Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133392e302f32342d3234203d3e20323639363437.roa
File:                     34352e3139302e3133392e302f32342d3234203d3e20323639363437.roa (raw, json)
Hash identifier:          plL7wk70uBdw6fWALOVkGUbDn6Ls7zlT3jckmm1827Q=
Subject key identifier:   E9:98:B8:96:40:84:D2:E4:D8:E8:8E:5E:7D:B6:6C:1B:7A:2B:AA:0B
Certificate issuer:       /CN=4832607AC6C96585F4D44466D566C5224139F09C
Certificate serial:       2FEBF4D8525B51F018C77B1560F97A9D499786B5
Authority key identifier: 48:32:60:7A:C6:C9:65:85:F4:D4:44:66:D5:66:C5:22:41:39:F0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4832607AC6C96585F4D44466D566C5224139F09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133392e302f32342d3234203d3e20323639363437.roa
Signing time:             Tue 02 May 2023 20:48:20 +0000
ROA not before:           Tue 02 May 2023 20:43:20 +0000
ROA not after:            Tue 30 Apr 2024 20:48:20 +0000
asID:                     269647
IP address blocks:        45.190.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:f4:d8:52:5b:51:f0:18:c7:7b:15:60:f9:7a:9d:49:97:86:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4832607AC6C96585F4D44466D566C5224139F09C
        Validity
            Not Before: May  2 20:43:20 2023 GMT
            Not After : Apr 30 20:48:20 2024 GMT
        Subject: CN=E998B8964084D2E4D8E88E5E7DB66C1B7A2BAA0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5e:5f:8a:93:ba:8b:f1:2c:14:82:3e:c6:25:
                    01:50:fd:79:e4:fd:01:2b:9e:af:7d:be:7d:00:d6:
                    ed:82:b9:06:cd:d4:8a:4a:3c:ff:45:7e:d1:72:47:
                    25:30:59:bf:16:ae:58:81:66:42:ca:9d:3a:be:75:
                    81:a6:1a:08:de:dd:ab:0f:b3:17:29:57:ce:b0:b1:
                    33:a5:49:58:12:55:79:79:24:c7:47:f1:a5:50:97:
                    76:62:87:f5:c9:99:fb:ff:84:e6:70:4f:31:af:e3:
                    de:8b:2e:4f:c9:35:b5:e8:29:85:e9:42:62:69:82:
                    1c:cd:12:c7:23:42:11:24:a8:ea:f6:cd:a5:46:9b:
                    78:cf:a9:50:7d:cc:c1:d7:1d:44:af:17:ab:ce:fb:
                    0c:63:02:d9:85:60:3b:19:1b:47:61:46:8a:92:28:
                    ad:5e:1f:31:3a:a2:0e:d0:11:05:c1:e4:78:9b:89:
                    33:b9:91:3c:a6:2a:e6:ae:e7:bf:08:a5:ce:29:45:
                    9a:f2:e5:7c:3f:81:68:ac:6b:ff:23:12:e8:c7:e8:
                    99:33:4d:0e:9b:c6:bf:a0:22:e2:f4:4e:6f:92:5a:
                    d2:75:22:5c:ff:b9:a0:d9:7e:31:f9:3f:2c:8b:a4:
                    c1:7d:56:a7:7c:e6:d2:4e:f8:4e:35:64:8f:93:2c:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:98:B8:96:40:84:D2:E4:D8:E8:8E:5E:7D:B6:6C:1B:7A:2B:AA:0B
            X509v3 Authority Key Identifier:
                keyid:48:32:60:7A:C6:C9:65:85:F4:D4:44:66:D5:66:C5:22:41:39:F0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/4832607AC6C96585F4D44466D566C5224139F09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4832607AC6C96585F4D44466D566C5224139F09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/34352e3139302e3133392e302f32342d3234203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:b2:1d:ff:17:7c:b0:ba:0f:4f:32:85:68:5a:04:89:63:60:
         a8:ca:65:2b:88:ff:a4:cc:4f:c2:6d:66:ec:b5:76:7b:13:2d:
         25:61:26:7c:fd:a1:bd:64:46:df:a9:43:5f:a5:6d:f6:66:52:
         1d:a2:88:53:fc:11:64:8e:48:b0:23:1b:aa:37:0f:b0:34:98:
         48:b0:38:69:9e:b8:3e:e1:85:a3:ea:ff:7d:f0:e7:4e:4c:6f:
         cf:6f:2c:5d:02:f0:87:31:f6:a9:03:07:ea:4b:b4:bc:bf:15:
         03:d0:92:ad:18:36:89:f6:d5:f6:db:e4:5f:d8:3b:14:2c:d3:
         64:86:30:13:99:87:7a:f7:33:da:e7:03:00:c7:f0:2b:66:6f:
         a0:f6:5c:e0:32:55:49:68:1d:d9:0a:57:bb:ab:b1:9c:30:aa:
         1c:18:19:79:c4:ef:18:1f:8e:39:ab:1d:b5:21:22:02:39:fb:
         25:b3:49:88:95:42:39:fa:90:41:b7:f0:8f:8c:b3:83:56:b2:
         f3:ab:f1:cf:d7:f2:56:dc:ac:72:e1:86:02:e7:c2:bb:f7:9a:
         73:57:cc:f3:eb:1e:39:4e:7f:80:60:41:4e:50:c8:8d:cb:1f:
         8c:f1:4f:93:f4:b3:4d:4e:eb:d6:b6:f9:2b:b4:f1:f0:e8:46:
         65:0e:a8:b5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL+v02FJbUfAYx3sVYPl6nUmXhrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDgzMjYwN0FDNkM5NjU4NUY0RDQ0NDY2RDU2NkM1MjI0
MTM5RjA5QzAeFw0yMzA1MDIyMDQzMjBaFw0yNDA0MzAyMDQ4MjBaMDMxMTAvBgNV
BAMTKEU5OThCODk2NDA4NEQyRTREOEU4OEU1RTdEQjY2QzFCN0EyQkFBMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Xl+Kk7qL8SwUgj7GJQFQ/Xnk
/QErnq99vn0A1u2CuQbN1IpKPP9FftFyRyUwWb8WrliBZkLKnTq+dYGmGgje3asP
sxcpV86wsTOlSVgSVXl5JMdH8aVQl3Zih/XJmfv/hOZwTzGv496LLk/JNbXoKYXp
QmJpghzNEscjQhEkqOr2zaVGm3jPqVB9zMHXHUSvF6vO+wxjAtmFYDsZG0dhRoqS
KK1eHzE6og7QEQXB5HibiTO5kTymKuau578Ipc4pRZry5Xw/gWisa/8jEujH6Jkz
TQ6bxr+gIuL0Tm+SWtJ1Ilz/uaDZfjH5PyyLpMF9Vqd85tJO+E41ZI+TLMpFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6Zi4lkCE0uTY6I5efbZsG3orqgswHwYDVR0j
BBgwFoAUSDJgesbJZYX01ERm1WbFIkE58JwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFRGOFdYR0hXZVBkekZNOUEzanU4VGVnNUNSUHM0THFVS2NXelZhcXBR
TDUvMC80ODMyNjA3QUM2Qzk2NTg1RjRENDQ0NjZENTY2QzUyMjQxMzlGMDlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ4MzI2MDdBQzZDOTY1ODVG
NEQ0NDQ2NkQ1NjZDNTIyNDEzOUYwOUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhURjhXWEdIV2VQZHpGTTlBM2p1OFRlZzVDUlBzNExxVUtjV3pWYXFwUUw1LzAv
MzQzNTJlMzEzOTMwMmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNjM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvoswDQYJKoZIhvcNAQELBQADggEBAJiyHf8X
fLC6D08yhWhaBIljYKjKZSuI/6TMT8JtZuy1dnsTLSVhJnz9ob1kRt+pQ1+lbfZm
Uh2iiFP8EWSOSLAjG6o3D7A0mEiwOGmeuD7hhaPq/33w505Mb89vLF0C8Icx9qkD
B+pLtLy/FQPQkq0YNon21fbb5F/YOxQs02SGMBOZh3r3M9rnAwDH8Ctmb6D2XOAy
VUloHdkKV7ursZwwqhwYGXnE7xgfjjmrHbUhIgI5+yWzSYiVQjn6kEG38I+Ms4NW
svOr8c/X8lbcrHLhhgLnwrv3mnNXzPPrHjlOf4BgQU5QyI3LH4zxT5P0s01O69a2
+Su08fDoRmUOqLU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org