Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/34352e3233392e342e302f32322d3332203d3e20323638333439.roa
File:                     34352e3233392e342e302f32322d3332203d3e20323638333439.roa (raw, json)
Hash identifier:          oWJ/3ExmP7Cl1y2KOPqP4BbU4MPD8YHGZtljxzSITO0=
Subject key identifier:   6A:B5:70:F1:C1:0F:65:35:E5:6E:47:FA:A2:B8:2F:DE:33:17:A3:D8
Certificate issuer:       /CN=16EF16307A5A4FC5F190F19B6D7583DB1462B96A
Certificate serial:       2AD4A41493A3778C1CBA6D610615D7308EC70883
Authority key identifier: 16:EF:16:30:7A:5A:4F:C5:F1:90:F1:9B:6D:75:83:DB:14:62:B9:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/34352e3233392e342e302f32322d3332203d3e20323638333439.roa
Signing time:             Thu 04 Apr 2024 13:50:33 +0000
ROA not before:           Thu 04 Apr 2024 13:45:33 +0000
ROA not after:            Thu 03 Apr 2025 13:50:33 +0000
asID:                     268349
IP address blocks:        45.239.4.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d4:a4:14:93:a3:77:8c:1c:ba:6d:61:06:15:d7:30:8e:c7:08:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16EF16307A5A4FC5F190F19B6D7583DB1462B96A
        Validity
            Not Before: Apr  4 13:45:33 2024 GMT
            Not After : Apr  3 13:50:33 2025 GMT
        Subject: CN=6AB570F1C10F6535E56E47FAA2B82FDE3317A3D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:1c:fb:a2:30:3d:4d:19:15:cf:b6:23:49:
                    0d:14:58:ff:ea:32:c7:d0:1e:9e:41:52:1e:98:8b:
                    78:a9:89:76:f8:58:cf:63:40:b2:a4:59:1c:4d:e7:
                    b6:bb:a2:71:8b:68:e4:46:cf:50:44:7a:63:d1:52:
                    bf:64:9a:24:d4:f7:e2:c4:00:79:fe:f2:64:e8:61:
                    c6:99:2e:74:e7:d1:91:be:f1:e5:14:9f:f7:3b:89:
                    b3:72:95:39:f6:e1:d6:b2:b4:fa:1c:83:13:f9:aa:
                    34:a9:b9:d7:69:e8:c2:e0:79:c9:89:38:00:c0:54:
                    6c:d3:8b:a0:ea:09:d6:cc:8c:ab:e8:30:bc:3b:fc:
                    3e:28:eb:e2:0b:f9:87:71:2d:be:6c:e3:96:9a:a5:
                    2f:0c:8c:c1:d0:b4:0f:ac:b0:6d:0c:4a:ed:dc:cc:
                    4b:34:40:a1:1d:31:9b:83:57:a8:94:bb:d3:70:6e:
                    31:7b:f9:ac:ea:84:3f:bd:e7:94:7f:c2:48:33:f6:
                    1f:e8:cf:57:3d:6a:b6:a5:51:c8:52:d8:43:ba:e9:
                    fb:42:68:14:6e:05:de:47:98:76:38:7c:e1:b2:2e:
                    10:f1:c1:a6:3d:1b:b9:29:ec:e3:23:54:cb:8a:4b:
                    3e:31:79:fb:65:a0:1f:5a:e3:3b:05:b1:6b:cf:cf:
                    dd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B5:70:F1:C1:0F:65:35:E5:6E:47:FA:A2:B8:2F:DE:33:17:A3:D8
            X509v3 Authority Key Identifier:
                keyid:16:EF:16:30:7A:5A:4F:C5:F1:90:F1:9B:6D:75:83:DB:14:62:B9:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/16EF16307A5A4FC5F190F19B6D7583DB1462B96A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7G3bg5CouiQftRXLLgDdFmJhxLjDJ8bCQ4dszDazXh1G/1/34352e3233392e342e302f32322d3332203d3e20323638333439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:14:8d:13:c8:7c:d5:4b:7f:c5:ee:99:24:6d:6d:83:76:8f:
         2e:5a:73:c8:11:76:f0:2b:c7:4d:d9:73:f7:8d:3c:42:d3:17:
         ce:bd:22:d0:82:71:9b:7e:be:49:8d:da:47:24:c6:84:90:49:
         3f:6c:3b:10:60:c5:16:86:27:55:92:36:7d:c5:05:6a:74:73:
         ca:2c:aa:6a:cc:71:4c:01:14:9c:c5:5e:db:4c:ff:25:c1:6a:
         30:4f:d3:3f:dd:6c:3a:a5:b8:00:8f:e8:5a:31:0e:b1:fb:2f:
         cf:f6:45:65:92:ee:6c:6a:b3:b0:40:11:ff:bd:d5:10:49:8e:
         95:ef:4e:e1:98:44:d1:52:d9:40:a7:d2:01:2b:81:84:7c:2a:
         83:bd:9d:23:46:1f:d5:df:e2:4f:04:24:49:47:b1:af:dd:1c:
         e8:59:40:6e:50:53:c8:50:91:7b:fb:c8:22:c9:7a:83:f8:52:
         ce:50:bc:42:eb:f3:06:7a:26:3e:7f:76:88:f7:60:f7:b2:78:
         7f:e9:46:21:5c:cc:79:ae:9b:94:48:9e:1c:14:c4:7c:9e:51:
         5a:7b:69:37:9e:89:5e:d9:be:d7:0e:e6:7e:de:64:1c:53:0f:
         10:48:b6:40:a2:dc:c2:97:50:cd:eb:c6:67:52:69:fa:b0:41:
         f7:8b:73:6e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKtSkFJOjd4wcum1hBhXXMI7HCIMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFRjE2MzA3QTVBNEZDNUYxOTBGMTlCNkQ3NTgzREIx
NDYyQjk2QTAeFw0yNDA0MDQxMzQ1MzNaFw0yNTA0MDMxMzUwMzNaMDMxMTAvBgNV
BAMTKDZBQjU3MEYxQzEwRjY1MzVFNTZFNDdGQUEyQjgyRkRFMzMxN0EzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXzxz7ojA9TRkVz7YjSQ0UWP/q
MsfQHp5BUh6Yi3ipiXb4WM9jQLKkWRxN57a7onGLaORGz1BEemPRUr9kmiTU9+LE
AHn+8mToYcaZLnTn0ZG+8eUUn/c7ibNylTn24daytPocgxP5qjSpuddp6MLgecmJ
OADAVGzTi6DqCdbMjKvoMLw7/D4o6+IL+YdxLb5s45aapS8MjMHQtA+ssG0MSu3c
zEs0QKEdMZuDV6iUu9NwbjF7+azqhD+955R/wkgz9h/oz1c9aralUchS2EO66ftC
aBRuBd5HmHY4fOGyLhDxwaY9G7kp7OMjVMuKSz4xeftloB9a4zsFsWvPz90BAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUarVw8cEPZTXlbkf6orgv3jMXo9gwHwYDVR0j
BBgwFoAUFu8WMHpaT8XxkPGbbXWD2xRiuWowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0czYmc1Q291aVFmdFJYTExnRGRGbUpoeExqREo4YkNRNGRzekRhelho
MUcvMS8xNkVGMTYzMDdBNUE0RkM1RjE5MEYxOUI2RDc1ODNEQjE0NjJCOTZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2RUYxNjMwN0E1QTRGQzVG
MTkwRjE5QjZENzU4M0RCMTQ2MkI5NkEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdHM2JnNUNvdWlRZnRSWExMZ0RkRm1KaHhMakRKOGJDUTRkc3pEYXpYaDFHLzEv
MzQzNTJlMzIzMzM5MmUzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzODMz
MzQzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3vBDANBgkqhkiG9w0BAQsFAAOCAQEADxSNE8h81Ut/
xe6ZJG1tg3aPLlpzyBF28CvHTdlz9408QtMXzr0i0IJxm36+SY3aRyTGhJBJP2w7
EGDFFoYnVZI2fcUFanRzyiyqasxxTAEUnMVe20z/JcFqME/TP91sOqW4AI/oWjEO
sfsvz/ZFZZLubGqzsEAR/73VEEmOle9O4ZhE0VLZQKfSASuBhHwqg72dI0Yf1d/i
TwQkSUexr90c6FlAblBTyFCRe/vIIsl6g/hSzlC8QuvzBnomPn92iPdg97J4f+lG
IVzMea6blEieHBTEfJ5RWntpN56JXtm+1w7mft5kHFMPEEi2QKLcwpdQzevGZ1Jp
+rBB94tzbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-ams.rpki-client.org