Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa
File:                     34352e3138312e33302e302f32342d3234203d3e20323639313630.roa (raw, json)
Hash identifier:          lPJ85NKGqsjuOCKIq0YKEEKj02srzH9By5yqJLQdOME=
Subject key identifier:   02:62:44:CB:A1:87:DA:93:81:0F:1D:F0:B2:82:25:02:9A:77:14:71
Certificate issuer:       /CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
Certificate serial:       58F9647C794E33D3FC965A5C5BCA51E5D073A21F
Authority key identifier: 72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa
Signing time:             Thu 11 Apr 2024 10:56:38 +0000
ROA not before:           Thu 11 Apr 2024 10:51:38 +0000
ROA not after:            Thu 10 Apr 2025 10:56:38 +0000
asID:                     269160
IP address blocks:        45.181.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:64:7c:79:4e:33:d3:fc:96:5a:5c:5b:ca:51:e5:d0:73:a2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72B98D1E08BC566416F2A78F6210C20E8F8E6700
        Validity
            Not Before: Apr 11 10:51:38 2024 GMT
            Not After : Apr 10 10:56:38 2025 GMT
        Subject: CN=026244CBA187DA93810F1DF0B28225029A771471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:e6:92:96:0c:91:f1:69:9e:ad:3d:18:7c:
                    56:86:fc:d4:7e:43:0a:a5:28:4e:3c:37:8f:e2:99:
                    d1:85:39:69:d3:4e:09:82:2f:f2:4c:ce:c0:d7:ab:
                    10:04:28:75:06:d8:e5:0c:bb:da:d6:73:9c:f9:20:
                    d8:a1:af:3e:25:e7:82:0e:f9:fe:6c:23:e3:0d:ec:
                    d9:5a:86:ca:71:6c:51:07:43:9d:1e:3f:c0:dc:a8:
                    19:e5:ee:79:bd:09:bf:d9:48:89:0b:99:cc:49:51:
                    a0:89:76:52:1d:c7:1d:0a:48:87:a0:45:73:c6:fc:
                    32:1a:99:d3:3f:e6:13:ae:aa:ac:bc:f6:54:92:f7:
                    c3:47:cb:50:11:d7:3f:6a:72:36:75:54:da:4b:9a:
                    1d:24:ce:9a:97:f3:06:24:96:13:f4:cd:75:29:ac:
                    ca:e5:a2:f3:e8:62:21:41:c2:15:20:56:58:38:dc:
                    4b:33:cb:48:67:ff:0b:a9:0f:73:17:e1:17:8a:ba:
                    12:9c:c9:28:65:e8:23:91:38:c4:ea:63:66:f2:c7:
                    98:b3:25:53:c6:f5:cf:27:2d:51:a8:76:a4:59:28:
                    32:32:1b:16:0d:a6:13:a4:b8:77:4b:29:c3:e6:e1:
                    4d:d6:b2:24:23:a9:eb:eb:8a:ac:82:7e:cb:5b:a3:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:62:44:CB:A1:87:DA:93:81:0F:1D:F0:B2:82:25:02:9A:77:14:71
            X509v3 Authority Key Identifier:
                keyid:72:B9:8D:1E:08:BC:56:64:16:F2:A7:8F:62:10:C2:0E:8F:8E:67:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72B98D1E08BC566416F2A78F6210C20E8F8E6700.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/0/34352e3138312e33302e302f32342d3234203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:33:47:14:81:57:58:7c:0c:85:6b:65:4d:de:eb:56:b7:85:
         3e:a5:70:b0:ae:f6:7a:84:dc:5c:77:74:b0:81:0e:a2:17:ee:
         37:80:8e:00:ee:8a:5e:f7:cc:76:95:7c:c9:af:37:f6:90:aa:
         41:93:a9:49:82:fa:a0:eb:df:27:68:f4:c4:e7:b6:42:0f:37:
         07:19:43:fc:eb:e2:fa:8b:ca:ec:fb:7c:09:54:1d:4d:73:65:
         e9:62:4e:6f:c3:7f:2b:89:73:45:7c:8d:e9:64:47:7c:c0:16:
         f0:cd:2f:66:26:a0:c7:a6:31:7d:0d:d0:c7:cc:95:5c:85:58:
         49:08:d3:d3:43:fc:a2:68:85:1d:3c:fa:36:86:48:11:87:96:
         93:43:e4:65:65:ff:45:5f:73:ce:d0:46:92:c0:9a:dc:12:db:
         ad:22:0b:03:49:89:17:b8:6e:0d:77:e9:d5:7d:30:40:e0:1d:
         32:f8:46:de:66:1b:b8:a3:dd:d8:55:54:8a:83:31:fe:61:29:
         09:bf:d1:c4:68:44:9b:e1:c8:b7:75:2b:d2:e3:a5:29:23:43:
         68:30:4f:3e:99:fd:10:8d:8b:06:41:ad:f7:6c:73:e0:f0:76:
         ba:a5:3d:7f:f6:62:93:9c:78:07:73:c1:e7:56:4e:8c:8b:8f:
         e6:90:08:da
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWPlkfHlOM9P8llpcW8pR5dBzoh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCOThEMUUwOEJDNTY2NDE2RjJBNzhGNjIxMEMyMEU4
RjhFNjcwMDAeFw0yNDA0MTExMDUxMzhaFw0yNTA0MTAxMDU2MzhaMDMxMTAvBgNV
BAMTKDAyNjI0NENCQTE4N0RBOTM4MTBGMURGMEIyODIyNTAyOUE3NzE0NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxc+aSlgyR8WmerT0YfFaG/NR+
QwqlKE48N4/imdGFOWnTTgmCL/JMzsDXqxAEKHUG2OUMu9rWc5z5INihrz4l54IO
+f5sI+MN7NlahspxbFEHQ50eP8DcqBnl7nm9Cb/ZSIkLmcxJUaCJdlIdxx0KSIeg
RXPG/DIamdM/5hOuqqy89lSS98NHy1AR1z9qcjZ1VNpLmh0kzpqX8wYklhP0zXUp
rMrlovPoYiFBwhUgVlg43Eszy0hn/wupD3MX4ReKuhKcyShl6COROMTqY2byx5iz
JVPG9c8nLVGodqRZKDIyGxYNphOkuHdLKcPm4U3WsiQjqevriqyCfstboz7TAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAmJEy6GH2pOBDx3wsoIlApp3FHEwHwYDVR0j
BBgwFoAUcrmNHgi8VmQW8qePYhDCDo+OZwAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkJGc3FNZkZXdWNBcExLQm8yUFVmazJMSjFDNXIxYkRKaGJnZE50RXZo
OWcvMC83MkI5OEQxRTA4QkM1NjY0MTZGMkE3OEY2MjEwQzIwRThGOEU2NzAwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyQjk4RDFFMDhCQzU2NjQx
NkYyQTc4RjYyMTBDMjBFOEY4RTY3MDAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJCRnNxTWZGV3VjQXBMS0JvMlBVZmsyTEoxQzVyMWJESmhiZ2ROdEV2aDlnLzAv
MzQzNTJlMzEzODMxMmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbUeMA0GCSqGSIb3DQEBCwUAA4IBAQB1M0cUgVdY
fAyFa2VN3utWt4U+pXCwrvZ6hNxcd3SwgQ6iF+43gI4A7ope98x2lXzJrzf2kKpB
k6lJgvqg698naPTE57ZCDzcHGUP86+L6i8rs+3wJVB1Nc2XpYk5vw38riXNFfI3p
ZEd8wBbwzS9mJqDHpjF9DdDHzJVchVhJCNPTQ/yiaIUdPPo2hkgRh5aTQ+RlZf9F
X3PO0EaSwJrcEtutIgsDSYkXuG4Nd+nVfTBA4B0y+EbeZhu4o93YVVSKgzH+YSkJ
v9HEaESb4ci3dSvS46UpI0NoME8+mf0QjYsGQa33bHPg8Ha6pT1/9mKTnHgHc8Hn
Vk6Mi4/mkAja
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org