Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
File:                     34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa (raw, json)
Hash identifier:          6NT1EAL+WgXc2EMh4nFJ0ycTzvAK1EKr0us/63fp5B4=
Subject key identifier:   C2:58:9F:A6:D1:D6:95:FC:AB:7B:0C:A0:D6:9E:29:23:6B:99:74:C2
Certificate issuer:       /CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
Certificate serial:       3E7ECD16442EEFF9E4B5A8A56C08AA0348AB47D3
Authority key identifier: A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa
Signing time:             Tue 06 Feb 2024 13:00:00 +0000
ROA not before:           Tue 06 Feb 2024 12:55:00 +0000
ROA not after:            Tue 04 Feb 2025 13:00:00 +0000
asID:                     264514
IP address blocks:        45.191.128.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7e:cd:16:44:2e:ef:f9:e4:b5:a8:a5:6c:08:aa:03:48:ab:47:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
        Validity
            Not Before: Feb  6 12:55:00 2024 GMT
            Not After : Feb  4 13:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d9:3f:95:84:33:34:f4:ab:aa:4f:7d:95:3a:
                    0b:14:5e:86:c8:cc:4d:32:b3:99:cf:c6:b0:63:aa:
                    b2:ea:07:17:1a:f2:31:96:8b:9d:ad:36:32:cf:18:
                    70:db:84:3d:72:3c:ac:01:09:f9:bf:50:c5:bf:27:
                    63:e8:ba:de:30:26:ff:2d:01:3e:ca:94:a6:1b:89:
                    0b:01:ae:ea:57:09:aa:31:4c:41:40:aa:a6:a2:20:
                    c5:af:36:aa:34:27:6e:f2:6a:3d:7d:8c:a8:e4:ed:
                    10:46:83:07:9a:8f:2a:bc:75:15:28:42:d2:fd:8f:
                    d8:3b:e1:f4:86:a3:8a:8d:2d:58:0b:0b:02:ac:02:
                    57:a4:04:e6:50:b2:4b:31:e7:27:e3:6e:d6:78:e3:
                    b3:2a:e0:6a:1a:e2:8c:d5:3e:01:38:41:fe:63:06:
                    c6:da:e5:b9:bb:b3:59:a2:eb:b2:d0:fa:00:44:f0:
                    df:4a:86:8f:40:11:3e:f3:b2:f6:49:dc:3b:31:d6:
                    88:64:ec:f6:9a:21:57:92:35:8a:37:7a:87:28:19:
                    1a:94:11:34:1a:8d:43:f3:cd:25:3d:ff:2a:10:99:
                    36:89:48:e8:05:6c:1b:99:fe:9e:04:bc:db:7f:b9:
                    9d:27:41:b2:8b:e5:93:44:f2:28:bf:30:01:cd:82:
                    8a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:58:9F:A6:D1:D6:95:FC:AB:7B:0C:A0:D6:9E:29:23:6B:99:74:C2
            X509v3 Authority Key Identifier:
                keyid:A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/34352e3139312e3132382e302f32322d3234203d3e20323634353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:d0:64:be:8d:eb:f2:3d:18:f1:a4:57:01:8e:3b:ac:9c:73:
         37:cc:4a:13:d6:d0:15:75:b8:16:ab:4e:22:9a:fb:4d:74:d7:
         25:25:75:fa:f9:f2:47:45:81:8b:ae:83:5c:d8:77:5d:0e:bb:
         0c:03:d5:df:49:59:7a:69:6f:7a:aa:2d:cd:01:d7:6d:92:38:
         c1:f7:69:d3:9d:60:d6:3c:75:7f:0b:33:fc:c3:08:26:80:0a:
         33:10:ec:ae:4a:2a:2e:a8:01:b1:60:c1:fa:97:88:9e:67:10:
         ee:ca:16:b0:c3:b8:d5:f9:d2:b4:e0:40:f3:83:a3:bf:7d:e7:
         83:93:c2:53:52:35:1f:22:7d:43:b0:70:15:fe:6f:2e:c0:0c:
         39:9a:34:64:34:50:9b:3e:7c:d1:ea:6a:09:99:bb:0c:12:56:
         44:91:e1:e5:7b:a2:58:00:0b:35:0b:d7:1d:50:4f:3c:11:4e:
         93:38:2c:ff:a9:0e:01:53:32:9b:66:9e:d8:d9:d2:b2:8a:bc:
         57:40:de:14:3d:c8:67:99:dc:c5:ee:51:bd:08:9c:c7:76:51:
         74:dd:ad:c2:73:b9:51:df:ad:6e:99:87:a6:9b:82:12:9f:05:
         45:0e:cc:93:e2:89:83:51:1b:06:aa:b0:31:1f:45:91:07:c3:
         cf:5d:a9:84
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgIUPn7NFkQu7/nktailbAiqA0irR9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIzMDMzM0Y3NjkwRjQ3NEUyODRBOTVCQUREM0QzOUY2
QzVDQjlGMzAeFw0yNDAyMDYxMjU1MDBaFw0yNTAyMDQxMzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTFEOTNGOTU4NDMzMzRGNEFC
QUE0RjdEOTUzQTBCMTQ1RTg2QzhDQzREMzJCMzk5Q0ZDNkIwNjNBQUIyRUEwNzE3
MUFGMjMxOTY4QjlEQUQzNjMyQ0YxODcwREI4NDNENzIzQ0FDMDEwOUY5QkY1MEM1
QkYyNzYzRThCQURFMzAyNkZGMkQwMTNFQ0E5NEE2MUI4OTBCMDFBRUVBNTcwOUFB
MzE0QzQxNDBBQUE2QTIyMEM1QUYzNkFBMzQyNzZFRjI2QTNEN0Q4Q0E4RTRFRDEw
NDY4MzA3OUE4RjJBQkM3NTE1Mjg0MkQyRkQ4RkQ4M0JFMUY0ODZBMzhBOEQyRDU4
MEIwQjAyQUMwMjU3QTQwNEU2NTBCMjRCMzFFNzI3RTM2RUQ2NzhFM0IzMkFFMDZB
MUFFMjhDRDUzRTAxMzg0MUZFNjMwNkM2REFFNUI5QkJCMzU5QTJFQkIyRDBGQTAw
NDRGMERGNEE4NjhGNDAxMTNFRjNCMkY2NDlEQzNCMzFENjg4NjRFQ0Y2OUEyMTU3
OTIzNThBMzc3QTg3MjgxOTFBOTQxMTM0MUE4RDQzRjNDRDI1M0RGRjJBMTA5OTM2
ODk0OEU4MDU2QzFCOTlGRTlFMDRCQ0RCN0ZCOTlEMjc0MUIyOEJFNTkzNDRGMjI4
QkYzMDAxQ0Q4MjhBMTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4dk/lYQzNPSrqk99lToLFF6GyMxNMrOZz8awY6qy6gcXGvIxloud
rTYyzxhw24Q9cjysAQn5v1DFvydj6LreMCb/LQE+ypSmG4kLAa7qVwmqMUxBQKqm
oiDFrzaqNCdu8mo9fYyo5O0QRoMHmo8qvHUVKELS/Y/YO+H0hqOKjS1YCwsCrAJX
pATmULJLMecn427WeOOzKuBqGuKM1T4BOEH+YwbG2uW5u7NZouuy0PoARPDfSoaP
QBE+87L2Sdw7MdaIZOz2miFXkjWKN3qHKBkalBE0Go1D880lPf8qEJk2iUjoBWwb
mf6eBLzbf7mdJ0Gyi+WTRPIovzABzYKKFQIDAQABo4ICTjCCAkowHQYDVR0OBBYE
FMJYn6bR1pX8q3sMoNaeKSNrmXTCMB8GA1UdIwQYMBaAFKIwMz92kPR04oSpW63T
059sXLnzMA4GA1UdDwEB/wQEAwIHgDCBkgYDVR0fBIGKMIGHMIGEoIGBoH+GfXJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFL
Q2gxblJTOFp1aXN0enFvSjlaQVRBNVNwWmVnRS8wL0EyMzAzMzNGNzY5MEY0NzRF
Mjg0QTk1QkFERDNEMzlGNkM1Q0I5RjMuY3JsMHgGCCsGAQUFBwEBBGwwajBoBggr
BgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9uaWNi
cl9yZXBvLzAvQTIzMDMzM0Y3NjkwRjQ3NEUyODRBOTVCQUREM0QzOUY2QzVDQjlG
My5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5jOi8v
cnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vZFIzcnN4cXlqQnpMSmFLQ2gxblJT
OFp1aXN0enFvSjlaQVRBNVNwWmVnRS8wLzM0MzUyZTMxMzkzMTJlMzEzMjM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzUzMTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLb+A
MA0GCSqGSIb3DQEBCwUAA4IBAQCx0GS+jevyPRjxpFcBjjusnHM3zEoT1tAVdbgW
q04imvtNdNclJXX6+fJHRYGLroNc2HddDrsMA9XfSVl6aW96qi3NAddtkjjB92nT
nWDWPHV/CzP8wwgmgAozEOyuSiouqAGxYMH6l4ieZxDuyhaww7jV+dK04EDzg6O/
feeDk8JTUjUfIn1DsHAV/m8uwAw5mjRkNFCbPnzR6moJmbsMElZEkeHle6JYAAs1
C9cdUE88EU6TOCz/qQ4BUzKbZp7Y2dKyirxXQN4UPchnmdzF7lG9CJzHdlF03a3C
c7lR361umYemm4ISnwVFDsyT4omDURsGqrAxH0WRB8PPXamE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:58 2024 by rpki-client on console-ams.rpki-client.org