Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa
File:                     34352e37312e38302e302f32322d3234203d3e20323634353235.roa (raw, json)
Hash identifier:          kP/HeuXKNtBrKUNDNmdUPULXnmnjfA/XvlArDu5zFbY=
Subject key identifier:   66:FA:B5:4C:36:0B:E7:5D:2B:CB:3A:B2:4F:2E:B3:F2:34:B9:3B:E0
Certificate issuer:       /CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
Certificate serial:       625102FCE651A6010F2E5784C22762DFA89E3386
Authority key identifier: 0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa
Signing time:             Fri 14 Apr 2023 22:00:00 +0000
ROA not before:           Fri 14 Apr 2023 21:55:00 +0000
ROA not after:            Fri 12 Apr 2024 22:00:00 +0000
asID:                     264525
IP address blocks:        45.71.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:02:fc:e6:51:a6:01:0f:2e:57:84:c2:27:62:df:a8:9e:33:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AB0B7534BC55CA95964EE69B4FB10297B042818
        Validity
            Not Before: Apr 14 21:55:00 2023 GMT
            Not After : Apr 12 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100D5FC247405C67CA54EF0B3CFCFFA4B3A1E1C82FF82AF01CA0B0971500998D7A203326E3FC9369E254D4B71C65C7625BFD169F05726D5FAA42A4F6FCDF30E0B4EC48ABCE252CCFBB9116BB1339F4B5D83040A64C2174FB3D729BFCEA27128AACEC182A498F088D44D38C38D13036EF9464BDD2405ECE4AFD95F5AE54A161C36B04DB61E2C5145F37F1D1BB363F236C7B76AB891D58D2055E4460575B10827BE160E693323B37B54F2600579630166C35FF427DA903B4E2C3E38192F11203E3F3705AEB5A10BEA779EAE3D1C1EEA3C8A6AF9DADD84CA9718EC9538E2510DF3B0ED96528DBB54F4BB8D476565D6094315010A26A1EAE35068592F9797937DD5B9610203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fc:24:74:05:c6:7c:a5:4e:f0:b3:cf:cf:fa:
                    4b:3a:1e:1c:82:ff:82:af:01:ca:0b:09:71:50:09:
                    98:d7:a2:03:32:6e:3f:c9:36:9e:25:4d:4b:71:c6:
                    5c:76:25:bf:d1:69:f0:57:26:d5:fa:a4:2a:4f:6f:
                    cd:f3:0e:0b:4e:c4:8a:bc:e2:52:cc:fb:b9:11:6b:
                    b1:33:9f:4b:5d:83:04:0a:64:c2:17:4f:b3:d7:29:
                    bf:ce:a2:71:28:aa:ce:c1:82:a4:98:f0:88:d4:4d:
                    38:c3:8d:13:03:6e:f9:46:4b:dd:24:05:ec:e4:af:
                    d9:5f:5a:e5:4a:16:1c:36:b0:4d:b6:1e:2c:51:45:
                    f3:7f:1d:1b:b3:63:f2:36:c7:b7:6a:b8:91:d5:8d:
                    20:55:e4:46:05:75:b1:08:27:be:16:0e:69:33:23:
                    b3:7b:54:f2:60:05:79:63:01:66:c3:5f:f4:27:da:
                    90:3b:4e:2c:3e:38:19:2f:11:20:3e:3f:37:05:ae:
                    b5:a1:0b:ea:77:9e:ae:3d:1c:1e:ea:3c:8a:6a:f9:
                    da:dd:84:ca:97:18:ec:95:38:e2:51:0d:f3:b0:ed:
                    96:52:8d:bb:54:f4:bb:8d:47:65:65:d6:09:43:15:
                    01:0a:26:a1:ea:e3:50:68:59:2f:97:97:93:7d:d5:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FA:B5:4C:36:0B:E7:5D:2B:CB:3A:B2:4F:2E:B3:F2:34:B9:3B:E0
            X509v3 Authority Key Identifier:
                keyid:0A:B0:B7:53:4B:C5:5C:A9:59:64:EE:69:B4:FB:10:29:7B:04:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0AB0B7534BC55CA95964EE69B4FB10297B042818.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/34352e37312e38302e302f32322d3234203d3e20323634353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:c5:cc:56:d8:cb:40:b0:55:76:84:83:db:47:ca:79:f0:13:
