Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa
File:                     34352e3232342e37322e302f32332d3233203d3e20323637363638.roa (raw, json)
Hash identifier:          xut54bKgNanC0EyghkS5Vgyh+dmdkfgPaCuaL0eOyjQ=
Subject key identifier:   02:E6:10:B2:8D:41:E9:48:9F:32:54:A9:51:3B:7D:23:2B:D3:79:1D
Certificate issuer:       /CN=D04F30B05726FA543C147DA94BFBD44C1D936300
Certificate serial:       06161AF81BE71C8CCE612CD42FD5EBE9C07CB875
Authority key identifier: D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa
Signing time:             Tue 13 Feb 2024 19:17:03 +0000
ROA not before:           Tue 13 Feb 2024 19:12:03 +0000
ROA not after:            Tue 11 Feb 2025 19:17:03 +0000
asID:                     267668
IP address blocks:        45.224.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:16:1a:f8:1b:e7:1c:8c:ce:61:2c:d4:2f:d5:eb:e9:c0:7c:b8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D04F30B05726FA543C147DA94BFBD44C1D936300
        Validity
            Not Before: Feb 13 19:12:03 2024 GMT
            Not After : Feb 11 19:17:03 2025 GMT
        Subject: CN=02E610B28D41E9489F3254A9513B7D232BD3791D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:4d:23:e4:01:c1:2b:b0:94:8a:1c:91:d4:
                    00:ef:4d:ab:67:39:c3:f0:e6:8a:80:fd:a8:bd:69:
                    9c:54:51:95:8b:01:af:8e:44:81:0a:88:a3:31:6d:
                    33:3d:5d:a9:4d:c5:ed:02:83:ef:c2:d3:d2:22:56:
                    90:b2:cb:22:8f:8b:c8:4e:46:69:e2:ff:59:4e:14:
                    ca:0b:cd:96:3a:6c:3a:99:e2:36:72:dd:72:dd:d1:
                    e2:8f:16:06:b1:ba:d4:c8:7f:d5:1f:16:3d:cb:35:
                    80:df:74:f6:9c:3e:37:5a:87:1a:5f:03:e7:6e:fd:
                    43:41:f5:27:bf:a4:24:76:0d:d8:c7:6d:63:90:e2:
                    74:28:97:5d:82:f7:1d:0b:45:de:cc:c6:99:b7:50:
                    59:cc:d3:b2:57:31:7a:bc:7e:41:66:5f:84:41:fc:
                    f4:96:25:2f:5b:52:75:07:c5:bb:a1:9f:a0:e7:8c:
                    05:57:a3:e1:68:d9:7d:fc:94:69:81:f8:a1:c9:06:
                    8b:48:83:a0:9b:c3:2a:c0:5d:0f:14:a8:c9:6f:99:
                    98:75:e8:92:0a:8f:14:ef:42:38:4e:25:c8:9d:68:
                    7f:1d:0f:94:d2:58:c0:3a:3f:a3:65:42:61:51:8f:
                    f5:13:91:10:84:f0:ca:f3:e5:b4:52:e2:b0:5a:03:
                    92:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E6:10:B2:8D:41:E9:48:9F:32:54:A9:51:3B:7D:23:2B:D3:79:1D
            X509v3 Authority Key Identifier:
                keyid:D0:4F:30:B0:57:26:FA:54:3C:14:7D:A9:4B:FB:D4:4C:1D:93:63:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/D04F30B05726FA543C147DA94BFBD44C1D936300.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D04F30B05726FA543C147DA94BFBD44C1D936300.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/34352e3232342e37322e302f32332d3233203d3e20323637363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:03:ae:66:d4:7a:6e:9d:6f:e7:f8:a0:4a:69:2a:ea:3b:da:
