Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31352e302f32342d3234203d3e20323638333436.roa
File:                     34352e3233392e31352e302f32342d3234203d3e20323638333436.roa (raw, json)
Hash identifier:          rDCP+MiCmFmpKe2vJwtGcEOQXeA8/i1UcEqHCFRycyk=
Subject key identifier:   E6:8E:82:C8:0D:5E:AB:52:1C:E6:98:33:25:F5:C5:C7:83:5A:C6:6C
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       3F076B0E9A52A87A0367945392DED41879EF5FBB
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31352e302f32342d3234203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:59 +0000
ROA not before:           Mon 22 May 2023 19:18:59 +0000
ROA not after:            Mon 20 May 2024 19:23:59 +0000
asID:                     268346
IP address blocks:        45.239.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:07:6b:0e:9a:52:a8:7a:03:67:94:53:92:de:d4:18:79:ef:5f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:59 2023 GMT
            Not After : May 20 19:23:59 2024 GMT
        Subject: CN=E68E82C80D5EAB521CE6983325F5C5C7835AC66C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ef:8d:df:2b:0d:ba:d2:f3:a0:4e:e6:e4:45:
                    fe:4e:e2:0b:18:17:da:27:b8:d9:43:f3:9c:77:f8:
                    8d:a2:2c:f5:25:31:3d:96:4c:97:0a:8f:51:8f:81:
                    1e:6a:2d:f9:56:1a:9d:3c:14:72:65:9a:c2:2a:18:
                    f0:20:82:2e:59:ca:0b:3b:85:96:89:89:6b:b2:da:
                    c8:23:58:4f:09:7e:f9:39:5f:02:20:e9:d0:19:c7:
                    a8:8a:5f:0e:26:19:a4:0d:0f:98:cd:56:1e:21:1f:
                    27:0b:e4:1f:b9:61:60:6e:9f:0f:19:66:69:06:d5:
                    5b:6b:bd:a7:e0:ce:0a:26:00:b2:bb:40:8f:07:8b:
                    46:2b:af:6f:8d:1b:0a:2e:67:3f:ad:30:da:29:11:
                    bc:db:49:a7:8c:bf:ab:32:17:79:68:4e:e4:94:4d:
                    ec:21:9e:91:69:6e:71:21:d0:e4:03:b2:bd:e3:f0:
                    be:f0:66:d2:3c:b6:b5:58:15:51:20:ce:fe:55:c5:
                    ac:97:aa:d2:d0:41:1d:28:b3:3c:f9:f7:65:05:1a:
                    8f:0a:5a:a9:54:95:8a:58:4e:36:b9:92:fb:20:25:
                    26:8e:99:ef:84:f1:5e:a9:72:f4:87:64:aa:b6:d5:
                    c6:b9:60:eb:9a:9e:c1:f4:a5:70:6c:7b:c3:18:72:
                    50:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8E:82:C8:0D:5E:AB:52:1C:E6:98:33:25:F5:C5:C7:83:5A:C6:6C
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31352e302f32342d3234203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:88:fe:2b:3b:bd:d3:dd:1b:7c:22:ed:c9:86:ed:ca:c7:f5:
