Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa
File:                     34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa (raw, json)
Hash identifier:          9VSLXzLwYS5zLeM+p1D/D/3Gt1X+eaFI/9btaK+e2Ho=
Subject key identifier:   20:02:30:2B:F1:27:26:80:8F:4F:91:69:97:56:33:F0:94:14:F5:D9
Certificate issuer:       /CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
Certificate serial:       44998F8C5520603BFB84BBD64815D73FE7620867
Authority key identifier: 3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa
Signing time:             Thu 22 Jun 2023 17:17:38 +0000
ROA not before:           Thu 22 Jun 2023 17:12:38 +0000
ROA not after:            Thu 20 Jun 2024 17:17:38 +0000
asID:                     270240
IP address blocks:        45.191.240.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:99:8f:8c:55:20:60:3b:fb:84:bb:d6:48:15:d7:3f:e7:62:08:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A120A308B3DB51C52A4F4C0A374481656D3FA1B
        Validity
            Not Before: Jun 22 17:12:38 2023 GMT
            Not After : Jun 20 17:17:38 2024 GMT
        Subject: CN=2002302BF12726808F4F9169975633F09414F5D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:2e:7e:1b:9e:4c:85:0c:ac:0e:38:30:99:
                    5f:ea:57:74:b2:30:81:d3:80:29:ad:e5:c8:45:cb:
                    4c:10:93:59:75:6b:4f:6e:86:bd:32:a9:6b:7f:95:
                    7c:51:47:d1:b8:ae:c0:4f:5e:84:a4:1b:19:e9:1a:
                    63:1b:cf:47:f3:b6:d3:1c:ec:00:e0:57:47:8e:1e:
                    1c:bf:23:14:00:57:03:58:6e:78:93:1b:c5:9d:16:
                    2e:17:54:94:a3:ad:a4:3d:12:38:be:67:ae:11:a9:
                    93:97:27:89:0e:2b:c1:54:86:0e:a0:a2:b1:2f:7e:
                    63:61:a9:4c:10:ed:21:81:80:3a:b1:f3:d9:e8:c6:
                    68:97:18:4a:45:9a:a0:b3:20:aa:94:4c:6c:a4:b9:
                    98:8b:29:75:59:5e:db:ce:cd:b5:e7:0f:1c:6c:ba:
                    ad:28:4a:ad:ca:be:c8:2e:31:d4:ce:98:40:ab:b4:
                    b8:e9:8f:22:c9:10:a0:91:e2:30:8a:54:aa:cb:31:
                    27:49:85:41:39:50:1e:58:68:f0:6b:6d:b7:ee:27:
                    01:1b:b9:be:58:92:78:b3:ba:69:36:7e:5c:2f:60:
                    0f:0d:3f:1d:4b:01:24:e1:40:92:50:8c:28:74:77:
                    30:99:0d:45:97:88:11:c2:63:0a:c0:d4:01:ef:39:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:02:30:2B:F1:27:26:80:8F:4F:91:69:97:56:33:F0:94:14:F5:D9
            X509v3 Authority Key Identifier:
                keyid:3A:12:0A:30:8B:3D:B5:1C:52:A4:F4:C0:A3:74:48:16:56:D3:FA:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A120A308B3DB51C52A4F4C0A374481656D3FA1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/q6gUNmqH1chqvTJbdRCLUBTwQc3Jz6pLmH6FnoeMDBo/0/34352e3139312e3234302e302f32322d3234203d3e20323730323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:5c:75:5e:26:c3:54:52:c1:3c:c3:87:20:a8:ed:28:c8:5f:
         62:21:98:21:1f:c6:25:1f:04:f5:c2:60:2b:10:8a:95:19:a7:
         b7:3e:63:a1:ef:55:14:39:20:0a:4d:73:54:81:c8:aa:cf:97:
         1a:0a:7c:12:c7:bd:8f:92:2c:c1:3a:ca:30:5f:9c:bb:32:e0:
         b8:6a:9b:a3:1d:48:59:2b:ac:03:81:cf:78:07:f7:3a:12:85:
         f6:5c:38:18:63:15:9d:56:20:04:8e:b0:b4:b7:96:3d:43:88:
         ff:d9:15:9c:bc:db:58:a2:2c:04:26:04:78:cb:56:d3:60:f4:
         96:2a:09:81:10:ef:b0:7e:2d:74:b4:13:0c:a1:f2:70:1b:93:
         91:1a:bc:fa:c4:17:4f:37:a6:cf:77:78:ee:ab:dc:96:7d:60:
         b9:06:04:37:a1:27:1c:48:a6:07:87:70:8a:5a:fe:47:cc:ba:
         d0:fd:5f:bf:ac:7d:71:88:cf:09:d9:23:0a:2b:d9:fe:da:43:
         cf:3d:37:fb:1d:c6:96:e4:c0:91:29:5d:b4:be:f5:43:5d:72:
         e7:b5:c8:d1:45:73:87:cf:b5:9e:ae:2a:6c:2a:08:be:d1:44:
         33:4b:ca:b2:6f:6e:42:e7:f4:08:69:9f:d2:1e:c4:3c:b7:7f:
         b0:fd:68:52
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIURJmPjFUgYDv7hLvWSBXXP+diCGcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ExMjBBMzA4QjNEQjUxQzUyQTRGNEMwQTM3NDQ4MTY1
NkQzRkExQjAeFw0yMzA2MjIxNzEyMzhaFw0yNDA2MjAxNzE3MzhaMDMxMTAvBgNV
BAMTKDIwMDIzMDJCRjEyNzI2ODA4RjRGOTE2OTk3NTYzM0YwOTQxNEY1RDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8y5+G55MhQysDjgwmV/qV3Sy
MIHTgCmt5chFy0wQk1l1a09uhr0yqWt/lXxRR9G4rsBPXoSkGxnpGmMbz0fzttMc
7ADgV0eOHhy/IxQAVwNYbniTG8WdFi4XVJSjraQ9Eji+Z64RqZOXJ4kOK8FUhg6g
orEvfmNhqUwQ7SGBgDqx89noxmiXGEpFmqCzIKqUTGykuZiLKXVZXtvOzbXnDxxs
uq0oSq3KvsguMdTOmECrtLjpjyLJEKCR4jCKVKrLMSdJhUE5UB5YaPBrbbfuJwEb
ub5Yknizumk2flwvYA8NPx1LASThQJJQjCh0dzCZDUWXiBHCYwrA1AHvOVe7AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUIAIwK/EnJoCPT5Fpl1Yz8JQU9dkwHwYDVR0j
BBgwFoAUOhIKMIs9tRxSpPTAo3RIFlbT+hswDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9xNmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJv
LzAvM0ExMjBBMzA4QjNEQjUxQzUyQTRGNEMwQTM3NDQ4MTY1NkQzRkExQi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC8zQTEyMEEzMDhCM0RCNTFDNTJB
NEY0QzBBMzc0NDgxNjU2RDNGQTFCLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9x
NmdVTm1xSDFjaHF2VEpiZFJDTFVCVHdRYzNKejZwTG1INkZub2VNREJvLzAvMzQz
NTJlMzEzOTMxMmUzMjM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzAz
MjM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItv/AwDQYJKoZIhvcNAQELBQADggEBAJ1cdV4mw1RS
wTzDhyCo7SjIX2IhmCEfxiUfBPXCYCsQipUZp7c+Y6HvVRQ5IApNc1SByKrPlxoK
fBLHvY+SLME6yjBfnLsy4Lhqm6MdSFkrrAOBz3gH9zoShfZcOBhjFZ1WIASOsLS3
lj1DiP/ZFZy821iiLAQmBHjLVtNg9JYqCYEQ77B+LXS0Ewyh8nAbk5EavPrEF083
ps93eO6r3JZ9YLkGBDehJxxIpgeHcIpa/kfMutD9X7+sfXGIzwnZIwor2f7aQ889
N/sdxpbkwJEpXbS+9UNdcue1yNFFc4fPtZ6uKmwqCL7RRDNLyrJvbkLn9Ahpn9Ie
xDy3f7D9aFI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:40 2024 by rpki-client on console-fra.rpki-client.org