Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          3N+hddgKPuNwzzZ+vgzhi/ls4QJP4blpENR72bKGUqc=
Subject key identifier:   CE:C1:B3:7A:B1:17:33:56:42:69:B5:FE:7A:AE:7A:09:A0:16:32:63
Certificate issuer:       /CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
Certificate serial:       3D19659E258C72F07F9137E631A9EDE9363743C9
Authority key identifier: 33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
Signing time:             Mon 04 Dec 2023 18:46:50 +0000
ROA not before:           Mon 04 Dec 2023 18:41:50 +0000
ROA not after:            Mon 02 Dec 2024 18:46:50 +0000
asID:                     267035
IP address blocks:        45.227.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:19:65:9e:25:8c:72:f0:7f:91:37:e6:31:a9:ed:e9:36:37:43:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3306C7E72FEBE86DFD81FEBCE8EF03052858258D
        Validity
            Not Before: Dec  4 18:41:50 2023 GMT
            Not After : Dec  2 18:46:50 2024 GMT
        Subject: CN=CEC1B37AB11733564269B5FE7AAE7A09A0163263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:dd:d6:8c:41:61:21:4b:1f:6e:46:09:d3:
                    5a:ac:02:40:04:79:6e:aa:e2:6e:73:b9:b6:e2:f0:
                    e3:94:65:2a:36:94:18:84:dc:71:45:4f:9a:d9:05:
                    5a:ac:54:80:c1:db:86:c3:8c:78:b3:2f:5f:95:2b:
                    c2:2e:e4:7a:f9:bd:41:3d:1d:d3:72:fc:f9:e0:96:
                    55:b2:90:8c:60:bf:91:12:a2:93:d8:64:cc:1c:f4:
                    9e:ae:01:ca:9a:7e:d7:16:3d:8c:b2:51:9e:c9:bd:
                    c0:1f:f7:9b:ca:82:e8:fa:d9:20:0f:5b:56:e6:ee:
                    89:31:f3:d2:d0:73:78:15:a6:fc:08:97:15:60:9c:
                    62:c9:ca:f5:89:f2:d8:dc:db:61:59:89:1e:a2:d4:
                    96:43:d4:f0:78:bf:5d:91:a0:a2:b0:84:61:f4:89:
                    a7:40:66:0f:e3:a3:9e:fe:9d:21:7b:9a:10:1f:eb:
                    46:e1:0d:03:9b:1a:37:6d:4e:96:7c:be:83:d4:ab:
                    a9:8e:7d:63:95:6c:67:6a:f1:fa:c5:8d:6f:bd:72:
                    8d:3b:ca:c7:20:89:19:a6:66:d7:c8:2e:e3:5e:ab:
                    96:3f:9f:41:31:07:0d:25:84:e7:b8:6d:a7:8b:08:
                    66:ff:9d:22:d6:b6:de:16:73:f0:cd:1b:3b:26:1c:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C1:B3:7A:B1:17:33:56:42:69:B5:FE:7A:AE:7A:09:A0:16:32:63
            X509v3 Authority Key Identifier:
                keyid:33:06:C7:E7:2F:EB:E8:6D:FD:81:FE:BC:E8:EF:03:05:28:58:25:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3306C7E72FEBE86DFD81FEBCE8EF03052858258D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:23:f2:d4:cf:34:5b:81:eb:b3:79:13:a1:24:82:08:04:dd:
         51:aa:f7:9e:f9:22:af:ab:5c:ca:40:b8:22:59:3b:78:c2:1a:
         8d:dc:2d:e0:d6:e0:8a:0d:03:93:0d:86:ae:40:eb:62:c5:65:
         97:a6:16:3f:99:6b:c2:94:33:d3:bc:36:a2:eb:1c:f5:0d:d4:
         a0:bd:b7:a9:c6:0f:40:52:b6:d4:c5:03:e0:82:d6:b9:df:29:
         96:ab:a3:00:c5:74:36:80:0c:4c:aa:37:e1:02:1d:80:cc:53:
         41:fb:02:ad:d8:ef:ab:78:e7:02:f5:c6:62:a0:14:9f:2d:ff:
         83:5c:82:a3:31:d8:96:77:3a:68:e2:09:c6:02:82:1a:c1:2c:
         88:09:35:56:f6:76:56:1a:8f:6b:c9:a9:58:4e:c8:ec:1c:48:
         3b:4c:3f:4d:b2:56:85:6b:5d:48:c5:cc:d4:0b:0d:41:16:09:
         25:04:f2:f1:7d:78:a9:31:7a:b7:37:ec:70:4b:7d:91:c7:59:
         c2:86:7a:a5:ed:d5:90:d4:26:e2:45:c8:5f:20:92:65:f9:2d:
         e9:7f:6d:ea:b0:52:83:31:86:c9:12:dc:3c:5a:ed:80:b4:91:
         bc:93:85:98:f2:40:d8:ba:7e:ff:a7:74:35:60:d1:24:56:15:
         a3:49:40:a0
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUPRllniWMcvB/kTfmMant6TY3Q8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzMwNkM3RTcyRkVCRTg2REZEODFGRUJDRThFRjAzMDUy
ODU4MjU4RDAeFw0yMzEyMDQxODQxNTBaFw0yNDEyMDIxODQ2NTBaMDMxMTAvBgNV
BAMTKENFQzFCMzdBQjExNzMzNTY0MjY5QjVGRTdBQUU3QTA5QTAxNjMyNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgm93WjEFhIUsfbkYJ01qsAkAE
eW6q4m5zubbi8OOUZSo2lBiE3HFFT5rZBVqsVIDB24bDjHizL1+VK8Iu5Hr5vUE9
HdNy/PngllWykIxgv5ESopPYZMwc9J6uAcqaftcWPYyyUZ7JvcAf95vKguj62SAP
W1bm7okx89LQc3gVpvwIlxVgnGLJyvWJ8tjc22FZiR6i1JZD1PB4v12RoKKwhGH0
iadAZg/jo57+nSF7mhAf60bhDQObGjdtTpZ8voPUq6mOfWOVbGdq8frFjW+9co07
yscgiRmmZtfILuNeq5Y/n0ExBw0lhOe4baeLCGb/nSLWtt4Wc/DNGzsmHBaTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUzsGzerEXM1ZCabX+eq56CaAWMmMwHwYDVR0j
BBgwFoAUMwbH5y/r6G39gf686O8DBShYJY0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvMzMwNkM3RTcyRkVCRTg2REZEODFGRUJDRThFRjAzMDUyODU4MjU4RC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8zMzA2QzdFNzJGRUJFODZERkQ4
MUZFQkNFOEVGMDMwNTI4NTgyNThELmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzQz
NTJlMzIzMjM3MmUzMTM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt45QwDQYJKoZIhvcNAQELBQADggEBACgj8tTPNFuB
67N5E6EkgggE3VGq9575Iq+rXMpAuCJZO3jCGo3cLeDW4IoNA5MNhq5A62LFZZem
Fj+Za8KUM9O8NqLrHPUN1KC9t6nGD0BSttTFA+CC1rnfKZarowDFdDaADEyqN+EC
HYDMU0H7Aq3Y76t45wL1xmKgFJ8t/4NcgqMx2JZ3OmjiCcYCghrBLIgJNVb2dlYa
j2vJqVhOyOwcSDtMP02yVoVrXUjFzNQLDUEWCSUE8vF9eKkxerc37HBLfZHHWcKG
eqXt1ZDUJuJFyF8gkmX5Lel/beqwUoMxhskS3Dxa7YC0kbyThZjyQNi6fv+ndDVg
0SRWFaNJQKA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org