.roa (raw, json)
Hash identifier:          +ctVeElw0n62IGPGLFWA31V1U5ruYdD1+xeZGOFRvjQ=
Subject key identifier:   D9:06:EA:48:24:CA:09:C1:D2:CA:FB:C6:9B:2D:46:87:87:14:AA:D7
Certificate issuer:       /CN=38D9697A2330FB616A4B50BDB942F33C06977A53
Certificate serial:       400FCA9A117A1008F2B5299216B796220FE4E984
Authority key identifier: 38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32372e302f32342d3234203d3e20323637363336.roa
Signing time:             Mon 06 Mar 2023 20:28:08 +0000
ROA not before:           Mon 06 Mar 2023 20:23:08 +0000
ROA not after:            Mon 04 Mar 2024 20:28:08 +0000
asID:                     267636
IP address blocks:        45.224.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0f:ca:9a:11:7a:10:08:f2:b5:29:92:16:b7:96:22:0f:e4:e9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38D9697A2330FB616A4B50BDB942F33C06977A53
        Validity
            Not Before: Mar  6 20:23:08 2023 GMT
            Not After : Mar  4 20:28:08 2024 GMT
        Subject: CN=D906EA4824CA09C1D2CAFBC69B2D46878714AAD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:5b:4d:72:6d:10:4b:61:fb:92:da:0a:7b:
                    d6:0c:88:60:97:ee:8f:57:ad:4f:06:20:14:aa:f9:
                    d6:3f:0b:26:bb:b8:62:2f:5d:c0:9a:85:ef:fb:55:
                    bb:05:ae:bb:d2:e0:78:e5:6e:86:ba:bb:a9:e8:e8:
                    f6:d1:a9:e3:57:c7:93:04:6f:a4:7e:f1:69:3e:5c:
                    2a:78:3b:b3:9e:31:98:00:42:d8:9c:dc:99:04:a4:
                    32:b5:ba:7c:d8:a2:53:50:ba:60:e0:a2:91:77:0e:
                    d1:30:e1:38:86:2c:66:3d:63:11:86:18:85:84:11:
                    8b:b1:97:0c:77:1e:99:ad:af:b9:14:55:c5:20:81:
                    80:07:d6:91:44:14:f1:a2:5f:53:e8:fe:d0:19:a9:
                    8d:ac:eb:5a:4d:b4:9b:51:1a:d6:b8:a8:a9:10:44:
                    f7:67:e3:3e:ef:b1:f2:84:f9:62:4e:ee:d5:4c:49:
                    6a:63:07:ad:26:9f:b9:22:2b:88:d7:c3:00:39:95:
                    d9:a4:0d:54:87:91:3b:a2:3c:6d:f6:89:7f:8e:56:
                    61:20:6d:cc:94:73:7d:c0:14:00:52:70:5f:41:87:
                    fd:ff:a4:3e:16:5c:16:95:0a:47:46:00:9c:b4:85:
                    c6:1b:37:75:85:05:47:44:cc:d4:a9:7c:fb:9b:16:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:EA:48:24:CA:09:C1:D2:CA:FB:C6:9B:2D:46:87:87:14:AA:D7
            X509v3 Authority Key Identifier:
                keyid:38:D9:69:7A:23:30:FB:61:6A:4B:50:BD:B9:42:F3:3C:06:97:7A:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/38D9697A2330FB616A4B50BDB942F33C06977A53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38D9697A2330FB616A4B50BDB942F33C06977A53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6aUFMEwi7Tah8vJZr1VDqXGFPNSfX1Pi9vhWchXjukS3/0/34352e3232342e32372e302f32342d3234203d3e20323637363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e8:62:1f:30:c4:30:76:2b:93:db:9c:05:ba:60:81:39:dc:bb:
