Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa
File:                     34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa (raw, json)
Hash identifier:          3MLUa01WbVZJFfTEoI9z1u9v/MFEza+GZrZfyzhVOD0=
Subject key identifier:   3F:CF:3A:9E:6F:93:1A:23:84:CD:99:C3:8B:D1:2E:28:BF:72:FF:F8
Certificate issuer:       /CN=E4675A38BF802AD662F0A50072B000BC4C44A6E4
Certificate serial:       695A39075897791DF47DB3646720DA7FEEFF85CC
Authority key identifier: E4:67:5A:38:BF:80:2A:D6:62:F0:A5:00:72:B0:00:BC:4C:44:A6:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4675A38BF802AD662F0A50072B000BC4C44A6E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa
Signing time:             Wed 18 Oct 2023 15:46:56 +0000
ROA not before:           Wed 18 Oct 2023 15:41:56 +0000
ROA not after:            Wed 16 Oct 2024 15:46:56 +0000
asID:                     267006
IP address blocks:        45.226.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:5a:39:07:58:97:79:1d:f4:7d:b3:64:67:20:da:7f:ee:ff:85:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4675A38BF802AD662F0A50072B000BC4C44A6E4
        Validity
            Not Before: Oct 18 15:41:56 2023 GMT
            Not After : Oct 16 15:46:56 2024 GMT
        Subject: CN=3FCF3A9E6F931A2384CD99C38BD12E28BF72FFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:c0:e3:75:ba:09:ea:97:d4:5e:dd:73:fc:
                    34:a3:71:10:9a:28:be:56:b1:53:f0:bd:b3:06:1e:
                    9a:a1:f5:84:62:0e:00:33:c5:cf:b8:dd:a2:f7:6e:
                    9c:09:be:19:40:14:28:a7:5c:45:6e:28:1b:4a:0e:
                    de:05:e6:a2:c2:b6:25:d3:ad:00:a3:5e:a8:46:cd:
                    11:e2:80:d5:b4:d7:19:ef:63:29:55:50:af:0b:e8:
                    ea:db:01:b4:e9:59:8f:36:0b:4f:30:ce:93:29:47:
                    ba:b2:c3:93:5f:3d:48:4e:78:69:30:a7:c5:df:f2:
                    2f:a2:bf:8d:14:c3:d9:d2:32:72:5f:ba:ec:b1:ee:
                    83:84:4a:ea:be:49:c5:f1:0e:39:24:87:3b:83:24:
                    09:b4:1d:50:e6:43:83:ce:e3:46:19:01:c2:7a:90:
                    bd:ba:87:75:8c:f0:42:68:f8:b3:52:23:00:a4:5c:
                    1a:f0:cc:c9:ce:e7:41:14:64:1a:14:b6:38:82:19:
                    ca:56:c4:f5:a4:91:6f:2a:7e:da:e3:46:12:04:48:
                    ad:b5:78:e5:72:44:71:99:a9:2d:50:01:11:21:b5:
                    b9:db:0c:fb:5a:78:0e:79:d3:4a:c0:7d:37:71:fe:
                    42:1a:9e:d2:6a:d3:04:f4:3c:3f:91:c4:09:a8:10:
                    4f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:3A:9E:6F:93:1A:23:84:CD:99:C3:8B:D1:2E:28:BF:72:FF:F8
            X509v3 Authority Key Identifier:
                keyid:E4:67:5A:38:BF:80:2A:D6:62:F0:A5:00:72:B0:00:BC:4C:44:A6:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/E4675A38BF802AD662F0A50072B000BC4C44A6E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E4675A38BF802AD662F0A50072B000BC4C44A6E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/0/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:2a:ac:d7:37:72:03:e4:3f:f6:7a:92:98:2b:37:86:45:
