Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32342d3234203d3e20323638383039.roa
File:                     34352e3137332e3130322e302f32342d3234203d3e20323638383039.roa (raw, json)
Hash identifier:          KJXEMjWmDH35GScpjDWVKtMEqJPpvK5dVNwt8Cpi2LE=
Subject key identifier:   35:4D:B2:FE:0E:4B:0A:76:F5:92:AA:4F:E5:CC:10:00:93:5D:85:8F
Certificate issuer:       /CN=90CCAB28CAE2F9BF3875E94539AA173D2D889CC4
Certificate serial:       2ADE2F5BDAFFE4732C671E0838404C40D7C16607
Authority key identifier: 90:CC:AB:28:CA:E2:F9:BF:38:75:E9:45:39:AA:17:3D:2D:88:9C:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32342d3234203d3e20323638383039.roa
Signing time:             Fri 23 Sep 2022 02:39:27 +0000
ROA not before:           Fri 23 Sep 2022 02:34:27 +0000
ROA not after:            Fri 22 Sep 2023 02:39:27 +0000
asID:                     268809
IP address blocks:        45.173.102.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:de:2f:5b:da:ff:e4:73:2c:67:1e:08:38:40:4c:40:d7:c1:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90CCAB28CAE2F9BF3875E94539AA173D2D889CC4
        Validity
            Not Before: Sep 23 02:34:27 2022 GMT
            Not After : Sep 22 02:39:27 2023 GMT
        Subject: CN=354DB2FE0E4B0A76F592AA4FE5CC1000935D858F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:3c:24:76:20:be:42:67:d4:69:0b:c2:74:
                    2e:a4:35:21:5b:3a:66:58:f1:35:bb:30:1f:7e:29:
                    3a:cc:30:a8:28:92:c2:29:38:b8:df:ee:6a:93:c3:
                    de:a8:c9:8f:a1:89:27:46:9f:62:6c:2b:2e:ed:c1:
                    14:db:f2:a1:51:17:a9:df:ba:dc:e3:9a:90:e1:2d:
                    8d:af:aa:a4:82:60:b5:c5:d5:04:9b:bd:6f:16:83:
                    ac:88:59:ae:37:66:79:38:1c:e4:ae:c9:c6:ac:81:
                    0d:d0:d2:cc:c5:3a:50:54:d9:7f:84:67:ca:0b:15:
                    69:e6:ee:62:89:f6:a1:80:6b:ce:e7:ab:31:57:ab:
                    51:5f:be:1d:7d:2c:45:b3:16:f2:d8:bc:d6:98:c7:
                    6e:f0:d6:36:58:5f:d1:38:86:d7:37:57:16:59:5e:
                    e5:76:2d:b5:bf:28:98:5b:a7:49:5f:68:f1:99:2b:
                    93:11:aa:a0:41:49:29:af:e9:a6:56:9f:09:4e:19:
                    59:39:3e:0f:95:b8:1b:c8:45:6b:b7:84:ca:6b:bf:
                    d4:1c:a9:17:b2:63:77:91:66:e9:4d:de:d4:34:8b:
                    3f:1a:51:68:30:c5:3f:db:1d:fe:5c:67:7e:8d:16:
                    58:09:a9:ee:45:62:66:53:be:f3:3d:2e:25:05:dd:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4D:B2:FE:0E:4B:0A:76:F5:92:AA:4F:E5:CC:10:00:93:5D:85:8F
            X509v3 Authority Key Identifier:
                keyid:90:CC:AB:28:CA:E2:F9:BF:38:75:E9:45:39:AA:17:3D:2D:88:9C:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90CCAB28CAE2F9BF3875E94539AA173D2D889CC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AKksDeTBLMCGmjZHuqv61NtXWCYJW6s4mVKj7LJMfMm/0/34352e3137332e3130322e302f32342d3234203d3e20323638383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:36:ad:39:11:ae:18:ba:1b:0a:de:26:98:a0:bd:e2:e9:32:
         46:5e:61:ea:7b:81:96:31:67:2d:0a:83:20:f7:63:0d:ab:0d:
         d0:32:fe:a6:5b:16:f5:04:38:67:d9:a1:20:e4:e9:30:76:b6:
         66:0e:31:43:8a:b7:a0:72:3e:7e:d3:94:d2:1a:8a:e4:a0:ad:
         dc:4a:6e:be:be:a5:a6:5d:b5:97:a9:b5:86:07:c3:47:38:c4:
         fa:43:d2:a4:8d:45:6b:79:6b:4b:b6:3e:be:4d:df:ea:38:60:
         50:fa:e4:bd:c2:ca:d6:a9:fe:b0:e7:94:d0:f7:0f:ff:f3:f6:
         36:c7:cc:ee:41:e8:c5:d2:54:61:e5:2e:85:87:d4:01:4c:cf:
         86:42:c5:e5:e0:4e:32:30:dc:68:fd:3f:98:c0:f4:9a:99:21:
         01:90:25:6e:f6:89:4f:b2:5b:f1:2e:87:42:e3:0a:87:a9:08:
         30:65:94:19:5a:6f:3d:41:c1:d2:0e:80:07:79:0f:bb:cf:06:
         bd:84:cf:72:94:ee:c0:66:a7:03:be:e7:e2:07:28:a4:d2:46:
         77:21:5b:70:85:6b:e3:44:a7:af:40:8e:31:51:de:67:3e:77:
         84:5e:13:46:6c:ed:e7:9d:5f:b5:64:67:5f:88:ba:a5:2c:65:
         78:2e:4b:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKt4vW9r/5HMsZx4IOEBMQNfBZgcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBDQ0FCMjhDQUUyRjlCRjM4NzVFOTQ1MzlBQTE3M0Qy
RDg4OUNDNDAeFw0yMjA5MjMwMjM0MjdaFw0yMzA5MjIwMjM5MjdaMDMxMTAvBgNV
BAMTKDM1NERCMkZFMEU0QjBBNzZGNTkyQUE0RkU1Q0MxMDAwOTM1RDg1OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp9DwkdiC+QmfUaQvCdC6kNSFb
OmZY8TW7MB9+KTrMMKgoksIpOLjf7mqTw96oyY+hiSdGn2JsKy7twRTb8qFRF6nf
utzjmpDhLY2vqqSCYLXF1QSbvW8Wg6yIWa43Znk4HOSuycasgQ3Q0szFOlBU2X+E
Z8oLFWnm7mKJ9qGAa87nqzFXq1Ffvh19LEWzFvLYvNaYx27w1jZYX9E4htc3VxZZ
XuV2LbW/KJhbp0lfaPGZK5MRqqBBSSmv6aZWnwlOGVk5Pg+VuBvIRWu3hMprv9Qc
qReyY3eRZulN3tQ0iz8aUWgwxT/bHf5cZ36NFlgJqe5FYmZTvvM9LiUF3WjLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNU2y/g5LCnb1kqpP5cwQAJNdhY8wHwYDVR0j
BBgwFoAUkMyrKMri+b84delFOaoXPS2InMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkFLa3NEZVRCTE1DR21qWkh1cXY2MU50WFdDWUpXNnM0bVZLajdMSk1m
TW0vMC85MENDQUIyOENBRTJGOUJGMzg3NUU5NDUzOUFBMTczRDJEODg5Q0M0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzkwQ0NBQjI4Q0FFMkY5QkYz
ODc1RTk0NTM5QUExNzNEMkQ4ODlDQzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJBS2tzRGVUQkxNQ0dtalpIdXF2NjFOdFhXQ1lKVzZzNG1WS2o3TEpNZk1tLzAv
MzQzNTJlMzEzNzMzMmUzMTMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrWYwDQYJKoZIhvcNAQELBQADggEBABM2rTkR
rhi6GwreJpigveLpMkZeYep7gZYxZy0KgyD3Yw2rDdAy/qZbFvUEOGfZoSDk6TB2
tmYOMUOKt6ByPn7TlNIaiuSgrdxKbr6+paZdtZeptYYHw0c4xPpD0qSNRWt5a0u2
Pr5N3+o4YFD65L3Cytap/rDnlND3D//z9jbHzO5B6MXSVGHlLoWH1AFMz4ZCxeXg
TjIw3Gj9P5jA9JqZIQGQJW72iU+yW/Euh0LjCoepCDBllBlabz1BwdIOgAd5D7vP
Br2Ez3KU7sBmpwO+5+IHKKTSRnchW3CFa+NEp69AjjFR3mc+d4ReE0Zs7eedX7Vk
Z1+IuqUsZXguS8g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org