Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133372e302f32342d3234203d3e20323639353930.roa
File:                     34352e3138392e3133372e302f32342d3234203d3e20323639353930.roa (raw, json)
Hash identifier:          qxLFT4NdcLVh0LuDGtx4PyLxIe+PkdVt8h5o67wwIiA=
Subject key identifier:   F0:2D:DC:1F:34:1C:CA:A5:58:49:B8:2D:A2:B1:D8:5D:70:28:46:4E
Certificate issuer:       /CN=49B64BAD592AFF93811E833FB944B7DA58E67068
Certificate serial:       230D5E2817243A805037F888210EC82299B5EFA9
Authority key identifier: 49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B64BAD592AFF93811E833FB944B7DA58E67068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133372e302f32342d3234203d3e20323639353930.roa
Signing time:             Mon 09 Oct 2023 23:51:49 +0000
ROA not before:           Mon 09 Oct 2023 23:46:49 +0000
ROA not after:            Mon 07 Oct 2024 23:51:49 +0000
asID:                     269590
IP address blocks:        45.189.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0d:5e:28:17:24:3a:80:50:37:f8:88:21:0e:c8:22:99:b5:ef:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49B64BAD592AFF93811E833FB944B7DA58E67068
        Validity
            Not Before: Oct  9 23:46:49 2023 GMT
            Not After : Oct  7 23:51:49 2024 GMT
        Subject: CN=F02DDC1F341CCAA55849B82DA2B1D85D7028464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cd:00:aa:9b:97:bd:1f:37:f0:5e:85:38:4f:
                    03:a0:05:9a:4d:eb:27:11:7e:75:e7:95:91:2c:b6:
                    a0:4e:83:60:4a:cb:f6:c1:74:c6:9d:5c:1e:47:f7:
                    8c:cd:88:8e:9e:8c:68:c4:ed:af:9d:90:7f:b9:cf:
                    c8:91:91:a4:12:7a:e5:69:f3:99:49:19:b7:ed:a0:
                    0d:79:53:b3:39:75:71:64:4f:0f:66:1b:8f:dd:8b:
                    4f:47:cb:5a:f8:40:9b:53:e3:21:e1:f9:31:9a:c6:
                    bd:59:b3:ed:73:9c:91:26:8f:5a:83:29:81:ac:d3:
                    6e:9a:69:4b:7b:f1:64:ef:dd:e3:60:b5:22:05:d1:
                    33:07:33:79:6f:d7:79:fc:57:e6:ac:5d:3d:e9:c9:
                    b4:b0:81:8b:c9:07:57:9f:9c:cb:4e:8f:ea:68:7d:
                    90:11:53:ae:8f:4f:d0:23:ca:d7:6f:44:ca:66:f7:
                    df:52:e7:96:31:cc:7d:0d:40:cb:4c:b6:e9:d3:a9:
                    8b:b0:44:47:7c:2f:dd:68:54:f9:51:09:9c:ef:88:
                    4c:8f:01:44:d3:bb:b8:c7:2e:31:f3:8e:6e:6b:4f:
                    24:be:c7:cf:ad:6b:0f:fa:6a:cb:fe:73:82:43:c2:
                    84:36:24:51:38:06:85:06:c1:e2:4a:4e:f3:b2:51:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:DC:1F:34:1C:CA:A5:58:49:B8:2D:A2:B1:D8:5D:70:28:46:4E
            X509v3 Authority Key Identifier:
                keyid:49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/49B64BAD592AFF93811E833FB944B7DA58E67068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49B64BAD592AFF93811E833FB944B7DA58E67068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/34352e3138392e3133372e302f32342d3234203d3e20323639353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:cb:ad:35:46:39:cd:89:90:fe:ab:cc:1a:bb:d4:60:99:9f:
         56:14:c4:60:f1:84:07:81:ca:29:b8:7a:3f:34:bb:a4:8e:61:
         6c:41:1b:f6:cd:bc:b9:d3:d2:e7:01:a8:a5:42:77:d8:82:87:
         38:1d:42:b4:1f:57:92:fe:b8:ea:b0:4b:a9:86:d6:7c:a6:34:
         46:0b:76:ec:d7:24:14:af:f3:f0:99:3a:61:15:14:e2:92:78:
         7f:05:82:55:32:64:8f:c5:6b:fa:b8:f9:89:e3:26:ad:22:c1:
         7b:81:78:2d:c3:80:ac:87:56:71:d4:ae:d5:13:ec:9e:89:e9:
         14:eb:e7:da:9d:08:c6:70:78:99:66:f2:1b:4f:5b:39:e9:45:
         c4:d7:6c:f3:b4:d6:78:84:63:3f:8f:12:ae:e2:c7:46:d7:fd:
         d6:52:66:94:bc:40:15:82:1c:b1:44:1b:31:06:65:4f:9b:26:
         3c:ad:18:be:9d:25:92:d1:0a:8e:ef:7c:48:66:79:6b:22:ee:
         6b:f0:3c:b8:68:56:fa:3d:cd:29:a9:6d:d1:9d:d1:4a:db:e4:
         ea:29:d6:5c:6f:62:ef:1d:3e:1c:17:dd:e4:91:dd:68:4a:1c:
         23:7f:03:a9:25:5e:69:87:aa:2f:f2:3f:26:97:8d:cb:6c:df:
         95:53:26:7c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIw1eKBckOoBQN/iIIQ7IIpm176kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlCNjRCQUQ1OTJBRkY5MzgxMUU4MzNGQjk0NEI3REE1
OEU2NzA2ODAeFw0yMzEwMDkyMzQ2NDlaFw0yNDEwMDcyMzUxNDlaMDMxMTAvBgNV
BAMTKEYwMkREQzFGMzQxQ0NBQTU1ODQ5QjgyREEyQjFEODVENzAyODQ2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzQCqm5e9HzfwXoU4TwOgBZpN
6ycRfnXnlZEstqBOg2BKy/bBdMadXB5H94zNiI6ejGjE7a+dkH+5z8iRkaQSeuVp
85lJGbftoA15U7M5dXFkTw9mG4/di09Hy1r4QJtT4yHh+TGaxr1Zs+1znJEmj1qD
KYGs026aaUt78WTv3eNgtSIF0TMHM3lv13n8V+asXT3pybSwgYvJB1efnMtOj+po
fZARU66PT9AjytdvRMpm999S55YxzH0NQMtMtunTqYuwREd8L91oVPlRCZzviEyP
AUTTu7jHLjHzjm5rTyS+x8+taw/6asv+c4JDwoQ2JFE4BoUGweJKTvOyUQ0/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8C3cHzQcyqVYSbgtorHYXXAoRk4wHwYDVR0j
BBgwFoAUSbZLrVkq/5OBHoM/uUS32ljmcGgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVlOeTlwVWZTY01OR0gxU21aTG15YVRNUFV1VzdvcENSQkpnaHpFMkxm
RmovMC80OUI2NEJBRDU5MkFGRjkzODExRTgzM0ZCOTQ0QjdEQTU4RTY3MDY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzQ5QjY0QkFENTkyQUZGOTM4
MTFFODMzRkI5NDRCN0RBNThFNjcwNjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlZTnk5cFVmU2NNTkdIMVNtWkxteWFUTVBVdVc3b3BDUkJKZ2h6RTJMZkZqLzAv
MzQzNTJlMzEzODM5MmUzMTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvYkwDQYJKoZIhvcNAQELBQADggEBACHLrTVG
Oc2JkP6rzBq71GCZn1YUxGDxhAeByim4ej80u6SOYWxBG/bNvLnT0ucBqKVCd9iC
hzgdQrQfV5L+uOqwS6mG1nymNEYLduzXJBSv8/CZOmEVFOKSeH8FglUyZI/Fa/q4
+YnjJq0iwXuBeC3DgKyHVnHUrtUT7J6J6RTr59qdCMZweJlm8htPWznpRcTXbPO0
1niEYz+PEq7ix0bX/dZSZpS8QBWCHLFEGzEGZU+bJjytGL6dJZLRCo7vfEhmeWsi
7mvwPLhoVvo9zSmpbdGd0Urb5Oop1lxvYu8dPhwX3eSR3WhKHCN/A6klXmmHqi/y
PyaXjcts35VTJnw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org