Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
File:                     34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (raw, json)
Hash identifier:          HxEMahHmhZsNi0JM7AN3/3QPVM7zmXdffCVFubZPFnQ=
Subject key identifier:   27:B7:CF:7A:E2:7D:7D:E7:04:33:03:6B:4C:2F:75:CD:18:BF:89:CB
Certificate issuer:       /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial:       696985E2A3F106CBCF2B5147ADC51AB2F4B7CC42
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
Signing time:             Thu 07 Mar 2024 17:01:41 +0000
ROA not before:           Thu 07 Mar 2024 16:56:41 +0000
ROA not after:            Thu 06 Mar 2025 17:01:41 +0000
asID:                     268120
IP address blocks:        45.169.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:69:85:e2:a3:f1:06:cb:cf:2b:51:47:ad:c5:1a:b2:f4:b7:cc:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
        Validity
            Not Before: Mar  7 16:56:41 2024 GMT
            Not After : Mar  6 17:01:41 2025 GMT
        Subject: CN=27B7CF7AE27D7DE70433036B4C2F75CD18BF89CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:82:63:bd:c8:21:c8:01:dc:71:6a:4b:08:
                    c7:ed:df:fc:fe:63:73:61:ae:ac:38:58:2c:fd:b7:
                    d1:0a:a1:b9:d9:0a:4a:8e:08:2b:39:0d:d5:c1:2f:
                    39:86:57:67:92:0b:3c:0b:4b:a1:f1:62:23:64:1e:
                    bb:1e:53:93:a3:41:7d:f5:f8:29:87:69:8d:d1:b2:
                    25:27:dd:17:76:bf:0a:99:59:2b:4a:6a:46:5a:42:
                    b8:bd:b9:d4:09:ea:36:4a:b7:4f:b9:60:01:4f:eb:
                    d6:f4:f6:b6:76:88:fa:b6:40:13:ab:4d:d5:1f:af:
                    1f:01:a9:82:1a:93:55:83:ca:37:6d:cd:7b:28:8f:
                    80:a7:5f:28:a7:29:3c:2f:c1:a8:30:18:65:f4:5a:
                    12:58:50:73:d7:fa:a4:da:64:64:c1:9d:9c:8a:07:
                    cc:08:36:76:1e:aa:9e:5a:d7:0e:59:fc:30:7a:e4:
                    9a:4d:7b:6b:d6:d9:b0:24:07:eb:66:e1:e0:01:ea:
                    7e:83:09:71:73:60:dd:af:e8:25:75:f9:0c:34:98:
                    21:4c:ec:69:2e:0c:86:ed:ea:cf:bf:12:b6:42:7b:
                    9c:a6:90:49:59:37:97:a6:8d:e3:ec:6f:e6:12:73:
                    d8:c2:bb:38:e5:30:21:9d:9f:fe:9a:d5:9e:73:42:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B7:CF:7A:E2:7D:7D:E7:04:33:03:6B:4C:2F:75:CD:18:BF:89:CB
            X509v3 Authority Key Identifier:
                keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:15:8b:bb:94:25:30:96:bc:c3:94:2c:ad:4c:d5:58:d7:
         9f:86:11:d2:4a:d1:d5:2d:b4:49:81:5c:62:93:15:47:10:da:
         ff:1a:74:f1:02:62:b2:25:69:1b:6b:d7:ed:5a:ef:fe:f0:81:
         e6:53:97:63:77:cb:b2:73:68:c8:11:3d:27:1f:15:b6:a4:21:
         48:23:d9:19:61:f3:3e:b6:cc:cf:b7:79:dc:c4:c3:83:92:8b:
         2e:f7:b5:cd:fc:9d:f6:42:49:f5:2b:d9:80:0c:d8:6a:c4:d3:
         74:6a:00:a8:0b:ea:bc:9e:3a:c0:09:37:b8:35:ab:88:d5:53:
         e3:9b:60:c9:ea:b9:4c:dd:0c:d9:54:42:0f:cb:d1:5d:61:e0:
         00:82:d3:11:7d:53:9a:8a:ff:3f:26:e0:e0:50:5f:6e:10:00:
         ad:40:d7:0a:8c:c2:d8:0b:e2:74:cb:33:af:0f:92:56:8f:db:
         50:d4:2e:47:e2:81:84:8a:1d:4b:68:64:ae:31:26:84:e5:ed:
         f5:a9:08:6b:f6:85:6e:5d:a3:a4:8d:23:77:34:47:7f:ef:ee:
         40:58:ac:a8:a0:cf:f2:bd:03:19:c4:b8:da:6d:bb:8c:db:0b:
         82:11:c5:b3:ef:5b:a6:6f:a4:28:e8:bb:3a:9e:34:62:09:1c:
         8c:45:95:62
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaWmF4qPxBsvPK1FHrcUasvS3zEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyMDdEM0FBMzIyMjk4QTA5QkU0N0ZFNTZCRTZCODQ3
Q0JENTk2RTAeFw0yNDAzMDcxNjU2NDFaFw0yNTAzMDYxNzAxNDFaMDMxMTAvBgNV
BAMTKDI3QjdDRjdBRTI3RDdERTcwNDMzMDM2QjRDMkY3NUNEMThCRjg5Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj6YJjvcghyAHccWpLCMft3/z+
Y3Nhrqw4WCz9t9EKobnZCkqOCCs5DdXBLzmGV2eSCzwLS6HxYiNkHrseU5OjQX31
+CmHaY3RsiUn3Rd2vwqZWStKakZaQri9udQJ6jZKt0+5YAFP69b09rZ2iPq2QBOr
TdUfrx8BqYIak1WDyjdtzXsoj4CnXyinKTwvwagwGGX0WhJYUHPX+qTaZGTBnZyK
B8wINnYeqp5a1w5Z/DB65JpNe2vW2bAkB+tm4eAB6n6DCXFzYN2v6CV1+Qw0mCFM
7GkuDIbt6s+/ErZCe5ymkElZN5emjePsb+YSc9jCuzjlMCGdn/6a1Z5zQnetAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJ7fPeuJ9fecEMwNrTC91zRi/icswHwYDVR0j
BBgwFoAUlSB9OqMiKYoJvkf+Vr5rhHy9WW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU
SFovMC85NTIwN0QzQUEzMjIyOThBMDlCRTQ3RkU1NkJFNkI4NDdDQkQ1OTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MjA3RDNBQTMyMjI5OEEw
OUJFNDdGRTU2QkU2Qjg0N0NCRDU5NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2a2RkNTJiRGRkcmpiRm1xOENYd3BNTjRKZFhydDdYUzJUalBldEdVVEhaLzAv
MzQzNTJlMzEzNjM5MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLak4MA0GCSqGSIb3DQEBCwUAA4IBAQB3xRWLu5Ql
MJa8w5QsrUzVWNefhhHSStHVLbRJgVxikxVHENr/GnTxAmKyJWkba9ftWu/+8IHm
U5djd8uyc2jIET0nHxW2pCFII9kZYfM+tszPt3ncxMODkosu97XN/J32Qkn1K9mA
DNhqxNN0agCoC+q8njrACTe4NauI1VPjm2DJ6rlM3QzZVEIPy9FdYeAAgtMRfVOa
iv8/JuDgUF9uEACtQNcKjMLYC+J0yzOvD5JWj9tQ1C5H4oGEih1LaGSuMSaE5e31
qQhr9oVuXaOkjSN3NEd/7+5AWKyooM/yvQMZxLjabbuM2wuCEcWz71umb6Qo6Ls6
njRiCRyMRZVi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org