Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa
File:                     34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier:          vCRAWX4zI6LCi/1xBCQVKm+lIj8HaFCVbKHTuKjPg+8=
Subject key identifier:   BD:94:7E:8B:82:F6:9D:93:6D:C5:A0:B6:53:0F:AE:FE:D9:85:E2:66
Certificate issuer:       /CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Certificate serial:       37B431B4F59A5BD2A207FC18D43569FD4B710BA9
Authority key identifier: BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa
Signing time:             Tue 12 Mar 2024 21:17:32 +0000
ROA not before:           Tue 12 Mar 2024 21:12:32 +0000
ROA not after:            Tue 11 Mar 2025 21:17:32 +0000
asID:                     267388
IP address blocks:        45.174.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:31:b4:f5:9a:5b:d2:a2:07:fc:18:d4:35:69:fd:4b:71:0b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
        Validity
            Not Before: Mar 12 21:12:32 2024 GMT
            Not After : Mar 11 21:17:32 2025 GMT
        Subject: CN=BD947E8B82F69D936DC5A0B6530FAEFED985E266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:42:44:ee:a0:9e:2f:bf:78:5d:0a:d7:09:
                    60:49:1e:53:e0:fb:02:85:fe:67:36:05:81:9e:d2:
                    de:d6:68:8a:1c:1f:3a:a5:ef:92:d3:90:4a:46:6f:
                    2c:78:94:0e:0f:3c:c0:e4:27:f6:8c:1f:7f:7d:9a:
                    af:79:11:69:65:2a:20:b7:3b:ef:72:92:c5:cd:75:
                    32:af:41:5a:c4:88:59:be:4d:4a:ae:bb:fb:c3:10:
                    16:8e:03:2c:6c:7c:d8:2b:4a:f2:66:04:74:45:58:
                    c9:00:e3:c4:3e:72:fd:5d:da:51:8d:e4:57:63:7b:
                    0b:33:f5:e3:b5:bf:d5:97:c8:7e:4c:a2:97:b0:d2:
                    3c:7f:8a:3f:72:0c:1a:2a:79:0d:9a:23:c4:e5:f0:
                    2d:18:55:7e:3c:13:66:77:5f:48:3f:e5:fc:84:88:
                    6d:e5:e8:6a:ac:0a:ec:43:f2:fd:b4:2f:61:58:1d:
                    e3:59:7d:cc:02:25:c6:c8:ac:91:d7:a3:cf:32:4d:
                    7d:21:4d:0c:cb:e2:58:ad:c6:8d:85:b2:91:0b:ac:
                    91:12:ce:5b:c2:f0:94:f8:3d:12:8a:57:96:08:78:
                    8e:21:d4:2c:65:e3:2c:08:f7:99:31:b1:c8:75:be:
                    7c:6f:83:70:fb:91:81:56:e4:8b:bd:44:77:c6:2b:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:94:7E:8B:82:F6:9D:93:6D:C5:A0:B6:53:0F:AE:FE:D9:85:E2:66
            X509v3 Authority Key Identifier:
                keyid:BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e3137342e3230382e302f32322d3234203d3e20323637333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:5e:48:d7:4b:0f:b0:ef:47:ec:8c:a3:57:bc:30:3c:ad:96:
         e9:e7:76:fe:ff:0f:07:38:bf:dc:29:4a:2b:81:ad:19:f1:3e:
         b1:31:1d:62:64:64:07:e8:9c:09:fd:21:e8:af:e2:2b:4d:71:
         a6:8f:f4:d5:07:4d:c3:e2:ed:a5:4d:71:f4:cb:25:3b:9a:bf:
         34:21:7f:0b:af:d1:9b:82:c7:60:c7:ae:5c:c6:68:69:4d:14:
         54:47:38:1d:8d:7f:fd:dd:e5:02:e3:70:05:39:89:99:b8:8a:
         33:1f:20:21:a1:13:f9:fa:ef:bf:c7:f1:ee:14:08:db:a9:98:
         1b:7b:2b:55:bd:73:42:c2:e1:72:40:49:ed:8f:df:7d:b9:76:
         0a:ab:5e:10:1e:42:5c:78:f7:b6:f3:1a:a3:5c:a0:06:58:5c:
         67:e3:03:8f:c8:86:b6:08:ef:3f:54:01:b2:bd:d7:57:ee:6c:
         58:62:d3:97:d2:aa:81:a9:a7:2e:67:b6:b1:aa:1b:a2:ab:6a:
         d0:10:2d:91:f6:a8:c5:8c:68:30:a0:46:55:1f:41:ad:4f:f5:
         e1:d0:5d:e0:0a:b4:f2:db:43:b6:ec:e7:9c:10:84:1d:dd:34:
         9a:34:b9:a1:20:f6:34:d1:e8:33:f0:d3:cc:8e:9e:de:36:f9:
         55:ce:8b:e3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUN7QxtPWaW9KiB/wY1DVp/UtxC6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGODdCRjc2QkI2OUQ1Mzg3NUU4QzFFMUQyRTVGODgy
NTNEMzAyNTAeFw0yNDAzMTIyMTEyMzJaFw0yNTAzMTEyMTE3MzJaMDMxMTAvBgNV
BAMTKEJEOTQ3RThCODJGNjlEOTM2REM1QTBCNjUzMEZBRUZFRDk4NUUyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI3kJE7qCeL794XQrXCWBJHlPg
+wKF/mc2BYGe0t7WaIocHzql75LTkEpGbyx4lA4PPMDkJ/aMH399mq95EWllKiC3
O+9yksXNdTKvQVrEiFm+TUquu/vDEBaOAyxsfNgrSvJmBHRFWMkA48Q+cv1d2lGN
5Fdjewsz9eO1v9WXyH5Mopew0jx/ij9yDBoqeQ2aI8Tl8C0YVX48E2Z3X0g/5fyE
iG3l6GqsCuxD8v20L2FYHeNZfcwCJcbIrJHXo88yTX0hTQzL4litxo2FspELrJES
zlvC8JT4PRKKV5YIeI4h1Cxl4ywI95kxsch1vnxvg3D7kYFW5Iu9RHfGK277AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUvZR+i4L2nZNtxaC2Uw+u/tmF4mYwHwYDVR0j
BBgwFoAUvfh792u2nVOHXoweHS5fiCU9MCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC9CREY4N0JGNzZCQjY5RDUzODc1RThDMUUxRDJFNUY4ODI1M0QzMDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERjg3QkY3NkJCNjlENTM4
NzVFOEMxRTFEMkU1Rjg4MjUzRDMwMjUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzQzNTJlMzEzNzM0MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMzM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrtAwDQYJKoZIhvcNAQELBQADggEBAM5eSNdL
D7DvR+yMo1e8MDytlunndv7/Dwc4v9wpSiuBrRnxPrExHWJkZAfonAn9Ieiv4itN
caaP9NUHTcPi7aVNcfTLJTuavzQhfwuv0ZuCx2DHrlzGaGlNFFRHOB2Nf/3d5QLj
cAU5iZm4ijMfICGhE/n677/H8e4UCNupmBt7K1W9c0LC4XJASe2P3325dgqrXhAe
Qlx497bzGqNcoAZYXGfjA4/IhrYI7z9UAbK911fubFhi05fSqoGppy5ntrGqG6Kr
atAQLZH2qMWMaDCgRlUfQa1P9eHQXeAKtPLbQ7bs55wQhB3dNJo0uaEg9jTR6DPw
08yOnt42+VXOi+M=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:48 2024 by rpki-client on console-fra.rpki-client.org