Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa
File:                     34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa (raw, json)
Hash identifier:          iyXM8zp9v0Im+5yLGB4QV+1XbwghMj1qHoADwddlA5Y=
Subject key identifier:   B2:95:FF:7E:89:06:46:65:20:48:C4:C3:49:A1:8F:61:F7:A9:D4:8B
Certificate issuer:       /CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
Certificate serial:       476988D4D30EAB856987666CEA83E79CDF4408C9
Authority key identifier: 46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa
Signing time:             Fri 07 Jul 2023 13:02:00 +0000
ROA not before:           Fri 07 Jul 2023 12:57:00 +0000
ROA not after:            Fri 05 Jul 2024 13:02:00 +0000
asID:                     269047
IP address blocks:        45.178.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:69:88:d4:d3:0e:ab:85:69:87:66:6c:ea:83:e7:9c:df:44:08:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
        Validity
            Not Before: Jul  7 12:57:00 2023 GMT
            Not After : Jul  5 13:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:5c:88:59:6a:db:39:c6:a2:56:df:18:76:
                    d5:f8:4e:b7:a6:3b:98:f5:1a:9e:7f:e7:dc:83:4a:
                    a1:6c:62:5a:c9:53:b3:27:7b:37:bd:80:a9:42:9d:
                    c6:fe:3b:6d:71:d8:b1:9b:f6:65:81:3f:d0:23:1d:
                    0d:12:f8:70:e9:ac:c8:51:d5:41:2f:4c:4e:c5:9d:
                    d7:a4:38:f0:99:11:73:fb:cb:d4:0c:cd:d8:3c:1d:
                    af:4e:3e:3f:63:72:64:d4:ee:0a:2d:9a:fc:1a:a9:
                    ba:8f:4e:29:d0:fe:9f:90:ae:d3:e3:f9:3a:83:a7:
                    98:cd:fa:da:c3:7b:ee:bf:e9:bc:e0:15:9e:f6:58:
                    6a:fc:9d:43:7a:00:f6:53:2b:4d:5a:2e:56:2e:d7:
                    05:e0:a8:49:eb:c5:d4:a9:a2:93:c9:5c:49:58:d3:
                    02:96:22:6b:0b:8e:be:70:07:f0:44:1c:eb:9b:bf:
                    d9:b9:fc:b1:ee:21:82:f1:9c:7f:ee:22:0d:c1:bc:
                    c5:c0:d1:ef:78:34:14:bb:45:9e:af:83:19:5a:10:
                    9e:93:2f:f6:ba:55:68:b5:d4:8c:69:0d:57:cf:e9:
                    b4:86:7e:e3:b6:4d:b7:6a:e6:47:86:13:09:77:aa:
                    e1:24:c3:99:bc:32:71:d9:da:3b:3e:c3:3d:57:c4:
                    c1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:95:FF:7E:89:06:46:65:20:48:C4:C3:49:A1:8F:61:F7:A9:D4:8B
            X509v3 Authority Key Identifier:
                keyid:46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/34352e3137382e3231302e302f32342d3234203d3e20323639303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d9:6f:c6:da:7f:70:ad:68:69:82:c5:80:8c:42:2c:e5:1f:
         0e:c3:5b:9a:82:3d:7d:3d:99:e9:19:37:c4:b3:33:ed:49:2a:
         42:13:f3:09:f3:60:25:e8:f9:8d:93:9a:ad:07:ab:bf:99:93:
         b0:f5:ac:b9:9a:96:bd:a2:66:1d:d3:c1:8a:a9:af:bb:7c:25:
         09:b6:a0:2d:55:78:88:79:42:7b:40:d3:0d:04:88:62:ff:cf:
         00:31:78:ef:8e:1b:fe:d7:3e:9e:67:71:3a:19:63:db:1e:ca:
         0d:9a:5a:b4:fa:30:d4:4c:39:d4:e2:9c:7f:e0:e2:d1:41:71:
         9a:75:13:9c:3c:6a:e2:fa:44:17:db:4b:83:34:c5:1a:fe:f3:
         1b:99:a2:aa:6e:cf:3e:5a:e9:6e:3c:97:1c:65:11:6c:1e:25:
         e3:25:1c:f0:f0:df:0f:d6:d4:45:eb:5f:5b:3b:9a:22:2c:2c:
         4f:dd:c8:1a:5b:f8:60:c9:84:70:15:d9:f1:b0:82:04:5f:b8:
         5d:ed:96:9f:a3:ac:5d:ed:ec:30:db:07:73:0f:3e:2e:14:3d:
         b6:65:68:f4:58:8d:2a:b2:24:bd:3d:42:e7:8a:f6:50:ca:b7:
         19:60:1f:ef:bc:d0:1a:05:9a:88:06:25:1f:6e:fc:cc:16:a3:
         d3:f8:0f:8e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUR2mI1NMOq4Vph2Zs6oPnnN9ECMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDY4REE0QkQ0QjU2QzAwMkEzNTAzOTk1NjhFNERGOUE1
OTE1MEY5RTAeFw0yMzA3MDcxMjU3MDBaFw0yNDA3MDUxMzAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjIxQjVDODg1OTZBREIzOUM2
QTI1NkRGMTg3NkQ1Rjg0RUI3QTYzQjk4RjUxQTlFN0ZFN0RDODM0QUExNkM2MjVB
Qzk1M0IzMjc3QjM3QkQ4MEE5NDI5REM2RkUzQjZENzFEOEIxOUJGNjY1ODEzRkQw
MjMxRDBEMTJGODcwRTlBQ0M4NTFENTQxMkY0QzRFQzU5REQ3QTQzOEYwOTkxMTcz
RkJDQkQ0MENDREQ4M0MxREFGNEUzRTNGNjM3MjY0RDRFRTBBMkQ5QUZDMUFBOUJB
OEY0RTI5RDBGRTlGOTBBRUQzRTNGOTNBODNBNzk4Q0RGQURBQzM3QkVFQkZFOUJD
RTAxNTlFRjY1ODZBRkM5RDQzN0EwMEY2NTMyQjRENUEyRTU2MkVENzA1RTBBODQ5
RUJDNUQ0QTlBMjkzQzk1QzQ5NThEMzAyOTYyMjZCMEI4RUJFNzAwN0YwNDQxQ0VC
OUJCRkQ5QjlGQ0IxRUUyMTgyRjE5QzdGRUUyMjBEQzFCQ0M1QzBEMUVGNzgzNDE0
QkI0NTlFQUY4MzE5NUExMDlFOTMyRkY2QkE1NTY4QjVENDhDNjkwRDU3Q0ZFOUI0
ODY3RUUzQjY0REI3NkFFNjQ3ODYxMzA5NzdBQUUxMjRDMzk5QkMzMjcxRDlEQTNC
M0VDMzNENTdDNEMxREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAshtciFlq2znGolbfGHbV+E63pjuY9Rqef+fcg0qhbGJayVOzJ3s3
vYCpQp3G/jttcdixm/ZlgT/QIx0NEvhw6azIUdVBL0xOxZ3XpDjwmRFz+8vUDM3Y
PB2vTj4/Y3Jk1O4KLZr8Gqm6j04p0P6fkK7T4/k6g6eYzfraw3vuv+m84BWe9lhq
/J1DegD2UytNWi5WLtcF4KhJ68XUqaKTyVxJWNMCliJrC46+cAfwRBzrm7/Zufyx
7iGC8Zx/7iINwbzFwNHveDQUu0Wer4MZWhCeky/2ulVotdSMaQ1Xz+m0hn7jtk23
auZHhhMJd6rhJMOZvDJx2do7PsM9V8TB2wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLKV/36JBkZlIEjEw0mhj2H3qdSLMB8GA1UdIwQYMBaAFEaNpL1LVsACo1A5lWjk
35pZFQ+eMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJuNDRWSlNheUcyQ2Zn
MXRjcTFXRGVjSmI5YlZWeml2d0JwRTVHUGtONmVqLzAvNDY4REE0QkQ0QjU2QzAw
MkEzNTAzOTk1NjhFNERGOUE1OTE1MEY5RS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80NjhEQTRCRDRCNTZDMDAyQTM1MDM5OTU2OEU0REY5QTU5MTUw
RjlFLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ybjQ0VkpTYXlHMkNmZzF0Y3Ex
V0RlY0piOWJWVnppdndCcEU1R1BrTjZlai8wLzM0MzUyZTMxMzczODJlMzIzMTMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzAzNDM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
LbLSMA0GCSqGSIb3DQEBCwUAA4IBAQBA2W/G2n9wrWhpgsWAjEIs5R8Ow1uagj19
PZnpGTfEszPtSSpCE/MJ82Al6PmNk5qtB6u/mZOw9ay5mpa9omYd08GKqa+7fCUJ
tqAtVXiIeUJ7QNMNBIhi/88AMXjvjhv+1z6eZ3E6GWPbHsoNmlq0+jDUTDnU4px/
4OLRQXGadROcPGri+kQX20uDNMUa/vMbmaKqbs8+WuluPJccZRFsHiXjJRzw8N8P
1tRF619bO5oiLCxP3cgaW/hgyYRwFdnxsIIEX7hd7Zafo6xd7eww2wdzDz4uFD22
ZWj0WI0qsiS9PULnivZQyrcZYB/vvNAaBZqIBiUfbvzMFqPT+A+O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org