Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa
File:                     34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa (raw, json)
Hash identifier:          /YQq6iGJzQ4EWcoadHWlO0cvbBkarTol+8b4jNarKlI=
Subject key identifier:   01:44:C9:78:68:3D:90:A2:35:82:1D:0E:97:A2:D7:70:B7:30:8D:C9
Certificate issuer:       /CN=F0A502747602B2264B5BD0938308DA17D1A2B94B
Certificate serial:       3BADB14E8310918201CBFDEF1C00E7C3F77448FC
Authority key identifier: F0:A5:02:74:76:02:B2:26:4B:5B:D0:93:83:08:DA:17:D1:A2:B9:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa
Signing time:             Tue 09 Jan 2024 12:28:57 +0000
ROA not before:           Tue 09 Jan 2024 12:23:57 +0000
ROA not after:            Tue 07 Jan 2025 12:28:57 +0000
asID:                     269137
IP address blocks:        45.180.144.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ad:b1:4e:83:10:91:82:01:cb:fd:ef:1c:00:e7:c3:f7:74:48:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0A502747602B2264B5BD0938308DA17D1A2B94B
        Validity
            Not Before: Jan  9 12:23:57 2024 GMT
            Not After : Jan  7 12:28:57 2025 GMT
        Subject: CN=0144C978683D90A235821D0E97A2D770B7308DC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:b0:1b:8b:09:74:ad:42:99:63:15:aa:25:
                    99:f9:2a:df:b4:ed:6f:31:1b:50:c9:b1:d0:1d:b5:
                    35:ef:e6:f9:4c:00:fa:d6:b9:a3:aa:eb:4d:3a:2e:
                    99:52:17:92:fa:bc:2a:0e:4c:4d:ce:9a:9c:45:6b:
                    8d:7f:da:33:93:c9:87:26:b4:2a:b5:ac:ad:2c:74:
                    35:f2:f1:67:c1:34:eb:df:ff:6d:ea:5a:65:bd:cc:
                    f9:7e:fe:d1:ae:90:59:34:79:3b:07:e8:51:31:2c:
                    2b:c7:fe:37:b8:3f:19:fa:67:0e:6e:2d:c2:4b:ce:
                    b8:c1:f6:39:f9:19:94:32:0d:26:7a:2d:4d:31:97:
                    9c:52:39:17:ab:6a:22:dd:cb:b4:a4:4d:fb:0d:aa:
                    a8:18:af:d0:1e:fb:ce:f7:e5:25:fa:ea:77:45:c6:
                    10:35:8c:79:e4:6b:5c:dc:e7:49:45:16:16:c1:23:
                    23:ff:43:6f:bd:95:b1:d2:5e:ec:5b:ff:98:00:ea:
                    38:32:1a:15:e8:73:54:77:4a:a2:63:cb:11:6b:2b:
                    e9:9e:49:93:d0:9e:63:7d:46:21:a5:d8:05:35:d0:
                    2f:62:b2:29:8f:5d:9d:95:a3:1e:5a:ba:cd:ac:82:
                    92:6a:61:3b:d0:8d:be:25:89:5b:28:18:7a:ee:49:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:44:C9:78:68:3D:90:A2:35:82:1D:0E:97:A2:D7:70:B7:30:8D:C9
            X509v3 Authority Key Identifier:
                keyid:F0:A5:02:74:76:02:B2:26:4B:5B:D0:93:83:08:DA:17:D1:A2:B9:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0A502747602B2264B5BD0938308DA17D1A2B94B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/0/34352e3138302e3134342e302f32322d3332203d3e20323639313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:97:69:f3:f3:a9:3a:a6:27:69:73:8e:8e:ad:65:45:5b:29:
         5a:c3:23:df:5a:70:c8:31:a6:ea:4c:4a:95:94:12:60:3f:12:
         41:2b:ba:49:ad:5f:0b:c2:28:f3:b4:04:e4:5b:bc:c2:fa:97:
         86:3c:fe:67:9b:29:e5:31:fb:4d:90:cd:98:74:9d:d7:5f:83:
         ec:84:44:48:c0:b7:40:0c:f1:7a:17:03:2f:ef:3a:c8:c1:8e:
         3a:96:1d:44:6d:9f:b3:a1:24:03:4c:97:be:f7:3b:03:b4:47:
         10:98:21:49:14:17:09:08:d7:04:82:27:d9:5c:a9:49:39:4a:
         78:2f:92:ac:36:c9:c4:9b:c0:26:b5:eb:2e:82:c1:f6:af:65:
         43:fb:e9:ea:df:a8:e7:46:45:c9:ba:83:e1:ca:51:59:16:bb:
         8d:a8:19:21:f1:5a:72:e3:89:12:ff:e0:17:0f:04:15:24:6e:
         21:3f:99:18:5f:e9:42:f2:cc:75:e7:5f:a4:bf:b6:54:4a:f8:
         fe:75:ea:15:48:4a:25:f0:5d:b4:f8:a7:bd:52:86:2d:e3:b3:
         1a:40:79:fd:a9:24:52:54:99:74:85:8f:cd:61:3c:74:dd:3d:
         36:5b:f7:d8:d0:59:0a:f6:23:0e:64:c4:8f:11:17:e5:00:04:
         dc:4f:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----