         d7:c7:20:16:1e:fe:32:f0:fa:0f:f3:e0:d0:35:20:19:cf:d1:
         91:f2:7f:b0:ec:cd:c1:04:ab:f7:9b:4b:7d:be:c1:8b:1a:69:
         f9:bc:ea:a3:dc:76:8c:26:8f:c0:23:b0:89:73:fa:21:37:c0:
         5f:da:56:fc:bf:a1:56:fb:76:53:b4:81:e2:d1:c8:90:5b:70:
         bd:d0:34:2c:ce:7d:9d:11:74:e6:fa:f0:e8:03:03:b9:ab:1e:
         fb:39:e1:fc:30:30:12:36:cd:32:35:b9:1c:7e:7e:e9:dc:d4:
         0f:21:41:de:1f:8a:99:c5:a2:61:c8:e6:65:7f:ca:09:6a:dc:
         1e:0d:bb:f2:61:88:db:ac:bc:21:b1:60:77:a1:e4:a8:41:a4:
         f3:0a:dd:88:d0:20:9e:74:5d:a6:23:54:c0:3b:0b:61:ed:50:
         a2:61:af:2d:3e:ed:3d:b5:f1:85:b6:53:96:e4:74:69:01:83:
         f2:f6:ba:7a:4f:1b:ec:e5:5e:11:5c:99:89:c4:c4:b7:6a:c5:
         f7:3b:96:7e:32:45:f1:94:83:94:cf:cb:fa:f8:b2:33:ff:43:
         15:94:48:19:b1:3d:e2:9c:da:5b:d0:38:7b:e5:03:dc:a7:37:
         eb:62:00:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQA/KmhF6EAjytSmSFreWIg/k6YQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhEOTY5N0EyMzMwRkI2MTZBNEI1MEJEQjk0MkYzM0Mw
Njk3N0E1MzAeFw0yMzAzMDYyMDIzMDhaFw0yNDAzMDQyMDI4MDhaMDMxMTAvBgNV
BAMTKEQ5MDZFQTQ4MjRDQTA5QzFEMkNBRkJDNjlCMkQ0Njg3ODcxNEFBRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIltNcm0QS2H7ktoKe9YMiGCX
7o9XrU8GIBSq+dY/Cya7uGIvXcCahe/7VbsFrrvS4Hjlboa6u6no6PbRqeNXx5ME
b6R+8Wk+XCp4O7OeMZgAQtic3JkEpDK1unzYolNQumDgopF3DtEw4TiGLGY9YxGG
GIWEEYuxlwx3Hpmtr7kUVcUggYAH1pFEFPGiX1Po/tAZqY2s61pNtJtRGta4qKkQ
RPdn4z7vsfKE+WJO7tVMSWpjB60mn7kiK4jXwwA5ldmkDVSHkTuiPG32iX+OVmEg
bcyUc33AFABScF9Bh/3/pD4WXBaVCkdGAJy0hcYbN3WFBUdEzNSpfPubFuZrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2QbqSCTKCcHSyvvGmy1Gh4cUqtcwHwYDVR0j
BBgwFoAUONlpeiMw+2FqS1C9uULzPAaXelMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmFVRk1Fd2k3VGFoOHZKWnIxVkRxWEdGUE5TZlgxUGk5dmhXY2hYanVr
UzMvMC8zOEQ5Njk3QTIzMzBGQjYxNkE0QjUwQkRCOTQyRjMzQzA2OTc3QTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4RDk2OTdBMjMzMEZCNjE2
QTRCNTBCREI5NDJGMzNDMDY5NzdBNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZhVUZNRXdpN1RhaDh2SlpyMVZEcVhHRlBOU2ZYMVBpOXZoV2NoWGp1a1MzLzAv
MzQzNTJlMzIzMjM0MmUzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeAbMA0GCSqGSIb3DQEBCwUAA4IBAQDoYh8wxDB2
K5PbnAW6YIE53LvXxyAWHv4y8PoP8+DQNSAZz9GR8n+w7M3BBKv3m0t9vsGLGmn5
vOqj3HaMJo/AI7CJc/ohN8Bf2lb8v6FW+3ZTtIHi0ciQW3C90DQszn2dEXTm+vDo
AwO5qx77OeH8MDASNs0yNbkcfn7p3NQPIUHeH4qZxaJhyOZlf8oJatweDbvyYYjb
rLwhsWB3oeSoQaTzCt2I0CCedF2mI1TAOwth7VCiYa8tPu09tfGFtlOW5HRpAYPy
9rp6Txvs5V4RXJmJxMS3asX3O5Z+MkXxlIOUz8v6+LIz/0MVlEgZsT3inNpb0Dh7
5QPcpzfrYgCa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org