Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233382e302f32332d3233203d3e20323639353134.roa
File:                     34352e3138362e3233382e302f32332d3233203d3e20323639353134.roa (raw, json)
Hash identifier:          UbvtdG83cTyj04qq2tCPkYnE5JygQKdFe8dZrPVVAQo=
Subject key identifier:   4D:C2:69:F1:C3:50:D1:73:66:2E:30:1B:C3:81:4B:56:34:24:23:28
Certificate issuer:       /CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
Certificate serial:       2F1AD73F8A3E2AA148C6DFBC1CB44A6FA4759717
Authority key identifier: 3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233382e302f32332d3233203d3e20323639353134.roa
Signing time:             Sun 07 Apr 2024 03:21:56 +0000
ROA not before:           Sun 07 Apr 2024 03:16:56 +0000
ROA not after:            Sun 06 Apr 2025 03:21:56 +0000
asID:                     269514
IP address blocks:        45.186.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1a:d7:3f:8a:3e:2a:a1:48:c6:df:bc:1c:b4:4a:6f:a4:75:97:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008
        Validity
            Not Before: Apr  7 03:16:56 2024 GMT
            Not After : Apr  6 03:21:56 2025 GMT
        Subject: CN=4DC269F1C350D173662E301BC3814B5634242328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:3b:23:37:ed:b7:25:97:7f:bd:be:3a:6b:
                    3e:a3:f0:2e:60:6c:f6:27:42:05:84:c0:b4:f2:ea:
                    fd:66:54:54:a0:3c:d9:cb:40:e7:37:f6:9a:89:0e:
                    5f:11:78:e1:95:aa:75:66:c1:3d:8f:82:f7:49:85:
                    e8:25:6f:2d:79:f7:9b:eb:1f:22:c7:0c:2d:31:17:
                    aa:fc:1c:cf:c3:47:80:61:82:0e:d6:4d:57:3f:ac:
                    db:c3:f6:15:c0:91:ef:1d:e1:01:07:cf:dd:76:40:
                    6f:db:22:40:20:c3:95:72:ef:71:49:d9:f4:76:e6:
                    02:3b:9d:21:7a:42:25:fc:98:3c:ac:65:71:da:33:
                    01:42:c3:b3:95:52:77:4c:c5:96:69:8f:19:61:9a:
                    9d:f5:82:81:13:d7:82:a1:07:a3:c2:f5:05:e0:48:
                    45:5a:da:6d:bb:fa:3a:de:6c:1b:8b:50:b8:8c:c0:
                    b1:df:58:3a:49:9f:fd:6d:61:02:09:b9:13:9d:f6:
                    95:70:9a:e3:90:64:6f:49:8e:4c:4a:08:fc:99:e2:
                    59:eb:05:46:3c:d9:be:88:ba:b1:e6:67:71:6c:58:
                    6a:54:54:70:9f:9a:b2:8a:f1:47:85:e3:17:f2:84:
                    eb:27:90:6f:2a:db:a7:84:89:38:2a:0c:21:50:bf:
                    1b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C2:69:F1:C3:50:D1:73:66:2E:30:1B:C3:81:4B:56:34:24:23:28
            X509v3 Authority Key Identifier:
                keyid:3B:C9:D1:D1:AF:32:F1:CF:DB:A0:FC:7A:17:C0:11:66:EB:B7:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3BC9D1D1AF32F1CFDBA0FC7A17C01166EBB7B008.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8rFfEtNPhjsrgoJAAp74Az59BFvMbGaa8zyuE4cn4i3Z/1/34352e3138362e3233382e302f32332d3233203d3e20323639353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:9c:72:6e:4d:cd:a5:d4:bd:60:67:ed:27:87:48:f0:54:ef:
