Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa
File:                     34352e3232342e3231362e302f32322d3232203d3e203631353932.roa (raw, json)
Hash identifier:          Rqjd6iDEkznNc/X16pzexH+yz1i3w1qSwslmWVSYGOE=
Subject key identifier:   31:4C:2A:7A:03:2D:4C:24:C0:C0:F7:D1:B4:EE:D5:C2:52:94:86:AA
Certificate issuer:       /CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
Certificate serial:       709A3580A842DBF364F150586BCB218B0C9C1FCA
Authority key identifier: C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa
Signing time:             Thu 24 Aug 2023 18:52:59 +0000
ROA not before:           Thu 24 Aug 2023 18:47:59 +0000
ROA not after:            Thu 22 Aug 2024 18:52:59 +0000
asID:                     61592
IP address blocks:        45.224.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:35:80:a8:42:db:f3:64:f1:50:58:6b:cb:21:8b:0c:9c:1f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C34DAA9600E4BD7885676C583DE4B9CA1AC7D273
        Validity
            Not Before: Aug 24 18:47:59 2023 GMT
            Not After : Aug 22 18:52:59 2024 GMT
        Subject: CN=314C2A7A032D4C24C0C0F7D1B4EED5C2529486AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:f8:1f:c7:f9:a9:f4:4a:11:99:fe:1d:24:
                    21:97:27:7a:c1:c3:47:d9:ba:a9:9f:c8:bf:c9:10:
                    a6:fd:c8:90:b0:50:67:8e:58:59:e6:c0:89:32:d1:
                    21:89:a3:6c:b7:be:86:c6:8a:ad:3a:3a:fb:96:c3:
                    c8:44:a0:dc:cd:b4:06:98:0d:99:e5:37:7a:e9:e4:
                    c0:c8:ce:6e:5a:d5:7e:98:66:24:26:72:f4:6a:32:
                    dc:f6:b2:b6:c7:d7:fa:a0:1e:e5:82:b5:f8:4c:ad:
                    0d:a2:56:79:fa:bf:e3:db:c6:54:f1:fa:a8:38:a7:
                    8a:08:e4:7e:26:34:fd:a7:f9:12:e1:ad:df:ba:7b:
                    7d:1c:3c:52:2f:0c:bd:17:08:f0:29:c0:c4:61:c2:
                    27:ee:9e:c4:b7:ad:b6:c1:44:cd:da:3d:2f:3a:55:
                    d5:ba:3d:2e:78:81:8f:9a:40:94:0b:7a:b2:63:05:
                    51:31:bb:df:9f:99:b7:dd:f9:61:f1:af:aa:ca:47:
                    47:c8:62:68:95:e5:7b:4e:32:92:cf:3d:f6:a2:54:
                    21:b6:f0:32:8a:42:46:b1:c8:be:33:fe:8f:8a:d2:
                    aa:a2:da:b7:d4:34:56:76:7b:0f:d9:e6:76:9f:98:
                    e6:46:ce:06:a3:7d:da:91:aa:eb:20:0d:d0:b3:ef:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:2A:7A:03:2D:4C:24:C0:C0:F7:D1:B4:EE:D5:C2:52:94:86:AA
            X509v3 Authority Key Identifier:
                keyid:C3:4D:AA:96:00:E4:BD:78:85:67:6C:58:3D:E4:B9:CA:1A:C7:D2:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C34DAA9600E4BD7885676C583DE4B9CA1AC7D273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32322d3232203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:f5:25:73:51:84:db:e8:05:d3:99:2d:58:b5:9a:f5:be:
         0a:55:94:ea:2d:07:67:a2:cd:60:ad:d6:74:1b:fa:87:d0:17:
         d7:4f:df:93:07:45:eb:9a:d4:89:8c:2d:0a:9d:f4:6b:0a:ef:
         18:82:46:ee:8a:2c:7d:08:14:e4:1d:3d:5d:f9:ee:a4:ef:22:
         87:9c:dd:22:3a:8b:dc:fc:86:d3:9b:ed:b7:62:47:80:e8:0a:
         c8:2e:48:33:97:68:d8:56:dd:be:b5:8e:e9:a2:42:70:95:21:
         d3:52:ae:6d:a3:ee:df:93:df:da:8c:42:19:92:7f:56:36:5a:
         51:82:93:ff:67:81:55:4c:28:cc:63:92:c5:64:91:6b:f0:b4:
         10:7f:8e:98:75:76:69:a6:26:8d:ba:8e:67:3f:0d:d3:0b:78:
         fe:31:4b:cf:ce:7d:7d:94:42:39:8b:9c:db:97:17:cf:1b:23:
         31:64:81:6c:d1:50:a0:82:5d:4c:1c:76:d8:5e:df:6d:6a:88:
         e3:7f:d4:af:76:c5:60:33:1b:6e:e7:b3:6a:b3:9d:e4:1c:c2:
         b8:72:26:92:75:a7:fb:54:c2:96:6a:bb:fb:01:b1:65:4b:d8:
         3a:dc:86:7d:21:0b:1a:63:9d:a8:b0:67:19:cf:8d:60:9d:2e:
         04:92:c8:18
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcJo1gKhC2/Nk8VBYa8shiwycH8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0REFBOTYwMEU0QkQ3ODg1Njc2QzU4M0RFNEI5Q0Ex
QUM3RDI3MzAeFw0yMzA4MjQxODQ3NTlaFw0yNDA4MjIxODUyNTlaMDMxMTAvBgNV
BAMTKDMxNEMyQTdBMDMyRDRDMjRDMEMwRjdEMUI0RUVENUMyNTI5NDg2QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQrvgfx/mp9EoRmf4dJCGXJ3rB
w0fZuqmfyL/JEKb9yJCwUGeOWFnmwIky0SGJo2y3vobGiq06OvuWw8hEoNzNtAaY
DZnlN3rp5MDIzm5a1X6YZiQmcvRqMtz2srbH1/qgHuWCtfhMrQ2iVnn6v+PbxlTx
+qg4p4oI5H4mNP2n+RLhrd+6e30cPFIvDL0XCPApwMRhwifunsS3rbbBRM3aPS86
VdW6PS54gY+aQJQLerJjBVExu9+fmbfd+WHxr6rKR0fIYmiV5XtOMpLPPfaiVCG2
8DKKQkaxyL4z/o+K0qqi2rfUNFZ2ew/Z5nafmOZGzgajfdqRqusgDdCz717dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMUwqegMtTCTAwPfRtO7VwlKUhqowHwYDVR0j
BBgwFoAUw02qlgDkvXiFZ2xYPeS5yhrH0nMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC9DMzREQUE5NjAwRTRCRDc4ODU2NzZDNTgzREU0QjlDQTFBQzdEMjczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0MzNERBQTk2MDBFNEJENzg4
NTY3NkM1ODNERTRCOUNBMUFDN0QyNzMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzQzNTJlMzIzMjM0MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeDYMA0GCSqGSIb3DQEBCwUAA4IBAQBY7/Ulc1GE
2+gF05ktWLWa9b4KVZTqLQdnos1grdZ0G/qH0BfXT9+TB0XrmtSJjC0KnfRrCu8Y
gkbuiix9CBTkHT1d+e6k7yKHnN0iOovc/IbTm+23YkeA6ArILkgzl2jYVt2+tY7p
okJwlSHTUq5to+7fk9/ajEIZkn9WNlpRgpP/Z4FVTCjMY5LFZJFr8LQQf46YdXZp
piaNuo5nPw3TC3j+MUvPzn19lEI5i5zblxfPGyMxZIFs0VCggl1MHHbYXt9taojj
f9SvdsVgMxtu57Nqs53kHMK4ciaSdaf7VMKWarv7AbFlS9g63IZ9IQsaY52osGcZ
z41gnS4EksgY
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org