Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/34352e3233362e3139302e302f32332d3233203d3e20323638333531.roa
File:                     34352e3233362e3139302e302f32332d3233203d3e20323638333531.roa (raw, json)
Hash identifier:          /9+tPywPqmr6z3qY2ZGJSF82XzAbz8IqUr4kiQPrWQE=
Subject key identifier:   01:0A:D1:EA:0F:4B:17:57:E7:8E:FD:94:48:8D:AB:54:6B:04:36:80
Certificate issuer:       /CN=A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E
Certificate serial:       02834B36878142050BD2FA0D11480E1C1FB20E4B
Authority key identifier: A8:F6:18:61:E7:0F:74:FA:63:C3:71:E6:1E:C1:B1:AA:5A:BE:5F:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/34352e3233362e3139302e302f32332d3233203d3e20323638333531.roa
Signing time:             Wed 21 Feb 2024 18:06:20 +0000
ROA not before:           Wed 21 Feb 2024 18:01:20 +0000
ROA not after:            Wed 19 Feb 2025 18:06:20 +0000
asID:                     268351
IP address blocks:        45.236.190.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:4b:36:87:81:42:05:0b:d2:fa:0d:11:48:0e:1c:1f:b2:0e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E
        Validity
            Not Before: Feb 21 18:01:20 2024 GMT
            Not After : Feb 19 18:06:20 2025 GMT
        Subject: CN=010AD1EA0F4B1757E78EFD94488DAB546B043680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:b9:5f:8a:2f:47:79:fb:7f:6f:eb:32:a4:
                    48:70:8c:27:da:1e:b1:0b:12:4a:8f:d7:77:38:75:
                    85:70:07:e2:78:42:19:f0:40:72:30:5e:01:ed:92:
                    9f:0e:23:a3:e2:e6:d8:35:23:31:84:d7:16:bf:cf:
                    e7:93:01:92:d3:44:75:6a:9a:12:3e:92:97:3c:ab:
                    42:98:6a:75:57:71:72:a1:ac:99:63:10:24:c4:84:
                    e4:43:70:d2:5d:dc:9a:42:b0:69:70:69:ef:79:5c:
                    02:02:07:25:b4:ad:d1:e7:cb:1b:bd:33:a9:bc:5f:
                    a4:64:e6:cd:e8:46:0e:b8:a1:27:46:9e:e9:e9:11:
                    03:22:15:37:55:db:ea:70:51:1d:db:5a:f5:d1:ba:
                    13:b3:f3:3d:b5:67:a1:d9:80:b8:aa:fa:b2:c8:f4:
                    55:7c:6f:34:c2:6b:69:d5:b3:e6:78:5f:6d:05:a7:
                    83:d6:e3:d3:07:af:3e:58:87:1b:dd:29:5c:81:72:
                    7d:5a:1f:3a:68:56:16:29:36:da:7f:6b:06:e7:e4:
                    e1:ca:68:98:d6:87:f1:82:5b:2d:8b:7a:a5:0d:e8:
                    a7:94:ea:ac:d1:7a:a8:25:89:f0:63:a5:ce:3c:79:
                    f0:8a:6c:30:1d:85:79:d0:d9:54:e7:ea:18:3f:66:
                    45:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:0A:D1:EA:0F:4B:17:57:E7:8E:FD:94:48:8D:AB:54:6B:04:36:80
            X509v3 Authority Key Identifier:
                keyid:A8:F6:18:61:E7:0F:74:FA:63:C3:71:E6:1E:C1:B1:AA:5A:BE:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/34352e3233362e3139302e302f32332d3233203d3e20323638333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:3c:2f:c0:70:18:a7:8a:25:cb:06:10:98:15:3e:81:5a:89:
