Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
File:                     34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa (raw, json)
Hash identifier:          k6eDwDc1w5G55OxzcO1X5cWcdttzEckISp+bwoam8Lg=
Subject key identifier:   96:7C:07:E0:EE:87:16:C7:40:6B:F0:6A:47:9C:E9:C7:74:BC:E4:9F
Certificate issuer:       /CN=38CB8780348540E936E47924E01C69A24F8C15DE
Certificate serial:       530CA48DE274339FE5C195AEF4EE6572B63F546E
Authority key identifier: 38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa
Signing time:             Mon 01 Apr 2024 19:43:55 +0000
ROA not before:           Mon 01 Apr 2024 19:38:55 +0000
ROA not after:            Mon 31 Mar 2025 19:43:55 +0000
asID:                     268452
IP address blocks:        45.160.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0c:a4:8d:e2:74:33:9f:e5:c1:95:ae:f4:ee:65:72:b6:3f:54:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38CB8780348540E936E47924E01C69A24F8C15DE
        Validity
            Not Before: Apr  1 19:38:55 2024 GMT
            Not After : Mar 31 19:43:55 2025 GMT
        Subject: CN=967C07E0EE8716C7406BF06A479CE9C774BCE49F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:20:f0:9b:53:66:a5:97:d7:a0:0c:79:22:
                    74:33:ab:69:4a:0d:cb:69:a9:bf:ba:2a:7b:a4:1e:
                    70:ee:19:55:6c:e2:77:ba:60:33:c9:a2:8a:80:3e:
                    f0:f9:8d:1e:2d:de:fd:5c:03:ab:0a:b0:d7:0e:83:
                    a7:19:33:ea:0d:c7:df:21:48:fe:d8:42:5a:a3:f0:
                    4a:80:85:0a:47:40:ad:02:aa:4c:f1:ce:39:6d:ac:
                    a4:4b:fe:6a:df:e7:a3:68:e5:8b:60:5d:aa:17:ff:
                    37:7f:6f:c1:a7:5e:33:67:fb:20:36:ee:cd:6d:3e:
                    f7:cf:5f:3e:aa:10:e1:6a:78:1f:0b:49:0b:c7:d1:
                    52:18:10:28:34:db:2c:6e:65:17:99:a1:cd:b9:d6:
                    c5:4e:03:b9:d2:80:56:b4:5f:5b:16:9f:84:3f:bc:
                    63:a9:8d:ec:0c:18:96:42:dd:14:49:94:7d:1c:ce:
                    3d:de:29:d5:d3:7d:c7:ab:f2:bb:a4:26:7c:c4:52:
                    1f:97:6d:90:4f:cc:f4:56:cf:f4:82:54:93:12:ff:
                    e5:15:37:6c:43:aa:31:d7:a6:eb:8d:8e:33:e2:f5:
                    7b:98:6b:25:40:89:ea:9e:2d:3f:79:c1:55:e5:5c:
                    c4:ba:fb:f9:09:7b:14:f0:81:80:fd:e3:e3:de:50:
                    c5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:07:E0:EE:87:16:C7:40:6B:F0:6A:47:9C:E9:C7:74:BC:E4:9F
            X509v3 Authority Key Identifier:
                keyid:38:CB:87:80:34:85:40:E9:36:E4:79:24:E0:1C:69:A2:4F:8C:15:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/38CB8780348540E936E47924E01C69A24F8C15DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38CB8780348540E936E47924E01C69A24F8C15DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHH9siAgC96HF2XNPY62YtVPMZHHL31221CDn8cXJf35/0/34352e3136302e3234342e302f32322d3234203d3e20323638343532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:1e:68:52:f4:fa:db:a7:ff:7e:b9:f0:dd:c1:09:85:ca:a6:
         73:24:94:49:f9:b7:76:84:72:63:f2:9e:10:74:c8:34:ab:f1:
         e1:8d:5f:90:bb:ba:70:fa:21:2d:b5:dd:d9:cb:52:fc:d4:7f:
         fc:60:ce:d7:6d:c2:7a:54:ad:56:76:31:99:47:e0:66:67:f5:
         4b:34:14:ae:b3:15:02:bc:89:9c:f8:07:90:12:ad:d5:0a:7f:
         90:00:86:f7:9e:ac:6e:84:90:bb:fe:44:4a:26:6e:0b:11:67:
         9c:37:ac:6e:dd:67:df:c6:a0:e6:c1:78:34:de:e7:5a:c2:a9:
         44:fa:b7:ad:7e:a4:2d:c9:f0:6b:68:de:7a:20:02:88:b3:08:
         cb:4b:ed:49:bf:1c:d0:75:17:90:24:05:65:04:50:a2:df:04:
         92:57:73:db:15:62:aa:50:00:72:98:6e:9b:5d:5e:5b:d3:9a:
         58:e7:3f:16:12:46:1a:31:d2:db:56:89:cf:9b:7b:d2:93:6a:
         80:3b:a2:e2:39:71:4c:ef:db:8d:6b:5b:b6:0c:a4:39:46:77:
         95:12:b3:1b:a5:ca:12:a6:26:57:29:d4:0c:d2:d5:19:a4:0a:
         d4:01:b6:b6:ba:e9:2d:82:05:e7:48:25:b8:50:85:a6:36:32:
         dc:02:c8:40
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUwykjeJ0M5/lwZWu9O5lcrY/VG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhDQjg3ODAzNDg1NDBFOTM2RTQ3OTI0RTAxQzY5QTI0
RjhDMTVERTAeFw0yNDA0MDExOTM4NTVaFw0yNTAzMzExOTQzNTVaMDMxMTAvBgNV
BAMTKDk2N0MwN0UwRUU4NzE2Qzc0MDZCRjA2QTQ3OUNFOUM3NzRCQ0U0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC59iDwm1NmpZfXoAx5InQzq2lK
Dctpqb+6KnukHnDuGVVs4ne6YDPJooqAPvD5jR4t3v1cA6sKsNcOg6cZM+oNx98h
SP7YQlqj8EqAhQpHQK0CqkzxzjltrKRL/mrf56No5YtgXaoX/zd/b8GnXjNn+yA2
7s1tPvfPXz6qEOFqeB8LSQvH0VIYECg02yxuZReZoc251sVOA7nSgFa0X1sWn4Q/
vGOpjewMGJZC3RRJlH0czj3eKdXTfcer8rukJnzEUh+XbZBPzPRWz/SCVJMS/+UV
N2xDqjHXpuuNjjPi9XuYayVAieqeLT95wVXlXMS6+/kJexTwgYD94+PeUMVBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlnwH4O6HFsdAa/BqR5zpx3S85J8wHwYDVR0j
BBgwFoAUOMuHgDSFQOk25Hkk4Bxpok+MFd4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRkhIOXNpQWdDOTZIRjJYTlBZNjJZdFZQTVpISEwzMTIyMUNEbjhjWEpm
MzUvMC8zOENCODc4MDM0ODU0MEU5MzZFNDc5MjRFMDFDNjlBMjRGOEMxNURFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4Q0I4NzgwMzQ4NTQwRTkz
NkU0NzkyNEUwMUM2OUEyNEY4QzE1REUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZISDlzaUFnQzk2SEYyWE5QWTYyWXRWUE1aSEhMMzEyMjFDRG44Y1hKZjM1LzAv
MzQzNTJlMzEzNjMwMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoPQwDQYJKoZIhvcNAQELBQADggEBAKoeaFL0
+tun/3658N3BCYXKpnMklEn5t3aEcmPynhB0yDSr8eGNX5C7unD6IS213dnLUvzU
f/xgztdtwnpUrVZ2MZlH4GZn9Us0FK6zFQK8iZz4B5ASrdUKf5AAhveerG6EkLv+
REombgsRZ5w3rG7dZ9/GoObBeDTe51rCqUT6t61+pC3J8Gto3nogAoizCMtL7Um/
HNB1F5AkBWUEUKLfBJJXc9sVYqpQAHKYbptdXlvTmljnPxYSRhox0ttWic+be9KT
aoA7ouI5cUzv241rW7YMpDlGd5USsxulyhKmJlcp1AzS1RmkCtQBtra66S2CBedI
JbhQhaY2MtwCyEA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org