Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
File:                     34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (raw, json)
Hash identifier:          BGJpKgvavE2UFBm3pkPD6jrkkFfRiWA6DLiwm7KlMyA=
Subject key identifier:   57:01:FC:F4:B2:B2:A3:83:DB:9B:52:EC:58:CA:85:23:FF:FB:A7:A3
Certificate issuer:       /CN=EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B
Certificate serial:       4854F4DBC2FB5D4358D581AFEA593A8027EA3B1D
Authority key identifier: EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
Signing time:             Sun 18 Feb 2024 15:00:17 +0000
ROA not before:           Sun 18 Feb 2024 14:55:17 +0000
ROA not after:            Sun 16 Feb 2025 15:00:17 +0000
asID:                     268250
IP address blocks:        45.236.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:f4:db:c2:fb:5d:43:58:d5:81:af:ea:59:3a:80:27:ea:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B
        Validity
            Not Before: Feb 18 14:55:17 2024 GMT
            Not After : Feb 16 15:00:17 2025 GMT
        Subject: CN=5701FCF4B2B2A383DB9B52EC58CA8523FFFBA7A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:bb:8e:12:59:54:33:5c:15:e6:fc:fe:b1:
                    76:ea:06:4f:99:19:b8:44:17:be:fc:a1:ba:a0:5a:
                    b5:6f:ec:e6:c7:8b:87:e2:e6:1d:bf:dc:21:99:06:
                    2a:52:ea:5c:72:64:d4:4e:0a:f8:e1:60:f6:0d:7a:
                    cf:fb:c3:41:0c:49:88:93:b4:e2:6d:49:bb:0b:90:
                    49:cb:b4:ce:71:fb:60:59:6d:bb:dc:c4:19:74:cf:
                    4a:73:28:cd:b8:5b:24:29:73:66:33:69:2f:0c:e2:
                    80:34:a7:f6:1b:0f:a1:ae:b3:2a:a2:f5:a8:5b:a0:
                    8a:51:54:7c:18:76:f8:8d:42:e3:03:32:b7:c1:f8:
                    b3:99:e7:0e:12:44:79:48:96:b5:a1:1a:c6:b9:a0:
                    c0:db:1f:ee:44:b1:0a:05:cf:b7:7e:e1:d7:ee:43:
                    e4:8c:a7:94:db:13:77:64:30:2e:07:54:fe:06:56:
                    5a:7e:f1:33:17:66:0f:da:45:5c:cb:6d:56:bf:62:
                    47:18:1f:06:b4:d9:78:61:0e:0e:9a:2c:9a:55:b3:
                    fc:9c:2f:ff:1f:0e:32:1a:44:4f:24:bb:43:98:fa:
                    9e:5f:bf:61:14:08:8a:87:b8:e3:1b:02:91:33:48:
                    de:b6:2a:dc:db:c5:e2:c5:6a:8d:52:66:bc:67:0a:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:01:FC:F4:B2:B2:A3:83:DB:9B:52:EC:58:CA:85:23:FF:FB:A7:A3
            X509v3 Authority Key Identifier:
                keyid:EB:BA:32:6E:45:63:96:6E:8B:0B:82:62:E7:DC:EF:83:CD:C9:CB:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EBBA326E4563966E8B0B8262E7DCEF83CDC9CB6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/0/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:66:36:d7:bc:5b:05:2c:cc:ea:0a:2c:40:0f:ae:a1:55:
         ed:32:65:08:13:4f:34:a3:72:10:eb:32:c4:fb:12:2c:dd:74:
         eb:27:eb:8f:f7:96:10:53:87:58:bb:1c:b2:93:fb:17:a8:ae:
         10:65:9f:a0:3c:88:7f:d5:51:a5:62:3f:83:62:fd:10:8d:62:
         73:ac:1d:1c:27:a1:05:5f:53:aa:7c:c2:dc:40:ab:01:59:34:
         3a:7f:01:af:fd:ad:c1:41:05:04:07:11:69:93:f1:59:ec:0a:
         cf:4c:7e:9a:bc:9c:11:c3:e9:74:d1:8a:3f:30:68:86:96:23:
         b8:ce:89:00:fb:93:0a:7e:fb:44:ac:63:cb:87:af:e2:8b:2c:
         9f:9f:5c:c7:75:b9:2d:55:33:51:f2:7a:92:ee:bd:b4:b6:d2:
         77:f0:21:62:37:98:71:f1:d7:d1:a4:ef:97:1f:98:0a:4b:6f:
         1b:a1:0c:52:2b:bc:1d:ea:f2:b8:09:39:04:c8:ba:4a:03:8a:
         ff:ed:22:56:61:22:92:c1:dc:01:fd:f4:fc:c6:ac:a3:84:ec:
         5e:7b:4c:13:4d:76:e0:e0:e6:73:33:e7:c2:88:0f:32:58:28:
         fd:ae:2e:44:42:2c:90:83:95:f2:23:d0:7b:a3:4c:51:84:b1:
         37:cd:30:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUSFT028L7XUNY1YGv6lk6gCfqOx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJCQTMyNkU0NTYzOTY2RThCMEI4MjYyRTdEQ0VGODND
REM5Q0I2QjAeFw0yNDAyMTgxNDU1MTdaFw0yNTAyMTYxNTAwMTdaMDMxMTAvBgNV
BAMTKDU3MDFGQ0Y0QjJCMkEzODNEQjlCNTJFQzU4Q0E4NTIzRkZGQkE3QTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5ruOEllUM1wV5vz+sXbqBk+Z
GbhEF778obqgWrVv7ObHi4fi5h2/3CGZBipS6lxyZNROCvjhYPYNes/7w0EMSYiT
tOJtSbsLkEnLtM5x+2BZbbvcxBl0z0pzKM24WyQpc2YzaS8M4oA0p/YbD6Gusyqi
9ahboIpRVHwYdviNQuMDMrfB+LOZ5w4SRHlIlrWhGsa5oMDbH+5EsQoFz7d+4dfu
Q+SMp5TbE3dkMC4HVP4GVlp+8TMXZg/aRVzLbVa/YkcYHwa02XhhDg6aLJpVs/yc
L/8fDjIaRE8ku0OY+p5fv2EUCIqHuOMbApEzSN62KtzbxeLFao1SZrxnCko9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVwH89LKyo4Pbm1LsWMqFI//7p6MwHwYDVR0j
BBgwFoAU67oybkVjlm6LC4Ji59zvg83Jy2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkZuN0xRMkhzbkEySmJUZExwNkZlRXBteWM4Vjh2UkVwRk0zQ3VhN25k
dWMvMC9FQkJBMzI2RTQ1NjM5NjZFOEIwQjgyNjJFN0RDRUY4M0NEQzlDQjZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCQkEzMjZFNDU2Mzk2NkU4
QjBCODI2MkU3RENFRjgzQ0RDOUNCNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JGbjdMUTJIc25BMkpiVGRMcDZGZUVwbXljOFY4dlJFcEZNM0N1YTduZHVjLzAv
MzQzNTJlMzIzMzM2MmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7OwwDQYJKoZIhvcNAQELBQADggEBAHZMZjbX
vFsFLMzqCixAD66hVe0yZQgTTzSjchDrMsT7EizddOsn64/3lhBTh1i7HLKT+xeo
rhBln6A8iH/VUaViP4Ni/RCNYnOsHRwnoQVfU6p8wtxAqwFZNDp/Aa/9rcFBBQQH
EWmT8VnsCs9Mfpq8nBHD6XTRij8waIaWI7jOiQD7kwp++0SsY8uHr+KLLJ+fXMd1
uS1VM1HyepLuvbS20nfwIWI3mHHx19Gk75cfmApLbxuhDFIrvB3q8rgJOQTIukoD
iv/tIlZhIpLB3AH99PzGrKOE7F57TBNNduDg5nMz58KIDzJYKP2uLkRCLJCDlfIj
0HujTFGEsTfNMCY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org