Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa
File:                     34352e37312e3234382e302f32322d3234203d3e20323637363430.roa (raw, json)
Hash identifier:          zGINIRq0/7r4KEPg45aV/11ngm2btlhg30fJB0ubES4=
Subject key identifier:   CA:6B:2C:EC:48:57:13:28:4F:AF:C1:00:81:96:59:14:9B:E6:61:D2
Certificate issuer:       /CN=A74780F81B7728CA8AF087579AE827C07238EA86
Certificate serial:       53790E8A87D4B42B8715867FBFF3667B7C0AA85A
Authority key identifier: A7:47:80:F8:1B:77:28:CA:8A:F0:87:57:9A:E8:27:C0:72:38:EA:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A74780F81B7728CA8AF087579AE827C07238EA86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa
Signing time:             Sun 21 May 2023 14:10:51 +0000
ROA not before:           Sun 21 May 2023 14:05:51 +0000
ROA not after:            Sun 19 May 2024 14:10:51 +0000
asID:                     267640
IP address blocks:        45.71.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:79:0e:8a:87:d4:b4:2b:87:15:86:7f:bf:f3:66:7b:7c:0a:a8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A74780F81B7728CA8AF087579AE827C07238EA86
        Validity
            Not Before: May 21 14:05:51 2023 GMT
            Not After : May 19 14:10:51 2024 GMT
        Subject: CN=CA6B2CEC485713284FAFC100819659149BE661D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:89:0a:c1:32:75:c5:c6:58:dd:6b:9b:4e:
                    81:9f:80:a5:42:d4:1a:96:ec:9e:40:1d:c9:71:b7:
                    61:db:e7:f5:9f:a3:15:f4:46:fe:9d:55:e2:93:08:
                    f4:bf:96:6c:0f:e7:76:a4:b3:f2:1c:f5:8f:31:98:
                    e9:e7:94:2f:d0:cb:26:37:89:37:d3:d4:fc:b8:8d:
                    99:02:e0:b9:90:b2:22:4a:51:4b:c3:ca:d0:2b:0e:
                    9a:8e:e4:82:8d:20:b2:b8:08:da:6e:2e:c6:d3:e9:
                    1c:78:76:22:a8:9b:9c:fb:8c:5b:64:81:df:50:21:
                    9e:cc:31:b1:f7:5a:b6:0f:d0:8c:76:fb:21:b3:d7:
                    fa:58:3d:85:7a:14:ef:8f:25:54:78:5e:e6:87:5c:
                    0b:12:42:33:4e:55:a2:56:72:95:9f:62:0d:1d:80:
                    61:44:68:f7:8a:5f:d1:26:ca:8e:a9:1c:83:6e:8e:
                    ef:1c:2d:ac:17:28:7b:75:39:d7:ef:92:53:ce:7c:
                    d6:c3:97:59:6f:09:c2:35:9d:2b:e3:d9:c8:aa:3b:
                    c2:ed:ba:ba:39:fe:e7:ad:45:01:fc:76:76:0c:00:
                    c8:0a:1c:ff:bc:73:8a:98:a2:30:6a:0d:99:39:9b:
                    ce:f7:ab:61:d0:58:58:4d:68:7f:03:d1:ab:2f:2e:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6B:2C:EC:48:57:13:28:4F:AF:C1:00:81:96:59:14:9B:E6:61:D2
            X509v3 Authority Key Identifier:
                keyid:A7:47:80:F8:1B:77:28:CA:8A:F0:87:57:9A:E8:27:C0:72:38:EA:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/A74780F81B7728CA8AF087579AE827C07238EA86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A74780F81B7728CA8AF087579AE827C07238EA86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2jriEXnfYNcRJAMVAMAv1SBrNAnafCeeTegjrdSZMnhw/0/34352e37312e3234382e302f32322d3234203d3e20323637363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:4f:d3:d9:cd:15:76:ed:9e:57:36:4f:25:77:a0:26:a1:14:
         98:87:d7:37:f4:2d:c1:d6:1b:9e:28:29:31:e4:60:52:e5:5d:
         be:c2:56:67:4b:55:cf:46:23:28:b3:20:79:bf:d5:1d:65:9f:
         a0:80:06:bc:20:5d:24:49:20:17:f2:a1:af:ea:f7:a9:54:c7:
         c2:05:8e:77:31:ab:3c:a1:62:5b:b7:ea:f4:7e:bf:ef:62:1b:
         71:7d:0d:8e:35:74:59:a5:f3:16:3b:11:16:a0:e5:1e:ef:4b:
         bc:be:b8:af:46:b0:95:4b:a1:db:b3:30:0f:0e:6f:ff:e8:79:
         49:60:f7:28:8d:9e:60:3d:12:70:52:85:37:f6:ae:e1:b6:29:
         9f:04:b3:68:a3:6f:90:41:99:39:3a:3d:e5:01:bd:fc:ed:d6:
         ba:1d:bc:d2:f4:dc:fe:24:39:49:b0:52:a9:79:42:bc:11:a4:
         bf:fb:38:35:95:b9:72:6d:68:45:83:99:ae:d2:90:62:cb:91:
         d0:ef:08:62:34:a8:c5:b9:d7:09:96:fa:db:2b:46:e9:65:66:
         81:bd:bf:a2:a6:a4:18:5c:40:3a:8e:d5:4f:37:51:a6:47:78:
         4c:a9:0e:0c:7d:37:65:50:45:f5:61:dd:08:0b:0e:ad:f2:e1:
         7b:4d:82:73
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUU3kOiofUtCuHFYZ/v/Nme3wKqFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc0NzgwRjgxQjc3MjhDQThBRjA4NzU3OUFFODI3QzA3
MjM4RUE4NjAeFw0yMzA1MjExNDA1NTFaFw0yNDA1MTkxNDEwNTFaMDMxMTAvBgNV
BAMTKENBNkIyQ0VDNDg1NzEzMjg0RkFGQzEwMDgxOTY1OTE0OUJFNjYxRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOgIkKwTJ1xcZY3WubToGfgKVC
1BqW7J5AHclxt2Hb5/WfoxX0Rv6dVeKTCPS/lmwP53aks/Ic9Y8xmOnnlC/QyyY3
iTfT1Py4jZkC4LmQsiJKUUvDytArDpqO5IKNILK4CNpuLsbT6Rx4diKom5z7jFtk
gd9QIZ7MMbH3WrYP0Ix2+yGz1/pYPYV6FO+PJVR4XuaHXAsSQjNOVaJWcpWfYg0d
gGFEaPeKX9Emyo6pHINuju8cLawXKHt1OdfvklPOfNbDl1lvCcI1nSvj2ciqO8Lt
uro5/uetRQH8dnYMAMgKHP+8c4qYojBqDZk5m873q2HQWFhNaH8D0asvLmaNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUymss7EhXEyhPr8EAgZZZFJvmYdIwHwYDVR0j
BBgwFoAUp0eA+Bt3KMqK8IdXmugnwHI46oYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmpyaUVYbmZZTmNSSkFNVkFNQXYxU0JyTkFuYWZDZWVUZWdqcmRTWk1u
aHcvMC9BNzQ3ODBGODFCNzcyOENBOEFGMDg3NTc5QUU4MjdDMDcyMzhFQTg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0E3NDc4MEY4MUI3NzI4Q0E4
QUYwODc1NzlBRTgyN0MwNzIzOEVBODYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJqcmlFWG5mWU5jUkpBTVZBTUF2MVNCck5BbmFmQ2VlVGVnanJkU1pNbmh3LzAv
MzQzNTJlMzczMTJlMzIzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzYzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUf4MA0GCSqGSIb3DQEBCwUAA4IBAQCYT9PZzRV2
7Z5XNk8ld6AmoRSYh9c39C3B1hueKCkx5GBS5V2+wlZnS1XPRiMosyB5v9UdZZ+g
gAa8IF0kSSAX8qGv6vepVMfCBY53Mas8oWJbt+r0fr/vYhtxfQ2ONXRZpfMWOxEW
oOUe70u8vrivRrCVS6HbszAPDm//6HlJYPcojZ5gPRJwUoU39q7htimfBLNoo2+Q
QZk5Oj3lAb387da6HbzS9Nz+JDlJsFKpeUK8EaS/+zg1lblybWhFg5mu0pBiy5HQ
7whiNKjFudcJlvrbK0bpZWaBvb+ipqQYXEA6jtVPN1GmR3hMqQ4MfTdlUEX1Yd0I
Cw6t8uF7TYJz
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org