Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
File:                     34352e3138382e382e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier:          QVL7/xM86sAqYJIfkWwDk8H3eH+kQt9WNp1Qj5OJsYQ=
Subject key identifier:   67:F6:1E:A7:AD:A9:08:0E:93:CA:77:87:DE:F1:F4:1E:D6:08:4D:3F
Certificate issuer:       /CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
Certificate serial:       23886F84FCC5D11A7604D4D3125A2D8F7CABBED5
Authority key identifier: D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
Signing time:             Fri 29 Mar 2024 08:00:00 +0000
ROA not before:           Fri 29 Mar 2024 07:55:00 +0000
ROA not after:            Fri 28 Mar 2025 08:00:00 +0000
asID:                     269566
IP address blocks:        45.188.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:88:6f:84:fc:c5:d1:1a:76:04:d4:d3:12:5a:2d:8f:7c:ab:be:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1AFA2F091C9D049DA7C881AF2A692163AAD4643
        Validity
            Not Before: Mar 29 07:55:00 2024 GMT
            Not After : Mar 28 08:00:00 2025 GMT
        Subject: CN=3082010A0282010100B288286C2FF985674922B14694AA0DF8B1FD1949DBEB24D303CE616E920A1A812C0A8890413C2A9D2603E44F322A49D445FA5A10B3B359B88BFF9ABCC95D83000BABE0F0911160F72F6675C2A02653AEA8FB866CF74DE2A701CD4B9C889C2DC096C7025FE5CE3C3346679750D8FDE6F233E6054D415CE935CD5D8B948D359AE65F5A8DDBCFAFB62D06B49A864CE8EF6817E440EF3A59EAC42CE55F441ED056A2F54BF6A0763B7315E7904DC24EA68A616AA4DCFE7D770F01C8646A37DFF5595B76C150F9B3BE655C87AA7C5BE4762637C55220B7274D9EB70D9626F45D8456DD5516C47DA5485AED4C71570397A5B3185C6B9DEB82B6ED7A7148F114089B2B7F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:28:6c:2f:f9:85:67:49:22:b1:46:94:aa:
                    0d:f8:b1:fd:19:49:db:eb:24:d3:03:ce:61:6e:92:
                    0a:1a:81:2c:0a:88:90:41:3c:2a:9d:26:03:e4:4f:
                    32:2a:49:d4:45:fa:5a:10:b3:b3:59:b8:8b:ff:9a:
                    bc:c9:5d:83:00:0b:ab:e0:f0:91:11:60:f7:2f:66:
                    75:c2:a0:26:53:ae:a8:fb:86:6c:f7:4d:e2:a7:01:
                    cd:4b:9c:88:9c:2d:c0:96:c7:02:5f:e5:ce:3c:33:
                    46:67:97:50:d8:fd:e6:f2:33:e6:05:4d:41:5c:e9:
                    35:cd:5d:8b:94:8d:35:9a:e6:5f:5a:8d:db:cf:af:
                    b6:2d:06:b4:9a:86:4c:e8:ef:68:17:e4:40:ef:3a:
                    59:ea:c4:2c:e5:5f:44:1e:d0:56:a2:f5:4b:f6:a0:
                    76:3b:73:15:e7:90:4d:c2:4e:a6:8a:61:6a:a4:dc:
                    fe:7d:77:0f:01:c8:64:6a:37:df:f5:59:5b:76:c1:
                    50:f9:b3:be:65:5c:87:aa:7c:5b:e4:76:26:37:c5:
                    52:20:b7:27:4d:9e:b7:0d:96:26:f4:5d:84:56:dd:
                    55:16:c4:7d:a5:48:5a:ed:4c:71:57:03:97:a5:b3:
                    18:5c:6b:9d:eb:82:b6:ed:7a:71:48:f1:14:08:9b:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:1E:A7:AD:A9:08:0E:93:CA:77:87:DE:F1:F4:1E:D6:08:4D:3F
            X509v3 Authority Key Identifier:
                keyid:D1:AF:A2:F0:91:C9:D0:49:DA:7C:88:1A:F2:A6:92:16:3A:AD:46:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D1AFA2F091C9D049DA7C881AF2A692163AAD4643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:f9:c4:b8:fb:9f:28:bd:79:d8:7f:65:0e:3f:a4:19:ae:
         1e:4e:c0:a8:3f:14:89:9d:c2:c2:b2:68:2f:24:0d:af:b1:9b:
         84:1f:59:bd:d8:b9:a1:5a:6a:a5:92:bc:8f:77:08:e1:79:06:
         77:5c:b9:4f:05:8d:34:48:01:4e:f1:d6:c7:4a:5a:3a:ee:0c:
         38:15:c8:9d:06:68:ac:b8:aa:7f:3a:76:bb:9d:f1:ea:58:1c:
         e7:84:d2:ed:4a:50:c8:ef:0a:b8:60:b7:01:24:e3:d7:42:69:
         f8:f8:5c:6d:0d:f5:74:33:40:ff:09:46:63:65:93:8f:14:71:
         fb:ab:c0:c2:9c:4b:a6:1e:4d:03:1f:52:78:a0:b3:70:11:9b:
         55:ce:4d:ed:33:c0:e8:dd:f8:02:98:d1:0f:9c:98:e8:66:34:
         56:54:56:7a:4e:38:9c:dc:db:41:3c:48:6e:c4:0f:de:10:72:
         cf:92:e5:63:3b:10:36:ad:5b:7c:e2:b1:5f:e8:e1:72:87:6a:
         08:15:9f:cd:29:67:7f:dd:81:c5:1a:ef:8e:b6:f3:2c:69:9e:
         9b:5e:06:e2:ab:4d:bb:97:cc:c1:26:ed:87:72:69:36:6c:9c:
         c5:e3:f0:68:ab:b7:3e:ea:65:67:b1:73:b8:c4:6b:85:4e:84:
         5a:fc:41:8c
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUI4hvhPzF0Rp2BNTTElotj3yrvtUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBRkEyRjA5MUM5RDA0OURBN0M4ODFBRjJBNjkyMTYz
QUFENDY0MzAeFw0yNDAzMjkwNzU1MDBaFw0yNTAzMjgwODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI4ODI4NkMyRkY5ODU2NzQ5
MjJCMTQ2OTRBQTBERjhCMUZEMTk0OURCRUIyNEQzMDNDRTYxNkU5MjBBMUE4MTJD
MEE4ODkwNDEzQzJBOUQyNjAzRTQ0RjMyMkE0OUQ0NDVGQTVBMTBCM0IzNTlCODhC
RkY5QUJDQzk1RDgzMDAwQkFCRTBGMDkxMTE2MEY3MkY2Njc1QzJBMDI2NTNBRUE4
RkI4NjZDRjc0REUyQTcwMUNENEI5Qzg4OUMyREMwOTZDNzAyNUZFNUNFM0MzMzQ2
Njc5NzUwRDhGREU2RjIzM0U2MDU0RDQxNUNFOTM1Q0Q1RDhCOTQ4RDM1OUFFNjVG
NUE4RERCQ0ZBRkI2MkQwNkI0OUE4NjRDRThFRjY4MTdFNDQwRUYzQTU5RUFDNDJD
RTU1RjQ0MUVEMDU2QTJGNTRCRjZBMDc2M0I3MzE1RTc5MDREQzI0RUE2OEE2MTZB
QTREQ0ZFN0Q3NzBGMDFDODY0NkEzN0RGRjU1OTVCNzZDMTUwRjlCM0JFNjU1Qzg3
QUE3QzVCRTQ3NjI2MzdDNTUyMjBCNzI3NEQ5RUI3MEQ5NjI2RjQ1RDg0NTZERDU1
MTZDNDdEQTU0ODVBRUQ0QzcxNTcwMzk3QTVCMzE4NUM2QjlERUI4MkI2RUQ3QTcx
NDhGMTE0MDg5QjJCN0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsogobC/5hWdJIrFGlKoN+LH9GUnb6yTTA85hbpIKGoEsCoiQQTwq
nSYD5E8yKknURfpaELOzWbiL/5q8yV2DAAur4PCREWD3L2Z1wqAmU66o+4Zs903i
pwHNS5yInC3AlscCX+XOPDNGZ5dQ2P3m8jPmBU1BXOk1zV2LlI01muZfWo3bz6+2
LQa0moZM6O9oF+RA7zpZ6sQs5V9EHtBWovVL9qB2O3MV55BNwk6mimFqpNz+fXcP
Achkajff9VlbdsFQ+bO+ZVyHqnxb5HYmN8VSILcnTZ63DZYm9F2EVt1VFsR9pUha
7UxxVwOXpbMYXGud64K27XpxSPEUCJsrfwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGf2HqetqQgOk8p3h97x9B7WCE0/MB8GA1UdIwQYMBaAFNGvovCRydBJ2nyIGvKm
khY6rUZDMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VmVjdHMW9rVDF2UXRG
Yk1RcGdhdERDOXB0aHdBTVVkOEhVcnZ1RW92RTRLLzAvRDFBRkEyRjA5MUM5RDA0
OURBN0M4ODFBRjJBNjkyMTYzQUFENDY0My5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9EMUFGQTJGMDkxQzlEMDQ5REE3Qzg4MUFGMkE2OTIxNjNBQUQ0
NjQzLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FZlY3RzFva1QxdlF0RmJNUXBn
YXREQzlwdGh3QU1VZDhIVXJ2dUVvdkU0Sy8wLzM0MzUyZTMxMzgzODJlMzgyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzNTM2MzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtvAgw
DQYJKoZIhvcNAQELBQADggEBAAg/+cS4+58ovXnYf2UOP6QZrh5OwKg/FImdwsKy
aC8kDa+xm4QfWb3YuaFaaqWSvI93COF5BndcuU8FjTRIAU7x1sdKWjruDDgVyJ0G
aKy4qn86drud8epYHOeE0u1KUMjvCrhgtwEk49dCafj4XG0N9XQzQP8JRmNlk48U
cfurwMKcS6YeTQMfUnigs3ARm1XOTe0zwOjd+AKY0Q+cmOhmNFZUVnpOOJzc20E8
SG7ED94Qcs+S5WM7EDatW3zisV/o4XKHaggVn80pZ3/dgcUa74628yxpnpteBuKr
TbuXzMEm7YdyaTZsnMXj8Girtz7qZWexc7jEa4VOhFr8QYw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org