Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33372e302f32342d3234203d3e20323638303237.roa
File:                     34352e3136382e33372e302f32342d3234203d3e20323638303237.roa (raw, json)
Hash identifier:          J3TDtkAYCEKXjN7G+cKcrYV9Ta9TqIdfMYzJ+ROHTCU=
Subject key identifier:   63:81:FB:9D:82:D5:0C:D8:F2:8E:BF:D2:A5:56:13:84:BC:C7:7C:47
Certificate issuer:       /CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
Certificate serial:       065BDC256564F0BA24758E016DDCE18D5B5DCC2A
Authority key identifier: CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33372e302f32342d3234203d3e20323638303237.roa
Signing time:             Wed 28 Dec 2022 15:42:13 +0000
ROA not before:           Wed 28 Dec 2022 15:37:13 +0000
ROA not after:            Wed 27 Dec 2023 15:42:13 +0000
asID:                     268027
IP address blocks:        45.168.37.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5b:dc:25:65:64:f0:ba:24:75:8e:01:6d:dc:e1:8d:5b:5d:cc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC78BDF85E39DECFD60C09178EE311CCEBFE77C7
        Validity
            Not Before: Dec 28 15:37:13 2022 GMT
            Not After : Dec 27 15:42:13 2023 GMT
        Subject: CN=6381FB9D82D50CD8F28EBFD2A5561384BCC77C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:51:2b:58:96:84:b3:40:3a:68:b0:e2:b9:ab:
                    b5:d0:bf:e6:2f:4d:8c:72:56:97:87:2b:21:15:10:
                    5e:5a:0a:10:bf:61:4d:65:82:46:c7:17:90:8e:80:
                    49:7d:1b:be:cf:3e:56:88:fb:b5:dd:6e:46:a0:6a:
                    34:c9:f8:fa:87:1b:aa:07:d3:06:20:f2:e6:bf:15:
                    ab:f6:d3:d8:66:78:64:aa:73:5c:7e:d5:a4:7b:b2:
                    28:ba:8f:af:43:1f:96:b9:9b:f7:ae:a5:d3:e1:7b:
                    63:a0:94:75:65:00:34:30:00:f3:66:ff:95:83:b6:
                    60:71:3f:e3:78:7d:ba:c3:32:68:fd:64:9b:9f:26:
                    34:f6:ad:15:6d:61:3c:dd:ff:d1:7c:47:14:10:51:
                    37:44:84:ca:99:f8:29:16:b4:4e:c4:83:e4:d7:9c:
                    c6:d5:c8:4a:62:38:65:f3:d9:ca:01:21:b5:09:4b:
                    e8:8b:ca:8c:6e:ac:91:12:22:c0:fb:0b:6d:4e:a5:
                    6c:65:99:ae:3a:bc:b9:c2:f0:fd:e3:dc:d0:56:7e:
                    46:80:ea:87:ce:08:db:d8:81:e7:61:b5:c5:27:33:
                    d1:f6:16:cc:b6:a2:d4:8b:d5:16:b7:e1:ac:30:d5:
                    85:69:33:c3:15:d7:69:41:5a:db:44:92:32:cf:7f:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:81:FB:9D:82:D5:0C:D8:F2:8E:BF:D2:A5:56:13:84:BC:C7:7C:47
            X509v3 Authority Key Identifier:
                keyid:CC:78:BD:F8:5E:39:DE:CF:D6:0C:09:17:8E:E3:11:CC:EB:FE:77:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CC78BDF85E39DECFD60C09178EE311CCEBFE77C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gSVWFniRiWhF7UMGXdzUMC8qKdtMsrKF72QfYrKuiTf/0/34352e3136382e33372e302f32342d3234203d3e20323638303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5c:ab:b1:0f:65:b3:bb:93:b3:45:23:e3:63:b0:cf:e4:18:
         66:ca:6e:fb:d9:55:e6:4f:d3:d1:25:22:cd:2e:a2:9d:f9:a7:
         8c:d5:14:11:1a:96:37:73:e6:cf:99:5b:7f:79:58:b1:4c:a5:
         62:31:2d:a0:ff:8a:17:30:6c:c0:6b:8a:0d:67:74:6a:42:12:
         4d:cf:d3:fd:e2:d3:c7:76:cb:3f:4c:b0:f4:9a:74:a5:a7:77:
         57:06:85:b6:01:01:0c:be:32:6e:a1:c4:6c:67:24:4f:ab:62:
         bf:77:8c:ad:52:40:b2:43:e3:77:2f:3d:3c:20:11:28:52:e0:
         a6:a9:fa:03:36:ec:59:0d:f7:b4:7c:b2:95:bd:72:14:77:ab:
         aa:45:98:72:d5:c8:41:0e:ea:48:da:9d:0f:d0:89:8a:1b:87:
         23:d7:1c:31:78:6f:b5:5f:01:51:e1:b5:97:ae:09:50:ac:4f:
         e6:c6:98:e0:37:b4:0a:65:ea:fb:59:f8:21:6c:4e:18:14:e6:
         6a:b5:6c:ba:f3:90:43:1e:7a:0b:2b:7c:35:13:1c:b1:2b:4f:
         ff:58:04:33:13:86:82:33:3c:4e:4b:c3:1e:58:88:50:91:ad:
         5f:f3:6d:a6:33:90:d5:da:6f:dc:ec:c3:14:18:ab:06:d5:35:
         5c:88:46:66
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBlvcJWVk8LokdY4BbdzhjVtdzCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0M3OEJERjg1RTM5REVDRkQ2MEMwOTE3OEVFMzExQ0NF
QkZFNzdDNzAeFw0yMjEyMjgxNTM3MTNaFw0yMzEyMjcxNTQyMTNaMDMxMTAvBgNV
BAMTKDYzODFGQjlEODJENTBDRDhGMjhFQkZEMkE1NTYxMzg0QkNDNzdDNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyUStYloSzQDposOK5q7XQv+Yv
TYxyVpeHKyEVEF5aChC/YU1lgkbHF5COgEl9G77PPlaI+7XdbkagajTJ+PqHG6oH
0wYg8ua/Fav209hmeGSqc1x+1aR7sii6j69DH5a5m/eupdPhe2OglHVlADQwAPNm
/5WDtmBxP+N4fbrDMmj9ZJufJjT2rRVtYTzd/9F8RxQQUTdEhMqZ+CkWtE7Eg+TX
nMbVyEpiOGXz2coBIbUJS+iLyoxurJESIsD7C21OpWxlma46vLnC8P3j3NBWfkaA
6ofOCNvYgedhtcUnM9H2Fsy2otSL1Ra34aww1YVpM8MV12lBWttEkjLPf20jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUY4H7nYLVDNjyjr/SpVYThLzHfEcwHwYDVR0j
BBgwFoAUzHi9+F453s/WDAkXjuMRzOv+d8cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmdTVldGbmlSaVdoRjdVTUdYZHpVTUM4cUtkdE1zcktGNzJRZllyS3Vp
VGYvMC9DQzc4QkRGODVFMzlERUNGRDYwQzA5MTc4RUUzMTFDQ0VCRkU3N0M3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NDNzhCREY4NUUzOURFQ0ZE
NjBDMDkxNzhFRTMxMUNDRUJGRTc3QzcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJnU1ZXRm5pUmlXaEY3VU1HWGR6VU1DOHFLZHRNc3JLRjcyUWZZckt1aVRmLzAv
MzQzNTJlMzEzNjM4MmUzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaglMA0GCSqGSIb3DQEBCwUAA4IBAQCAXKuxD2Wz
u5OzRSPjY7DP5Bhmym772VXmT9PRJSLNLqKd+aeM1RQRGpY3c+bPmVt/eVixTKVi
MS2g/4oXMGzAa4oNZ3RqQhJNz9P94tPHdss/TLD0mnSlp3dXBoW2AQEMvjJuocRs
ZyRPq2K/d4ytUkCyQ+N3Lz08IBEoUuCmqfoDNuxZDfe0fLKVvXIUd6uqRZhy1chB
DupI2p0P0ImKG4cj1xwxeG+1XwFR4bWXrglQrE/mxpjgN7QKZer7WfghbE4YFOZq
tWy685BDHnoLK3w1ExyxK0//WAQzE4aCMzxOS8MeWIhQka1f822mM5DV2m/c7MMU
GKsG1TVciEZm
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org