Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3332203d3e20323639323538.roa
File:                     34352e3233392e3134332e302f32342d3332203d3e20323639323538.roa (raw, json)
Hash identifier:          hkj7Sf0RZsOQ6MA4i7l3url3iFNAid/vY9X7ojvMWno=
Subject key identifier:   10:48:3E:6C:69:37:50:E1:95:48:47:84:FC:F5:50:86:FA:1B:44:F5
Certificate issuer:       /CN=3C56226A2217A64211E52D9EA9527FAAF1587160
Certificate serial:       6ABE09FB03863927F4E61DB19D17B5D982F28CD2
Authority key identifier: 3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3332203d3e20323639323538.roa
Signing time:             Wed 31 May 2023 00:57:45 +0000
ROA not before:           Wed 31 May 2023 00:52:45 +0000
ROA not after:            Wed 29 May 2024 00:57:45 +0000
asID:                     269258
IP address blocks:        45.239.143.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:be:09:fb:03:86:39:27:f4:e6:1d:b1:9d:17:b5:d9:82:f2:8c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C56226A2217A64211E52D9EA9527FAAF1587160
        Validity
            Not Before: May 31 00:52:45 2023 GMT
            Not After : May 29 00:57:45 2024 GMT
        Subject: CN=10483E6C693750E195484784FCF55086FA1B44F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:c1:d9:ca:7e:87:21:05:93:20:40:a7:6d:
                    a0:34:16:5a:2d:ca:9f:8c:28:66:c8:d4:17:4d:34:
                    89:22:41:c1:c2:65:26:21:77:b1:76:ed:e3:08:a1:
                    34:da:9c:4f:e5:71:92:a3:54:82:81:7a:c1:45:e8:
                    c8:b3:60:19:03:50:fd:68:7b:d8:92:45:68:d0:9c:
                    8c:91:3b:da:5a:52:08:82:fc:da:55:2f:44:b1:23:
                    c9:97:f8:72:eb:84:76:14:62:3b:08:68:5d:26:19:
                    3e:8d:99:9e:0c:e0:4b:f3:f6:cd:ce:a4:84:9d:96:
                    84:45:27:13:86:dd:14:81:67:ef:16:1f:79:3f:3e:
                    eb:f4:4c:96:cc:fc:c6:fa:20:44:d9:2e:9e:6d:38:
                    69:87:9f:77:df:5a:6d:3c:5b:a4:97:5f:e2:5d:ce:
                    74:e9:c6:ce:3a:4b:d9:f1:32:48:a9:68:4c:82:b4:
                    ee:09:49:f4:20:6f:00:fc:54:7e:1a:ac:85:77:03:
                    9e:75:6d:7c:4e:8a:ef:3d:e8:29:07:22:77:45:2e:
                    a4:5d:dd:53:8a:f4:48:7d:57:51:53:34:47:65:21:
                    76:a0:fc:24:41:62:3c:f9:c7:9b:c4:45:67:9f:0f:
                    bd:07:ad:54:a0:2b:4f:cf:45:b4:3c:66:f3:a0:ec:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:48:3E:6C:69:37:50:E1:95:48:47:84:FC:F5:50:86:FA:1B:44:F5
            X509v3 Authority Key Identifier:
                keyid:3C:56:22:6A:22:17:A6:42:11:E5:2D:9E:A9:52:7F:AA:F1:58:71:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/3C56226A2217A64211E52D9EA9527FAAF1587160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C56226A2217A64211E52D9EA9527FAAF1587160.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HtfxrwPU1FYMQpVLfrxy41eXsqQgtoQdtQ92WeF7f51u/0/34352e3233392e3134332e302f32342d3332203d3e20323639323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3f:c2:aa:b4:0f:74:f4:42:3e:d5:d7:28:27:48:98:d7:6a:
         aa:bb:5c:62:eb:3c:7e:9f:59:c5:3a:2b:f2:a9:fb:e6:d6:88:
         5e:8a:37:e1:86:2b:67:a4:0c:12:65:9e:db:a5:84:20:69:71:
         cb:f7:de:52:35:01:ec:18:4e:4c:eb:1d:a7:4a:0a:4a:9b:5b:
         7f:50:ec:ca:cf:66:31:7f:07:93:3e:98:b7:1d:40:54:cd:4f:
         1c:56:30:a6:d9:ea:e8:52:ea:a7:11:ef:4c:35:c1:5c:3e:79:
         1c:f4:01:82:e2:65:b8:59:ea:c8:8b:84:99:9e:26:ec:73:d6:
         d2:51:db:52:3c:62:00:32:04:2c:4a:6c:a7:ac:f1:df:72:f0:
         2b:17:11:7a:bf:1f:ca:c7:91:bb:4e:7a:3e:14:e8:fd:11:2f:
         81:8d:79:77:fe:9f:f7:49:7f:f4:d7:f3:4b:a4:67:fc:a1:4f:
         00:95:f5:8a:c7:9c:e8:0d:a5:39:95:f0:18:62:85:b8:c5:cd:
         ae:59:d5:e9:53:71:39:67:e7:eb:61:a1:b6:28:f5:3b:b0:51:
         43:2d:b5:d2:89:95:a6:b3:98:93:a4:78:74:51:bd:0d:a5:2d:
         8c:c9:b7:42:c0:e1:2b:af:f6:69:7c:92:14:ed:95:15:be:e9:
         6c:51:cf:89
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUar4J+wOGOSf05h2xnRe12YLyjNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1NjIyNkEyMjE3QTY0MjExRTUyRDlFQTk1MjdGQUFG
MTU4NzE2MDAeFw0yMzA1MzEwMDUyNDVaFw0yNDA1MjkwMDU3NDVaMDMxMTAvBgNV
BAMTKDEwNDgzRTZDNjkzNzUwRTE5NTQ4NDc4NEZDRjU1MDg2RkExQjQ0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlS8HZyn6HIQWTIECnbaA0Flot
yp+MKGbI1BdNNIkiQcHCZSYhd7F27eMIoTTanE/lcZKjVIKBesFF6MizYBkDUP1o
e9iSRWjQnIyRO9paUgiC/NpVL0SxI8mX+HLrhHYUYjsIaF0mGT6NmZ4M4Evz9s3O
pISdloRFJxOG3RSBZ+8WH3k/Puv0TJbM/Mb6IETZLp5tOGmHn3ffWm08W6SXX+Jd
znTpxs46S9nxMkipaEyCtO4JSfQgbwD8VH4arIV3A551bXxOiu896CkHIndFLqRd
3VOK9Eh9V1FTNEdlIXag/CRBYjz5x5vERWefD70HrVSgK0/PRbQ8ZvOg7Eg5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEEg+bGk3UOGVSEeE/PVQhvobRPUwHwYDVR0j
BBgwFoAUPFYiaiIXpkIR5S2eqVJ/qvFYcWAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHRmeHJ3UFUxRllNUXBWTGZyeHk0MWVYc3FRZ3RvUWR0UTkyV2VGN2Y1
MXUvMC8zQzU2MjI2QTIyMTdBNjQyMTFFNTJEOUVBOTUyN0ZBQUYxNTg3MTYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzNDNTYyMjZBMjIxN0E2NDIx
MUU1MkQ5RUE5NTI3RkFBRjE1ODcxNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0h0Znhyd1BVMUZZTVFwVkxmcnh5NDFlWHNxUWd0b1FkdFE5MldlRjdmNTF1LzAv
MzQzNTJlMzIzMzM5MmUzMTM0MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzkzMjM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt748wDQYJKoZIhvcNAQELBQADggEBAE4/wqq0
D3T0Qj7V1ygnSJjXaqq7XGLrPH6fWcU6K/Kp++bWiF6KN+GGK2ekDBJlntulhCBp
ccv33lI1AewYTkzrHadKCkqbW39Q7MrPZjF/B5M+mLcdQFTNTxxWMKbZ6uhS6qcR
70w1wVw+eRz0AYLiZbhZ6siLhJmeJuxz1tJR21I8YgAyBCxKbKes8d9y8CsXEXq/
H8rHkbtOej4U6P0RL4GNeXf+n/dJf/TX80ukZ/yhTwCV9YrHnOgNpTmV8BhihbjF
za5Z1elTcTln5+thobYo9TuwUUMttdKJlaazmJOkeHRRvQ2lLYzJt0LA4Suv9ml8
khTtlRW+6WxRz4k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org