Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3332203d3e20323639323538.roa
File:                     34352e3233392e3134302e302f32342d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          49zeZpXqkzu2ajb7gghxBHI4R5M4CaL08wWQZLhPaNE=
Subject key identifier:   BC:25:B8:1F:4C:04:20:0C:75:50:94:73:4E:37:BE:CF:0D:2C:95:87
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       68DBDC1B74B697393C91BB9492C517A8F372FB38
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3332203d3e20323639323538.roa
Signing time:             Wed 31 May 2023 00:56:16 +0000
ROA not before:           Wed 31 May 2023 00:51:16 +0000
ROA not after:            Wed 29 May 2024 00:56:16 +0000
asID:                     269258
IP address blocks:        45.239.140.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:db:dc:1b:74:b6:97:39:3c:91:bb:94:92:c5:17:a8:f3:72:fb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 31 00:51:16 2023 GMT
            Not After : May 29 00:56:16 2024 GMT
        Subject: CN=BC25B81F4C04200C755094734E37BECF0D2C9587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:cd:73:6f:02:a5:71:83:cb:8d:d3:f7:3b:
                    06:55:3d:81:e9:d7:e5:db:f0:0c:29:2f:bc:ba:a7:
                    75:30:f2:59:ef:53:94:3b:24:22:7a:a4:5a:78:12:
                    44:f7:4c:73:ad:a3:7c:2e:b6:79:cb:ea:02:24:d0:
                    ea:fa:fd:54:d7:61:7c:92:9c:00:c6:eb:b0:e5:68:
                    56:ae:64:12:4b:8f:3b:0f:8c:75:80:98:10:a2:bb:
                    4c:b7:de:68:02:8f:e8:96:5a:f1:7b:20:78:73:33:
                    0f:7d:cb:e3:41:1f:ed:73:70:58:9f:fd:e4:9b:4c:
                    44:3a:1d:82:81:1e:eb:5f:98:54:1e:4c:28:d7:8f:
                    2b:35:b1:dc:41:a3:bb:4c:26:74:1e:a1:16:23:aa:
                    d6:0d:8a:69:8a:8e:cf:e4:ab:c0:91:98:77:c7:4d:
                    20:06:8d:0c:07:e9:8d:25:9d:fb:aa:1b:b6:dd:94:
                    25:70:b5:d5:7d:e1:d9:8c:23:f9:ba:58:d4:ed:1b:
                    b1:1b:17:bf:ce:e7:15:19:a8:0e:42:c3:f3:ae:c3:
                    19:72:85:92:aa:c9:11:bb:93:59:76:19:5a:f9:f8:
                    11:2a:cc:f5:5b:c7:35:b9:c1:4a:6e:2b:79:f3:ec:
                    70:d9:87:5f:93:8d:f4:f2:b7:cb:22:e2:4a:1b:53:
                    31:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:25:B8:1F:4C:04:20:0C:75:50:94:73:4E:37:BE:CF:0D:2C:95:87
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134302e302f32342d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:06:18:a4:0f:31:3e:79:04:d4:c3:e0:b4:af:af:46:86:4f:
         a8:39:a7:9f:f4:45:3b:18:4e:59:f0:63:11:9d:5f:23:f5:cf:
         a5:93:73:fb:5e:33:11:3d:9f:e1:a2:be:cc:46:36:f8:e3:b6:
         96:eb:65:6f:72:8d:67:55:20:bf:1c:de:87:bb:e6:77:0f:70:
         5c:84:a7:a5:c7:1e:85:cf:f3:c1:1f:c8:3c:a6:e3:58:5f:ad:
         6b:8b:62:b2:68:27:1e:d2:34:1e:a4:7e:c1:f3:ff:ae:0a:0a:
         45:65:7d:a6:16:14:a9:74:71:f2:62:59:53:53:88:b8:16:a3:
         7c:1c:e4:ce:a6:61:6d:44:02:50:4e:08:af:d2:5a:19:aa:76:
         8d:10:87:a1:1d:5d:08:0f:ce:84:54:5d:96:5f:4b:2f:cb:64:
         39:a7:b9:a0:f7:22:28:1f:45:21:7a:f2:24:47:27:c6:25:7f:
         07:5e:93:59:64:25:eb:3e:39:68:cc:d6:a2:e3:5e:8d:7e:fd:
         04:5c:23:e1:22:44:dc:c1:b1:61:48:8c:36:c9:d2:28:a1:66:
         fa:90:e1:c9:ba:85:70:3e:e1:6d:4a:48:c3:2b:a0:c3:28:19:
         c6:aa:dd:3a:9f:c8:98:2f:af:69:3f:c2:13:3a:d9:d0:de:68:
         72:9f:51:13
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaNvcG3S2lzk8kbuUksUXqPNy+zgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1NjIyNkEyMjE3QTY0MjExRTUyRDlFQTk1MjdGQUFG
MTU4NzE2MDAeFw0yMzA1MzEwMDUxMTZaFw0yNDA1MjkwMDU2MTZaMDMxMTAvBgNV
BAMTKEJDMjVCODFGNEMwNDIwMEM3NTUwOTQ3MzRFMzdCRUNGMEQyQzk1ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg4s1zbwKlcYPLjdP3OwZVPYHp
1+Xb8AwpL7y6p3Uw8lnvU5Q7JCJ6pFp4EkT3THOto3wutnnL6gIk0Or6/VTXYXyS
nADG67DlaFauZBJLjzsPjHWAmBCiu0y33mgCj+iWWvF7IHhzMw99y+NBH+1zcFif
/eSbTEQ6HYKBHutfmFQeTCjXjys1sdxBo7tMJnQeoRYjqtYNimmKjs/kq8CRmHfH
TSAGjQwH6Y0lnfuqG7bdlCVwtdV94dmMI/m6WNTtG7EbF7/O5xUZqA5Cw/Ouwxly
hZKqyRG7k1l2GVr5+BEqzPVbxzW5wUpuK3nz7HDZh1+TjfTyt8si4kobUzGbAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvCW4H0wEIAx1UJRzTje+zw0slYcwHwYDVR0j
BBgwFoAUPFYiaiIXpkIR5S2eqVJ/qvFYcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHRmeHJ3UFUxRllNUXBWTGZyeHk0MWVYc3FRZ3RvUWR0UTkyV2VGN2Y1
MXUvMC8zQzU2MjI2QTIyMTdBNjQyMTFFNTJEOUVBOTUyN0ZBQUYxNTg3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNTYyMjZBMjIxN0E2NDIx
MUU1MkQ5RUE5NTI3RkFBRjE1ODcxNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0Znhyd1BVMUZZTVFwVkxmcnh5NDFlWHNxUWd0b1FkdFE5MldlRjdmNTF1LzAv
MzQzNTJlMzIzMzM5MmUzMTM0MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzkzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt74wwDQYJKoZIhvcNAQELBQADggEBAGYGGKQP
MT55BNTD4LSvr0aGT6g5p5/0RTsYTlnwYxGdXyP1z6WTc/teMxE9n+GivsxGNvjj
tpbrZW9yjWdVIL8c3oe75ncPcFyEp6XHHoXP88EfyDym41hfrWuLYrJoJx7SNB6k
fsHz/64KCkVlfaYWFKl0cfJiWVNTiLgWo3wc5M6mYW1EAlBOCK/SWhmqdo0Qh6Ed
XQgPzoRUXZZfSy/LZDmnuaD3IigfRSF68iRHJ8Ylfwdek1lkJes+OWjM1qLjXo1+
/QRcI+EiRNzBsWFIjDbJ0iihZvqQ4cm6hXA+4W1KSMMroMMoGcaq3TqfyJgvr2k/
whM62dDeaHKfURM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org