Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
File:                     34352e36352e3133312e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier:          zDrStmHUtQzer1mq5SW+27hIIjzY1c1ejXDHPhL+fiI=
Subject key identifier:   A2:A8:92:34:37:9B:2D:C5:21:9B:8A:48:99:FE:DF:57:C3:22:5E:71
Certificate issuer:       /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial:       79797882746DCF2AEC1749F52CCD35D3D0C6DB53
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa
Signing time:             Mon 05 Feb 2024 22:47:27 +0000
ROA not before:           Mon 05 Feb 2024 22:42:27 +0000
ROA not after:            Mon 03 Feb 2025 22:47:27 +0000
asID:                     266528
IP address blocks:        45.65.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:79:78:82:74:6d:cf:2a:ec:17:49:f5:2c:cd:35:d3:d0:c6:db:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
        Validity
            Not Before: Feb  5 22:42:27 2024 GMT
            Not After : Feb  3 22:47:27 2025 GMT
        Subject: CN=A2A89234379B2DC5219B8A4899FEDF57C3225E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:05:3d:31:1b:42:77:38:2c:6a:3c:0a:42:8c:
                    5b:11:06:ae:f5:8c:ff:4c:6c:87:c5:d9:fa:d5:1f:
                    a0:15:5d:c9:0b:ca:45:02:87:de:6a:d3:16:11:fb:
                    fe:88:c5:d9:a4:87:5f:16:8c:15:3b:d7:fc:7e:4b:
                    b8:53:a4:c2:a3:2c:87:a1:e8:74:69:69:e6:71:74:
                    d6:4e:e8:47:ae:e4:ad:98:21:eb:ee:45:b7:30:49:
                    e1:c1:35:e5:25:b3:7b:79:11:14:53:46:37:45:58:
                    5e:6a:5a:c0:5a:a9:fd:bb:06:04:62:e1:53:86:99:
                    6a:ac:aa:a8:a3:94:a8:b0:cb:c8:22:74:f9:f0:0a:
                    01:68:ce:36:88:3f:39:12:8d:08:c8:32:4d:78:5c:
                    20:b9:ed:47:38:b0:18:1f:87:a5:07:8f:ec:7c:84:
                    ee:db:80:5c:76:97:d7:bd:50:05:3c:0a:c4:ac:02:
                    28:cd:6b:f8:28:71:6b:cd:fa:2a:93:5a:37:0b:a7:
                    ba:70:ab:c6:50:37:3c:d1:1f:05:f0:7f:a0:59:41:
                    52:59:f4:03:30:a2:d0:ef:3e:3d:c8:e7:4b:d1:75:
                    04:58:e5:28:31:e2:06:48:91:22:ce:62:ea:90:d4:
                    8c:57:45:e5:b2:1f:2a:fc:53:8c:37:c6:b7:33:3e:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A8:92:34:37:9B:2D:C5:21:9B:8A:48:99:FE:DF:57:C3:22:5E:71
            X509v3 Authority Key Identifier:
                keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133312e302f32342d3234203d3e20323636353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:d8:b5:99:2f:bc:29:5f:f0:97:f1:cb:ec:3f:6b:40:28:
         4d:fc:2b:a6:e2:cf:8d:9b:81:5f:a4:b8:07:1b:76:28:eb:26:
         62:d5:f0:1b:85:eb:4b:76:4a:bf:a1:57:73:0a:d5:51:07:d1:
         89:5f:ba:6c:8d:4a:29:9d:e4:d0:8a:00:d8:8d:db:d1:1e:00:
         5a:ad:af:64:1b:aa:5c:77:d2:ff:10:41:25:b3:88:6f:97:7a:
         62:e5:88:65:3d:8f:c1:b0:4c:2b:71:27:ec:72:03:10:03:47:
         3f:97:b7:5f:7e:53:e7:c2:f4:a5:ae:7e:63:14:40:ed:5c:be:
         1c:d1:fd:a9:a6:e0:a3:1a:e0:af:1e:ea:d0:02:5f:d2:7f:f1:
         01:d2:44:61:0e:49:85:e6:94:25:5f:f3:60:b0:de:6d:d9:f0:
         85:5a:58:a6:f1:a1:bd:18:68:7a:7e:08:2b:ac:4b:a8:9c:7f:
         fa:b6:a3:6a:ad:70:94:54:ce:16:ca:b0:61:ad:5d:f3:a3:6d:
         39:75:9b:97:16:11:08:93:43:de:94:0b:db:db:b8:aa:f0:3c:
         03:21:42:f4:32:a7:78:30:be:b2:66:c3:0f:3a:72:93:a5:76:
         0d:81:81:2c:e7:fb:8c:4f:5e:76:5b:f3:01:90:87:71:99:84:
         b3:66:d6:a3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeXl4gnRtzyrsF0n1LM0109DG21MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzg5NzIwRTM3MTk5MjNCMkQ4QjA2RUY4RjBCM0M1OTI0
N0Q2OUFGMTAeFw0yNDAyMDUyMjQyMjdaFw0yNTAyMDMyMjQ3MjdaMDMxMTAvBgNV
BAMTKEEyQTg5MjM0Mzc5QjJEQzUyMTlCOEE0ODk5RkVERjU3QzMyMjVFNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBT0xG0J3OCxqPApCjFsRBq71
jP9MbIfF2frVH6AVXckLykUCh95q0xYR+/6Ixdmkh18WjBU71/x+S7hTpMKjLIeh
6HRpaeZxdNZO6Eeu5K2YIevuRbcwSeHBNeUls3t5ERRTRjdFWF5qWsBaqf27BgRi
4VOGmWqsqqijlKiwy8gidPnwCgFozjaIPzkSjQjIMk14XCC57Uc4sBgfh6UHj+x8
hO7bgFx2l9e9UAU8CsSsAijNa/gocWvN+iqTWjcLp7pwq8ZQNzzRHwXwf6BZQVJZ
9AMwotDvPj3I50vRdQRY5Sgx4gZIkSLOYuqQ1IxXReWyHyr8U4w3xrczPo/BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoqiSNDebLcUhm4pImf7fV8MiXnEwHwYDVR0j
BBgwFoAUyJcg43GZI7LYsG748LPFkkfWmvEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnJONWVYVDJNVUY1RnZNbWhCY25DRGpIdlBtYkZia21rV3hNQVNvN3Uy
dzIvMC9DODk3MjBFMzcxOTkyM0IyRDhCMDZFRjhGMEIzQzU5MjQ3RDY5QUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M4OTcyMEUzNzE5OTIzQjJE
OEIwNkVGOEYwQjNDNTkyNDdENjlBRjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyTjVlWFQyTVVGNUZ2TW1oQmNuQ0RqSHZQbWJGYmtta1d4TUFTbzd1MncyLzAv
MzQzNTJlMzYzNTJlMzEzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzUzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUGDMA0GCSqGSIb3DQEBCwUAA4IBAQBOENi1mS+8
KV/wl/HL7D9rQChN/Cum4s+Nm4FfpLgHG3Yo6yZi1fAbhetLdkq/oVdzCtVRB9GJ
X7psjUopneTQigDYjdvRHgBara9kG6pcd9L/EEEls4hvl3pi5YhlPY/BsEwrcSfs
cgMQA0c/l7dfflPnwvSlrn5jFEDtXL4c0f2ppuCjGuCvHurQAl/Sf/EB0kRhDkmF
5pQlX/NgsN5t2fCFWlim8aG9GGh6fggrrEuonH/6tqNqrXCUVM4WyrBhrV3zo205
dZuXFhEIk0PelAvb27iq8DwDIUL0Mqd4ML6yZsMPOnKTpXYNgYEs5/uMT152W/MB
kIdxmYSzZtaj
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org