Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa
File:                     34352e3138332e31382e302f32342d3234203d3e20323639323534.roa (raw, json)
Hash identifier:          /V+UMBY1ODJcdcr2weTi8+5ulFqzpVDe+KHbrYOxPWE=
Subject key identifier:   29:E9:24:83:09:EF:02:50:A1:CD:29:DB:8A:B4:F2:DA:A5:BB:79:A3
Certificate issuer:       /CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
Certificate serial:       3590123D2F34D51473085482F6BFACFEAF12CA
Authority key identifier: 47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa
Signing time:             Tue 15 Aug 2023 14:31:07 +0000
ROA not before:           Tue 15 Aug 2023 14:26:07 +0000
ROA not after:            Tue 13 Aug 2024 14:31:07 +0000
asID:                     269254
IP address blocks:        45.183.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:90:12:3d:2f:34:d5:14:73:08:54:82:f6:bf:ac:fe:af:12:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4703DF576DCFAC4B11DA9AF278028714F3ECD9FC
        Validity
            Not Before: Aug 15 14:26:07 2023 GMT
            Not After : Aug 13 14:31:07 2024 GMT
        Subject: CN=3082010A0282010100D46023B20D785A1A33C8F88EEEC890937264F60F151AB9912E29DCB10B95DEA09C01CF5B7384ED9FC9F72C20E4916E21E852F8DA53CCEE000169288DADB865209955F0A8F4ECCB0E313B70C39D3F90B5A2EAB374D75716E1A101CA64FCCF559E24CDA9FCE979AF5E7489F51F2814EA7FA565EA9B262171A8C582958B1E39A30845C1FEB32E3BF04B0143E321DCA7638271E0870590D1609518374E8E684502473687852D874D97AE8D63836A7CD4428DB0EA02BBF0F8DF1E2847612B70E1FBD007309AAEE4F661C3174D99FCF38FED139BFCFFC36EE300FA934D3708708B6A72512586F439E07FAE5574E1A36E4979C606B66D1CAEFB6F7A35CCD6D8ACC42DBD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:60:23:b2:0d:78:5a:1a:33:c8:f8:8e:ee:c8:
                    90:93:72:64:f6:0f:15:1a:b9:91:2e:29:dc:b1:0b:
                    95:de:a0:9c:01:cf:5b:73:84:ed:9f:c9:f7:2c:20:
                    e4:91:6e:21:e8:52:f8:da:53:cc:ee:00:01:69:28:
                    8d:ad:b8:65:20:99:55:f0:a8:f4:ec:cb:0e:31:3b:
                    70:c3:9d:3f:90:b5:a2:ea:b3:74:d7:57:16:e1:a1:
                    01:ca:64:fc:cf:55:9e:24:cd:a9:fc:e9:79:af:5e:
                    74:89:f5:1f:28:14:ea:7f:a5:65:ea:9b:26:21:71:
                    a8:c5:82:95:8b:1e:39:a3:08:45:c1:fe:b3:2e:3b:
                    f0:4b:01:43:e3:21:dc:a7:63:82:71:e0:87:05:90:
                    d1:60:95:18:37:4e:8e:68:45:02:47:36:87:85:2d:
                    87:4d:97:ae:8d:63:83:6a:7c:d4:42:8d:b0:ea:02:
                    bb:f0:f8:df:1e:28:47:61:2b:70:e1:fb:d0:07:30:
                    9a:ae:e4:f6:61:c3:17:4d:99:fc:f3:8f:ed:13:9b:
                    fc:ff:c3:6e:e3:00:fa:93:4d:37:08:70:8b:6a:72:
                    51:25:86:f4:39:e0:7f:ae:55:74:e1:a3:6e:49:79:
                    c6:06:b6:6d:1c:ae:fb:6f:7a:35:cc:d6:d8:ac:c4:
                    2d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E9:24:83:09:EF:02:50:A1:CD:29:DB:8A:B4:F2:DA:A5:BB:79:A3
            X509v3 Authority Key Identifier:
                keyid:47:03:DF:57:6D:CF:AC:4B:11:DA:9A:F2:78:02:87:14:F3:EC:D9:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4703DF576DCFAC4B11DA9AF278028714F3ECD9FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUcu1SCz63zDiEnhX5DG2uqwBFhc1vrtUDLzDdvwRbdC/0/34352e3138332e31382e302f32342d3234203d3e20323639323534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:f9:d8:f4:ea:23:51:f3:ee:bf:24:69:1e:7f:46:01:63:c5:
         c8:50:45:6a:d7:39:84:f1:41:a4:9c:66:fd:fc:6c:b8:01:84:
         98:5e:2d:b4:6b:2d:5d:b2:77:58:ba:31:e6:22:d4:7a:f7:6e:
         02:4e:37:f7:68:28:dd:c9:ca:bd:ae:30:0c:a6:f1:2b:a8:98:
         64:72:66:01:75:1b:1c:df:b5:0f:72:84:22:51:b7:3b:c3:7f:
         f7:54:cd:30:a2:ff:fc:46:19:ad:d9:e9:c0:33:7f:99:8d:98:
         89:df:6d:77:70:0a:0f:1d:4b:54:c5:71:0c:6e:4c:d8:65:c3:
         97:45:92:99:8c:18:e9:e7:7a:db:fa:35:51:aa:7e:82:55:99:
         2a:78:a7:65:2a:ae:b1:fa:7f:52:aa:4b:c5:e5:40:fa:21:6a:
         07:28:ed:e8:74:61:f6:18:76:38:ca:9e:55:cd:eb:d9:c6:80:
         11:a1:80:e1:a7:5d:b9:80:34:81:40:ca:3f:b6:09:1a:4b:7e:
         41:b6:30:75:57:ff:5f:9a:0b:88:c4:ef:3d:6f:9b:eb:d3:83:
         c9:5e:d0:e8:ae:ab:59:ff:77:aa:37:da:8c:4c:27:05:36:64:
         48:b4:67:6f:98:a0:43:f8:47:5e:ea:a2:96:60:55:53:b4:e7:
         0e:d9:1f:bb
-----BEGIN CERTIFICATE-----
MIIHQDCCBiigAwIBAgITNZASPS801RRzCFSC9r+s/q8SyjANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg0NzAzREY1NzZEQ0ZBQzRCMTFEQTlBRjI3ODAyODcxNEYz
RUNEOUZDMB4XDTIzMDgxNTE0MjYwN1oXDTI0MDgxMzE0MzEwN1owggItMYICKTCC
AiUGA1UEAxOCAhwzMDgyMDEwQTAyODIwMTAxMDBENDYwMjNCMjBENzg1QTFBMzND
OEY4OEVFRUM4OTA5MzcyNjRGNjBGMTUxQUI5OTEyRTI5RENCMTBCOTVERUEwOUMw
MUNGNUI3Mzg0RUQ5RkM5RjcyQzIwRTQ5MTZFMjFFODUyRjhEQTUzQ0NFRTAwMDE2
OTI4OERBREI4NjUyMDk5NTVGMEE4RjRFQ0NCMEUzMTNCNzBDMzlEM0Y5MEI1QTJF
QUIzNzRENzU3MTZFMUExMDFDQTY0RkNDRjU1OUUyNENEQTlGQ0U5NzlBRjVFNzQ4
OUY1MUYyODE0RUE3RkE1NjVFQTlCMjYyMTcxQThDNTgyOTU4QjFFMzlBMzA4NDVD
MUZFQjMyRTNCRjA0QjAxNDNFMzIxRENBNzYzODI3MUUwODcwNTkwRDE2MDk1MTgz
NzRFOEU2ODQ1MDI0NzM2ODc4NTJEODc0RDk3QUU4RDYzODM2QTdDRDQ0MjhEQjBF
QTAyQkJGMEY4REYxRTI4NDc2MTJCNzBFMUZCRDAwNzMwOUFBRUU0RjY2MUMzMTc0
RDk5RkNGMzhGRUQxMzlCRkNGRkMzNkVFMzAwRkE5MzREMzcwODcwOEI2QTcyNTEy
NTg2RjQzOUUwN0ZBRTU1NzRFMUEzNkU0OTc5QzYwNkI2NkQxQ0FFRkI2RjdBMzVD
Q0Q2RDhBQ0M0MkRCRDAyMDMwMTAwMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDUYCOyDXhaGjPI+I7uyJCTcmT2DxUauZEuKdyxC5XeoJwBz1tzhO2f
yfcsIOSRbiHoUvjaU8zuAAFpKI2tuGUgmVXwqPTsyw4xO3DDnT+QtaLqs3TXVxbh
oQHKZPzPVZ4kzan86XmvXnSJ9R8oFOp/pWXqmyYhcajFgpWLHjmjCEXB/rMuO/BL
AUPjIdynY4Jx4IcFkNFglRg3To5oRQJHNoeFLYdNl66NY4NqfNRCjbDqArvw+N8e
KEdhK3Dh+9AHMJqu5PZhwxdNmfzzj+0Tm/z/w27jAPqTTTcIcItqclElhvQ54H+u
VXTho25JecYGtm0crvtvejXM1tisxC29AgMBAAGjggJPMIICSzAdBgNVHQ4EFgQU
KekkgwnvAlChzSnbirTy2qW7eaMwHwYDVR0jBBgwFoAURwPfV23PrEsR2pryeAKH
FPPs2fwwDgYDVR0PAQH/BAQDAgeAMIGUBgNVHR8EgYwwgYkwgYaggYOggYCGfnJz
eW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vSFVjdTFTQ3o2M3pEaUVu
aFg1REcydXF3QkZoYzF2cnRVREx6RGR2d1JiZEMvMC80NzAzREY1NzZEQ0ZBQzRC
MTFEQTlBRjI3ODAyODcxNEYzRUNEOUZDLmNybDB4BggrBgEFBQcBAQRsMGowaAYI
KwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmlj
YnJfcmVwby8wLzQ3MDNERjU3NkRDRkFDNEIxMURBOUFGMjc4MDI4NzE0RjNFQ0Q5
RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzov
L3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hVY3UxU0N6NjN6RGlFbmhYNURH
MnVxd0JGaGMxdnJ0VURMekRkdndSYmRDLzAvMzQzNTJlMzEzODMzMmUzMTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzIzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALbcS
MA0GCSqGSIb3DQEBCwUAA4IBAQAm+dj06iNR8+6/JGkef0YBY8XIUEVq1zmE8UGk
nGb9/Gy4AYSYXi20ay1dsndYujHmItR6924CTjf3aCjdycq9rjAMpvErqJhkcmYB
dRsc37UPcoQiUbc7w3/3VM0wov/8Rhmt2enAM3+ZjZiJ3213cAoPHUtUxXEMbkzY
ZcOXRZKZjBjp53rb+jVRqn6CVZkqeKdlKq6x+n9SqkvF5UD6IWoHKO3odGH2GHY4
yp5VzevZxoARoYDhp125gDSBQMo/tgkaS35BtjB1V/9fmguIxO89b5vr04PJXtDo
rqtZ/3eqN9qMTCcFNmRItGdvmKBD+Ede6qKWYFVTtOcO2R+7
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org