         9e:d5:ee:00:c3:ee:57:cb:3a:42:c0:fa:ab:be:02:65:d8:47:
         f1:14:5d:2b:a1:fc:7f:22:3a:86:cc:f6:3f:b7:4d:ac:76:59:
         48:55:e8:97:c7:24:ac:84:68:fa:4f:fe:21:55:d6:1c:f1:44:
         07:9c:57:40:c6:7d:25:8a:61:00:4c:d2:42:9e:df:5c:9e:b5:
         01:c5:48:e2:57:34:6d:e4:49:19:ae:2b:35:82:8e:a1:0b:0a:
         01:df:77:f3:39:de:4b:3b:dd:79:41:83:7c:6c:d2:e1:29:d4:
         6a:5a:eb:ff:96:32:2a:10:bd:53:31:de:cb:ec:18:5e:0e:a8:
         b7:5d:42:9b:a2:f1:2f:5a:df:34:5d:61:2a:61:f6:b7:7c:1e:
         b9:f8:c9:63:6e:cf:ba:ce:80:eb:00:ec:ae:04:f4:71:d2:11:
         1a:a8:7b:0c:33:c1:c1:c8:11:f3:a9:d3:9f:fe:fe:c7:1b:a1:
         e2:cd:70:9f:be:4e:70:21:77:1d:1f:35:5c:9c:96:2e:b9:94:
         17:97:c4:e0:4c:24:1a:62:16:83:22:8a:f6:0b:0f:38:73:02:
         34:87:17:74:15:be:aa:fb:fa:07:35:19:28:29:a3:d6:25:41:
         05:fe:c9:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPwdrDppSqHoDZ5RTkt7UGHnvX7swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MjkwRkM5MTMwNEI1QkY4MDk5MUJFQkEwNkY5MThD
NEZBRjVBRjAeFw0yMzA1MjIxOTE4NTlaFw0yNDA1MjAxOTIzNTlaMDMxMTAvBgNV
BAMTKEU2OEU4MkM4MEQ1RUFCNTIxQ0U2OTgzMzI1RjVDNUM3ODM1QUM2NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT743fKw260vOgTubkRf5O4gsY
F9onuNlD85x3+I2iLPUlMT2WTJcKj1GPgR5qLflWGp08FHJlmsIqGPAggi5Zygs7
hZaJiWuy2sgjWE8Jfvk5XwIg6dAZx6iKXw4mGaQND5jNVh4hHycL5B+5YWBunw8Z
ZmkG1VtrvafgzgomALK7QI8Hi0Yrr2+NGwouZz+tMNopEbzbSaeMv6syF3loTuSU
TewhnpFpbnEh0OQDsr3j8L7wZtI8trVYFVEgzv5VxayXqtLQQR0oszz592UFGo8K
WqlUlYpYTja5kvsgJSaOme+E8V6pcvSHZKq21ca5YOuansH0pXBse8MYclDpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5o6CyA1eq1Ic5pgzJfXFx4NaxmwwHwYDVR0j
BBgwFoAUCkKQ/JEwS1v4CZG+ugb5GMT69a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDE3WjlMR2hEd1pyam5VTFMyZUs4TExDVnN3bXM1am1nWXNENkg2ZUJM
WmgvMC8wQTQyOTBGQzkxMzA0QjVCRjgwOTkxQkVCQTA2RjkxOEM0RkFGNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBNDI5MEZDOTEzMDRCNUJG
ODA5OTFCRUJBMDZGOTE4QzRGQUY1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxN1o5TEdoRHdacmpuVUxTMmVLOExMQ1Zzd21zNWptZ1lzRDZINmVCTFpoLzAv
MzQzNTJlMzIzMzM5MmUzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe8PMA0GCSqGSIb3DQEBCwUAA4IBAQB1iP4rO73T
3Rt8Iu3Jhu3Kx/We1e4Aw+5XyzpCwPqrvgJl2EfxFF0rofx/IjqGzPY/t02sdllI
VeiXxySshGj6T/4hVdYc8UQHnFdAxn0limEATNJCnt9cnrUBxUjiVzRt5EkZris1
go6hCwoB33fzOd5LO915QYN8bNLhKdRqWuv/ljIqEL1TMd7L7BheDqi3XUKbovEv
Wt80XWEqYfa3fB65+Mljbs+6zoDrAOyuBPRx0hEaqHsMM8HByBHzqdOf/v7HG6Hi
zXCfvk5wIXcdHzVcnJYuuZQXl8TgTCQaYhaDIor2Cw84cwI0hxd0Fb6q+/oHNRko
KaPWJUEF/snd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org