Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa
File:                     34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa (raw, json)
Hash identifier:          0qXTNromGkVF+4McWvVC+eRgFbE17JG6XGbxssROJM4=
Subject key identifier:   F5:15:96:23:ED:E7:9A:E2:E0:96:11:65:BA:18:16:09:E3:F0:EC:0D
Certificate issuer:       /CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
Certificate serial:       21EF3C503FCA9F3019A0650B69733482A0FC5579
Authority key identifier: 88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa
Signing time:             Mon 15 Jan 2024 22:08:57 +0000
ROA not before:           Mon 15 Jan 2024 22:03:57 +0000
ROA not after:            Mon 13 Jan 2025 22:08:57 +0000
asID:                     268085
IP address blocks:        45.168.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ef:3c:50:3f:ca:9f:30:19:a0:65:0b:69:73:34:82:a0:fc:55:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8810EFA89BF5E1688407C9B3F3EA38661B1782E8
        Validity
            Not Before: Jan 15 22:03:57 2024 GMT
            Not After : Jan 13 22:08:57 2025 GMT
        Subject: CN=F5159623EDE79AE2E0961165BA181609E3F0EC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:09:1a:f0:a1:83:e6:ab:27:70:12:1e:12:
                    ff:01:23:aa:f0:fe:51:c3:e5:9f:fd:c1:23:03:16:
                    e1:4d:60:7e:4b:fd:47:df:35:85:b5:96:09:01:da:
                    37:11:ec:cc:73:ef:ed:52:cf:94:07:90:99:01:86:
                    46:54:71:d0:0c:b0:58:85:26:9e:b2:3b:fc:8b:e4:
                    53:4f:20:3b:fc:1b:7d:5f:4c:12:a3:07:a3:c8:01:
                    50:73:8b:84:24:23:0a:2e:30:52:c0:da:9c:65:84:
                    a2:60:7f:a9:d4:66:2d:19:97:b4:82:2b:1b:ee:d8:
                    1d:e4:a4:27:f5:0f:ac:65:c4:6b:08:82:20:96:f2:
                    09:a9:e8:f3:99:e1:df:f3:e5:1d:86:27:ab:4e:f4:
                    85:92:f8:e4:a3:16:48:c7:17:1f:d5:c8:6b:f4:90:
                    13:83:a8:e5:bd:8d:68:78:f6:26:c4:6e:d6:84:e2:
                    b7:06:20:61:b1:f0:ce:b9:65:c1:03:33:9e:19:f9:
                    08:21:e3:f7:64:bf:2f:43:8f:8a:0b:52:62:72:26:
                    60:3c:d9:6f:e6:d8:30:27:c7:b6:f7:f8:01:26:54:
                    de:44:24:04:57:0c:1e:bf:36:df:91:7a:72:8c:34:
                    12:28:91:3b:b6:29:b7:0c:6a:27:16:31:bb:b2:2f:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:15:96:23:ED:E7:9A:E2:E0:96:11:65:BA:18:16:09:E3:F0:EC:0D
            X509v3 Authority Key Identifier:
                keyid:88:10:EF:A8:9B:F5:E1:68:84:07:C9:B3:F3:EA:38:66:1B:17:82:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8810EFA89BF5E1688407C9B3F3EA38661B1782E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F5mjsc9pvdmmNWNTNGAyeW5GtnYZfLyr7LzToep2oKjQ/0/34352e3136382e3234382e302f32322d3234203d3e20323638303835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:85:b5:e2:2f:68:02:01:87:63:55:d8:a0:4c:3b:c4:f4:
         07:3c:38:55:55:16:2e:2c:62:19:1b:42:77:f2:f7:ff:5d:59:
         00:1d:6f:de:36:c3:42:26:f0:0e:3a:07:ca:c6:7d:73:45:1f:
         80:87:3b:1c:d6:27:52:fa:b6:e7:ba:e2:b7:c7:bb:de:aa:2b:
         30:a2:2c:ba:bc:23:26:3f:9f:a5:af:26:9b:a5:63:df:78:05:
         7a:64:5b:36:79:5b:59:76:22:c9:95:13:e6:b0:86:37:cf:06:
         ec:87:e1:91:9d:13:88:0f:1e:e3:12:2e:8f:da:db:20:c3:cf:
         08:76:7f:58:db:6f:e1:5b:90:6f:39:29:f2:88:50:93:ad:1b:
         02:46:12:ba:ab:23:bd:32:e7:36:37:07:4f:8a:fa:bb:88:86:
         f4:a3:31:9c:16:30:1c:88:80:8a:49:37:35:42:8c:5b:98:f7:
         ca:ed:cf:d9:7c:68:f6:3d:8a:a8:ac:9e:57:0a:b6:2e:6c:c8:
         77:6e:fd:06:58:81:a4:27:10:07:ce:d2:61:4b:d4:7d:f9:e5:
         14:36:f6:98:cf:91:02:c7:f1:01:43:53:23:6f:54:be:18:df:
         27:63:e1:b8:c1:79:71:68:b5:5f:42:ad:7b:d2:a6:d5:a0:bc:
         b6:d0:91:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIe88UD/KnzAZoGULaXM0gqD8VXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODgxMEVGQTg5QkY1RTE2ODg0MDdDOUIzRjNFQTM4NjYx
QjE3ODJFODAeFw0yNDAxMTUyMjAzNTdaFw0yNTAxMTMyMjA4NTdaMDMxMTAvBgNV
BAMTKEY1MTU5NjIzRURFNzlBRTJFMDk2MTE2NUJBMTgxNjA5RTNGMEVDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRAka8KGD5qsncBIeEv8BI6rw
/lHD5Z/9wSMDFuFNYH5L/UffNYW1lgkB2jcR7Mxz7+1Sz5QHkJkBhkZUcdAMsFiF
Jp6yO/yL5FNPIDv8G31fTBKjB6PIAVBzi4QkIwouMFLA2pxlhKJgf6nUZi0Zl7SC
Kxvu2B3kpCf1D6xlxGsIgiCW8gmp6POZ4d/z5R2GJ6tO9IWS+OSjFkjHFx/VyGv0
kBODqOW9jWh49ibEbtaE4rcGIGGx8M65ZcEDM54Z+Qgh4/dkvy9Dj4oLUmJyJmA8
2W/m2DAnx7b3+AEmVN5EJARXDB6/Nt+RenKMNBIokTu2KbcMaicWMbuyL5PHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9RWWI+3nmuLglhFluhgWCePw7A0wHwYDVR0j
BBgwFoAUiBDvqJv14WiEB8mz8+o4ZhsXgugwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjVtanNjOXB2ZG1tTldOVE5HQXllVzVHdG5ZWmZMeXI3THpUb2VwMm9L
alEvMC84ODEwRUZBODlCRjVFMTY4ODQwN0M5QjNGM0VBMzg2NjFCMTc4MkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4MTBFRkE4OUJGNUUxNjg4
NDA3QzlCM0YzRUEzODY2MUIxNzgyRTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y1bWpzYzlwdmRtbU5XTlROR0F5ZVc1R3RuWVpmTHlyN0x6VG9lcDJvS2pRLzAv
MzQzNTJlMzEzNjM4MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqPgwDQYJKoZIhvcNAQELBQADggEBAC33hbXi
L2gCAYdjVdigTDvE9Ac8OFVVFi4sYhkbQnfy9/9dWQAdb942w0Im8A46B8rGfXNF
H4CHOxzWJ1L6tue64rfHu96qKzCiLLq8IyY/n6WvJpulY994BXpkWzZ5W1l2IsmV
E+awhjfPBuyH4ZGdE4gPHuMSLo/a2yDDzwh2f1jbb+FbkG85KfKIUJOtGwJGErqr
I70y5zY3B0+K+ruIhvSjMZwWMByIgIpJNzVCjFuY98rtz9l8aPY9iqisnlcKti5s
yHdu/QZYgaQnEAfO0mFL1H355RQ29pjPkQLH8QFDUyNvVL4Y3ydj4bjBeXFotV9C
rXvSptWgvLbQkXs=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org