Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3234203d3e20323637353830.roa
File:                     34352e37302e36382e302f32322d3234203d3e20323637353830.roa (raw, json)
Hash identifier:          uVSm4Uj37HbuGz8Q40fjsJApa04iJ/dTrbyNC4juWj0=
Subject key identifier:   48:56:8E:F3:7F:B0:E9:C3:C9:00:38:E5:14:12:FC:F9:B4:1B:F1:C4
Certificate issuer:       /CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
Certificate serial:       064794968FA751174663F32425397273F80184CA
Authority key identifier: F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3234203d3e20323637353830.roa
Signing time:             Thu 07 Mar 2024 16:52:43 +0000
ROA not before:           Thu 07 Mar 2024 16:47:43 +0000
ROA not after:            Thu 06 Mar 2025 16:52:43 +0000
asID:                     267580
IP address blocks:        45.70.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:94:96:8f:a7:51:17:46:63:f3:24:25:39:72:73:f8:01:84:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DF71C27336F4C869A8498C23F1734EEE31AA15
        Validity
            Not Before: Mar  7 16:47:43 2024 GMT
            Not After : Mar  6 16:52:43 2025 GMT
        Subject: CN=48568EF37FB0E9C3C90038E51412FCF9B41BF1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:cd:ad:18:94:3f:f1:b9:a3:d2:15:59:52:
                    5b:23:f0:9e:86:b3:1a:50:49:c5:0a:6a:55:b9:a8:
                    ff:13:bf:c6:70:ab:63:ed:86:d3:f8:ee:2b:8c:2c:
                    b9:e5:9a:76:7e:93:50:b2:89:f1:b0:50:aa:80:34:
                    eb:5e:40:4f:3e:a8:73:a1:3f:bb:cd:60:ea:f7:45:
                    54:a9:c6:2b:49:97:56:6b:f8:47:0f:e8:81:da:70:
                    1d:d0:6b:c1:b6:9e:37:cd:16:2d:bd:9a:b9:d4:10:
                    99:50:db:bf:79:0d:0d:3c:bb:38:d1:35:8e:9a:17:
                    b0:13:7d:bf:96:d5:53:07:d6:b3:f5:80:c1:8c:2f:
                    97:7e:d1:cb:b7:c8:5b:19:ec:14:40:d0:95:a8:65:
                    69:99:43:63:3d:96:17:46:94:6c:7f:af:85:85:fc:
                    54:05:ec:37:85:dd:35:54:4b:18:57:b5:49:c3:06:
                    fe:2e:a1:08:03:a6:90:b4:b4:7a:61:8d:f8:40:97:
                    46:ae:aa:66:3f:3f:c9:36:16:81:d1:63:25:75:59:
                    52:58:d3:1b:44:a8:48:8b:2d:c3:96:e8:2f:76:5f:
                    3c:e2:2c:bc:b8:93:68:e3:fb:10:81:2c:7d:af:1c:
                    01:ff:67:6a:28:31:ff:56:65:37:22:f5:6f:c2:45:
                    b5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:56:8E:F3:7F:B0:E9:C3:C9:00:38:E5:14:12:FC:F9:B4:1B:F1:C4
            X509v3 Authority Key Identifier:
                keyid:F3:DF:71:C2:73:36:F4:C8:69:A8:49:8C:23:F1:73:4E:EE:31:AA:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F3DF71C27336F4C869A8498C23F1734EEE31AA15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5VsocChdaEt41fkMZKsvv5j1VDyhrZWmz5FWG7hGXyy/0/34352e37302e36382e302f32322d3234203d3e20323637353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:63:24:07:0e:42:b7:cb:77:32:27:57:31:36:07:bb:3a:4d:
         17:77:ee:0f:ee:1a:6f:8b:17:17:95:0b:ce:55:8a:eb:8c:34:
         b0:e9:92:a0:65:ca:0f:00:11:e6:19:df:67:2d:39:d5:55:fb:
         37:42:1b:cb:75:31:81:1b:95:ae:38:a1:71:40:07:b3:e6:5d:
         22:92:ae:db:78:ff:6c:dd:6d:a6:0a:5d:e9:45:22:54:dc:25:
         ec:a1:49:e2:ca:95:30:b7:94:8c:7e:b1:7c:b4:27:36:64:3c:
         50:16:50:95:0a:14:cf:f9:64:ec:ed:a3:64:54:71:a7:bb:cb:
         5d:3c:86:f0:c7:f7:90:60:8a:25:b3:77:35:f3:ca:b5:ce:57:
         b9:ed:c1:13:57:67:82:db:d3:be:2e:92:2f:b7:3f:cc:46:54:
         c2:e2:29:93:f8:f5:f2:1c:6f:12:db:b0:1b:04:af:04:d0:c4:
         a5:2d:15:6e:1c:b6:38:dc:cb:fc:b3:2d:98:91:b9:9a:f3:08:
         89:f3:51:f6:57:0f:1a:84:d2:17:a0:21:dd:7d:82:00:22:7b:
         f2:e3:1e:20:fe:b5:c9:3e:35:c7:95:20:dd:84:79:71:31:46:
         fd:e0:79:e2:c7:55:7d:58:b5:88:f7:90:e1:93:20:98:5d:27:
         5f:72:71:9f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUBkeUlo+nURdGY/MkJTlyc/gBhMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNERjcxQzI3MzM2RjRDODY5QTg0OThDMjNGMTczNEVF
RTMxQUExNTAeFw0yNDAzMDcxNjQ3NDNaFw0yNTAzMDYxNjUyNDNaMDMxMTAvBgNV
BAMTKDQ4NTY4RUYzN0ZCMEU5QzNDOTAwMzhFNTE0MTJGQ0Y5QjQxQkYxQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaos2tGJQ/8bmj0hVZUlsj8J6G
sxpQScUKalW5qP8Tv8Zwq2PthtP47iuMLLnlmnZ+k1CyifGwUKqANOteQE8+qHOh
P7vNYOr3RVSpxitJl1Zr+EcP6IHacB3Qa8G2njfNFi29mrnUEJlQ2795DQ08uzjR
NY6aF7ATfb+W1VMH1rP1gMGML5d+0cu3yFsZ7BRA0JWoZWmZQ2M9lhdGlGx/r4WF
/FQF7DeF3TVUSxhXtUnDBv4uoQgDppC0tHphjfhAl0auqmY/P8k2FoHRYyV1WVJY
0xtEqEiLLcOW6C92XzziLLy4k2jj+xCBLH2vHAH/Z2ooMf9WZTci9W/CRbXJAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUSFaO83+w6cPJADjlFBL8+bQb8cQwHwYDVR0j
BBgwFoAU899xwnM29MhpqEmMI/FzTu4xqhUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTVWc29jQ2hkYUV0NDFma01aS3N2djVqMVZEeWhyWldtejVGV0c3aEdY
eXkvMC9GM0RGNzFDMjczMzZGNEM4NjlBODQ5OEMyM0YxNzM0RUVFMzFBQTE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzREY3MUMyNzMzNkY0Qzg2
OUE4NDk4QzIzRjE3MzRFRUUzMUFBMTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U1VnNvY0NoZGFFdDQxZmtNWktzdnY1ajFWRHloclpXbXo1RldHN2hHWHl5LzAv
MzQzNTJlMzczMDJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GRDANBgkqhkiG9w0BAQsFAAOCAQEAVmMkBw5Ct8t3
MidXMTYHuzpNF3fuD+4ab4sXF5ULzlWK64w0sOmSoGXKDwAR5hnfZy051VX7N0Ib
y3UxgRuVrjihcUAHs+ZdIpKu23j/bN1tpgpd6UUiVNwl7KFJ4sqVMLeUjH6xfLQn
NmQ8UBZQlQoUz/lk7O2jZFRxp7vLXTyG8Mf3kGCKJbN3NfPKtc5Xue3BE1dngtvT
vi6SL7c/zEZUwuIpk/j18hxvEtuwGwSvBNDEpS0Vbhy2ONzL/LMtmJG5mvMIifNR
9lcPGoTSF6Ah3X2CACJ78uMeIP61yT41x5Ug3YR5cTFG/eB54sdVfVi1iPeQ4ZMg
mF0nX3Jxnw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:02 2024 by rpki-client on console-fra.rpki-client.org