Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa
File:                     34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa (raw, json)
Hash identifier:          yVITbN5Fx3h7PEh1WNlSkZbF0ybkpXVF72rm3QTKeMk=
Subject key identifier:   3E:84:8C:D6:43:13:F6:9D:F8:6E:2F:22:D6:10:D4:B6:4D:EF:81:E4
Certificate issuer:       /CN=027D8902566E7FEF90101053C0601032251D5D15
Certificate serial:       3C72A456BB848B57A691E088254395A07687C63D
Authority key identifier: 02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/027D8902566E7FEF90101053C0601032251D5D15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa
Signing time:             Tue 12 Sep 2023 19:14:19 +0000
ROA not before:           Tue 12 Sep 2023 19:09:19 +0000
ROA not after:            Tue 10 Sep 2024 19:14:19 +0000
asID:                     268473
IP address blocks:        45.161.202.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:72:a4:56:bb:84:8b:57:a6:91:e0:88:25:43:95:a0:76:87:c6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=027D8902566E7FEF90101053C0601032251D5D15
        Validity
            Not Before: Sep 12 19:09:19 2023 GMT
            Not After : Sep 10 19:14:19 2024 GMT
        Subject: CN=3E848CD64313F69DF86E2F22D610D4B64DEF81E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:bc:4d:9a:fe:d9:93:6c:c0:b0:13:ef:59:
                    a1:6d:9a:a0:4d:1d:88:09:3c:09:de:10:a6:31:36:
                    75:35:67:60:fb:93:d1:f0:67:b1:3d:66:7d:5a:b3:
                    26:da:02:35:98:ca:32:f5:f5:3c:bf:01:27:6d:2f:
                    07:b9:1d:d1:15:ce:4a:98:b6:c2:83:f3:e8:28:c2:
                    c5:43:a1:08:b8:4c:b9:0d:1d:59:f4:c5:45:49:b3:
                    06:bc:c0:63:e2:05:c8:47:87:55:72:71:be:41:f9:
                    7b:7a:5d:3a:36:8e:76:3a:b6:1b:a0:3a:3c:ac:7f:
                    02:d2:fb:c0:47:4f:2a:30:e6:0f:d8:42:79:0a:ae:
                    a8:3c:5f:b0:19:29:f3:c6:73:92:d1:a1:3f:5f:67:
                    26:0d:8c:d4:85:d0:be:f6:c7:3f:2a:a8:b2:0f:53:
                    5c:79:35:1a:ee:c3:75:10:a2:25:99:26:be:dc:31:
                    11:32:ef:b2:ac:a9:e3:f0:f2:fe:3b:ed:a3:2a:7b:
                    98:c7:a2:0d:4a:a9:92:ff:6e:80:ae:5b:b3:e0:2c:
                    39:6b:a3:f3:c5:e7:3f:fe:62:fd:c8:3f:fb:20:c4:
                    b4:af:f9:d6:b3:2c:ca:df:a2:d6:5d:f9:b8:f8:56:
                    9c:57:40:26:90:df:cd:99:22:74:9f:47:e3:05:43:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:84:8C:D6:43:13:F6:9D:F8:6E:2F:22:D6:10:D4:B6:4D:EF:81:E4
            X509v3 Authority Key Identifier:
                keyid:02:7D:89:02:56:6E:7F:EF:90:10:10:53:C0:60:10:32:25:1D:5D:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/027D8902566E7FEF90101053C0601032251D5D15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/027D8902566E7FEF90101053C0601032251D5D15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F91rBLmm6eTjPJviXVmB6qqgh7SFdxgfZMqmbFFGx4MG/0/34352e3136312e3230322e302f32342d3234203d3e20323638343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e6:6b:aa:f2:99:08:b8:f1:4d:3f:d9:2c:e6:21:ff:3a:00:
         bf:57:84:21:df:f5:1d:bc:af:98:85:3e:bc:3c:56:c3:79:2a:
         86:14:03:3e:c3:74:b9:a2:c9:49:56:07:43:b2:63:aa:a8:03:
         06:8c:f8:23:15:27:00:7a:b8:c9:93:83:3d:30:53:46:49:41:
         88:fe:72:a2:fa:02:29:26:68:72:64:ba:e5:c9:66:c1:97:d3:
         90:3b:36:69:44:44:54:33:52:94:c2:f5:06:14:e2:d1:52:49:
         70:61:04:b4:9c:40:9f:58:7c:16:d4:70:a5:28:0c:96:35:93:
         ea:b5:28:79:f4:b0:12:6c:fe:7e:b7:c7:ad:af:71:00:89:18:
         56:3c:81:0a:a8:e2:a3:d8:d6:c5:af:20:a8:e2:aa:f7:01:7d:
         8d:5e:b6:a0:82:e0:ea:e5:9d:3d:b0:4f:0a:53:f8:a7:d7:f3:
         84:5e:42:6a:6f:5b:53:5c:1f:40:ef:6b:76:b2:c3:bf:be:9c:
         6b:cf:9d:24:78:e9:c6:58:65:3d:0c:dc:95:d6:69:2e:9e:43:
         93:6d:c9:e4:f9:13:d5:2f:3c:01:6b:ee:5d:19:07:0a:2e:1f:
         97:26:52:2c:3f:d2:fc:e0:03:1b:74:60:eb:54:7a:b3:56:ba:
         6f:0c:cb:b7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPHKkVruEi1emkeCIJUOVoHaHxj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI3RDg5MDI1NjZFN0ZFRjkwMTAxMDUzQzA2MDEwMzIy
NTFENUQxNTAeFw0yMzA5MTIxOTA5MTlaFw0yNDA5MTAxOTE0MTlaMDMxMTAvBgNV
BAMTKDNFODQ4Q0Q2NDMxM0Y2OURGODZFMkYyMkQ2MTBENEI2NERFRjgxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0irxNmv7Zk2zAsBPvWaFtmqBN
HYgJPAneEKYxNnU1Z2D7k9HwZ7E9Zn1asybaAjWYyjL19Ty/ASdtLwe5HdEVzkqY
tsKD8+gowsVDoQi4TLkNHVn0xUVJswa8wGPiBchHh1Vycb5B+Xt6XTo2jnY6thug
OjysfwLS+8BHTyow5g/YQnkKrqg8X7AZKfPGc5LRoT9fZyYNjNSF0L72xz8qqLIP
U1x5NRruw3UQoiWZJr7cMREy77KsqePw8v477aMqe5jHog1KqZL/boCuW7PgLDlr
o/PF5z/+Yv3IP/sgxLSv+dazLMrfotZd+bj4VpxXQCaQ382ZInSfR+MFQ4LhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPoSM1kMT9p34bi8i1hDUtk3vgeQwHwYDVR0j
BBgwFoAUAn2JAlZuf++QEBBTwGAQMiUdXRUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjkxckJMbW02ZVRqUEp2aVhWbUI2cXFnaDdTRmR4Z2ZaTXFtYkZGR3g0
TUcvMC8wMjdEODkwMjU2NkU3RkVGOTAxMDEwNTNDMDYwMTAzMjI1MUQ1RDE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyN0Q4OTAyNTY2RTdGRUY5
MDEwMTA1M0MwNjAxMDMyMjUxRDVEMTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y5MXJCTG1tNmVUalBKdmlYVm1CNnFxZ2g3U0ZkeGdmWk1xbWJGRkd4NE1HLzAv
MzQzNTJlMzEzNjMxMmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtocowDQYJKoZIhvcNAQELBQADggEBAAHma6ry
mQi48U0/2SzmIf86AL9XhCHf9R28r5iFPrw8VsN5KoYUAz7DdLmiyUlWB0OyY6qo
AwaM+CMVJwB6uMmTgz0wU0ZJQYj+cqL6AikmaHJkuuXJZsGX05A7NmlERFQzUpTC
9QYU4tFSSXBhBLScQJ9YfBbUcKUoDJY1k+q1KHn0sBJs/n63x62vcQCJGFY8gQqo
4qPY1sWvIKjiqvcBfY1etqCC4OrlnT2wTwpT+KfX84ReQmpvW1NcH0Dva3ayw7++
nGvPnSR46cZYZT0M3JXWaS6eQ5NtyeT5E9UvPAFr7l0ZBwouH5cmUiw/0vzgAxt0
YOtUerNWum8My7c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org