         79:ba:3c:ed:71:e3:d8:f9:17:7b:48:16:f5:41:60:36:db:c8:
         43:00:b6:c3:89:a5:a6:71:4f:e8:95:db:6a:48:bc:04:77:f0:
         23:03:20:d5:0d:59:6f:4f:09:a5:ca:6b:02:cc:2c:f0:95:ad:
         85:87:2b:8e:63:a4:51:20:75:73:32:fe:fc:4f:59:70:64:da:
         ad:3d:2e:b2:29:71:39:b7:9f:23:3f:ef:87:15:a1:05:59:22:
         1d:65:2b:e1:f0:29:b8:87:ed:32:8f:70:5a:4c:a1:4b:18:45:
         e2:45:44:8a:14:90:50:6b:d9:bc:fd:22:28:13:91:80:b8:ce:
         f5:02:6d:7f:62:63:cd:fb:de:2d:c1:05:87:c7:af:09:a3:06:
         8a:d8:d5:b6:cb:5f:dd:50:ae:fb:03:46:63:43:7f:cc:93:c9:
         ac:4d:90:02:69:45:ac:06:c9:07:65:8e:e1:e4:27:3a:db:63:
         07:c4:a3:9b:17:bc:13:e9:86:57:5b:a1:17:a2:03:92:fc:3e:
         a7:eb:9e:e9:f8:53:52:12:d8:d4:e4:f7:66:b1:71:9b:43:47:
         9d:fe:52:00:95:e4:9a:cb:bf:91:38:dc:4b:0c:84:dd:9b:d6:
         89:f1:6a:73
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUYlEC/OZRpgEPLleEwidi36ieM4YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFCMEI3NTM0QkM1NUNBOTU5NjRFRTY5QjRGQjEwMjk3
QjA0MjgxODAeFw0yMzA0MTQyMTU1MDBaFw0yNDA0MTIyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDVGQzI0NzQwNUM2N0NBNTRF
RjBCM0NGQ0ZGQTRCM0ExRTFDODJGRjgyQUYwMUNBMEIwOTcxNTAwOTk4RDdBMjAz
MzI2RTNGQzkzNjlFMjU0RDRCNzFDNjVDNzYyNUJGRDE2OUYwNTcyNkQ1RkFBNDJB
NEY2RkNERjMwRTBCNEVDNDhBQkNFMjUyQ0NGQkI5MTE2QkIxMzM5RjRCNUQ4MzA0
MEE2NEMyMTc0RkIzRDcyOUJGQ0VBMjcxMjhBQUNFQzE4MkE0OThGMDg4RDQ0RDM4
QzM4RDEzMDM2RUY5NDY0QkREMjQwNUVDRTRBRkQ5NUY1QUU1NEExNjFDMzZCMDRE
QjYxRTJDNTE0NUYzN0YxRDFCQjM2M0YyMzZDN0I3NkFCODkxRDU4RDIwNTVFNDQ2
MDU3NUIxMDgyN0JFMTYwRTY5MzMyM0IzN0I1NEYyNjAwNTc5NjMwMTY2QzM1RkY0
MjdEQTkwM0I0RTJDM0UzODE5MkYxMTIwM0UzRjM3MDVBRUI1QTEwQkVBNzc5RUFF
M0QxQzFFRUEzQzhBNkFGOURBREQ4NENBOTcxOEVDOTUzOEUyNTEwREYzQjBFRDk2
NTI4REJCNTRGNEJCOEQ0NzY1NjVENjA5NDMxNTAxMEEyNkExRUFFMzUwNjg1OTJG
OTc5NzkzN0RENUI5NjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1fwkdAXGfKVO8LPPz/pLOh4cgv+CrwHKCwlxUAmY16IDMm4/yTae
JU1LccZcdiW/0WnwVybV+qQqT2/N8w4LTsSKvOJSzPu5EWuxM59LXYMECmTCF0+z
1ym/zqJxKKrOwYKkmPCI1E04w40TA275RkvdJAXs5K/ZX1rlShYcNrBNth4sUUXz
fx0bs2PyNse3ariR1Y0gVeRGBXWxCCe+Fg5pMyOze1TyYAV5YwFmw1/0J9qQO04s
PjgZLxEgPj83Ba61oQvqd56uPRwe6jyKavna3YTKlxjslTjiUQ3zsO2WUo27VPS7
jUdlZdYJQxUBCiah6uNQaFkvl5eTfdW5YQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FGb6tUw2C+ddK8s6sk8us/I0uTvgMB8GA1UdIwQYMBaAFAqwt1NLxVypWWTuabT7
ECl7BCgYMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJ0Und5RVE1Q25GaGdS
Qm9MQ3RtMVBSVEpURXEzQ0U3Sm9HTGFCaFU0OHdpLzAvMEFCMEI3NTM0QkM1NUNB
OTU5NjRFRTY5QjRGQjEwMjk3QjA0MjgxOC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8wQUIwQjc1MzRCQzU1Q0E5NTk2NEVFNjlCNEZCMTAyOTdCMDQy
ODE4LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8ydFJ3eUVRNUNuRmhnUkJvTEN0
bTFQUlRKVEVxM0NFN0pvR0xhQmhVNDh3aS8wLzM0MzUyZTM3MzEyZTM4MzAyZTMw
MmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNTMyMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAItR1Aw
DQYJKoZIhvcNAQELBQADggEBABrFzFbYy0CwVXaEg9tHynnwE3m6PO1x49j5F3tI
FvVBYDbbyEMAtsOJpaZxT+iV22pIvAR38CMDINUNWW9PCaXKawLMLPCVrYWHK45j
pFEgdXMy/vxPWXBk2q09LrIpcTm3nyM/74cVoQVZIh1lK+HwKbiH7TKPcFpMoUsY
ReJFRIoUkFBr2bz9IigTkYC4zvUCbX9iY8373i3BBYfHrwmjBorY1bbLX91QrvsD
RmNDf8yTyaxNkAJpRawGyQdljuHkJzrbYwfEo5sXvBPphldboReiA5L8Pqfrnun4
U1IS2NTk92axcZtDR53+UgCV5JrLv5E43EsMhN2b1onxanM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:09 2024 by rpki-client on console-ams.rpki-client.org