Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
File:                     34352e3233322e37322e302f32322d3232203d3e20323637323531.roa (raw, json)
Hash identifier:          X8WnEux9m8Lr8pYsCmwhplPtbvCAxXr5e2dcNIx5k20=
Subject key identifier:   2C:EF:FB:F1:1A:16:14:17:17:DA:7F:7D:15:57:E1:77:5B:1F:92:60
Certificate issuer:       /CN=9C9296102315824CFD263B973FA8E26ADEAD1475
Certificate serial:       26547467D257339A99A6F4F39BCCACF3BFBF18A2
Authority key identifier: 9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa
Signing time:             Thu 15 Feb 2024 18:00:01 +0000
ROA not before:           Thu 15 Feb 2024 17:55:01 +0000
ROA not after:            Thu 13 Feb 2025 18:00:01 +0000
asID:                     267251
IP address blocks:        45.232.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:54:74:67:d2:57:33:9a:99:a6:f4:f3:9b:cc:ac:f3:bf:bf:18:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C9296102315824CFD263B973FA8E26ADEAD1475
        Validity
            Not Before: Feb 15 17:55:01 2024 GMT
            Not After : Feb 13 18:00:01 2025 GMT
        Subject: CN=2CEFFBF11A16141717DA7F7D1557E1775B1F9260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f9:60:e3:5a:ed:6f:4d:9c:a5:a4:e7:74:24:
                    d7:be:fc:9d:03:ad:3b:c2:87:39:8b:e9:b8:0b:ca:
                    ed:ca:37:8c:8e:c7:ab:15:f2:f1:cc:3a:29:77:47:
                    c9:7f:51:c7:b0:d0:3d:3c:1f:65:69:37:43:13:e9:
                    e4:0d:af:f3:b4:ec:53:6c:ec:6d:af:d8:d0:30:5e:
                    ce:a2:40:b9:b1:9d:25:a2:4c:50:33:27:27:29:7a:
                    8c:55:f4:fb:48:59:f5:c4:ff:d3:23:06:d2:f6:07:
                    f6:37:12:6a:a2:56:c8:a6:f0:d7:76:b8:b2:14:64:
                    a4:7d:c9:89:54:77:6c:d2:c5:bd:4d:2e:42:d7:da:
                    3a:cc:1a:b5:99:59:2e:5d:20:9b:69:87:ea:01:7a:
                    c6:e7:f7:2d:50:94:f3:92:3a:01:be:03:ef:76:ab:
                    ce:d8:ac:f0:ec:a6:f5:cc:52:61:5a:d5:36:f5:52:
                    a3:e8:7e:11:45:4a:78:d1:9e:2e:f7:c9:d7:1a:50:
                    62:2d:4d:04:8b:55:dc:06:aa:3f:84:e7:1f:d5:a1:
                    07:6e:40:62:8b:30:c3:ad:3d:7d:4d:56:0c:08:45:
                    17:87:f5:d2:55:f6:6a:61:f5:25:bb:b6:a2:56:3b:
                    90:36:1f:1c:74:1a:fb:dd:49:c5:72:40:dd:45:65:
                    1e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:FB:F1:1A:16:14:17:17:DA:7F:7D:15:57:E1:77:5B:1F:92:60
            X509v3 Authority Key Identifier:
                keyid:9C:92:96:10:23:15:82:4C:FD:26:3B:97:3F:A8:E2:6A:DE:AD:14:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/9C9296102315824CFD263B973FA8E26ADEAD1475.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9C9296102315824CFD263B973FA8E26ADEAD1475.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVgEJMmGeJvJPRXHHmgHVm6Gc8eRZZSfWkAvhvTQL2ko/0/34352e3233322e37322e302f32322d3232203d3e20323637323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:19:0e:70:4f:10:91:6d:60:c0:88:6b:eb:93:c6:a2:94:
         4b:d8:5f:e9:df:9c:aa:80:fc:98:26:ee:15:c5:f0:d7:63:d3:
         f1:21:c1:83:48:0a:77:23:50:b4:75:e3:67:7b:ff:66:0c:2e:
         3d:f2:d8:02:71:22:e5:68:68:f5:3f:05:f3:3b:81:79:4c:ef:
         17:3c:df:f2:57:0a:bc:6b:c9:39:4e:e1:ad:b9:a5:d7:c0:00:
         da:d9:20:3f:5d:f6:15:c6:69:13:af:f6:c9:41:15:81:4d:10:
         4a:f7:dc:d4:27:e7:08:14:b7:4f:4a:d9:c1:62:0d:2c:c2:78:
         ac:7a:c3:66:f3:1b:f7:43:93:f3:af:e1:ea:55:b4:74:60:8e:
         0a:13:4a:59:90:dc:3e:e3:ac:4e:2b:f9:f0:4a:fb:5f:cd:34:
         79:87:bd:5d:30:23:8f:f8:d2:9e:51:29:bc:d6:30:dd:48:f3:
         aa:93:a8:96:4d:8f:26:53:dd:33:86:db:77:91:40:93:98:09:
         5d:86:26:61:bc:07:2a:be:51:99:06:9f:22:59:f0:c0:da:ba:
         c5:85:ad:96:22:b1:c4:e5:2a:9b:ed:5a:95:7e:76:04:d6:8b:
         a6:c9:08:06:d2:07:dc:f4:5d:33:cd:88:28:10:90:df:7a:4b:
         d5:2e:2a:e3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJlR0Z9JXM5qZpvTzm8ys87+/GKIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUM5Mjk2MTAyMzE1ODI0Q0ZEMjYzQjk3M0ZBOEUyNkFE
RUFEMTQ3NTAeFw0yNDAyMTUxNzU1MDFaFw0yNTAyMTMxODAwMDFaMDMxMTAvBgNV
BAMTKDJDRUZGQkYxMUExNjE0MTcxN0RBN0Y3RDE1NTdFMTc3NUIxRjkyNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+WDjWu1vTZylpOd0JNe+/J0D
rTvChzmL6bgLyu3KN4yOx6sV8vHMOil3R8l/Ucew0D08H2VpN0MT6eQNr/O07FNs
7G2v2NAwXs6iQLmxnSWiTFAzJycpeoxV9PtIWfXE/9MjBtL2B/Y3EmqiVsim8Nd2
uLIUZKR9yYlUd2zSxb1NLkLX2jrMGrWZWS5dIJtph+oBesbn9y1QlPOSOgG+A+92
q87YrPDspvXMUmFa1Tb1UqPofhFFSnjRni73ydcaUGItTQSLVdwGqj+E5x/VoQdu
QGKLMMOtPX1NVgwIRReH9dJV9mph9SW7tqJWO5A2Hxx0GvvdScVyQN1FZR5JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULO/78RoWFBcX2n99FVfhd1sfkmAwHwYDVR0j
BBgwFoAUnJKWECMVgkz9JjuXP6jiat6tFHUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSFZnRUpNbUdlSnZKUFJYSEhtZ0hWbTZHYzhlUlpaU2ZXa0F2aHZUUUwy
a28vMC85QzkyOTYxMDIzMTU4MjRDRkQyNjNCOTczRkE4RTI2QURFQUQxNDc1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlDOTI5NjEwMjMxNTgyNENG
RDI2M0I5NzNGQThFMjZBREVBRDE0NzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hWZ0VKTW1HZUp2SlBSWEhIbWdIVm02R2M4ZVJaWlNmV2tBdmh2VFFMMmtvLzAv
MzQzNTJlMzIzMzMyMmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzIzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLehIMA0GCSqGSIb3DQEBCwUAA4IBAQBuehkOcE8Q
kW1gwIhr65PGopRL2F/p35yqgPyYJu4VxfDXY9PxIcGDSAp3I1C0deNne/9mDC49
8tgCcSLlaGj1PwXzO4F5TO8XPN/yVwq8a8k5TuGtuaXXwADa2SA/XfYVxmkTr/bJ
QRWBTRBK99zUJ+cIFLdPStnBYg0swnisesNm8xv3Q5Pzr+HqVbR0YI4KE0pZkNw+
46xOK/nwSvtfzTR5h71dMCOP+NKeUSm81jDdSPOqk6iWTY8mU90zhtt3kUCTmAld
hiZhvAcqvlGZBp8iWfDA2rrFha2WIrHE5Sqb7VqVfnYE1oumyQgG0gfc9F0zzYgo
EJDfekvVLirj
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org