Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
File:                     34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (raw, json)
Hash identifier:          I5731I8zlSroElkdPIJGZuPDOF1UaUudumtSmcUUtCo=
Subject key identifier:   80:C3:E5:3C:AB:2B:74:C6:0A:29:68:6C:75:D2:0F:48:17:54:61:FA
Certificate issuer:       /CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
Certificate serial:       228B2D47E48C329EB8B017F69FF6D6996D15C25D
Authority key identifier: 93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
Signing time:             Fri 23 Feb 2024 02:32:35 +0000
ROA not before:           Fri 23 Feb 2024 02:27:35 +0000
ROA not after:            Fri 21 Feb 2025 02:32:35 +0000
asID:                     268199
IP address blocks:        45.235.196.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8b:2d:47:e4:8c:32:9e:b8:b0:17:f6:9f:f6:d6:99:6d:15:c2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9361649E2A9CD6320D5D128742E2688A2D4E81F3
        Validity
            Not Before: Feb 23 02:27:35 2024 GMT
            Not After : Feb 21 02:32:35 2025 GMT
        Subject: CN=80C3E53CAB2B74C60A29686C75D20F48175461FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ab:ce:f6:e5:64:62:c8:29:c9:02:83:07:cb:
                    3c:f3:40:e6:bc:71:b9:50:fc:12:7e:7c:56:aa:ac:
                    6a:6a:e2:e5:0f:87:15:b1:53:b2:e4:5f:10:42:ff:
                    d9:e8:1e:bf:e1:cf:6f:7f:be:bf:f3:96:df:26:c0:
                    2e:8a:df:4c:3e:76:bf:e6:35:2a:4f:2a:c6:5f:39:
                    05:11:c8:92:80:2b:b8:db:d7:54:a0:a8:7a:9a:15:
                    07:56:ac:72:c0:7a:4b:f3:0f:3e:d3:e5:45:0c:cd:
                    55:a4:79:b4:0b:ac:2f:af:36:e7:a6:c4:89:e0:10:
                    32:75:dc:3c:de:87:ef:3a:92:09:0c:78:94:26:40:
                    e0:cc:95:86:3e:2c:c1:a4:68:9d:6f:b3:d0:d7:38:
                    f8:7b:72:09:67:2b:cd:62:05:eb:05:cb:a4:c7:b3:
                    6e:0a:b0:d7:a9:12:de:0d:b2:13:f3:fc:8e:82:84:
                    60:df:60:2f:83:00:ec:24:2a:2a:62:25:40:61:20:
                    b1:fc:2f:f2:95:e3:d4:e2:fe:95:ed:e3:b0:ff:3e:
                    e8:ce:6c:55:db:11:4b:ec:ab:70:c3:72:c3:46:3b:
                    20:b8:18:0b:22:41:54:5a:ed:b8:8d:fe:1d:7a:e5:
                    f6:af:34:89:65:a6:a6:be:78:65:1a:ac:1d:fc:27:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:E5:3C:AB:2B:74:C6:0A:29:68:6C:75:D2:0F:48:17:54:61:FA
            X509v3 Authority Key Identifier:
                keyid:93:61:64:9E:2A:9C:D6:32:0D:5D:12:87:42:E2:68:8A:2D:4E:81:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9361649E2A9CD6320D5D128742E2688A2D4E81F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:a6:ee:d4:f4:38:04:63:83:4c:5f:76:ab:53:bd:b4:0e:48:
