Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3233203d3e20323636323437.roa
File:                     34352e362e3231362e302f32322d3233203d3e20323636323437.roa (raw, json)
Hash identifier:          qkl/q3gv9OsS5kiM2QgpTIJToKj67K2tc8Iu9MO2Cug=
Subject key identifier:   48:96:40:49:12:C4:2B:70:F7:AE:13:D1:86:B3:4C:0C:0B:F6:13:AE
Certificate issuer:       /CN=76A98DCE3044413110B31F3B267B5F050111F9FD
Certificate serial:       3FA45311A5FEAA3BC541AB409C222B76F17F6457
Authority key identifier: 76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76A98DCE3044413110B31F3B267B5F050111F9FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3233203d3e20323636323437.roa
Signing time:             Mon 11 Mar 2024 14:26:55 +0000
ROA not before:           Mon 11 Mar 2024 14:21:55 +0000
ROA not after:            Mon 10 Mar 2025 14:26:55 +0000
asID:                     266247
IP address blocks:        45.6.216.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a4:53:11:a5:fe:aa:3b:c5:41:ab:40:9c:22:2b:76:f1:7f:64:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76A98DCE3044413110B31F3B267B5F050111F9FD
        Validity
            Not Before: Mar 11 14:21:55 2024 GMT
            Not After : Mar 10 14:26:55 2025 GMT
        Subject: CN=4896404912C42B70F7AE13D186B34C0C0BF613AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:68:e5:0b:eb:5d:e7:e5:0e:fb:37:fd:f2:
                    67:73:36:d5:37:b1:09:94:ff:26:bb:b2:7c:e5:4f:
                    82:26:9e:1c:19:25:d9:c7:7f:ce:5a:d6:8b:6e:6e:
                    00:04:c7:86:81:6c:cd:af:ae:89:ff:e3:23:b9:e8:
                    07:30:b2:66:f0:1a:2c:82:d8:59:76:c6:18:94:09:
                    dd:c0:e6:3b:e7:1c:08:05:5b:0d:c6:eb:02:3d:a9:
                    83:0d:6f:ac:ab:75:54:0f:7d:d2:a7:63:92:f9:10:
                    33:d4:69:9d:40:d2:8f:1a:29:51:fa:22:a2:47:3d:
                    0c:3b:f5:30:28:c0:a7:d7:d0:e1:6d:35:3d:83:3c:
                    18:77:ba:a5:c1:90:a8:19:00:8d:94:b4:98:f4:d6:
                    36:34:59:fb:ef:b1:a8:e9:15:a7:38:8a:26:97:54:
                    3a:9a:45:ac:c5:62:ca:97:24:a1:79:84:0f:92:48:
                    89:c7:98:10:86:b7:da:1c:fe:aa:52:28:14:7d:96:
                    f5:86:68:eb:7c:25:29:92:04:38:a3:29:b6:e9:5c:
                    30:10:fa:c7:d4:a4:2e:de:2d:ba:33:2a:55:a4:94:
                    e4:46:3c:b6:37:3b:2e:3b:e7:a9:36:9d:9e:69:9f:
                    c4:01:6d:6c:eb:2f:67:9c:bd:bd:92:22:bc:9f:41:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:40:49:12:C4:2B:70:F7:AE:13:D1:86:B3:4C:0C:0B:F6:13:AE
            X509v3 Authority Key Identifier:
                keyid:76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76A98DCE3044413110B31F3B267B5F050111F9FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/34352e362e3231362e302f32322d3233203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:4d:10:35:df:d9:9c:0e:b1:8e:c2:79:0e:c9:94:69:b0:ec:
         c0:1b:cf:63:ae:71:1e:2b:dc:64:2d:80:f5:5e:5d:7a:10:92:
         31:56:a3:e8:db:23:38:7a:61:2e:29:77:05:82:f7:46:b5:0a:
         c7:b9:7f:34:e8:53:37:8b:c1:77:57:1c:87:38:75:1d:bf:30:
         28:9d:7d:b1:b8:08:9f:09:c1:da:11:b6:f3:c3:fc:ff:e6:1b:
         7b:8e:bd:ae:7a:b4:52:cc:c5:e2:f2:be:fc:14:b6:02:ed:67:
         0c:2b:3f:4f:59:72:1f:89:5a:d3:5d:1b:c0:63:38:f2:4d:cf:
         0e:48:f5:62:7f:e0:80:e2:54:12:ff:39:ff:c6:c1:1c:aa:75:
         1c:32:29:94:fb:d5:96:56:69:be:15:b7:c3:ad:b0:c2:29:45:
         20:57:85:0a:7c:0a:07:12:59:11:bb:8a:c0:59:12:de:e9:93:
         03:66:9d:6c:f6:72:f9:00:21:9d:0c:2f:88:4c:f4:60:00:98:
         29:a4:59:ac:66:f1:ba:7a:f4:72:54:46:c9:fd:8c:9d:ba:c7:
         61:24:a2:c0:1d:b4:43:fb:53:12:bd:f8:15:fd:30:aa:a1:f5:
         68:e7:d6:01:00:6b:9c:92:00:7e:bc:72:00:54:4c:4f:64:0a:
         44:36:3e:07
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP6RTEaX+qjvFQatAnCIrdvF/ZFcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzZBOThEQ0UzMDQ0NDEzMTEwQjMxRjNCMjY3QjVGMDUw
MTExRjlGRDAeFw0yNDAzMTExNDIxNTVaFw0yNTAzMTAxNDI2NTVaMDMxMTAvBgNV
BAMTKDQ4OTY0MDQ5MTJDNDJCNzBGN0FFMTNEMTg2QjM0QzBDMEJGNjEzQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQWjlC+td5+UO+zf98mdzNtU3
sQmU/ya7snzlT4ImnhwZJdnHf85a1otubgAEx4aBbM2vron/4yO56AcwsmbwGiyC
2Fl2xhiUCd3A5jvnHAgFWw3G6wI9qYMNb6yrdVQPfdKnY5L5EDPUaZ1A0o8aKVH6
IqJHPQw79TAowKfX0OFtNT2DPBh3uqXBkKgZAI2UtJj01jY0WfvvsajpFac4iiaX
VDqaRazFYsqXJKF5hA+SSInHmBCGt9oc/qpSKBR9lvWGaOt8JSmSBDijKbbpXDAQ
+sfUpC7eLbozKlWklORGPLY3Oy4756k2nZ5pn8QBbWzrL2ecvb2SIryfQbi3AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSJZASRLEK3D3rhPRhrNMDAv2E64wHwYDVR0j
BBgwFoAUdqmNzjBEQTEQsx87JntfBQER+f0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlWa3RBeW55bmY0QmJLNHRwZGdCNmZSeTJjQnZTNW1rU2JjVmhYY2tk
N2IvMC83NkE5OERDRTMwNDQ0MTMxMTBCMzFGM0IyNjdCNUYwNTAxMTFGOUZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2QTk4RENFMzA0NDQxMzEx
MEIzMUYzQjI2N0I1RjA1MDExMUY5RkQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5Vmt0QXlueW5mNEJiSzR0cGRnQjZmUnkyY0J2UzVta1NiY1ZoWGNrZDdiLzAv
MzQzNTJlMzYyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMyMzYzNjMy
MzQzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0G2DANBgkqhkiG9w0BAQsFAAOCAQEAT00QNd/ZnA6x
jsJ5DsmUabDswBvPY65xHivcZC2A9V5dehCSMVaj6NsjOHphLil3BYL3RrUKx7l/
NOhTN4vBd1cchzh1Hb8wKJ19sbgInwnB2hG288P8/+Ybe469rnq0UszF4vK+/BS2
Au1nDCs/T1lyH4la010bwGM48k3PDkj1Yn/ggOJUEv85/8bBHKp1HDIplPvVllZp
vhW3w62wwilFIFeFCnwKBxJZEbuKwFkS3umTA2adbPZy+QAhnQwviEz0YACYKaRZ
rGbxunr0clRGyf2MnbrHYSSiwB20Q/tTEr34Ff0wqqH1aOfWAQBrnJIAfrxyAFRM
T2QKRDY+Bw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org