         de:ad:b3:76:3a:bb:ee:20:1f:e6:9f:33:71:7a:4e:a0:52:2c:
         8b:5e:b7:d1:5c:93:fc:41:4c:6d:b6:33:81:a8:fb:f7:a2:50:
         00:77:70:7c:c8:91:ab:1d:d1:a4:0a:4e:a5:c0:96:9c:7d:5d:
         80:88:8d:12:09:ff:8f:f9:46:26:eb:9d:cf:88:43:e6:52:b6:
         5b:71:a0:50:ed:8b:3f:34:d1:0c:7d:19:31:44:fe:d0:74:52:
         d0:9d:c7:79:d2:f5:84:8f:90:22:da:13:ba:82:ae:2a:3b:f5:
         16:ee:de:a7:ce:2b:74:df:be:d3:d1:fa:cf:33:52:9a:75:9e:
         8c:a1:08:c2:cb:ee:fe:41:8e:c4:91:49:b0:ad:05:a1:9a:6c:
         55:07:31:81:5e:a0:1b:5b:e0:5a:b6:45:cf:8b:57:86:a3:f4:
         db:b1:1e:e5:e2:67:29:25:64:d8:ed:97:2e:c6:88:e8:b7:61:
         f4:50:f7:0c:6a:be:54:1f:5e:e7:65:06:cc:b0:4c:94:eb:4a:
         97:5b:c8:b9:be:a7:40:b6:7e:26:11:a2:1d:14:9c:b7:35:29:
         12:92:28:19:ff:e4:5e:16:97:dc:bd:69:e8:33:6e:c7:1a:ef:
         1a:d3:36:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBhYa+BvnHIzOYSzUL9Xr6cB8uHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0RjMwQjA1NzI2RkE1NDNDMTQ3REE5NEJGQkQ0NEMx
RDkzNjMwMDAeFw0yNDAyMTMxOTEyMDNaFw0yNTAyMTExOTE3MDNaMDMxMTAvBgNV
BAMTKDAyRTYxMEIyOEQ0MUU5NDg5RjMyNTRBOTUxM0I3RDIzMkJEMzc5MUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaQ00j5AHBK7CUihyR1ADvTatn
OcPw5oqA/ai9aZxUUZWLAa+ORIEKiKMxbTM9XalNxe0Cg+/C09IiVpCyyyKPi8hO
Rmni/1lOFMoLzZY6bDqZ4jZy3XLd0eKPFgaxutTIf9UfFj3LNYDfdPacPjdahxpf
A+du/UNB9Se/pCR2DdjHbWOQ4nQol12C9x0LRd7Mxpm3UFnM07JXMXq8fkFmX4RB
/PSWJS9bUnUHxbuhn6DnjAVXo+Fo2X38lGmB+KHJBotIg6CbwyrAXQ8UqMlvmZh1
6JIKjxTvQjhOJcidaH8dD5TSWMA6P6NlQmFRj/UTkRCE8Mrz5bRS4rBaA5JhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAuYQso1B6UifMlSpUTt9IyvTeR0wHwYDVR0j
BBgwFoAU0E8wsFcm+lQ8FH2pS/vUTB2TYwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVVicEZZS1RRc21WcG45b3dqcUN2TnlxQ3NCM1hkNzJOVzVnWkd5aWt5
TGEvMC9EMDRGMzBCMDU3MjZGQTU0M0MxNDdEQTk0QkZCRDQ0QzFEOTM2MzAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwNEYzMEIwNTcyNkZBNTQz
QzE0N0RBOTRCRkJENDRDMUQ5MzYzMDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VVYnBGWUtUUXNtVnBuOW93anFDdk55cUNzQjNYZDcyTlc1Z1pHeWlreUxhLzAv
MzQzNTJlMzIzMjM0MmUzNzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeBIMA0GCSqGSIb3DQEBCwUAA4IBAQAIA65m1Hpu
nW/n+KBKaSrqO9rerbN2OrvuIB/mnzNxek6gUiyLXrfRXJP8QUxttjOBqPv3olAA
d3B8yJGrHdGkCk6lwJacfV2AiI0SCf+P+UYm653PiEPmUrZbcaBQ7Ys/NNEMfRkx
RP7QdFLQncd50vWEj5Ai2hO6gq4qO/UW7t6nzit0377T0frPM1KadZ6MoQjCy+7+
QY7EkUmwrQWhmmxVBzGBXqAbW+BatkXPi1eGo/TbsR7l4mcpJWTY7Zcuxojot2H0
UPcMar5UH17nZQbMsEyU60qXW8i5vqdAtn4mEaIdFJy3NSkSkigZ/+ReFpfcvWno
M27HGu8a0zbN
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:23 2024 by rpki-client on console-ams.rpki-client.org