Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
File:                     34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa (raw, json)
Hash identifier:          3IFBmFSOTK8lbfpMzF29IeWFlJ7/4bGr/2GNSWvr1Rs=
Subject key identifier:   56:5B:77:92:93:C3:3E:5F:C8:6E:82:1D:7C:1F:46:1A:AC:C3:CB:94
Certificate issuer:       /CN=812A72E8A31772F79D13ABBE8D369A69FF8CF55E
Certificate serial:       0D1CD3DA2B62CE362F7017C6496D7321752EA95D
Authority key identifier: 81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa
Signing time:             Wed 31 May 2023 17:36:35 +0000
ROA not before:           Wed 31 May 2023 17:31:35 +0000
ROA not after:            Wed 29 May 2024 17:36:35 +0000
asID:                     269007
IP address blocks:        45.176.152.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:1c:d3:da:2b:62:ce:36:2f:70:17:c6:49:6d:73:21:75:2e:a9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=812A72E8A31772F79D13ABBE8D369A69FF8CF55E
        Validity
            Not Before: May 31 17:31:35 2023 GMT
            Not After : May 29 17:36:35 2024 GMT
        Subject: CN=565B779293C33E5FC86E821D7C1F461AACC3CB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9f:92:8b:31:20:a3:56:f6:6e:4f:9f:f5:f3:
                    8f:54:d7:60:bd:55:a1:84:c0:87:2c:b4:1b:0d:6f:
                    f9:14:15:41:9c:c0:dd:28:33:bb:61:50:10:75:93:
                    33:52:8a:93:17:95:10:61:5d:55:db:fb:17:2b:05:
                    9d:4d:9e:95:a4:8b:9d:5a:05:8b:28:ac:73:87:f7:
                    6f:93:d5:f2:b2:2e:d4:6a:f7:d4:da:37:26:4f:7f:
                    d6:01:3e:33:52:c9:15:4c:b0:84:8d:c1:60:de:78:
                    ff:52:c6:a0:93:80:d6:fe:73:c1:b0:df:ed:88:38:
                    0f:ed:68:0b:04:21:c2:97:cd:57:0a:0f:4f:23:6b:
                    a6:bd:5e:b4:e1:6d:39:da:14:e4:a4:17:09:25:df:
                    3b:77:d8:ec:20:9f:05:db:47:ba:bf:85:1c:82:15:
                    52:61:43:9b:11:64:25:50:82:a9:c0:27:6b:8a:cd:
                    88:83:40:e8:bb:43:90:7b:13:3e:85:81:20:94:42:
                    aa:b2:40:78:66:5c:16:97:b5:1e:e2:3b:b0:dd:db:
                    07:f2:e2:49:ac:aa:75:8d:44:ad:1c:3d:4a:85:67:
                    92:0e:31:20:c6:2e:fc:dd:c8:d4:87:52:95:eb:41:
                    11:4b:da:c9:77:30:85:8d:99:ae:5a:75:f9:99:a4:
                    f8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:77:92:93:C3:3E:5F:C8:6E:82:1D:7C:1F:46:1A:AC:C3:CB:94
            X509v3 Authority Key Identifier:
                keyid:81:2A:72:E8:A3:17:72:F7:9D:13:AB:BE:8D:36:9A:69:FF:8C:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/812A72E8A31772F79D13ABBE8D369A69FF8CF55E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3j65qZJqrAJDeRE89xEnU6Eq3TDfFUNAkgG2hwpZErAE/1/34352e3137362e3135322e302f32322d3234203d3e20323639303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:10:18:1c:10:20:d8:c1:49:40:c6:96:dc:ce:65:ea:64:
         f3:c3:31:54:aa:78:61:14:5c:fe:67:41:72:6a:2f:18:e4:00:
         56:87:16:65:66:53:a3:99:98:25:16:df:2e:17:33:ba:7d:42:
         23:f1:fc:40:4c:52:81:85:fd:a1:a4:ca:ef:4a:b5:bc:d1:97:
         f3:8e:01:92:6a:b9:ff:84:e7:e0:fb:59:ce:a1:55:0d:f7:ad:
         2e:66:1d:29:35:b8:c1:65:ba:60:5f:9e:2a:d3:f0:1d:c0:d2:
         f9:54:8e:25:b9:e3:39:e7:2a:34:36:98:ee:75:2c:e9:a2:ad:
         de:19:5e:ca:03:e0:b5:86:84:c0:8c:88:e8:64:16:f5:03:63:
         e4:61:23:03:fb:47:13:e7:d6:a9:c4:4b:eb:02:ea:10:5a:99:
         7a:2c:9d:c4:c5:bb:df:26:0e:44:9c:34:c6:45:ca:cb:9c:37:
         3e:4c:8d:44:b6:89:e5:a2:6f:31:bc:67:23:c2:26:b9:53:f4:
         a5:4d:71:55:5f:3d:91:95:d5:eb:64:08:93:70:20:76:6a:13:
         4a:f3:e5:df:4b:18:f9:7e:01:40:ec:6a:3d:70:7a:41:62:60:
         f9:7a:01:60:52:ba:ef:fe:c2:19:4a:c8:a5:4e:b3:97:e7:e8:
         70:1c:97:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUDRzT2itizjYvcBfGSW1zIXUuqV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODEyQTcyRThBMzE3NzJGNzlEMTNBQkJFOEQzNjlBNjlG
RjhDRjU1RTAeFw0yMzA1MzExNzMxMzVaFw0yNDA1MjkxNzM2MzVaMDMxMTAvBgNV
BAMTKDU2NUI3NzkyOTNDMzNFNUZDODZFODIxRDdDMUY0NjFBQUNDM0NCOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn5KLMSCjVvZuT5/1849U12C9
VaGEwIcstBsNb/kUFUGcwN0oM7thUBB1kzNSipMXlRBhXVXb+xcrBZ1NnpWki51a
BYsorHOH92+T1fKyLtRq99TaNyZPf9YBPjNSyRVMsISNwWDeeP9SxqCTgNb+c8Gw
3+2IOA/taAsEIcKXzVcKD08ja6a9XrThbTnaFOSkFwkl3zt32OwgnwXbR7q/hRyC
FVJhQ5sRZCVQgqnAJ2uKzYiDQOi7Q5B7Ez6FgSCUQqqyQHhmXBaXtR7iO7Dd2wfy
4kmsqnWNRK0cPUqFZ5IOMSDGLvzdyNSHUpXrQRFL2sl3MIWNma5adfmZpPgdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVlt3kpPDPl/IboIdfB9GGqzDy5QwHwYDVR0j
BBgwFoAUgSpy6KMXcvedE6u+jTaaaf+M9V4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2o2NXFaSnFyQUpEZVJFODl4RW5VNkVxM1REZkZVTkFrZ0cyaHdwWkVy
QUUvMS84MTJBNzJFOEEzMTc3MkY3OUQxM0FCQkU4RDM2OUE2OUZGOENGNTVFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgxMkE3MkU4QTMxNzcyRjc5
RDEzQUJCRThEMzY5QTY5RkY4Q0Y1NUUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNqNjVxWkpxckFKRGVSRTg5eEVuVTZFcTNURGZGVU5Ba2dHMmh3cFpFckFFLzEv
MzQzNTJlMzEzNzM2MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsJgwDQYJKoZIhvcNAQELBQADggEBABBMEBgc
ECDYwUlAxpbczmXqZPPDMVSqeGEUXP5nQXJqLxjkAFaHFmVmU6OZmCUW3y4XM7p9
QiPx/EBMUoGF/aGkyu9KtbzRl/OOAZJquf+E5+D7Wc6hVQ33rS5mHSk1uMFlumBf
nirT8B3A0vlUjiW54znnKjQ2mO51LOmird4ZXsoD4LWGhMCMiOhkFvUDY+RhIwP7
RxPn1qnES+sC6hBamXosncTFu98mDkScNMZFysucNz5MjUS2ieWibzG8ZyPCJrlT
9KVNcVVfPZGV1etkCJNwIHZqE0rz5d9LGPl+AUDsaj1wekFiYPl6AWBSuu/+whlK
yKVOs5fn6HAcl0Y=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:39 2024 by rpki-client on console-fra.rpki-client.org