         44:a7:d9:db:04:d9:66:4e:d2:6f:4f:ef:34:1a:57:2a:3e:28:
         8d:a3:48:39:a5:cf:43:f6:56:ed:66:e9:2c:72:07:ba:f8:e1:
         27:06:47:a4:d9:74:73:80:b5:86:25:de:13:54:30:23:f2:df:
         5c:6b:c3:91:e6:d6:36:6a:3e:b0:f7:71:62:5f:85:0f:93:ef:
         11:74:e3:1e:e7:14:ca:4a:03:fe:81:20:44:71:a6:70:28:e2:
         de:eb:a1:36:e5:ef:2a:a2:2b:90:64:68:89:c6:91:cc:ac:51:
         8d:52:af:18:c3:ee:db:f5:36:04:22:93:43:e0:12:1f:f6:d7:
         89:a2:c3:2c:51:2c:36:48:18:b5:ef:55:af:6e:fb:c8:e4:f4:
         c6:f9:e1:48:83:61:aa:8f:86:02:40:72:60:71:46:ec:63:ab:
         c2:fc:84:56:33:dc:82:9e:5e:88:d9:d8:d6:58:f9:fa:13:bb:
         58:a6:d4:70:b0:67:d8:8f:3c:d6:22:83:76:5c:36:44:00:b3:
         32:e1:f4:46:f1:66:11:35:36:89:77:27:42:f5:ae:d9:8f:22:
         37:e0:c9:48:c5:ad:1d:d4:ed:44:10:45:ed:f7:5b:12:3e:5a:
         c1:df:b9:ff
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIostR+SMMp64sBf2n/bWmW0Vwl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTM2MTY0OUUyQTlDRDYzMjBENUQxMjg3NDJFMjY4OEEy
RDRFODFGMzAeFw0yNDAyMjMwMjI3MzVaFw0yNTAyMjEwMjMyMzVaMDMxMTAvBgNV
BAMTKDgwQzNFNTNDQUIyQjc0QzYwQTI5Njg2Qzc1RDIwRjQ4MTc1NDYxRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeq8725WRiyCnJAoMHyzzzQOa8
cblQ/BJ+fFaqrGpq4uUPhxWxU7LkXxBC/9noHr/hz29/vr/zlt8mwC6K30w+dr/m
NSpPKsZfOQURyJKAK7jb11SgqHqaFQdWrHLAekvzDz7T5UUMzVWkebQLrC+vNuem
xIngEDJ13Dzeh+86kgkMeJQmQODMlYY+LMGkaJ1vs9DXOPh7cglnK81iBesFy6TH
s24KsNepEt4NshPz/I6ChGDfYC+DAOwkKipiJUBhILH8L/KV49Ti/pXt47D/PujO
bFXbEUvsq3DDcsNGOyC4GAsiQVRa7biN/h165favNIllpqa+eGUarB38J9IxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUgMPlPKsrdMYKKWhsddIPSBdUYfowHwYDVR0j
BBgwFoAUk2Fkniqc1jINXRKHQuJoii1OgfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFxamlhRjNWSDdwNlBzcng4Nnp2RmNyMlJMam9SWnhldm5Bejg1MUdw
cUYvMC85MzYxNjQ5RTJBOUNENjMyMEQ1RDEyODc0MkUyNjg4QTJENEU4MUYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkzNjE2NDlFMkE5Q0Q2MzIw
RDVEMTI4NzQyRTI2ODhBMkQ0RTgxRjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxcWppYUYzVkg3cDZQc3J4ODZ6dkZjcjJSTGpvUlp4ZXZuQXo4NTFHcHFGLzAv
MzQzNTJlMzIzMzM1MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt68QwDQYJKoZIhvcNAQELBQADggEBAFim7tT0
OARjg0xfdqtTvbQOSESn2dsE2WZO0m9P7zQaVyo+KI2jSDmlz0P2Vu1m6SxyB7r4
4ScGR6TZdHOAtYYl3hNUMCPy31xrw5Hm1jZqPrD3cWJfhQ+T7xF04x7nFMpKA/6B
IERxpnAo4t7roTbl7yqiK5BkaInGkcysUY1SrxjD7tv1NgQik0PgEh/214miwyxR
LDZIGLXvVa9u+8jk9Mb54UiDYaqPhgJAcmBxRuxjq8L8hFYz3IKeXojZ2NZY+foT
u1im1HCwZ9iPPNYig3ZcNkQAszLh9EbxZhE1Nol3J0L1rtmPIjfgyUjFrR3U7UQQ
Re33WxI+WsHfuf8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org