Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131382e302f32342d3234203d3e20323636303438.roa
File:                     34352e342e3131382e302f32342d3234203d3e20323636303438.roa (raw, json)
Hash identifier:          09Q3Q8yYVVCkUN/o6nbYd/cMHSDiAPhyzWyUx0uRtzo=
Subject key identifier:   E6:CE:5F:B6:89:D4:25:5E:54:E5:3B:47:D0:A9:56:3C:13:D8:E6:4A
Certificate issuer:       /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial:       3FCE17A68E2B15F80DDACB1DE041675BAB21D2BD
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131382e302f32342d3234203d3e20323636303438.roa
Signing time:             Tue 28 Nov 2023 23:15:37 +0000
ROA not before:           Tue 28 Nov 2023 23:10:37 +0000
ROA not after:            Tue 26 Nov 2024 23:15:37 +0000
asID:                     266048
IP address blocks:        45.4.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ce:17:a6:8e:2b:15:f8:0d:da:cb:1d:e0:41:67:5b:ab:21:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
        Validity
            Not Before: Nov 28 23:10:37 2023 GMT
            Not After : Nov 26 23:15:37 2024 GMT
        Subject: CN=E6CE5FB689D4255E54E53B47D0A9563C13D8E64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:79:ee:ab:cf:d5:e4:23:8d:b1:30:81:34:ec:
                    00:10:c4:60:6c:13:78:45:28:64:e8:c0:64:9b:fb:
                    75:99:ec:c4:7b:47:4b:d7:04:66:95:77:2d:7b:d2:
                    85:59:53:fa:83:c5:db:f9:38:1a:1c:63:d0:a8:f0:
                    57:12:dd:e4:92:0f:78:c4:1c:e4:e2:32:15:d5:ab:
                    c0:32:b7:6f:28:2a:1e:b7:0f:bb:98:42:a0:a8:f9:
                    96:cc:36:46:fa:44:2c:91:6c:e6:d4:12:cc:f7:b7:
                    e6:fe:2d:40:70:2a:5b:73:44:25:d3:bc:eb:6c:7a:
                    fc:e0:68:e2:0f:2b:fa:c9:99:f7:b3:c1:db:f4:37:
                    d8:05:be:5f:77:d0:2e:cd:41:c1:6b:01:d7:ae:a5:
                    33:49:fa:7f:1f:ea:1e:e3:e0:28:94:0e:2f:d4:33:
                    1f:51:9f:db:f1:3e:34:70:db:ed:36:5d:1a:d0:d1:
                    2e:57:b3:f1:54:52:6f:2a:f0:c6:2a:f7:85:1d:34:
                    16:e8:a1:f9:6b:f3:ec:95:29:b8:08:47:b1:fc:2f:
                    47:1a:5c:42:09:1e:6d:a3:6e:2d:cd:68:0b:46:12:
                    0f:ef:10:b6:9f:78:40:05:cd:ed:84:df:c1:81:a0:
                    b0:c3:c1:97:3e:a2:9e:f0:5d:33:9f:9e:e0:9a:12:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CE:5F:B6:89:D4:25:5E:54:E5:3B:47:D0:A9:56:3C:13:D8:E6:4A
            X509v3 Authority Key Identifier:
                keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131382e302f32342d3234203d3e20323636303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:98:84:d4:54:11:ff:fc:51:60:6b:4e:5b:e9:86:15:a4:32:
         05:7c:a1:fb:4d:df:4f:78:7d:fd:1c:07:f6:1a:94:0b:6b:22:
         4e:86:fe:aa:f6:0c:b2:57:3b:8d:fe:95:a6:c6:4b:37:07:cc:
         03:77:f1:16:96:30:f7:7a:ed:bb:57:6c:f7:b7:9c:0e:1c:c5:
         13:78:6b:9c:e7:42:8a:7b:ab:55:4d:44:0f:19:14:83:28:67:
         e8:1d:6d:bd:10:68:de:33:18:8c:4a:c2:db:fd:37:c1:06:76:
         b2:85:a6:c2:b8:62:b5:7e:d1:c7:ac:03:0d:13:8c:28:94:5f:
         ab:69:49:39:a8:a1:02:ca:33:49:3b:0a:64:8c:19:51:01:d7:
         3f:0d:99:3a:6a:2a:15:36:15:60:4e:a3:cb:e8:30:14:7a:28:
         70:20:c3:5e:2c:3f:b2:a9:2e:d6:40:6a:4b:dd:66:88:4f:fc:
         7c:44:37:8f:d5:b1:d7:8b:7e:88:92:fa:9b:d9:71:ac:05:bf:
         ad:e4:1d:b8:4b:d9:47:73:a9:0f:0a:61:1e:8d:24:69:d6:85:
         14:0c:0c:c5:7a:a5:c0:bd:94:10:c3:33:08:2d:96:d5:18:b1:
         f5:89:1f:4e:94:b5:26:b9:c8:92:76:3f:63:72:b8:0e:be:58:
         67:6e:ed:20
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP84Xpo4rFfgN2ssd4EFnW6sh0r0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRCNDFBM0JDMEI0NEY0NzI0NUJBNDYzMjBGNDgxNzg5
NzQ3NzMwNzAeFw0yMzExMjgyMzEwMzdaFw0yNDExMjYyMzE1MzdaMDMxMTAvBgNV
BAMTKEU2Q0U1RkI2ODlENDI1NUU1NEU1M0I0N0QwQTk1NjNDMTNEOEU2NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsee6rz9XkI42xMIE07AAQxGBs
E3hFKGTowGSb+3WZ7MR7R0vXBGaVdy170oVZU/qDxdv5OBocY9Co8FcS3eSSD3jE
HOTiMhXVq8Ayt28oKh63D7uYQqCo+ZbMNkb6RCyRbObUEsz3t+b+LUBwKltzRCXT
vOtsevzgaOIPK/rJmfezwdv0N9gFvl930C7NQcFrAdeupTNJ+n8f6h7j4CiUDi/U
Mx9Rn9vxPjRw2+02XRrQ0S5Xs/FUUm8q8MYq94UdNBbooflr8+yVKbgIR7H8L0ca
XEIJHm2jbi3NaAtGEg/vELafeEAFze2E38GBoLDDwZc+op7wXTOfnuCaElP/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU5s5ftonUJV5U5TtH0KlWPBPY5kowHwYDVR0j
BBgwFoAULbQaO8C0T0ckW6RjIPSBeJdHcwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ
NTYvMC8yREI0MUEzQkMwQjQ0RjQ3MjQ1QkE0NjMyMEY0ODE3ODk3NDc3MzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEQjQxQTNCQzBCNDRGNDcy
NDVCQTQ2MzIwRjQ4MTc4OTc0NzczMDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpUHhMQzNnV3dkanJyUW1UTFpic1p1MWVWV2ZMcXl2WDFZbkdXNk40UDU2LzAv
MzQzNTJlMzQyZTMxMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0EdjANBgkqhkiG9w0BAQsFAAOCAQEAeJiE1FQR//xR
YGtOW+mGFaQyBXyh+03fT3h9/RwH9hqUC2siTob+qvYMslc7jf6VpsZLNwfMA3fx
FpYw93rtu1ds97ecDhzFE3hrnOdCinurVU1EDxkUgyhn6B1tvRBo3jMYjErC2/03
wQZ2soWmwrhitX7Rx6wDDROMKJRfq2lJOaihAsozSTsKZIwZUQHXPw2ZOmoqFTYV
YE6jy+gwFHoocCDDXiw/sqku1kBqS91miE/8fEQ3j9Wx14t+iJL6m9lxrAW/reQd
uEvZR3OpDwphHo0kadaFFAwMxXqlwL2UEMMzCC2W1Rix9YkfTpS1JrnIknY/Y3K4
Dr5YZ27tIA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org