Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa
File:                     34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa (raw, json)
Hash identifier:          MAHFBBEGWAjgqjl79ZaZxAcuaQOve8l5oLxKUfCcQfk=
Subject key identifier:   49:56:E7:49:5C:1C:A7:75:5C:A3:BE:22:F3:CC:41:B8:37:C3:26:2F
Certificate issuer:       /CN=A0086FD21CF6CD26003723997398968937DC3452
Certificate serial:       1B3EA2A287CC1670D6C7B620F1F5F97E80E02E9C
Authority key identifier: A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa
Signing time:             Thu 05 Sep 2024 18:20:19 +0000
ROA not before:           Thu 05 Sep 2024 18:15:19 +0000
ROA not after:            Thu 04 Sep 2025 18:20:19 +0000
asID:                     269499
IP address blocks:        45.186.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3e:a2:a2:87:cc:16:70:d6:c7:b6:20:f1:f5:f9:7e:80:e0:2e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0086FD21CF6CD26003723997398968937DC3452
        Validity
            Not Before: Sep  5 18:15:19 2024 GMT
            Not After : Sep  4 18:20:19 2025 GMT
        Subject: CN=4956E7495C1CA7755CA3BE22F3CC41B837C3262F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:6d:04:02:11:d4:5a:f0:a9:9e:97:30:2f:
                    b7:f9:d8:a4:06:47:8f:4d:77:25:1b:41:ac:8d:7d:
                    1c:84:24:ba:d8:ab:d2:09:db:82:d2:24:87:5c:56:
                    c4:0c:af:ea:4b:52:16:ff:16:88:54:39:db:19:36:
                    1f:93:a6:93:f0:fb:65:ba:e8:31:97:5b:e4:7b:a3:
                    1f:50:62:56:da:3f:ec:8b:f3:cd:9a:80:f3:ee:05:
                    d4:22:c3:1d:10:d5:1a:d3:dc:00:a8:65:b3:fc:59:
                    17:ac:fa:66:1c:05:aa:12:24:b3:62:31:00:c7:7a:
                    5a:f3:00:64:aa:14:61:6b:4b:35:70:8f:27:0f:11:
                    f2:0b:5c:cd:5c:d4:9c:22:87:98:0c:ba:3b:d6:4f:
                    74:f9:da:54:dc:dd:8a:2d:10:ca:23:80:99:5f:2c:
                    44:5c:58:ec:0e:08:42:28:64:47:22:d9:ca:07:2d:
                    3d:7f:34:4d:02:40:d0:9c:e0:17:a1:25:e8:07:5c:
                    07:ed:06:4d:fd:c6:96:29:ec:b3:96:bd:6f:c2:8a:
                    a4:07:58:4e:18:c7:37:29:59:6d:87:d8:8c:9c:da:
                    b4:e1:f7:c2:a9:9a:15:8f:53:b4:6d:21:19:65:72:
                    a9:76:01:79:a3:2c:08:4c:28:56:14:30:0d:61:80:
                    bf:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:E7:49:5C:1C:A7:75:5C:A3:BE:22:F3:CC:41:B8:37:C3:26:2F
            X509v3 Authority Key Identifier:
                keyid:A0:08:6F:D2:1C:F6:CD:26:00:37:23:99:73:98:96:89:37:DC:34:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/A0086FD21CF6CD26003723997398968937DC3452.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0086FD21CF6CD26003723997398968937DC3452.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSdyo9MmBpqhibd585BgzLy1s4fCWL27Q3PdjBLgmAu1/0/34352e3138362e3135362e302f32342d3234203d3e20323639343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:4a:72:f5:0c:a2:de:1b:d1:9f:97:73:8e:10:5f:a8:d6:87:
         72:bc:04:97:9a:bc:fe:36:74:24:60:eb:42:b9:5b:27:6f:70:
         b9:79:ba:1f:99:d1:86:6d:74:de:7d:80:db:ed:7d:84:1c:07:
         27:07:d5:e1:be:47:41:01:09:3b:8a:34:6a:88:e5:46:56:7d:
         b4:d7:92:fa:2d:5c:21:63:83:c4:f5:c6:31:c6:95:6e:71:9e:
         90:e4:d9:31:0c:8c:84:9c:28:c7:35:15:a3:a4:95:4f:a7:37:
         2e:de:cb:37:f2:59:f9:c9:79:ca:d4:ad:b7:41:ba:4a:13:e5:
         17:bc:34:b5:00:00:a9:43:c0:06:11:4d:58:20:4f:2a:93:51:
         78:27:fc:22:a8:cd:b6:4e:55:77:54:25:63:67:33:17:d5:c3:
         c4:02:b4:11:12:92:e6:e0:15:8f:49:f2:f0:3c:d5:e1:3d:4a:
         14:cc:70:8a:c8:57:c3:26:0d:42:c2:50:0f:de:ad:8a:18:32:
         ac:fc:47:e0:c7:96:25:39:cb:f4:ac:cd:23:68:70:49:1d:3b:
         20:44:65:0a:86:5d:d6:e7:f5:ee:21:e3:9d:10:5e:ff:a1:6c:
         20:4d:f5:2b:cc:23:2d:93:cc:32:e4:88:70:fd:d9:65:b0:a4:
         c0:22:42:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGz6ioofMFnDWx7Yg8fX5foDgLpwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwODZGRDIxQ0Y2Q0QyNjAwMzcyMzk5NzM5ODk2ODkz
N0RDMzQ1MjAeFw0yNDA5MDUxODE1MTlaFw0yNTA5MDQxODIwMTlaMDMxMTAvBgNV
BAMTKDQ5NTZFNzQ5NUMxQ0E3NzU1Q0EzQkUyMkYzQ0M0MUI4MzdDMzI2MkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+K20EAhHUWvCpnpcwL7f52KQG
R49NdyUbQayNfRyEJLrYq9IJ24LSJIdcVsQMr+pLUhb/FohUOdsZNh+TppPw+2W6
6DGXW+R7ox9QYlbaP+yL882agPPuBdQiwx0Q1RrT3ACoZbP8WRes+mYcBaoSJLNi
MQDHelrzAGSqFGFrSzVwjycPEfILXM1c1Jwih5gMujvWT3T52lTc3YotEMojgJlf
LERcWOwOCEIoZEci2coHLT1/NE0CQNCc4BehJegHXAftBk39xpYp7LOWvW/CiqQH
WE4YxzcpWW2H2Iyc2rTh98KpmhWPU7RtIRllcql2AXmjLAhMKFYUMA1hgL9HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSVbnSVwcp3Vco74i88xBuDfDJi8wHwYDVR0j
BBgwFoAUoAhv0hz2zSYANyOZc5iWiTfcNFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlNkeW85TW1CcHFoaWJkNTg1Qmd6THkxczRmQ1dMMjdRM1BkakJMZ21B
dTEvMC9BMDA4NkZEMjFDRjZDRDI2MDAzNzIzOTk3Mzk4OTY4OTM3REMzNDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EwMDg2RkQyMUNGNkNEMjYw
MDM3MjM5OTczOTg5Njg5MzdEQzM0NTIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JTZHlvOU1tQnBxaGliZDU4NUJnekx5MXM0ZkNXTDI3UTNQZGpCTGdtQXUxLzAv
MzQzNTJlMzEzODM2MmUzMTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtupwwDQYJKoZIhvcNAQELBQADggEBAL1KcvUM
ot4b0Z+Xc44QX6jWh3K8BJeavP42dCRg60K5WydvcLl5uh+Z0YZtdN59gNvtfYQc
BycH1eG+R0EBCTuKNGqI5UZWfbTXkvotXCFjg8T1xjHGlW5xnpDk2TEMjIScKMc1
FaOklU+nNy7eyzfyWfnJecrUrbdBukoT5Re8NLUAAKlDwAYRTVggTyqTUXgn/CKo
zbZOVXdUJWNnMxfVw8QCtBESkubgFY9J8vA81eE9ShTMcIrIV8MmDULCUA/erYoY
Mqz8R+DHliU5y/SszSNocEkdOyBEZQqGXdbn9e4h450QXv+hbCBN9SvMIy2TzDLk
iHD92WWwpMAiQu8=
-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org