         92:be:ab:65:58:93:a3:28:75:dd:6e:f1:a6:1c:7b:a9:dc:69:
         72:d3:92:ae:43:42:11:b5:f8:55:90:a3:5b:e4:58:dc:df:27:
         49:e1:ad:00:e9:d1:a8:ea:d6:ca:ea:de:d9:8f:90:c6:2f:2d:
         99:5d:d1:1d:3b:5d:d2:72:81:70:a1:c3:fb:25:71:32:3b:fc:
         0f:03:91:02:82:1b:f0:27:6d:bc:81:3f:cb:26:1b:ee:5f:2a:
         a5:e4:fe:a9:3a:85:e2:ed:f1:2b:86:77:2b:27:63:4a:a1:83:
         6b:0d:c7:8d:98:cf:5d:e0:65:68:72:17:e5:e4:23:f2:b1:91:
         88:64:5f:00:4e:e2:6d:54:86:2b:8d:a9:c9:45:a9:5a:f6:93:
         d1:99:19:0b:70:d0:c0:39:5c:68:94:81:ac:a0:cb:3b:f1:f3:
         1f:c3:23:f6:09:74:32:a2:33:66:d5:39:d7:8f:46:8a:20:b1:
         1d:4a:de:66:e1:8c:32:6d:4d:3d:51:c8:68:ec:13:73:6b:8e:
         78:4d:d4:af:90:e7:23:c5:69:e7:68:11:17:16:46:ae:28:7a:
         3f:37:34:56:90:db:ee:38:4a:a3:e9:5a:a3:e9:15:57:e7:c1:
         4b:68:ac:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaVo5B1iXeR30fbNkZyDaf+7/hcwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ2NzVBMzhCRjgwMkFENjYyRjBBNTAwNzJCMDAwQkM0
QzQ0QTZFNDAeFw0yMzEwMTgxNTQxNTZaFw0yNDEwMTYxNTQ2NTZaMDMxMTAvBgNV
BAMTKDNGQ0YzQTlFNkY5MzFBMjM4NENEOTlDMzhCRDEyRTI4QkY3MkZGRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnsDjdboJ6pfUXt1z/DSjcRCa
KL5WsVPwvbMGHpqh9YRiDgAzxc+43aL3bpwJvhlAFCinXEVuKBtKDt4F5qLCtiXT
rQCjXqhGzRHigNW01xnvYylVUK8L6OrbAbTpWY82C08wzpMpR7qyw5NfPUhOeGkw
p8Xf8i+iv40Uw9nSMnJfuuyx7oOESuq+ScXxDjkkhzuDJAm0HVDmQ4PO40YZAcJ6
kL26h3WM8EJo+LNSIwCkXBrwzMnO50EUZBoUtjiCGcpWxPWkkW8qftrjRhIESK21
eOVyRHGZqS1QAREhtbnbDPtaeA5500rAfTdx/kIantJq0wT0PD+RxAmoEE/rAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP886nm+TGiOEzZnDi9EuKL9y//gwHwYDVR0j
BBgwFoAU5GdaOL+AKtZi8KUAcrAAvExEpuQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEdYR012YVJxZmN6QzNDdEZoNXc5S0hqMWlhYVhTWWlMZUhENHFqcTN2
WFEvMC9FNDY3NUEzOEJGODAyQUQ2NjJGMEE1MDA3MkIwMDBCQzRDNDRBNkU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U0Njc1QTM4QkY4MDJBRDY2
MkYwQTUwMDcyQjAwMEJDNEM0NEE2RTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhHWEdNdmFScWZjekMzQ3RGaDV3OUtIajFpYWFYU1lpTGVIRDRxanEzdlhRLzAv
MzQzNTJlMzIzMjM2MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMDMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4twwDQYJKoZIhvcNAQELBQADggEBALInKqzX
N3ID5D/2epKYKzeGRZK+q2VYk6Modd1u8aYce6ncaXLTkq5DQhG1+FWQo1vkWNzf
J0nhrQDp0ajq1srq3tmPkMYvLZld0R07XdJygXChw/slcTI7/A8DkQKCG/AnbbyB
P8smG+5fKqXk/qk6heLt8SuGdysnY0qhg2sNx42Yz13gZWhyF+XkI/KxkYhkXwBO
4m1UhiuNqclFqVr2k9GZGQtw0MA5XGiUgaygyzvx8x/DI/YJdDKiM2bVOdePRoog
sR1K3mbhjDJtTT1RyGjsE3NrjnhN1K+Q5yPFaedoERcWRq4oej83NFaQ2+44SqPp
WqPpFVfnwUtorFM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org