Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa
File:                     34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa (raw, json)
Hash identifier:          ta8Nm63dv/BAhMgr0QhQ0dL/z1wdoAjNHKGMPrODzHw=
Subject key identifier:   67:95:FC:82:4F:E1:9C:E7:E5:83:BA:3E:AB:4D:50:C7:8B:F0:A5:3D
Certificate issuer:       /CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
Certificate serial:       7865E7BCA2F498D92AB911EA232E0277F63EAE10
Authority key identifier: 38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa
Signing time:             Tue 26 Dec 2023 16:15:39 +0000
ROA not before:           Tue 26 Dec 2023 16:10:39 +0000
ROA not after:            Tue 24 Dec 2024 16:15:39 +0000
asID:                     267999
IP address blocks:        45.167.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:65:e7:bc:a2:f4:98:d9:2a:b9:11:ea:23:2e:02:77:f6:3e:ae:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387AF1348EDD63172DB6EE8E38682949F9D3E956
        Validity
            Not Before: Dec 26 16:10:39 2023 GMT
            Not After : Dec 24 16:15:39 2024 GMT
        Subject: CN=6795FC824FE19CE7E583BA3EAB4D50C78BF0A53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8d:ea:19:21:ca:aa:6e:db:f8:8f:29:80:f8:
                    ba:0b:4a:e4:4e:d8:7f:87:17:41:27:21:a0:03:12:
                    d7:1b:21:ed:96:3d:40:6d:fc:77:d9:57:de:d1:84:
                    88:ef:59:e6:ea:67:fa:73:c7:3c:7f:9e:01:5c:34:
                    7c:48:e3:2d:ad:13:58:1e:b6:26:d2:f4:3e:7a:9f:
                    97:f1:19:a1:9d:5a:fe:be:b0:d5:49:0e:14:be:78:
                    b9:e9:d6:c5:d4:6f:aa:21:3e:4f:f3:92:c4:42:2d:
                    56:68:5a:fd:d0:75:6a:cc:3c:a4:68:73:f0:38:58:
                    b0:36:d3:20:5e:78:cb:6d:b5:4a:53:f8:d5:a0:8c:
                    d0:67:00:95:1a:4d:1e:cc:28:64:f6:13:a2:5b:29:
                    ca:ca:4b:75:0e:19:b7:16:d7:f6:84:8d:a2:31:71:
                    b3:0c:86:fb:bd:eb:7a:a5:17:4a:d1:03:87:b5:23:
                    ce:5b:25:b3:ed:63:c8:a9:e5:eb:59:cf:f3:58:e5:
                    f2:f6:40:3e:4e:1a:d3:9b:d5:89:c7:3d:d8:57:d0:
                    bc:02:14:5f:3f:58:41:95:42:0f:7d:68:01:af:05:
                    37:46:72:9a:69:30:9b:f9:b8:57:0e:25:ea:c3:3f:
                    33:10:d5:d1:fd:18:8e:3b:76:20:18:30:94:9e:f1:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:95:FC:82:4F:E1:9C:E7:E5:83:BA:3E:AB:4D:50:C7:8B:F0:A5:3D
            X509v3 Authority Key Identifier:
                keyid:38:7A:F1:34:8E:DD:63:17:2D:B6:EE:8E:38:68:29:49:F9:D3:E9:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/387AF1348EDD63172DB6EE8E38682949F9D3E956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/387AF1348EDD63172DB6EE8E38682949F9D3E956.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/1/34352e3136372e3130382e302f32322d3234203d3e20323637393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:68:17:7a:f4:ff:43:a5:34:e2:86:c3:fb:5b:6f:fc:4e:c8:
         3d:4c:73:3c:37:58:c8:ab:9d:a0:f2:ba:cd:9b:03:73:aa:61:
         44:7e:60:3b:cf:47:17:de:a1:85:d7:c9:73:01:bd:83:19:57:
         10:2f:3a:23:59:48:51:79:ed:b2:cc:40:6a:83:95:9c:4a:8c:
         07:62:fb:1b:a3:1c:86:09:b0:19:ca:83:89:21:83:66:5d:11:
         b7:4f:e1:1d:46:8d:73:97:95:ae:da:58:34:99:36:4d:24:1e:
         4c:e3:01:00:ea:ad:d2:39:2e:c0:d1:a1:bd:76:13:20:28:64:
         dd:69:ef:7a:84:0f:b1:ed:98:a9:99:73:21:f1:0b:57:40:78:
         be:b7:30:89:56:03:e1:ac:26:30:d1:09:a9:1f:9e:3a:f7:cf:
         23:dc:98:cb:0f:89:56:84:23:21:ea:6d:c3:dc:09:a3:c2:42:
         77:68:03:76:1c:31:54:ab:b5:9d:c8:fe:8e:e3:e5:c0:7a:aa:
         b0:2a:ed:07:7c:25:3f:cd:62:bb:f9:18:9f:96:f2:88:61:5f:
         84:cd:61:c1:9c:c7:ed:b8:89:12:39:d8:24:69:62:4f:e1:dd:
         38:ec:53:a1:72:7c:bc:5f:f2:9c:2e:cf:0f:74:06:d9:32:4f:
         3a:18:79:23
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeGXnvKL0mNkquRHqIy4Cd/Y+rhAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg3QUYxMzQ4RURENjMxNzJEQjZFRThFMzg2ODI5NDlG
OUQzRTk1NjAeFw0yMzEyMjYxNjEwMzlaFw0yNDEyMjQxNjE1MzlaMDMxMTAvBgNV
BAMTKDY3OTVGQzgyNEZFMTlDRTdFNTgzQkEzRUFCNEQ1MEM3OEJGMEE1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjeoZIcqqbtv4jymA+LoLSuRO
2H+HF0EnIaADEtcbIe2WPUBt/HfZV97RhIjvWebqZ/pzxzx/ngFcNHxI4y2tE1ge
tibS9D56n5fxGaGdWv6+sNVJDhS+eLnp1sXUb6ohPk/zksRCLVZoWv3QdWrMPKRo
c/A4WLA20yBeeMtttUpT+NWgjNBnAJUaTR7MKGT2E6JbKcrKS3UOGbcW1/aEjaIx
cbMMhvu963qlF0rRA4e1I85bJbPtY8ip5etZz/NY5fL2QD5OGtOb1YnHPdhX0LwC
FF8/WEGVQg99aAGvBTdGcpppMJv5uFcOJerDPzMQ1dH9GI47diAYMJSe8YYZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ5X8gk/hnOflg7o+q01Qx4vwpT0wHwYDVR0j
BBgwFoAUOHrxNI7dYxcttu6OOGgpSfnT6VYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1QakVHZUN5bnQyYlNUdTh4MTRHVnVkV2ZwV2trZkFkV3ZnZnVGWldy
S2QvMS8zODdBRjEzNDhFREQ2MzE3MkRCNkVFOEUzODY4Mjk0OUY5RDNFOTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4N0FGMTM0OEVERDYzMTcy
REI2RUU4RTM4NjgyOTQ5RjlEM0U5NTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtUGpFR2VDeW50MmJTVHU4eDE0R1Z1ZFdmcFdra2ZBZFd2Z2Z1RlpXcktkLzEv
MzQzNTJlMzEzNjM3MmUzMTMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczOTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItp2wwDQYJKoZIhvcNAQELBQADggEBAFhoF3r0
/0OlNOKGw/tbb/xOyD1Mczw3WMirnaDyus2bA3OqYUR+YDvPRxfeoYXXyXMBvYMZ
VxAvOiNZSFF57bLMQGqDlZxKjAdi+xujHIYJsBnKg4khg2ZdEbdP4R1GjXOXla7a
WDSZNk0kHkzjAQDqrdI5LsDRob12EyAoZN1p73qED7HtmKmZcyHxC1dAeL63MIlW
A+GsJjDRCakfnjr3zyPcmMsPiVaEIyHqbcPcCaPCQndoA3YcMVSrtZ3I/o7j5cB6
qrAq7Qd8JT/NYrv5GJ+W8ohhX4TNYcGcx+24iRI52CRpYk/h3TjsU6FyfLxf8pwu
zw90BtkyTzoYeSM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org