Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
File:                     34352e342e31362e302f32322d3332203d3e20323636303533.roa (raw, json)
Hash identifier:          wvnDwfK2paCnXCuqySaNwLacCwrwo6ykbxRNGT+9yvI=
Subject key identifier:   AB:D5:21:88:DF:D2:42:62:55:20:D5:21:71:EF:A7:AD:43:AF:17:5C
Certificate issuer:       /CN=A13EA64BD25C6CCF8A661032B6E815B35F442816
Certificate serial:       5BF21F3DD303608F552BC88DD599D07E0EC80348
Authority key identifier: A1:3E:A6:4B:D2:5C:6C:CF:8A:66:10:32:B6:E8:15:B3:5F:44:28:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A13EA64BD25C6CCF8A661032B6E815B35F442816.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa
Signing time:             Thu 15 Feb 2024 10:02:39 +0000
ROA not before:           Thu 15 Feb 2024 09:57:39 +0000
ROA not after:            Thu 13 Feb 2025 10:02:39 +0000
asID:                     266053
IP address blocks:        45.4.16.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f2:1f:3d:d3:03:60:8f:55:2b:c8:8d:d5:99:d0:7e:0e:c8:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A13EA64BD25C6CCF8A661032B6E815B35F442816
        Validity
            Not Before: Feb 15 09:57:39 2024 GMT
            Not After : Feb 13 10:02:39 2025 GMT
        Subject: CN=ABD52188DFD242625520D52171EFA7AD43AF175C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2d:76:3b:e5:e7:4e:60:e2:70:14:4e:bb:69:
                    99:4b:d9:81:ef:57:f3:31:ea:6c:06:56:10:6f:01:
                    40:33:40:a2:4a:2c:c1:48:d2:b4:1a:82:19:1f:ed:
                    77:0d:22:d3:f2:d6:93:8f:44:83:cb:6c:16:6e:a9:
                    25:5b:c2:d4:c1:10:f5:d6:fc:0e:51:5d:65:be:ca:
                    90:37:e6:2a:7c:d0:f5:2e:3b:19:2c:9e:cc:3b:90:
                    79:86:a2:83:8e:04:17:f6:9d:8f:1b:e7:e0:43:d6:
                    e6:72:d7:12:4c:25:cf:82:e2:53:46:c2:7b:cb:27:
                    8b:70:61:4c:eb:d5:f1:96:b8:26:40:4b:e8:73:c4:
                    e1:a1:ed:3a:a3:59:36:7d:11:42:67:2f:be:ae:85:
                    8c:87:2f:32:20:d8:26:26:39:b1:0a:2b:95:fd:ef:
                    29:70:9c:a4:b7:fe:d6:f3:89:e8:75:89:94:d3:e0:
                    f5:60:46:d2:f6:84:82:dc:0f:7c:28:c5:f4:fa:02:
                    c2:8a:38:a8:1d:05:62:85:da:07:2d:be:5b:60:c2:
                    0a:d3:06:9f:87:11:1d:15:d3:80:6a:b3:96:df:1e:
                    67:66:ca:33:62:bf:26:54:e1:4a:cf:94:6f:2c:1d:
                    1a:5e:fd:b3:3d:83:59:11:75:49:d7:da:34:02:04:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D5:21:88:DF:D2:42:62:55:20:D5:21:71:EF:A7:AD:43:AF:17:5C
            X509v3 Authority Key Identifier:
                keyid:A1:3E:A6:4B:D2:5C:6C:CF:8A:66:10:32:B6:E8:15:B3:5F:44:28:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/A13EA64BD25C6CCF8A661032B6E815B35F442816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A13EA64BD25C6CCF8A661032B6E815B35F442816.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/34352e342e31362e302f32322d3332203d3e20323636303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:73:63:dc:3a:00:c2:34:ff:0f:2a:2b:0c:1b:42:46:31:e0:
