Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/34352e3232362e342e302f32322d3234203d3e20323636393533.roa
File:                     34352e3232362e342e302f32322d3234203d3e20323636393533.roa (raw, json)
Hash identifier:          XqYhMKcNNtSwhd9fOs4LC/wsTcPbj552DL9Ie7/r9GE=
Subject key identifier:   19:77:4D:66:06:A5:35:78:4B:B5:57:BA:84:C3:8C:69:F6:45:02:F0
Certificate issuer:       /CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
Certificate serial:       6B705D313C9840D7599BA918E5835962972C8ECC
Authority key identifier: 9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/34352e3232362e342e302f32322d3234203d3e20323636393533.roa
Signing time:             Wed 06 Mar 2024 18:33:51 +0000
ROA not before:           Wed 06 Mar 2024 18:28:51 +0000
ROA not after:            Wed 05 Mar 2025 18:33:51 +0000
asID:                     266953
IP address blocks:        45.226.4.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:5d:31:3c:98:40:d7:59:9b:a9:18:e5:83:59:62:97:2c:8e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D291B973130E34B8410AEA2E18AECCC5DFC9096
        Validity
            Not Before: Mar  6 18:28:51 2024 GMT
            Not After : Mar  5 18:33:51 2025 GMT
        Subject: CN=19774D6606A535784BB557BA84C38C69F64502F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a8:ab:b9:bc:6e:51:6c:b9:26:ab:2b:8d:b7:
                    72:64:b9:a4:23:e6:d0:10:c7:6e:70:5d:39:d1:11:
                    e4:c9:5f:34:af:15:17:91:e8:3b:b3:3a:3b:b7:a7:
                    99:3b:61:b9:9a:1b:fc:e7:86:4c:0f:92:5f:68:14:
                    a2:a2:a3:8d:66:b4:cb:23:96:c2:20:81:fa:ad:c5:
                    ea:49:e6:9b:24:21:2d:b0:29:97:3c:58:8f:6f:3b:
                    9c:68:0d:3f:ef:b0:de:7c:ae:80:81:fa:03:a7:ea:
                    da:91:cc:5f:4e:28:14:01:57:1d:bd:6f:1b:88:c7:
                    57:c4:4e:db:dd:43:0c:9e:81:6b:f7:6b:3f:19:d3:
                    2d:71:8a:52:e4:2b:99:2d:5c:0f:7b:ba:fe:0b:00:
                    c2:d5:78:4b:78:08:0d:f2:32:f9:eb:0c:b0:69:ee:
                    7c:fc:a1:64:ae:4f:67:bb:c2:89:1e:f3:94:c7:2b:
                    d6:95:e8:34:69:92:5c:97:88:d8:3e:b0:18:04:66:
                    d3:93:9b:ea:51:10:3f:aa:84:d3:fa:40:82:ad:e5:
                    e7:af:d5:0c:64:92:45:21:ac:cf:6e:99:a3:5c:0e:
                    3b:f8:58:26:4f:a2:0f:7d:a3:3a:c7:2b:c9:a8:7b:
                    8e:d6:70:b9:7c:4c:a2:8d:f8:0e:ae:d8:bd:5e:33:
                    8c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:77:4D:66:06:A5:35:78:4B:B5:57:BA:84:C3:8C:69:F6:45:02:F0
            X509v3 Authority Key Identifier:
                keyid:9D:29:1B:97:31:30:E3:4B:84:10:AE:A2:E1:8A:EC:CC:5D:FC:90:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D291B973130E34B8410AEA2E18AECCC5DFC9096.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GYAWzKaEAsSXpYAZTzaNu8NgwWSidLrtSUEQgLtiqpF/0/34352e3232362e342e302f32322d3234203d3e20323636393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:75:64:b4:1a:44:49:4e:2f:42:a2:a5:8d:19:1e:db:4d:4d:
         25:4d:3e:66:b1:ed:38:73:13:6e:35:2e:0c:8e:81:84:f8:db:
         a3:ec:bd:64:45:ad:b7:16:2d:f7:e5:ad:46:ed:f4:21:89:b9:
         5e:dd:3a:1b:2e:01:0f:36:96:cf:7e:57:18:54:60:e1:ce:cd:
         ba:78:08:12:02:13:6c:36:15:8e:51:ac:54:47:76:14:e4:26:
         ae:da:4c:96:c1:fc:f1:01:ed:86:50:7d:49:59:b4:78:b3:79:
         95:63:a4:99:74:fd:cf:5a:27:7f:04:a5:02:b3:52:e6:4c:f1:
         37:4e:99:a4:e7:32:73:c1:61:c9:0d:f0:79:10:0b:71:eb:88:
         6c:27:ed:9b:08:5d:f4:da:87:4f:49:4d:38:cd:09:19:b6:7b:
         9b:79:e1:45:4a:4a:c5:e5:f0:e1:88:ac:17:f6:18:19:f3:1e:
         62:a3:e0:77:65:79:16:80:5b:b6:19:25:ed:e0:d1:9c:38:dc:
         6b:0e:9f:b8:f5:19:c5:83:5f:14:ed:cc:0d:24:77:bf:59:03:
         7b:fb:f1:78:19:2f:65:d1:3e:ad:bb:f6:ea:c7:1f:b8:f0:a6:
         0b:0c:58:1d:16:6a:d9:52:ad:c0:55:d7:99:76:65:49:eb:94:
         54:e2:cd:61
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUa3BdMTyYQNdZm6kY5YNZYpcsjswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyOTFCOTczMTMwRTM0Qjg0MTBBRUEyRTE4QUVDQ0M1
REZDOTA5NjAeFw0yNDAzMDYxODI4NTFaFw0yNTAzMDUxODMzNTFaMDMxMTAvBgNV
BAMTKDE5Nzc0RDY2MDZBNTM1Nzg0QkI1NTdCQTg0QzM4QzY5RjY0NTAyRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXqKu5vG5RbLkmqyuNt3JkuaQj
5tAQx25wXTnREeTJXzSvFReR6DuzOju3p5k7YbmaG/znhkwPkl9oFKKio41mtMsj
lsIggfqtxepJ5pskIS2wKZc8WI9vO5xoDT/vsN58roCB+gOn6tqRzF9OKBQBVx29
bxuIx1fETtvdQwyegWv3az8Z0y1xilLkK5ktXA97uv4LAMLVeEt4CA3yMvnrDLBp
7nz8oWSuT2e7woke85THK9aV6DRpklyXiNg+sBgEZtOTm+pRED+qhNP6QIKt5eev
1QxkkkUhrM9umaNcDjv4WCZPog99ozrHK8moe47WcLl8TKKN+A6u2L1eM4xpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUGXdNZgalNXhLtVe6hMOMafZFAvAwHwYDVR0j
BBgwFoAUnSkblzEw40uEEK6i4YrszF38kJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkdZQVd6S2FFQXNTWHBZQVpUemFOdThOZ3dXU2lkTHJ0U1VFUWdMdGlx
cEYvMC85RDI5MUI5NzMxMzBFMzRCODQxMEFFQTJFMThBRUNDQzVERkM5MDk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjkxQjk3MzEzMEUzNEI4
NDEwQUVBMkUxOEFFQ0NDNURGQzkwOTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJHWUFXekthRUFzU1hwWUFaVHphTnU4Tmd3V1NpZExydFNVRVFnTHRpcXBGLzAv
MzQzNTJlMzIzMjM2MmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjM5
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3iBDANBgkqhkiG9w0BAQsFAAOCAQEAEXVktBpESU4v
QqKljRke201NJU0+ZrHtOHMTbjUuDI6BhPjbo+y9ZEWttxYt9+WtRu30IYm5Xt06
Gy4BDzaWz35XGFRg4c7NungIEgITbDYVjlGsVEd2FOQmrtpMlsH88QHthlB9SVm0
eLN5lWOkmXT9z1onfwSlArNS5kzxN06ZpOcyc8FhyQ3weRALceuIbCftmwhd9NqH
T0lNOM0JGbZ7m3nhRUpKxeXw4YisF/YYGfMeYqPgd2V5FoBbthkl7eDRnDjcaw6f
uPUZxYNfFO3MDSR3v1kDe/vxeBkvZdE+rbv26scfuPCmCwxYHRZq2VKtwFXXmXZl
SeuUVOLNYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org