Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
File:                     34352e3138322e31362e302f32322d3232203d3e20323639323631.roa (raw, json)
Hash identifier:          MAolnGspEB33N+fp0/1yNMTUh53GkcC3TaRgWz1Nr2k=
Subject key identifier:   AF:5A:2D:6E:0C:70:76:C2:54:3C:87:B3:37:F5:E4:88:8F:96:F5:A2
Certificate issuer:       /CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
Certificate serial:       70934F093140A7DEB298C4EBC57C35482E292C51
Authority key identifier: D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa
Signing time:             Thu 09 Mar 2023 19:09:17 +0000
ROA not before:           Thu 09 Mar 2023 19:04:17 +0000
ROA not after:            Thu 07 Mar 2024 19:09:17 +0000
asID:                     269261
IP address blocks:        45.182.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:93:4f:09:31:40:a7:de:b2:98:c4:eb:c5:7c:35:48:2e:29:2c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6839DD8077CBDD2274A32A4537520F8C2C957C6
        Validity
            Not Before: Mar  9 19:04:17 2023 GMT
            Not After : Mar  7 19:09:17 2024 GMT
        Subject: CN=AF5A2D6E0C7076C2543C87B337F5E4888F96F5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:f1:e0:5d:cb:3a:8a:da:8f:a5:c6:48:31:
                    17:f9:03:f3:99:9f:06:5f:b1:e2:fe:ad:f3:4f:f7:
                    c1:02:09:7b:a3:80:aa:58:05:10:27:14:99:ba:90:
                    f2:5e:c7:bc:30:c3:42:b7:7f:f9:c5:16:f4:19:ac:
                    a6:ed:90:83:47:f9:88:67:82:e1:f9:88:6e:17:c7:
                    0d:1a:dd:92:b2:5c:8d:5e:5f:4f:1f:74:c9:df:ea:
                    69:68:56:96:0d:74:c3:0e:78:43:c9:3d:3e:9f:20:
                    f2:d0:d8:5a:0c:20:6b:4c:17:2e:c4:64:b4:31:ff:
                    22:7c:e4:74:49:7b:71:85:29:90:1f:fa:6c:dc:c7:
                    b5:59:91:e6:24:fe:f4:7b:b5:52:3f:eb:bf:33:5d:
                    11:43:f8:58:c7:54:f6:c3:10:71:a4:4f:3e:5b:1f:
                    02:ed:56:84:bd:64:dd:d3:98:2d:1a:95:f1:8c:dc:
                    d2:ea:f3:e9:1e:c8:08:bb:bf:a3:7c:a6:1a:89:d6:
                    cd:31:00:3c:b2:d8:ed:de:3a:a7:09:0e:ae:2b:8e:
                    fd:06:e3:83:48:db:e2:7e:56:ed:1d:07:74:bf:d8:
                    35:b1:1b:4d:0a:f4:84:aa:ab:e0:ee:be:23:e8:7a:
                    7a:74:73:c5:e6:8b:47:9b:e5:66:ee:1f:dc:87:56:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5A:2D:6E:0C:70:76:C2:54:3C:87:B3:37:F5:E4:88:8F:96:F5:A2
            X509v3 Authority Key Identifier:
                keyid:D6:83:9D:D8:07:7C:BD:D2:27:4A:32:A4:53:75:20:F8:C2:C9:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/D6839DD8077CBDD2274A32A4537520F8C2C957C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6839DD8077CBDD2274A32A4537520F8C2C957C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ntbs59kFHi3tRhSZNW4L85Jx8pdcMysFCVox83bDG3E/1/34352e3138322e31362e302f32322d3232203d3e20323639323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:50:49:1c:8c:ff:23:b8:f9:b1:e2:77:c8:f3:56:3b:a2:bc:
         31:fa:08:b0:e3:f6:a6:1d:6d:f1:07:9a:a6:6a:c4:f1:76:e0:
         3f:58:52:90:52:8a:00:c9:64:05:f7:11:bc:96:ba:46:20:e9:
         53:5f:30:d3:50:33:11:c2:f4:13:a5:ac:07:1a:79:f6:cc:c4:
         eb:e2:0f:5a:68:4b:67:aa:b1:c6:a0:58:d8:7a:f3:cc:5c:bd:
         50:d1:ae:8b:71:4b:af:7e:9e:58:9e:33:7e:42:c9:79:dd:e3:
         a2:ea:35:96:f3:d4:03:32:be:73:77:27:8b:3e:db:cf:14:ad:
         60:59:b4:aa:a2:1e:3c:2f:8d:2a:93:c2:bb:b2:65:7d:40:cd:
         8a:3f:5e:45:f9:d9:25:07:6b:4c:53:fa:44:fa:6e:25:d2:30:
         04:4d:b5:a9:15:60:9f:e8:8a:6c:bf:c5:24:e4:e1:73:f7:c0:
         01:80:0e:10:91:db:a0:81:11:db:92:82:f3:1d:8e:e3:a7:e6:
         2b:56:49:ab:ca:08:9a:70:4b:a8:72:66:a9:41:2d:e5:72:55:
         ab:73:a1:79:7d:0a:1b:81:63:fc:89:3b:39:e0:ba:98:cf:e9:
         03:ea:e6:22:22:f0:e8:37:e6:31:a2:60:16:2e:59:7f:65:fc:
         7f:4a:87:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcJNPCTFAp96ymMTrxXw1SC4pLFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MzlERDgwNzdDQkREMjI3NEEzMkE0NTM3NTIwRjhD
MkM5NTdDNjAeFw0yMzAzMDkxOTA0MTdaFw0yNDAzMDcxOTA5MTdaMDMxMTAvBgNV
BAMTKEFGNUEyRDZFMEM3MDc2QzI1NDNDODdCMzM3RjVFNDg4OEY5NkY1QTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJ/HgXcs6itqPpcZIMRf5A/OZ
nwZfseL+rfNP98ECCXujgKpYBRAnFJm6kPJex7www0K3f/nFFvQZrKbtkINH+Yhn
guH5iG4Xxw0a3ZKyXI1eX08fdMnf6mloVpYNdMMOeEPJPT6fIPLQ2FoMIGtMFy7E
ZLQx/yJ85HRJe3GFKZAf+mzcx7VZkeYk/vR7tVI/678zXRFD+FjHVPbDEHGkTz5b
HwLtVoS9ZN3TmC0alfGM3NLq8+keyAi7v6N8phqJ1s0xADyy2O3eOqcJDq4rjv0G
44NI2+J+Vu0dB3S/2DWxG00K9ISqq+DuviPoenp0c8Xmi0eb5WbuH9yHVi6FAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUr1otbgxwdsJUPIezN/XkiI+W9aIwHwYDVR0j
BBgwFoAU1oOd2Ad8vdInSjKkU3Ug+MLJV8YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM250YnM1OWtGSGkzdFJoU1pOVzRMODVKeDhwZGNNeXNGQ1ZveDgzYkRH
M0UvMS9ENjgzOUREODA3N0NCREQyMjc0QTMyQTQ1Mzc1MjBGOEMyQzk1N0M2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2ODM5REQ4MDc3Q0JERDIy
NzRBMzJBNDUzNzUyMEY4QzJDOTU3QzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNudGJzNTlrRkhpM3RSaFNaTlc0TDg1Sng4cGRjTXlzRkNWb3g4M2JERzNFLzEv
MzQzNTJlMzEzODMyMmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzIzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbYQMA0GCSqGSIb3DQEBCwUAA4IBAQAeUEkcjP8j
uPmx4nfI81Y7orwx+giw4/amHW3xB5qmasTxduA/WFKQUooAyWQF9xG8lrpGIOlT
XzDTUDMRwvQTpawHGnn2zMTr4g9aaEtnqrHGoFjYevPMXL1Q0a6LcUuvfp5YnjN+
Qsl53eOi6jWW89QDMr5zdyeLPtvPFK1gWbSqoh48L40qk8K7smV9QM2KP15F+dkl
B2tMU/pE+m4l0jAETbWpFWCf6Ipsv8Uk5OFz98ABgA4QkduggRHbkoLzHY7jp+Yr
VkmrygiacEuocmapQS3lclWrc6F5fQobgWP8iTs54LqYz+kD6uYiIvDoN+YxomAW
Lll/Zfx/SofW
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:23 2023 by rpki-client on console.sobornost.net