         1d:9d:92:29:77:94:30:a9:90:fa:e5:24:c3:04:d1:43:7e:6f:
         2d:e6:1c:0e:e1:57:f9:01:f5:15:bb:a4:7a:74:12:f6:78:2d:
         36:ff:83:c4:3e:6a:c5:6c:66:75:05:c7:fe:de:d6:2f:01:d0:
         aa:e3:30:a9:2c:bb:6a:e1:74:78:45:18:8b:29:38:2d:e9:cd:
         e9:41:95:8d:7b:6a:31:07:27:8e:32:0b:8c:83:56:77:b7:18:
         bf:b9:11:2b:1d:54:22:ae:75:dc:89:90:12:db:a4:1c:53:41:
         7e:83:1a:0b:1c:ea:75:5a:06:0d:66:b1:5b:1d:f1:4e:19:ba:
         37:52:b2:8e:49:32:2e:8a:3f:59:13:5d:c5:68:2c:07:ab:51:
         d4:50:66:be:f5:52:cf:f0:6d:6f:80:45:58:de:74:85:0c:36:
         11:7b:89:91:50:82:8d:38:4e:28:b5:f4:b1:1b:cf:c9:8e:0d:
         1a:d2:af:af:1c:ec:d5:4c:d3:9e:82:04:ed:76:a5:6e:82:2a:
         5e:d9:8b:06:67:05:ec:0a:ea:16:8d:f8:f1:05:4c:39:4b:83:
         0b:fb:04:28:1c:67:24:d7:58:58:2f:d3:9e:99:d3:0c:bd:b7:
         6f:89:be:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULxrXP4o+KqFIxt+8HLRKb6R1lxcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDOUQxRDFBRjMyRjFDRkRCQTBGQzdBMTdDMDExNjZF
QkI3QjAwODAeFw0yNDA0MDcwMzE2NTZaFw0yNTA0MDYwMzIxNTZaMDMxMTAvBgNV
BAMTKDREQzI2OUYxQzM1MEQxNzM2NjJFMzAxQkMzODE0QjU2MzQyNDIzMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMzsjN+23JZd/vb46az6j8C5g
bPYnQgWEwLTy6v1mVFSgPNnLQOc39pqJDl8ReOGVqnVmwT2PgvdJheglby1595vr
HyLHDC0xF6r8HM/DR4Bhgg7WTVc/rNvD9hXAke8d4QEHz912QG/bIkAgw5Vy73FJ
2fR25gI7nSF6QiX8mDysZXHaMwFCw7OVUndMxZZpjxlhmp31goET14KhB6PC9QXg
SEVa2m27+jrebBuLULiMwLHfWDpJn/1tYQIJuROd9pVwmuOQZG9JjkxKCPyZ4lnr
BUY82b6IurHmZ3FsWGpUVHCfmrKK8UeF4xfyhOsnkG8q26eEiTgqDCFQvxvzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTcJp8cNQ0XNmLjAbw4FLVjQkIygwHwYDVR0j
BBgwFoAUO8nR0a8y8c/boPx6F8ARZuu3sAgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHJGZkV0TlBoanNyZ29KQUFwNzRBejU5QkZ2TWJHYWE4enl1RTRjbjRp
M1ovMS8zQkM5RDFEMUFGMzJGMUNGREJBMEZDN0ExN0MwMTE2NkVCQjdCMDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNCQzlEMUQxQUYzMkYxQ0ZE
QkEwRkM3QTE3QzAxMTY2RUJCN0IwMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyRmZFdE5QaGpzcmdvSkFBcDc0QXo1OUJGdk1iR2FhOHp5dUU0Y240aTNaLzEv
MzQzNTJlMzEzODM2MmUzMjMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtuu4wDQYJKoZIhvcNAQELBQADggEBAI+ccm5N
zaXUvWBn7SeHSPBU7x2dkil3lDCpkPrlJMME0UN+by3mHA7hV/kB9RW7pHp0EvZ4
LTb/g8Q+asVsZnUFx/7e1i8B0KrjMKksu2rhdHhFGIspOC3pzelBlY17ajEHJ44y
C4yDVne3GL+5ESsdVCKuddyJkBLbpBxTQX6DGgsc6nVaBg1msVsd8U4ZujdSso5J
Mi6KP1kTXcVoLAerUdRQZr71Us/wbW+ARVjedIUMNhF7iZFQgo04Tii19LEbz8mO
DRrSr68c7NVM056CBO12pW6CKl7ZiwZnBewK6haN+PEFTDlLgwv7BCgcZyTXWFgv
056Z0wy9t2+Jvm4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org