         7e:e3:1f:8d:d8:74:9f:ff:b2:f2:4a:70:a9:3b:31:9f:89:98:
         82:82:5c:48:c1:20:a2:92:c9:a4:6e:6c:36:0e:fb:01:48:5b:
         bc:93:e2:73:f1:ee:6d:c1:34:fb:3e:27:06:aa:76:24:3b:b3:
         8d:e1:2c:88:3a:6a:5c:86:74:a3:4c:7a:51:e1:68:42:29:8a:
         c5:82:ca:b3:46:5b:70:74:76:30:cf:a7:b1:49:f1:fa:8b:b4:
         30:77:3d:65:a5:4c:c3:ab:bf:39:77:8b:53:3d:e6:74:f4:9b:
         5e:a8:7d:5c:6b:ed:4a:5b:9d:29:c1:67:4e:26:a2:c6:44:48:
         06:00:c2:94:53:45:21:ea:56:4a:06:f1:2f:92:59:8d:d2:b0:
         2b:2e:9b:16:44:f8:a5:d6:aa:95:87:e9:07:df:65:b5:51:1c:
         76:39:27:84:a8:40:f8:ff:ad:58:a7:27:fe:82:42:c9:17:90:
         ac:49:e2:1a:f0:dc:c0:fa:06:65:31:97:96:4d:83:71:be:45:
         12:22:89:3c:1f:a1:e2:1c:35:88:d6:01:4c:f3:00:a5:45:ee:
         3c:20:90:c2:09:07:10:cc:53:f5:57:be:b3:b0:2e:37:fc:e1:
         1a:9a:22:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAoNLNoeBQgUL0voNEUgOHB+yDkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThGNjE4NjFFNzBGNzRGQTYzQzM3MUU2MUVDMUIxQUE1
QUJFNUY2RTAeFw0yNDAyMjExODAxMjBaFw0yNTAyMTkxODA2MjBaMDMxMTAvBgNV
BAMTKDAxMEFEMUVBMEY0QjE3NTdFNzhFRkQ5NDQ4OERBQjU0NkIwNDM2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX8blfii9Heft/b+sypEhwjCfa
HrELEkqP13c4dYVwB+J4QhnwQHIwXgHtkp8OI6Pi5tg1IzGE1xa/z+eTAZLTRHVq
mhI+kpc8q0KYanVXcXKhrJljECTEhORDcNJd3JpCsGlwae95XAICByW0rdHnyxu9
M6m8X6Rk5s3oRg64oSdGnunpEQMiFTdV2+pwUR3bWvXRuhOz8z21Z6HZgLiq+rLI
9FV8bzTCa2nVs+Z4X20Fp4PW49MHrz5YhxvdKVyBcn1aHzpoVhYpNtp/awbn5OHK
aJjWh/GCWy2LeqUN6KeU6qzReqglifBjpc48efCKbDAdhXnQ2VTn6hg/ZkXBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUAQrR6g9LF1fnjv2USI2rVGsENoAwHwYDVR0j
BBgwFoAUqPYYYecPdPpjw3HmHsGxqlq+X24wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhFcjF0dk1WcHJ1NWdVMm90VlpqdVBYNVE4RXlaanFVN2R5UnBHYlVQ
SFAvMC9BOEY2MTg2MUU3MEY3NEZBNjNDMzcxRTYxRUMxQjFBQTVBQkU1RjZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E4RjYxODYxRTcwRjc0RkE2
M0MzNzFFNjFFQzFCMUFBNUFCRTVGNkUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIRXIxdHZNVnBydTVnVTJvdFZaanVQWDVROEV5WmpxVTdkeVJwR2JVUEhQLzAv
MzQzNTJlMzIzMzM2MmUzMTM5MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMzM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7L4wDQYJKoZIhvcNAQELBQADggEBADo8L8Bw
GKeKJcsGEJgVPoFaiX7jH43YdJ//svJKcKk7MZ+JmIKCXEjBIKKSyaRubDYO+wFI
W7yT4nPx7m3BNPs+JwaqdiQ7s43hLIg6alyGdKNMelHhaEIpisWCyrNGW3B0djDP
p7FJ8fqLtDB3PWWlTMOrvzl3i1M95nT0m16ofVxr7UpbnSnBZ04mosZESAYAwpRT
RSHqVkoG8S+SWY3SsCsumxZE+KXWqpWH6QffZbVRHHY5J4SoQPj/rVinJ/6CQskX
kKxJ4hrw3MD6BmUxl5ZNg3G+RRIiiTwfoeIcNYjWAUzzAKVF7jwgkMIJBxDMU/VX
vrOwLjf84RqaIsc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org