Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e382e302f32322d3232203d3e20323639353633.roa
File:                     34352e3138392e382e302f32322d3232203d3e20323639353633.roa (raw, json)
Hash identifier:          xFmvoJfBqX1fzQ0zEsMPuIgrQ5GkFlOmKXAhRg6KDsY=
Subject key identifier:   FC:DF:65:8E:AE:34:B2:5D:18:B2:B8:0E:3C:1E:0E:9C:4A:2F:70:7E
Certificate issuer:       /CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
Certificate serial:       4C56154C27D8241CBCB6FA37EDF2494B03DB409E
Authority key identifier: 9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e382e302f32322d3232203d3e20323639353633.roa
Signing time:             Tue 02 Jan 2024 16:29:44 +0000
ROA not before:           Tue 02 Jan 2024 16:24:44 +0000
ROA not after:            Tue 31 Dec 2024 16:29:44 +0000
asID:                     269563
IP address blocks:        45.189.8.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:56:15:4c:27:d8:24:1c:bc:b6:fa:37:ed:f2:49:4b:03:db:40:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57
        Validity
            Not Before: Jan  2 16:24:44 2024 GMT
            Not After : Dec 31 16:29:44 2024 GMT
        Subject: CN=FCDF658EAE34B25D18B2B80E3C1E0E9C4A2F707E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:1c:d1:58:3a:9a:28:0c:79:93:e1:87:57:
                    ee:cd:da:e9:88:50:0f:d9:fe:1a:71:07:1c:bf:16:
                    16:3d:6b:8e:4c:6a:e2:57:e1:43:41:0c:8c:6c:50:
                    1a:ed:86:33:db:59:10:1f:2c:77:b0:05:48:13:1a:
                    f0:43:e8:33:c0:bb:d1:15:d7:77:95:40:af:24:62:
                    c7:66:c5:56:d6:21:54:4f:0e:06:ad:06:21:b9:45:
                    31:9a:a3:33:fc:19:c1:f6:ad:53:72:9d:5f:95:93:
                    d8:31:60:11:67:23:86:d5:94:67:b5:f6:dc:76:b8:
                    f0:db:88:50:07:5d:52:ed:ab:70:21:b6:04:a2:0f:
                    00:14:86:07:a9:e3:15:e3:8c:61:40:b4:6c:8e:d5:
                    77:11:df:cc:b4:8e:f7:6f:be:df:1b:42:d8:53:c9:
                    20:f4:5f:59:ec:77:70:bc:20:87:a5:4b:f8:e1:a9:
                    e1:12:c9:6b:8d:b9:4f:05:68:79:7d:76:84:4d:83:
                    83:19:2e:ce:95:1d:36:1c:2e:f9:d4:64:b0:ee:76:
                    aa:08:8b:88:be:08:e0:ba:75:30:71:96:b9:13:e1:
                    30:92:bc:fd:74:fa:57:9c:d2:5a:19:ca:a3:3b:b3:
                    c2:77:68:b1:69:2b:b2:34:d1:19:72:b9:e9:25:94:
                    18:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DF:65:8E:AE:34:B2:5D:18:B2:B8:0E:3C:1E:0E:9C:4A:2F:70:7E
            X509v3 Authority Key Identifier:
                keyid:9D:EA:A4:72:9E:7E:5D:C6:78:82:BE:23:05:F6:B8:EB:86:B5:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DEAA4729E7E5DC67882BE2305F6B8EB86B54D57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E3oBih1ePYHe52iyFoF51jmBAJSdky2UUHx7CewFALGS/0/34352e3138392e382e302f32322d3232203d3e20323639353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:85:66:44:80:32:36:ba:0f:5e:83:18:4c:b0:ed:8b:b8:
         33:0c:5e:b8:01:f6:56:75:51:a9:b7:01:62:88:9e:19:d9:37:
         22:c2:3c:cf:7c:97:7c:7e:e2:4b:f2:5c:d5:f0:0a:c4:53:3c:
         1a:b4:cc:b8:7f:3d:ac:44:8d:f6:1e:6f:bc:18:cb:09:ad:dc:
         e1:d5:1f:71:d5:13:d7:2e:dc:75:13:cd:ef:50:78:3c:2f:d8:
         79:2e:2e:15:49:54:f5:97:ee:95:c4:ee:ad:7f:00:7c:ef:b5:
         eb:27:b0:18:57:b2:f3:79:b0:f0:82:51:52:53:fd:9e:78:00:
         dd:c2:81:f3:38:69:fc:f5:d6:bb:18:e2:39:ec:b0:fb:40:7c:
         03:46:83:a4:55:17:af:49:63:d4:aa:ef:26:0d:a6:44:ff:b1:
         1f:fb:0a:0d:b0:13:b6:12:33:e7:4f:ab:a6:7d:e6:38:9b:ea:
         50:bc:f6:27:7d:1a:44:90:b6:15:78:33:a2:9c:6e:cf:97:75:
         2b:56:59:97:79:0a:11:86:a5:9c:88:10:20:a7:6a:18:6c:54:
         24:77:61:e8:d0:c2:ea:2e:cf:af:6e:19:b9:ca:c3:57:77:ee:
         6d:92:5f:a7:3b:13:97:b5:af:80:a1:40:de:cb:cd:72:8d:e7:
         ab:fb:c0:31
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTFYVTCfYJBy8tvo37fJJSwPbQJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURFQUE0NzI5RTdFNURDNjc4ODJCRTIzMDVGNkI4RUI4
NkI1NEQ1NzAeFw0yNDAxMDIxNjI0NDRaFw0yNDEyMzExNjI5NDRaMDMxMTAvBgNV
BAMTKEZDREY2NThFQUUzNEIyNUQxOEIyQjgwRTNDMUUwRTlDNEEyRjcwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVhzRWDqaKAx5k+GHV+7N2umI
UA/Z/hpxBxy/FhY9a45MauJX4UNBDIxsUBrthjPbWRAfLHewBUgTGvBD6DPAu9EV
13eVQK8kYsdmxVbWIVRPDgatBiG5RTGaozP8GcH2rVNynV+Vk9gxYBFnI4bVlGe1
9tx2uPDbiFAHXVLtq3AhtgSiDwAUhgep4xXjjGFAtGyO1XcR38y0jvdvvt8bQthT
ySD0X1nsd3C8IIelS/jhqeESyWuNuU8FaHl9doRNg4MZLs6VHTYcLvnUZLDudqoI
i4i+COC6dTBxlrkT4TCSvP10+lec0loZyqM7s8J3aLFpK7I00RlyuekllBj7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/N9ljq40sl0YsrgOPB4OnEovcH4wHwYDVR0j
BBgwFoAUneqkcp5+XcZ4gr4jBfa464a1TVcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTNvQmloMWVQWUhlNTJpeUZvRjUxam1CQUpTZGt5MlVVSHg3Q2V3RkFM
R1MvMC85REVBQTQ3MjlFN0U1REM2Nzg4MkJFMjMwNUY2QjhFQjg2QjU0RDU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlERUFBNDcyOUU3RTVEQzY3
ODgyQkUyMzA1RjZCOEVCODZCNTRENTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Uzb0JpaDFlUFlIZTUyaXlGb0Y1MWptQkFKU2RreTJVVUh4N0Nld0ZBTEdTLzAv
MzQzNTJlMzEzODM5MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTM1
MzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi29CDANBgkqhkiG9w0BAQsFAAOCAQEAL5eFZkSAMja6
D16DGEyw7Yu4MwxeuAH2VnVRqbcBYoieGdk3IsI8z3yXfH7iS/Jc1fAKxFM8GrTM
uH89rESN9h5vvBjLCa3c4dUfcdUT1y7cdRPN71B4PC/YeS4uFUlU9ZfulcTurX8A
fO+16yewGFey83mw8IJRUlP9nngA3cKB8zhp/PXWuxjiOeyw+0B8A0aDpFUXr0lj
1KrvJg2mRP+xH/sKDbATthIz50+rpn3mOJvqULz2J30aRJC2FXgzopxuz5d1K1ZZ
l3kKEYalnIgQIKdqGGxUJHdh6NDC6i7Pr24ZucrDV3fubZJfpzsTl7WvgKFA3svN
co3nq/vAMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:41 2024 by rpki-client on console-ams.rpki-client.org