         51:85:55:0d:44:f3:86:1a:8a:40:a9:5c:14:0f:77:5f:1c:13:
         7c:1b:52:8f:b3:28:26:4b:2a:42:7d:22:81:df:0b:fa:a5:25:
         5a:af:26:e6:97:4d:48:0a:92:fe:c6:59:29:26:a9:ed:58:9a:
         8f:82:4f:71:7e:7c:42:e0:3e:19:5c:dc:b1:cf:30:a3:99:ce:
         00:02:c4:e1:2d:5f:76:bb:3b:a4:05:0b:98:57:90:38:22:02:
         d8:02:41:da:d3:a7:1e:7b:93:9c:48:d7:ce:72:61:ea:bd:7d:
         f5:9d:af:23:81:b1:fb:56:4a:ab:6e:c5:1c:00:ab:bc:f6:44:
         1c:de:1f:23:48:5f:48:83:e0:45:a2:e6:a8:ef:b8:f1:c8:e8:
         bc:33:22:78:42:2a:c0:24:52:46:6a:2d:0d:89:5e:f2:1d:47:
         ea:cd:b2:25:9d:6f:88:48:55:45:b3:22:4d:5d:97:67:c8:9b:
         db:e0:37:eb:56:57:7c:30:59:c1:21:f4:4d:15:7d:99:c0:0d:
         1a:2f:9b:c8:3c:b7:9d:5d:5f:3f:9e:7b:53:b7:65:4c:1c:a3:
         c3:f0:6b:64:b3:f3:8e:90:fa:2b:b4:c5:83:20:ba:d1:e2:34:
         7a:75:e6:3c
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUW/IfPdMDYI9VK8iN1ZnQfg7IA0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTEzRUE2NEJEMjVDNkNDRjhBNjYxMDMyQjZFODE1QjM1
RjQ0MjgxNjAeFw0yNDAyMTUwOTU3MzlaFw0yNTAyMTMxMDAyMzlaMDMxMTAvBgNV
BAMTKEFCRDUyMTg4REZEMjQyNjI1NTIwRDUyMTcxRUZBN0FENDNBRjE3NUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChLXY75edOYOJwFE67aZlL2YHv
V/Mx6mwGVhBvAUAzQKJKLMFI0rQaghkf7XcNItPy1pOPRIPLbBZuqSVbwtTBEPXW
/A5RXWW+ypA35ip80PUuOxksnsw7kHmGooOOBBf2nY8b5+BD1uZy1xJMJc+C4lNG
wnvLJ4twYUzr1fGWuCZAS+hzxOGh7TqjWTZ9EUJnL76uhYyHLzIg2CYmObEKK5X9
7ylwnKS3/tbzieh1iZTT4PVgRtL2hILcD3woxfT6AsKKOKgdBWKF2gctvltgwgrT
Bp+HER0V04Bqs5bfHmdmyjNivyZU4UrPlG8sHRpe/bM9g1kRdUnX2jQCBMh1AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUq9UhiN/SQmJVINUhce+nrUOvF1wwHwYDVR0j
BBgwFoAUoT6mS9JcbM+KZhAytugVs19EKBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmRTb2ExMlVHbll4UDZ2VDkzNWVMZzhNdEZ4bmVpaEZDNjN6ZFpCMmtn
NHEvMC9BMTNFQTY0QkQyNUM2Q0NGOEE2NjEwMzJCNkU4MTVCMzVGNDQyODE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ExM0VBNjRCRDI1QzZDQ0Y4
QTY2MTAzMkI2RTgxNUIzNUY0NDI4MTYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJkU29hMTJVR25ZeFA2dlQ5MzVlTGc4TXRGeG5laWhGQzYzemRaQjJrZzRxLzAv
MzQzNTJlMzQyZTMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2MzYzMDM1
MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBBAwDQYJKoZIhvcNAQELBQADggEBAE1zY9w6AMI0/w8q
KwwbQkYx4FGFVQ1E84YaikCpXBQPd18cE3wbUo+zKCZLKkJ9IoHfC/qlJVqvJuaX
TUgKkv7GWSkmqe1Ymo+CT3F+fELgPhlc3LHPMKOZzgACxOEtX3a7O6QFC5hXkDgi
AtgCQdrTpx57k5xI185yYeq9ffWdryOBsftWSqtuxRwAq7z2RBzeHyNIX0iD4EWi
5qjvuPHI6LwzInhCKsAkUkZqLQ2JXvIdR+rNsiWdb4hIVUWzIk1dl2fIm9vgN+tW
V3wwWcEh9E0VfZnADRovm8g8t51dXz+ee1O3ZUwco8Pwa2Sz846Q+iu0xYMgutHi
NHp15jw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org