Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134312e302f32342d3332203d3e20323639323538.roa
File:                     34352e3233392e3134312e302f32342d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          G7xBcyo/XmlENQF/N2CRhzxwBv4xHPpK+ttF+tC/vU4=
Subject key identifier:   41:78:E8:7F:4D:BA:93:D0:57:12:82:D0:48:0D:A4:03:55:3B:31:4F
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       7D9C2D38D3D37F35CB99CF7DC4183E0F37548356
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134312e302f32342d3332203d3e20323639323538.roa
Signing time:             Wed 31 May 2023 00:56:36 +0000
ROA not before:           Wed 31 May 2023 00:51:36 +0000
ROA not after:            Wed 29 May 2024 00:56:36 +0000
asID:                     269258
IP address blocks:        45.239.141.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9c:2d:38:d3:d3:7f:35:cb:99:cf:7d:c4:18:3e:0f:37:54:83:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 31 00:51:36 2023 GMT
            Not After : May 29 00:56:36 2024 GMT
        Subject: CN=4178E87F4DBA93D0571282D0480DA403553B314F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:22:f0:4d:12:8a:57:81:95:4b:c0:9c:e2:
                    07:8f:ea:22:62:5f:92:b4:c1:d2:cb:b9:b8:cc:34:
                    a1:47:bd:d7:0b:25:c5:e6:40:1c:42:0e:48:ea:f8:
                    26:44:01:a2:a5:45:9e:46:08:80:ea:8c:52:5b:de:
                    04:8c:90:61:47:c1:bc:6a:fe:a4:d5:c5:dd:0f:73:
                    91:a4:c7:22:97:99:2e:02:4a:23:3c:1b:ab:c4:9a:
                    c7:bd:89:04:ac:a7:a5:bc:0e:2f:b0:c5:9b:55:55:
                    a5:6c:d3:06:8e:ba:4a:77:bf:a8:aa:6d:c8:14:39:
                    42:f9:22:db:4d:bc:d6:c0:48:9a:0d:47:83:fb:98:
                    94:fb:71:7a:b1:63:dd:36:47:50:ee:c9:97:d5:8e:
                    6a:f6:10:29:9e:9f:a4:96:20:27:6a:4e:4e:9e:98:
                    c7:d1:67:f8:00:5a:16:80:7c:79:21:4b:1e:18:f1:
                    bf:bf:63:a9:c1:87:c7:96:01:27:a4:d5:5d:ce:70:
                    43:c9:98:a6:d8:f5:8d:4b:3f:ab:ee:8d:04:50:50:
                    83:6d:9f:e9:c3:6e:6e:4b:3d:95:bb:05:db:77:fb:
                    63:22:8b:05:44:13:34:8c:5b:e6:62:ec:9c:97:9a:
                    ff:71:90:83:08:01:f3:d7:d1:d4:4e:76:e1:e7:6e:
                    05:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:E8:7F:4D:BA:93:D0:57:12:82:D0:48:0D:A4:03:55:3B:31:4F
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134312e302f32342d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:66:e8:54:8d:39:df:9f:1e:d6:2e:f3:2c:93:4f:62:38:27:
         82:e1:57:07:17:e4:31:71:2f:84:5e:1b:3c:f4:95:0f:f0:d4:
         f8:67:e1:56:c4:41:df:2b:23:91:01:77:c8:aa:2a:fc:94:24:
         63:3e:06:89:78:59:cb:a5:26:1f:0a:0c:88:48:a4:2d:54:21:
         aa:e2:db:52:e9:7a:0a:75:09:58:ec:62:c7:fe:10:19:d0:90:
         ab:74:9d:f3:04:9e:4e:89:2c:64:a5:43:9e:a2:c9:87:1a:df:
         b6:b9:12:b7:53:a0:62:fa:04:d0:1b:83:95:9e:71:84:f3:2c:
         88:8c:6b:9f:ac:7f:71:46:26:4c:4a:f5:32:0d:56:e8:10:58:
         19:2b:ef:e3:cd:21:75:cd:06:de:7a:b2:bb:50:14:1f:e0:e4:
         cc:08:bf:bf:5f:29:79:13:c8:c4:0c:a9:66:84:59:95:4f:f0:
         da:53:39:29:63:0e:ed:7e:13:ba:53:42:1f:d9:71:fd:d8:65:
         9f:ca:85:73:85:56:fa:5f:78:e7:c6:56:5e:17:5a:f6:a5:c3:
         b1:58:1a:76:0b:07:25:d1:04:30:6a:e3:ca:28:00:8c:5a:a7:
         27:f7:6f:09:d4:dc:1b:02:14:4b:74:fb:f4:24:12:66:40:3d:
         9e:f8:e3:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfZwtONPTfzXLmc99xBg+DzdUg1YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1NjIyNkEyMjE3QTY0MjExRTUyRDlFQTk1MjdGQUFG
MTU4NzE2MDAeFw0yMzA1MzEwMDUxMzZaFw0yNDA1MjkwMDU2MzZaMDMxMTAvBgNV
BAMTKDQxNzhFODdGNERCQTkzRDA1NzEyODJEMDQ4MERBNDAzNTUzQjMxNEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uSLwTRKKV4GVS8Cc4geP6iJi
X5K0wdLLubjMNKFHvdcLJcXmQBxCDkjq+CZEAaKlRZ5GCIDqjFJb3gSMkGFHwbxq
/qTVxd0Pc5GkxyKXmS4CSiM8G6vEmse9iQSsp6W8Di+wxZtVVaVs0waOukp3v6iq
bcgUOUL5IttNvNbASJoNR4P7mJT7cXqxY902R1DuyZfVjmr2ECmen6SWICdqTk6e
mMfRZ/gAWhaAfHkhSx4Y8b+/Y6nBh8eWASek1V3OcEPJmKbY9Y1LP6vujQRQUINt
n+nDbm5LPZW7Bdt3+2MiiwVEEzSMW+Zi7JyXmv9xkIMIAfPX0dROduHnbgWPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQXjof026k9BXEoLQSA2kA1U7MU8wHwYDVR0j
BBgwFoAUPFYiaiIXpkIR5S2eqVJ/qvFYcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHRmeHJ3UFUxRllNUXBWTGZyeHk0MWVYc3FRZ3RvUWR0UTkyV2VGN2Y1
MXUvMC8zQzU2MjI2QTIyMTdBNjQyMTFFNTJEOUVBOTUyN0ZBQUYxNTg3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNTYyMjZBMjIxN0E2NDIx
MUU1MkQ5RUE5NTI3RkFBRjE1ODcxNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0Znhyd1BVMUZZTVFwVkxmcnh5NDFlWHNxUWd0b1FkdFE5MldlRjdmNTF1LzAv
MzQzNTJlMzIzMzM5MmUzMTM0MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzkzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt740wDQYJKoZIhvcNAQELBQADggEBAAhm6FSN
Od+fHtYu8yyTT2I4J4LhVwcX5DFxL4ReGzz0lQ/w1Phn4VbEQd8rI5EBd8iqKvyU
JGM+Bol4WculJh8KDIhIpC1UIari21Lpegp1CVjsYsf+EBnQkKt0nfMEnk6JLGSl
Q56iyYca37a5ErdToGL6BNAbg5WecYTzLIiMa5+sf3FGJkxK9TINVugQWBkr7+PN
IXXNBt56srtQFB/g5MwIv79fKXkTyMQMqWaEWZVP8NpTOSljDu1+E7pTQh/Zcf3Y
ZZ/KhXOFVvpfeOfGVl4XWvalw7FYGnYLByXRBDBq48ooAIxapyf3bwnU3BsCFEt0
+/QkEmZAPZ7446Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org