Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/34352e362e31322e302f32322d3234203d3e20323636313137.roa
File:                     34352e362e31322e302f32322d3234203d3e20323636313137.roa (raw, json)
Hash identifier:          IurlccndKN/Il+wNSsLzt3m/HNYuDzZQkKBwm7LAM8w=
Subject key identifier:   62:09:9A:D3:49:6F:74:CC:2F:A9:DA:42:38:7B:5A:03:BE:95:D3:9B
Certificate issuer:       /CN=91EB2E701826E3D89FC9609A6F9ACE7FC24516EA
Certificate serial:       58172AC457949C2659B99C31A03D2D4B9C334630
Authority key identifier: 91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/34352e362e31322e302f32322d3234203d3e20323636313137.roa
Signing time:             Thu 13 Jul 2023 15:00:00 +0000
ROA not before:           Thu 13 Jul 2023 14:55:00 +0000
ROA not after:            Thu 11 Jul 2024 15:00:00 +0000
asID:                     266117
IP address blocks:        45.6.12.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:17:2a:c4:57:94:9c:26:59:b9:9c:31:a0:3d:2d:4b:9c:33:46:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91EB2E701826E3D89FC9609A6F9ACE7FC24516EA
        Validity
            Not Before: Jul 13 14:55:00 2023 GMT
            Not After : Jul 11 15:00:00 2024 GMT
        Subject: CN=3082010A0282010100BBBEA41A7FEE02A38A3E009B0669C359CBC1D75E9B89BD4B5B674A108B818EED191E8EDC84C83DCDC7764226027360D5EB201124F994CB8F6F59A28B8E9E32DDA3F8D7BB15A32530D7153A4DD94CA4B0DCDAAB5AA583655969C009E1405C1672A6C6F3673AF07728A1C67B0EDA1274D9D54830E28D0396F46FF847CAB0E25C189B4D14E845C959D28D6F01725484922938CF5B385ED1D8BA78B62E7AAD0580660BECF60A2416ABDAD879834B3A2EE1FCA2739DBEE34A487E5E2FC1F17D3B921411D6589A46F8531321FAA67948C807FA8E4C6108D308BDEDD8731C8559A8D4745B5E52DAF40C8B391B1D243547FCC4142F3161F329AF750E3A9DE7E8934B0E190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:a4:1a:7f:ee:02:a3:8a:3e:00:9b:06:69:
                    c3:59:cb:c1:d7:5e:9b:89:bd:4b:5b:67:4a:10:8b:
                    81:8e:ed:19:1e:8e:dc:84:c8:3d:cd:c7:76:42:26:
                    02:73:60:d5:eb:20:11:24:f9:94:cb:8f:6f:59:a2:
                    8b:8e:9e:32:dd:a3:f8:d7:bb:15:a3:25:30:d7:15:
                    3a:4d:d9:4c:a4:b0:dc:da:ab:5a:a5:83:65:59:69:
                    c0:09:e1:40:5c:16:72:a6:c6:f3:67:3a:f0:77:28:
                    a1:c6:7b:0e:da:12:74:d9:d5:48:30:e2:8d:03:96:
                    f4:6f:f8:47:ca:b0:e2:5c:18:9b:4d:14:e8:45:c9:
                    59:d2:8d:6f:01:72:54:84:92:29:38:cf:5b:38:5e:
                    d1:d8:ba:78:b6:2e:7a:ad:05:80:66:0b:ec:f6:0a:
                    24:16:ab:da:d8:79:83:4b:3a:2e:e1:fc:a2:73:9d:
                    be:e3:4a:48:7e:5e:2f:c1:f1:7d:3b:92:14:11:d6:
                    58:9a:46:f8:53:13:21:fa:a6:79:48:c8:07:fa:8e:
                    4c:61:08:d3:08:bd:ed:d8:73:1c:85:59:a8:d4:74:
                    5b:5e:52:da:f4:0c:8b:39:1b:1d:24:35:47:fc:c4:
                    14:2f:31:61:f3:29:af:75:0e:3a:9d:e7:e8:93:4b:
                    0e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:09:9A:D3:49:6F:74:CC:2F:A9:DA:42:38:7B:5A:03:BE:95:D3:9B
            X509v3 Authority Key Identifier:
                keyid:91:EB:2E:70:18:26:E3:D8:9F:C9:60:9A:6F:9A:CE:7F:C2:45:16:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/91EB2E701826E3D89FC9609A6F9ACE7FC24516EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdoeVcXTsCC3pCJAs5kjHC4euAu5ek26USiLR7N8eq1U/0/34352e362e31322e302f32322d3234203d3e20323636313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:26:40:a3:5e:fb:3e:7d:ae:ca:72:f6:69:3c:56:2b:83:50:
         56:9d:68:de:00:da:4a:32:c2:00:17:02:96:e6:9b:2c:d1:be:
         3d:10:fe:6b:bc:c0:32:39:1d:69:65:c7:5d:b0:ff:46:0d:e6:
         3e:b8:e1:08:b0:6a:f8:7d:d1:3a:f6:b3:fa:f8:bc:77:93:52:
         aa:88:0e:ce:bc:a3:be:09:e5:35:b6:fd:2c:b3:9d:81:6b:4b:
         44:40:42:70:f3:ab:ec:24:42:02:c5:b9:22:66:fe:d5:21:84:
         db:0d:fc:3b:96:56:16:5f:87:92:40:81:f7:21:4f:ea:3a:20:
         2a:99:a9:c7:8b:d7:45:6a:53:dd:29:76:82:cb:fa:98:2c:36:
         1a:03:f7:64:7d:58:43:00:36:49:23:41:b0:00:fd:16:73:48:
         25:60:15:17:e6:0b:4e:a7:4d:db:25:af:a8:70:66:4e:f1:48:
         e3:39:aa:b2:c9:c6:07:0c:e3:23:2b:9f:4b:ea:a1:c0:f8:f5:
         8d:6b:83:59:dd:ed:c7:af:ce:92:d6:a1:b7:d3:af:24:fc:0c:
         6e:bf:f1:f2:39:2f:49:c9:66:7c:b8:cc:44:a2:29:37:9b:57:
         4c:7c:5c:73:b3:8c:49:92:3a:65:26:8e:40:1e:26:26:8c:1e:
         42:3a:54:c3
-----BEGIN CERTIFICATE-----
MIIHPTCCBiWgAwIBAgIUWBcqxFeUnCZZuZwxoD0tS5wzRjAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFFQjJFNzAxODI2RTNEODlGQzk2MDlBNkY5QUNFN0ZD
MjQ1MTZFQTAeFw0yMzA3MTMxNDU1MDBaFw0yNDA3MTExNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJCRUE0MUE3RkVFMDJBMzhB
M0UwMDlCMDY2OUMzNTlDQkMxRDc1RTlCODlCRDRCNUI2NzRBMTA4QjgxOEVFRDE5
MUU4RURDODRDODNEQ0RDNzc2NDIyNjAyNzM2MEQ1RUIyMDExMjRGOTk0Q0I4RjZG
NTlBMjhCOEU5RTMyRERBM0Y4RDdCQjE1QTMyNTMwRDcxNTNBNEREOTRDQTRCMERD
REFBQjVBQTU4MzY1NTk2OUMwMDlFMTQwNUMxNjcyQTZDNkYzNjczQUYwNzcyOEEx
QzY3QjBFREExMjc0RDlENTQ4MzBFMjhEMDM5NkY0NkZGODQ3Q0FCMEUyNUMxODlC
NEQxNEU4NDVDOTU5RDI4RDZGMDE3MjU0ODQ5MjI5MzhDRjVCMzg1RUQxRDhCQTc4
QjYyRTdBQUQwNTgwNjYwQkVDRjYwQTI0MTZBQkRBRDg3OTgzNEIzQTJFRTFGQ0Ey
NzM5REJFRTM0QTQ4N0U1RTJGQzFGMTdEM0I5MjE0MTFENjU4OUE0NkY4NTMxMzIx
RkFBNjc5NDhDODA3RkE4RTRDNjEwOEQzMDhCREVERDg3MzFDODU1OUE4RDQ3NDVC
NUU1MkRBRjQwQzhCMzkxQjFEMjQzNTQ3RkNDNDE0MkYzMTYxRjMyOUFGNzUwRTNB
OURFN0U4OTM0QjBFMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu76kGn/uAqOKPgCbBmnDWcvB116bib1LW2dKEIuBju0ZHo7chMg9
zcd2QiYCc2DV6yARJPmUy49vWaKLjp4y3aP417sVoyUw1xU6TdlMpLDc2qtapYNl
WWnACeFAXBZypsbzZzrwdyihxnsO2hJ02dVIMOKNA5b0b/hHyrDiXBibTRToRclZ
0o1vAXJUhJIpOM9bOF7R2Lp4ti56rQWAZgvs9gokFqva2HmDSzou4fyic52+40pI
fl4vwfF9O5IUEdZYmkb4UxMh+qZ5SMgH+o5MYQjTCL3t2HMchVmo1HRbXlLa9AyL
ORsdJDVH/MQULzFh8ymvdQ46nefok0sOGQIDAQABo4ICSzCCAkcwHQYDVR0OBBYE
FGIJmtNJb3TML6naQjh7WgO+ldObMB8GA1UdIwQYMBaAFJHrLnAYJuPYn8lgmm+a
zn/CRRbqMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hkb2VWY1hUc0NDM3BD
SkFzNWtqSEM0ZXVBdTVlazI2VVNpTFI3TjhlcTFVLzAvOTFFQjJFNzAxODI2RTNE
ODlGQzk2MDlBNkY5QUNFN0ZDMjQ1MTZFQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC85MUVCMkU3MDE4MjZFM0Q4OUZDOTYwOUE2RjlBQ0U3RkMyNDUx
NkVBLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IZG9lVmNYVHNDQzNwQ0pBczVr
akhDNGV1QXU1ZWsyNlVTaUxSN044ZXExVS8wLzM0MzUyZTM2MmUzMTMyMmUzMDJm
MzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzMTM3LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQYMMA0G
CSqGSIb3DQEBCwUAA4IBAQCOJkCjXvs+fa7KcvZpPFYrg1BWnWjeANpKMsIAFwKW
5pss0b49EP5rvMAyOR1pZcddsP9GDeY+uOEIsGr4fdE69rP6+Lx3k1KqiA7OvKO+
CeU1tv0ss52Ba0tEQEJw86vsJEICxbkiZv7VIYTbDfw7llYWX4eSQIH3IU/qOiAq
manHi9dFalPdKXaCy/qYLDYaA/dkfVhDADZJI0GwAP0Wc0glYBUX5gtOp03bJa+o
cGZO8UjjOaqyycYHDOMjK59L6qHA+PWNa4NZ3e3Hr86S1qG3068k/Axuv/HyOS9J
yWZ8uMxEoik3m1dMfFxzs4xJkjplJo5AHiYmjB5COlTD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org