Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32342d3234203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32342d3234203d3e20323637393939.roa (raw, json)
Hash identifier:          XAhZ2MBO7wwlSWU0pII4lS/8AixdU0mp+JDGhIRz22E=
Subject key identifier:   3F:40:5B:58:85:DF:E9:56:77:98:1A:9F:AA:D0:D1:6C:11:0C:3E:C2
Certificate issuer:       /CN=567AAE8B92B2E1EC89C0910BAA4126FC1A02766A
Certificate serial:       325807944B1D631618CCC9FB1B6D88A03562C185
Authority key identifier: 56:7A:AE:8B:92:B2:E1:EC:89:C0:91:0B:AA:41:26:FC:1A:02:76:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32342d3234203d3e20323637393939.roa
Signing time:             Mon 13 Mar 2023 15:36:46 +0000
ROA not before:           Mon 13 Mar 2023 15:31:46 +0000
ROA not after:            Mon 11 Mar 2024 15:36:46 +0000
asID:                     267999
IP address blocks:        45.167.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:07:94:4b:1d:63:16:18:cc:c9:fb:1b:6d:88:a0:35:62:c1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567AAE8B92B2E1EC89C0910BAA4126FC1A02766A
        Validity
            Not Before: Mar 13 15:31:46 2023 GMT
            Not After : Mar 11 15:36:46 2024 GMT
        Subject: CN=3F405B5885DFE95677981A9FAAD0D16C110C3EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:13:fa:e5:ed:81:b4:7c:2f:a3:06:ad:fa:20:
                    e4:40:81:60:76:7c:d2:95:b7:bb:10:c7:2d:01:a5:
                    34:f7:33:ac:96:97:95:db:ef:99:e2:b2:71:46:47:
                    2f:98:b6:50:4b:6b:1f:71:d8:13:94:38:18:61:58:
                    bd:8e:b3:2e:5f:bf:50:da:3a:9f:9b:a2:4c:3d:68:
                    cc:36:ca:b0:09:ca:08:b0:87:9e:37:9b:ab:81:b0:
                    3d:9a:b3:04:75:93:21:c3:d1:6d:5d:6f:56:61:c6:
                    e3:b6:a1:66:e4:25:b7:72:11:5c:69:7f:82:e6:b1:
                    ae:68:b5:b2:b7:81:60:57:26:e0:4a:ac:bb:a5:67:
                    e6:a8:f9:0c:03:44:5a:2a:04:23:9a:1e:41:e1:aa:
                    10:f1:bb:cd:07:01:eb:f7:50:23:8a:fc:3b:9e:53:
                    28:b8:e9:60:37:44:50:62:9d:36:ca:5e:c1:d0:7a:
                    0e:3e:50:71:1d:a9:3b:a7:0a:d9:12:03:4c:94:f6:
                    f3:a0:66:7c:33:8b:bd:b3:98:96:00:c4:ad:87:66:
                    eb:3d:f9:44:ec:04:d4:17:77:21:cc:e7:5b:bd:57:
                    84:27:53:40:b0:b7:08:c1:f6:57:0d:9d:d8:34:64:
                    8a:1b:cd:08:ec:26:49:c5:d2:98:e7:eb:f7:75:91:
                    b7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:40:5B:58:85:DF:E9:56:77:98:1A:9F:AA:D0:D1:6C:11:0C:3E:C2
            X509v3 Authority Key Identifier:
                keyid:56:7A:AE:8B:92:B2:E1:EC:89:C0:91:0B:AA:41:26:FC:1A:02:76:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/567AAE8B92B2E1EC89C0910BAA4126FC1A02766A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/34352e3136372e3130382e302f32342d3234203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:8a:46:e5:64:5c:e1:83:de:83:a8:a3:f1:1b:97:9f:6c:
         98:f9:5c:52:39:e8:43:90:d8:2d:1d:57:62:bf:ea:35:e3:30:
         d4:94:68:b6:51:40:51:69:0b:8d:9b:da:6a:03:a4:ad:46:17:
         1e:ec:c3:8a:a1:82:01:7f:7b:1b:85:62:a9:55:34:0d:7d:1c:
         c6:83:7f:13:57:48:e2:2e:36:2f:19:1e:49:c5:bb:80:e6:d1:
         4d:e6:67:6a:80:e0:6d:4e:8d:cd:60:34:4e:1c:8d:1f:1d:bd:
         c0:04:9c:95:55:51:fb:2e:ef:b9:97:11:be:41:76:50:d2:60:
         ac:73:ed:41:1a:16:0e:c5:85:8e:85:53:ff:fc:c4:d3:ca:ce:
         03:f8:8b:a0:06:0b:16:ba:58:b5:2a:e3:4a:fd:73:e7:37:64:
         0d:7d:7c:50:68:62:8c:e3:a3:6f:db:a5:1e:48:ad:45:da:53:
         02:49:a3:8a:59:41:83:e4:d2:93:45:b0:d7:56:4b:73:ee:65:
         a8:ae:c4:67:2d:76:e3:8e:6b:4a:9c:b9:1d:c1:e8:83:8d:ec:
         6b:0a:46:36:c1:f8:5d:66:31:38:81:61:89:de:a3:f0:79:6a:
         26:71:4e:f7:07:a2:f5:75:ef:86:40:d4:99:d2:84:31:6f:c1:
         32:c5:34:66
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMlgHlEsdYxYYzMn7G22IoDViwYUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY3QUFFOEI5MkIyRTFFQzg5QzA5MTBCQUE0MTI2RkMx
QTAyNzY2QTAeFw0yMzAzMTMxNTMxNDZaFw0yNDAzMTExNTM2NDZaMDMxMTAvBgNV
BAMTKDNGNDA1QjU4ODVERkU5NTY3Nzk4MUE5RkFBRDBEMTZDMTEwQzNFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9E/rl7YG0fC+jBq36IORAgWB2
fNKVt7sQxy0BpTT3M6yWl5Xb75nisnFGRy+YtlBLax9x2BOUOBhhWL2Osy5fv1Da
Op+bokw9aMw2yrAJygiwh543m6uBsD2aswR1kyHD0W1db1ZhxuO2oWbkJbdyEVxp
f4Lmsa5otbK3gWBXJuBKrLulZ+ao+QwDRFoqBCOaHkHhqhDxu80HAev3UCOK/Due
Uyi46WA3RFBinTbKXsHQeg4+UHEdqTunCtkSA0yU9vOgZnwzi72zmJYAxK2HZus9
+UTsBNQXdyHM51u9V4QnU0CwtwjB9lcNndg0ZIobzQjsJknF0pjn6/d1kbcvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUP0BbWIXf6VZ3mBqfqtDRbBEMPsIwHwYDVR0j
BBgwFoAUVnqui5Ky4eyJwJELqkEm/BoCdmowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy
S2QvMC81NjdBQUU4QjkyQjJFMUVDODlDMDkxMEJBQTQxMjZGQzFBMDI3NjZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2N0FBRThCOTJCMkUxRUM4
OUMwOTEwQkFBNDEyNkZDMUEwMjc2NkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtUGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzAv
MzQzNTJlMzEzNjM3MmUzMTMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtp2wwDQYJKoZIhvcNAQELBQADggEBAAU9ikbl
ZFzhg96DqKPxG5efbJj5XFI56EOQ2C0dV2K/6jXjMNSUaLZRQFFpC42b2moDpK1G
Fx7sw4qhggF/exuFYqlVNA19HMaDfxNXSOIuNi8ZHknFu4Dm0U3mZ2qA4G1Ojc1g
NE4cjR8dvcAEnJVVUfsu77mXEb5BdlDSYKxz7UEaFg7FhY6FU//8xNPKzgP4i6AG
Cxa6WLUq40r9c+c3ZA19fFBoYozjo2/bpR5IrUXaUwJJo4pZQYPk0pNFsNdWS3Pu
ZaiuxGctduOOa0qcuR3B6ION7GsKRjbB+F1mMTiBYYneo/B5aiZxTvcHovV174ZA
1JnShDFvwTLFNGY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org