Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa
File:                     34352e3232362e39322e302f32322d3232203d3e20323636393932.roa (raw, json)
Hash identifier:          8mm2bO/NF/TSk7vxXOs8d0utD7RwrLusr+84E+eXaEw=
Subject key identifier:   45:7D:27:27:81:C7:A2:59:D1:36:02:A3:84:26:62:84:2B:0D:34:77
Certificate issuer:       /CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
Certificate serial:       4B36AD628447FF31FFD86592C975B4C097F1AA0F
Authority key identifier: 3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa
Signing time:             Wed 17 Apr 2024 13:14:44 +0000
ROA not before:           Wed 17 Apr 2024 13:09:44 +0000
ROA not after:            Wed 16 Apr 2025 13:14:44 +0000
asID:                     266992
IP address blocks:        45.226.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:36:ad:62:84:47:ff:31:ff:d8:65:92:c9:75:b4:c0:97:f1:aa:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D2F8E7476E92B904376F1EC99DDEECE542693AC
        Validity
            Not Before: Apr 17 13:09:44 2024 GMT
            Not After : Apr 16 13:14:44 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:94:60:8c:04:a4:55:7e:cc:4b:bb:7f:0c:80:
                    97:c9:c6:af:1d:77:23:86:a7:a2:77:1d:31:98:f2:
                    ed:19:60:af:2e:9d:63:b2:83:95:b2:6f:ad:96:1b:
                    ff:3d:27:82:4a:ad:c3:88:f2:45:4c:4d:57:a2:1b:
                    2e:18:11:91:91:ff:30:94:0f:9b:ba:ec:8d:3d:e7:
                    6f:eb:58:d7:e6:53:39:93:85:cc:94:0d:09:55:1a:
                    07:66:e7:83:2d:8a:7b:be:ec:e7:16:0d:0f:5e:54:
                    4c:fc:57:69:43:4f:23:4e:d1:14:75:fa:bb:69:69:
                    dd:93:c6:05:db:2d:f2:14:bb:57:c7:6f:81:80:2c:
                    5e:ce:e4:d6:37:8e:d6:01:71:4f:96:39:3d:ac:24:
                    af:37:f8:f9:81:99:83:24:44:7c:24:38:16:3a:2f:
                    e3:41:0f:82:6b:aa:a7:5c:b4:ba:84:70:9e:c9:74:
                    c9:02:81:33:a8:f7:1e:3c:3a:36:bb:76:fb:0b:1a:
                    c0:97:79:29:3d:d9:93:8e:28:a7:91:8a:34:57:9c:
                    08:87:ea:60:29:62:00:5f:9a:9d:d2:a6:72:d9:d6:
                    c6:ba:df:f9:1e:73:7d:d4:77:5e:69:a9:4a:5f:3b:
                    34:ec:30:8b:81:61:88:c3:16:d7:5c:fc:de:f4:58:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:27:27:81:C7:A2:59:D1:36:02:A3:84:26:62:84:2B:0D:34:77
            X509v3 Authority Key Identifier:
                keyid:3D:2F:8E:74:76:E9:2B:90:43:76:F1:EC:99:DD:EE:CE:54:26:93:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D2F8E7476E92B904376F1EC99DDEECE542693AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/1/34352e3232362e39322e302f32322d3232203d3e20323636393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:b6:c2:6b:ad:80:1a:5c:9b:e8:5b:6d:1d:1a:ab:b0:5e:29:
         75:fe:f9:4c:c7:93:b8:f9:bd:b1:fc:a0:bd:b0:54:f0:31:b8:
         d8:3c:ce:d7:2a:af:b3:12:10:cb:63:96:22:1e:43:0a:f8:3d:
         a5:31:78:86:aa:0a:74:25:3a:89:17:1d:17:b0:eb:32:0b:3c:
         12:1d:9b:e7:67:40:2b:0e:b2:44:72:08:71:8a:45:a8:41:93:
         99:49:d3:4c:bf:31:dc:9d:97:57:3f:e9:eb:d7:5b:4f:f2:eb:
         d9:9b:b0:e4:f2:06:fe:13:c9:18:b3:ab:09:c0:ad:ea:35:ce:
         cd:06:9c:e4:3a:5a:d0:f8:5f:19:3d:7d:3f:70:dc:eb:47:eb:
         ec:9f:e2:21:69:68:0f:71:a7:eb:4f:0f:e4:ef:bf:af:90:58:
         0f:19:ae:73:70:d4:dd:9f:a1:00:d3:52:09:25:28:ca:27:9d:
         df:cd:64:5a:ba:02:72:12:fb:39:f8:13:92:83:85:ea:80:09:
         d0:7c:da:1c:1e:27:82:73:6d:5c:af:18:9e:57:08:70:1d:86:
         4d:3f:41:6e:04:a2:f0:03:b6:6d:bd:7c:86:20:10:56:95:08:
         43:40:f4:c2:1f:47:bd:63:f6:41:14:7e:97:13:29:57:1f:13:
         2b:4d:1a:98
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUSzatYoRH/zH/2GWSyXW0wJfxqg8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0QyRjhFNzQ3NkU5MkI5MDQzNzZGMUVDOTlEREVFQ0U1
NDI2OTNBQzAeFw0yNDA0MTcxMzA5NDRaFw0yNTA0MTYxMzE0NDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA5NDYwOEMwNEE0NTU3RUND
NEJCQjdGMEM4MDk3QzlDNkFGMUQ3NzIzODZBN0EyNzcxRDMxOThGMkVEMTk2MEFG
MkU5RDYzQjI4Mzk1QjI2RkFEOTYxQkZGM0QyNzgyNEFBREMzODhGMjQ1NEM0RDU3
QTIxQjJFMTgxMTkxOTFGRjMwOTQwRjlCQkFFQzhEM0RFNzZGRUI1OEQ3RTY1MzM5
OTM4NUNDOTQwRDA5NTUxQTA3NjZFNzgzMkQ4QTdCQkVFQ0U3MTYwRDBGNUU1NDRD
RkM1NzY5NDM0RjIzNEVEMTE0NzVGQUJCNjk2OUREOTNDNjA1REIyREYyMTRCQjU3
Qzc2RjgxODAyQzVFQ0VFNEQ2Mzc4RUQ2MDE3MTRGOTYzOTNEQUMyNEFGMzdGOEY5
ODE5OTgzMjQ0NDdDMjQzODE2M0EyRkUzNDEwRjgyNkJBQUE3NUNCNEJBODQ3MDlF
Qzk3NEM5MDI4MTMzQThGNzFFM0MzQTM2QkI3NkZCMEIxQUMwOTc3OTI5M0REOTkz
OEUyOEE3OTE4QTM0NTc5QzA4ODdFQTYwMjk2MjAwNUY5QTlERDJBNjcyRDlENkM2
QkFERkY5MUU3MzdERDQ3NzVFNjlBOTRBNUYzQjM0RUMzMDhCODE2MTg4QzMxNkQ3
NUNGQ0RFRjQ1ODIzQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0JRgjASkVX7MS7t/DICXycavHXcjhqeidx0xmPLtGWCvLp1jsoOV
sm+tlhv/PSeCSq3DiPJFTE1XohsuGBGRkf8wlA+buuyNPedv61jX5lM5k4XMlA0J
VRoHZueDLYp7vuznFg0PXlRM/FdpQ08jTtEUdfq7aWndk8YF2y3yFLtXx2+BgCxe
zuTWN47WAXFPljk9rCSvN/j5gZmDJER8JDgWOi/jQQ+Ca6qnXLS6hHCeyXTJAoEz
qPcePDo2u3b7CxrAl3kpPdmTjiinkYo0V5wIh+pgKWIAX5qd0qZy2dbGut/5HnN9
1HdeaalKXzs07DCLgWGIwxbXXPze9FgjoQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FEV9JyeBx6JZ0TYCo4QmYoQrDTR3MB8GA1UdIwQYMBaAFD0vjnR26SuQQ3bx7Jnd
7s5UJpOsMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NYOEd4ck5rN1JEempV
UWZWaHQzRllHVmJnVHBSV0pMTHA0QXF4dWZQNGJiLzEvM0QyRjhFNzQ3NkU5MkI5
MDQzNzZGMUVDOTlEREVFQ0U1NDI2OTNBQy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8zRDJGOEU3NDc2RTkyQjkwNDM3NkYxRUM5OURERUVDRTU0MjY5
M0FDLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DWDhHeHJOazdSRHpqVVFmVmh0
M0ZZR1ZiZ1RwUldKTExwNEFxeHVmUDRiYi8xLzM0MzUyZTMyMzIzNjJlMzkzMjJl
MzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjM5MzkzMi5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi3i
XDANBgkqhkiG9w0BAQsFAAOCAQEAXbbCa62AGlyb6FttHRqrsF4pdf75TMeTuPm9
sfygvbBU8DG42DzO1yqvsxIQy2OWIh5DCvg9pTF4hqoKdCU6iRcdF7DrMgs8Eh2b
52dAKw6yRHIIcYpFqEGTmUnTTL8x3J2XVz/p69dbT/Lr2Zuw5PIG/hPJGLOrCcCt
6jXOzQac5Dpa0PhfGT19P3Dc60fr7J/iIWloD3Gn608P5O+/r5BYDxmuc3DU3Z+h
ANNSCSUoyied381kWroCchL7OfgTkoOF6oAJ0HzaHB4ngnNtXK8YnlcIcB2GTT9B
bgSi8AO2bb18hiAQVpUIQ0D0wh9HvWP2QRR+lxMpVx8TK00amA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org