Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa
File:                     34352e3136342e31312e302f32342d3234203d3e20323638353835.roa (raw, json)
Hash identifier:          d5vu8/Op4Rad62lMSwjO8OUE6pPLwogRRrgaF8I5wtg=
Subject key identifier:   65:27:AB:EB:DB:01:2F:46:EE:53:87:DE:A4:48:61:F7:3E:B1:7C:58
Certificate issuer:       /CN=56E56C0A6BB9145C47505907F91F128D80240CA8
Certificate serial:       75BD62C601F0A02EF5FCC1774F64342FF976A5A5
Authority key identifier: 56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa
Signing time:             Thu 05 Oct 2023 20:10:43 +0000
ROA not before:           Thu 05 Oct 2023 20:05:43 +0000
ROA not after:            Thu 03 Oct 2024 20:10:43 +0000
asID:                     268585
IP address blocks:        45.164.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bd:62:c6:01:f0:a0:2e:f5:fc:c1:77:4f:64:34:2f:f9:76:a5:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56E56C0A6BB9145C47505907F91F128D80240CA8
        Validity
            Not Before: Oct  5 20:05:43 2023 GMT
            Not After : Oct  3 20:10:43 2024 GMT
        Subject: CN=6527ABEBDB012F46EE5387DEA44861F73EB17C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:05:38:99:73:9a:a8:91:8d:91:6f:57:01:01:
                    c8:db:0a:f9:50:95:8e:c8:4b:26:42:e2:1b:f2:06:
                    69:73:fc:50:9d:3f:22:71:d6:78:81:19:bc:cd:02:
                    3a:44:5e:3e:52:ef:66:c9:7a:8a:84:54:7e:11:b8:
                    a5:25:34:e6:78:4b:c8:62:7a:f0:91:86:71:e7:6e:
                    53:96:bb:1d:1c:87:f2:54:5e:93:93:d4:c9:f2:60:
                    ae:54:8a:a3:b1:81:29:93:47:3f:8b:2d:e4:be:4b:
                    58:6c:ad:f2:fc:db:9d:b1:fb:c9:00:08:a8:c0:28:
                    d3:58:0d:0e:0b:a1:6b:7a:71:b6:52:80:2b:31:7a:
                    7a:94:0d:1a:e3:aa:68:2d:73:0a:41:90:f8:e0:da:
                    79:98:94:18:0c:c7:f8:8e:35:f0:3c:ff:d5:7c:32:
                    f5:8c:8f:bd:f4:e4:3a:07:11:19:bf:35:e9:54:a3:
                    e3:cb:70:f9:3b:c9:80:47:c9:2c:aa:88:f9:9c:9c:
                    66:b5:12:ec:1c:13:b4:ce:57:86:14:68:7f:c4:30:
                    68:6e:d3:6c:58:82:56:d0:0d:ba:8f:e9:73:0c:85:
                    25:89:98:40:02:b7:bc:7e:fc:d1:6f:a1:2a:dc:8f:
                    48:eb:f9:ce:65:bb:0d:f2:02:86:52:91:31:8f:82:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:27:AB:EB:DB:01:2F:46:EE:53:87:DE:A4:48:61:F7:3E:B1:7C:58
            X509v3 Authority Key Identifier:
                keyid:56:E5:6C:0A:6B:B9:14:5C:47:50:59:07:F9:1F:12:8D:80:24:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/56E56C0A6BB9145C47505907F91F128D80240CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56E56C0A6BB9145C47505907F91F128D80240CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DeDca6S3exXRVHVbUtvXRjv2NDRuSLdcrSA9QTqfi4v/0/34352e3136342e31312e302f32342d3234203d3e20323638353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:47:1e:c1:aa:99:4c:0a:e4:62:cc:08:13:f0:39:ea:4c:
         53:91:97:76:1d:81:63:73:87:25:4c:22:e9:66:6e:02:63:2c:
         63:2d:10:1f:a2:6b:53:f2:f5:39:57:ae:5b:69:1f:b3:42:4a:
         25:9c:5a:0d:17:30:be:87:d9:97:9a:e6:2b:40:bb:c0:e3:c4:
         91:0b:06:f8:80:e8:37:e7:db:7f:16:b4:3a:6f:a5:d0:b6:db:
         9c:26:ac:36:89:31:68:5e:d9:12:5a:6c:2c:60:6e:5a:cd:a6:
         1f:61:7e:f7:85:53:97:07:4c:ed:f2:4d:77:1d:4f:be:c1:dc:
         cc:9c:5c:59:e1:d6:32:32:2d:ab:44:46:ee:f5:2a:f0:1e:f1:
         48:fb:bf:8e:4b:f7:07:c3:a2:db:f2:91:62:90:d1:4c:dd:d2:
         fa:c4:bc:90:f3:d5:ab:a8:22:d0:5b:86:f2:60:f4:74:be:58:
         7d:b8:23:7c:bf:e7:82:44:18:e0:39:e4:6f:79:95:0d:16:c3:
         e0:c0:b7:a5:c8:fc:95:f8:30:01:f4:86:64:36:83:ae:74:03:
         fa:b9:e2:f8:ae:ac:ea:40:f7:63:c8:65:04:54:9e:c9:35:ce:
         50:ff:a5:9a:91:d1:53:e2:3e:f2:94:97:2e:58:72:b3:f8:20:
         c3:98:bf:5e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUdb1ixgHwoC71/MF3T2Q0L/l2paUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTZFNTZDMEE2QkI5MTQ1QzQ3NTA1OTA3RjkxRjEyOEQ4
MDI0MENBODAeFw0yMzEwMDUyMDA1NDNaFw0yNDEwMDMyMDEwNDNaMDMxMTAvBgNV
BAMTKDY1MjdBQkVCREIwMTJGNDZFRTUzODdERUE0NDg2MUY3M0VCMTdDNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+BTiZc5qokY2Rb1cBAcjbCvlQ
lY7ISyZC4hvyBmlz/FCdPyJx1niBGbzNAjpEXj5S72bJeoqEVH4RuKUlNOZ4S8hi
evCRhnHnblOWux0ch/JUXpOT1MnyYK5UiqOxgSmTRz+LLeS+S1hsrfL8252x+8kA
CKjAKNNYDQ4LoWt6cbZSgCsxenqUDRrjqmgtcwpBkPjg2nmYlBgMx/iONfA8/9V8
MvWMj7305DoHERm/NelUo+PLcPk7yYBHySyqiPmcnGa1EuwcE7TOV4YUaH/EMGhu
02xYglbQDbqP6XMMhSWJmEACt7x+/NFvoSrcj0jr+c5luw3yAoZSkTGPgg99AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZSer69sBL0buU4fepEhh9z6xfFgwHwYDVR0j
BBgwFoAUVuVsCmu5FFxHUFkH+R8SjYAkDKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkRlRGNhNlMzZXhYUlZIVmJVdHZYUmp2Mk5EUnVTTGRjclNBOVFUcWZp
NHYvMC81NkU1NkMwQTZCQjkxNDVDNDc1MDU5MDdGOTFGMTI4RDgwMjQwQ0E4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2RTU2QzBBNkJCOTE0NUM0
NzUwNTkwN0Y5MUYxMjhEODAyNDBDQTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJEZURjYTZTM2V4WFJWSFZiVXR2WFJqdjJORFJ1U0xkY3JTQTlRVHFmaTR2LzAv
MzQzNTJlMzEzNjM0MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzUzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaQLMA0GCSqGSIb3DQEBCwUAA4IBAQCc9EcewaqZ
TArkYswIE/A56kxTkZd2HYFjc4clTCLpZm4CYyxjLRAfomtT8vU5V65baR+zQkol
nFoNFzC+h9mXmuYrQLvA48SRCwb4gOg359t/FrQ6b6XQttucJqw2iTFoXtkSWmws
YG5azaYfYX73hVOXB0zt8k13HU++wdzMnFxZ4dYyMi2rREbu9SrwHvFI+7+OS/cH
w6Lb8pFikNFM3dL6xLyQ89WrqCLQW4byYPR0vlh9uCN8v+eCRBjgOeRveZUNFsPg
wLelyPyV+DAB9IZkNoOudAP6ueL4rqzqQPdjyGUEVJ7JNc5Q/6WakdFT4j7ylJcu
WHKz+CDDmL9e
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:37 2024 by rpki-client on console-fra.rpki-client.org