Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa
File:                     34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa (raw, json)
Hash identifier:          o7uFS1jKrCkhnG5F/7/DfP/3cDGL0ChcdwoNmbMzVaI=
Subject key identifier:   56:1B:E9:12:85:3C:EF:D9:67:C0:F4:A9:D7:90:4E:41:EF:7F:6C:DC
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       2DD8ED43501ADDCCD64975AEB73DF48207BBDD92
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa
Signing time:             Thu 21 Sep 2023 11:27:20 +0000
ROA not before:           Thu 21 Sep 2023 11:22:20 +0000
ROA not after:            Thu 19 Sep 2024 11:27:20 +0000
asID:                     268364
IP address blocks:        45.238.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d8:ed:43:50:1a:dd:cc:d6:49:75:ae:b7:3d:f4:82:07:bb:dd:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Sep 21 11:22:20 2023 GMT
            Not After : Sep 19 11:27:20 2024 GMT
        Subject: CN=561BE912853CEFD967C0F4A9D7904E41EF7F6CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:0c:48:82:a7:2d:18:61:f1:80:6c:ee:e2:
                    aa:56:1a:18:b5:0b:5a:e5:e3:d0:84:ad:fc:99:6b:
                    a5:c4:ce:16:24:18:3f:9b:a2:49:e9:53:f4:d6:ee:
                    eb:9b:4a:19:fe:8e:a0:e9:69:4f:79:f4:b1:3c:41:
                    15:57:cd:30:22:69:22:77:04:c6:46:32:7c:1e:d7:
                    b0:a8:2c:ee:50:0e:4a:64:ed:9c:6a:1f:db:02:43:
                    d6:28:c1:46:97:cf:f8:12:a5:af:1d:5e:02:0b:7d:
                    83:9a:a4:27:59:e2:80:29:b4:9d:d8:06:cf:68:ff:
                    47:02:a4:b6:f9:33:97:41:be:6a:47:b3:e5:84:38:
                    e2:20:7b:39:71:0c:a7:25:1b:57:15:22:b0:1e:d7:
                    32:f9:31:8c:26:ce:8d:db:c3:86:9a:01:5a:fe:52:
                    0e:47:10:10:4d:6f:76:0c:d9:31:49:e9:f5:05:7c:
                    cb:6d:db:94:1a:c4:2c:53:0c:45:f6:5f:e9:b7:6e:
                    84:90:65:2e:9d:42:51:99:a2:b8:88:60:d1:13:6d:
                    c9:86:cd:33:08:a0:49:a3:ef:5b:c3:49:7c:7b:6f:
                    41:16:48:c5:62:0a:c0:6f:29:e4:75:b8:38:d6:47:
                    92:a6:76:b2:ca:45:25:ca:db:52:f5:d2:d8:e8:c5:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1B:E9:12:85:3C:EF:D9:67:C0:F4:A9:D7:90:4E:41:EF:7F:6C:DC
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/34352e3233382e3234322e302f32332d3233203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:81:e3:f1:b2:51:78:00:f3:20:8f:c8:93:ef:ab:1b:48:14:
         8d:17:ca:64:e7:87:f0:8b:de:8c:6a:8a:a4:3e:96:5e:52:30:
         8a:d4:a3:43:66:fe:ed:3c:27:ff:21:78:df:d7:4d:30:26:3d:
         70:b6:fc:9f:30:32:c0:72:3f:d2:9f:c2:c5:97:9c:fe:bb:99:
         04:e0:cd:86:d4:eb:a2:f7:bd:a8:66:fd:e4:6d:0a:21:ef:39:
         61:8d:91:fc:8f:fb:25:12:be:c3:a9:9e:ea:6b:d9:1c:18:b1:
         30:a5:8b:49:71:b9:e6:ac:55:e6:ec:bd:e5:55:61:d1:21:90:
         b5:dc:cc:4a:0f:0f:2a:41:bd:45:8d:61:c6:1b:5a:7a:74:79:
         93:07:c2:4d:1c:03:83:8a:74:b4:0e:eb:c7:fc:f0:f2:f4:fb:
         ad:7c:01:0d:d5:08:7b:67:98:fe:c8:3d:00:03:11:59:24:06:
         de:ee:34:6e:0d:c6:23:d9:aa:fb:75:f1:10:94:ff:80:80:cc:
         c6:64:85:62:f5:45:5f:25:0f:e2:75:10:33:57:13:55:a0:51:
         38:9b:47:12:35:c2:df:07:91:f5:ee:20:e8:8a:65:58:f3:e2:
         94:28:43:42:4d:e0:1a:07:b1:83:b7:54:d7:56:a5:d6:1a:3d:
         da:6b:8a:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULdjtQ1Aa3czWSXWutz30gge73ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JDMzQ4NERCRkYwMkI4NjcxQjM5N0FBNDI3N0Q2QzQx
NkZBQkY3QjAeFw0yMzA5MjExMTIyMjBaFw0yNDA5MTkxMTI3MjBaMDMxMTAvBgNV
BAMTKDU2MUJFOTEyODUzQ0VGRDk2N0MwRjRBOUQ3OTA0RTQxRUY3RjZDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeWgxIgqctGGHxgGzu4qpWGhi1
C1rl49CErfyZa6XEzhYkGD+boknpU/TW7uubShn+jqDpaU959LE8QRVXzTAiaSJ3
BMZGMnwe17CoLO5QDkpk7ZxqH9sCQ9YowUaXz/gSpa8dXgILfYOapCdZ4oAptJ3Y
Bs9o/0cCpLb5M5dBvmpHs+WEOOIgezlxDKclG1cVIrAe1zL5MYwmzo3bw4aaAVr+
Ug5HEBBNb3YM2TFJ6fUFfMtt25QaxCxTDEX2X+m3boSQZS6dQlGZoriIYNETbcmG
zTMIoEmj71vDSXx7b0EWSMViCsBvKeR1uDjWR5KmdrLKRSXK21L10tjoxfP5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVhvpEoU879lnwPSp15BOQe9/bNwwHwYDVR0j
BBgwFoAUO8NITb/wK4Zxs5eqQnfWxBb6v3swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDFoRTdpeHB1dEZOa3o3VGlrTmlMZXFuV2NTRW5pb0VpR0pTa3dIWTNa
QkwvMC8zQkMzNDg0REJGRjAyQjg2NzFCMzk3QUE0Mjc3RDZDNDE2RkFCRjdCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNCQzM0ODREQkZGMDJCODY3
MUIzOTdBQTQyNzdENkM0MTZGQUJGN0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gxaEU3aXhwdXRGTmt6N1Rpa05pTGVxbldjU0VuaW9FaUdKU2t3SFkzWkJMLzAv
MzQzNTJlMzIzMzM4MmUzMjM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7vIwDQYJKoZIhvcNAQELBQADggEBABiB4/Gy
UXgA8yCPyJPvqxtIFI0XymTnh/CL3oxqiqQ+ll5SMIrUo0Nm/u08J/8heN/XTTAm
PXC2/J8wMsByP9KfwsWXnP67mQTgzYbU66L3vahm/eRtCiHvOWGNkfyP+yUSvsOp
nupr2RwYsTCli0lxueasVebsveVVYdEhkLXczEoPDypBvUWNYcYbWnp0eZMHwk0c
A4OKdLQO68f88PL0+618AQ3VCHtnmP7IPQADEVkkBt7uNG4NxiPZqvt18RCU/4CA
zMZkhWL1RV8lD+J1EDNXE1WgUTibRxI1wt8HkfXuIOiKZVjz4pQoQ0JN4BoHsYO3
VNdWpdYaPdpriu8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:32 2024 by rpki-client on console-ams.rpki-client.org