Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35382e302f32342d3234203d3e20323638313230.roa
File:                     34352e3136392e35382e302f32342d3234203d3e20323638313230.roa (raw, json)
Hash identifier:          Jj2japKnzkOBCCga6dKIIJafY6QxmqJ/ymT5Y5STIHY=
Subject key identifier:   8F:82:5D:B1:8F:43:8E:E8:20:0A:49:3A:FB:0E:D0:19:D4:28:38:74
Certificate issuer:       /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial:       303062131860B25A986DD6FF06E4C429F929E9A9
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35382e302f32342d3234203d3e20323638313230.roa
Signing time:             Tue 05 Mar 2024 15:54:44 +0000
ROA not before:           Tue 05 Mar 2024 15:49:44 +0000
ROA not after:            Tue 04 Mar 2025 15:54:44 +0000
asID:                     268120
IP address blocks:        45.169.58.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:30:62:13:18:60:b2:5a:98:6d:d6:ff:06:e4:c4:29:f9:29:e9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
        Validity
            Not Before: Mar  5 15:49:44 2024 GMT
            Not After : Mar  4 15:54:44 2025 GMT
        Subject: CN=8F825DB18F438EE8200A493AFB0ED019D4283874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:eb:be:5a:11:49:04:d5:11:4b:8e:5a:71:72:
                    6a:e1:bb:28:ec:f6:8e:cf:41:34:f5:13:28:fc:69:
                    8c:12:0d:8a:5d:0e:3f:c7:2b:2e:32:b2:8b:5d:2e:
                    e4:46:62:59:aa:1d:0f:f3:1e:e0:92:7e:86:7a:66:
                    6e:5f:e1:2b:9f:93:ae:2d:b6:dd:31:15:b3:73:da:
                    a3:88:c2:f7:4e:2e:8e:26:1b:94:1c:f2:ef:1c:47:
                    48:91:32:4e:82:5e:e1:ab:fa:f9:03:55:0d:8b:7d:
                    53:14:b9:20:d7:c1:73:d0:05:bc:2b:bb:54:90:da:
                    1e:c5:24:f4:5f:b4:ec:ee:16:8b:08:a5:68:6b:1e:
                    fe:7c:34:fe:a9:94:80:6b:a6:41:d8:8a:04:0e:f0:
                    43:cc:80:f0:c3:32:d7:7e:fd:9d:24:b4:00:0f:f2:
                    14:de:67:60:e7:4c:17:be:df:8a:06:18:b1:60:7d:
                    76:d2:55:b7:bc:d7:5d:34:25:7c:74:e8:1f:7d:9c:
                    b2:54:fb:5a:54:9f:dc:9e:bf:aa:eb:89:de:b4:30:
                    74:87:0b:29:2a:9c:65:44:58:21:cd:1f:7e:8b:b0:
                    88:4e:d0:b6:18:10:36:df:b2:da:77:16:87:1d:1c:
                    28:7e:b4:e1:6f:1c:d1:a3:23:a2:db:96:bc:45:df:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:82:5D:B1:8F:43:8E:E8:20:0A:49:3A:FB:0E:D0:19:D4:28:38:74
            X509v3 Authority Key Identifier:
                keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35382e302f32342d3234203d3e20323638313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:13:33:88:e3:17:82:f4:10:59:71:4d:1c:c4:55:df:0c:dd:
         d5:28:8f:cc:68:10:ea:e1:83:64:15:d9:3e:f7:e3:44:5a:0e:
         bc:8b:a0:5a:d6:4b:d4:19:10:c0:50:87:55:e4:2a:df:1c:66:
         03:a2:01:9d:e2:5c:fd:12:81:61:e2:13:06:71:cc:d0:7e:86:
         be:b7:23:a2:1b:45:b1:ac:b8:fd:4a:29:18:61:fb:01:28:7d:
         30:cf:4e:68:ed:30:33:4d:88:34:bc:28:06:54:55:85:c5:6f:
         01:8e:d4:0e:e4:bd:48:d2:88:73:6d:24:e9:21:07:66:74:a6:
         8b:ea:1b:23:6a:47:c6:db:68:c5:86:d7:c9:39:ae:16:d6:68:
         b8:b8:f9:84:4d:03:49:7c:cc:31:6c:68:c7:4d:db:ff:4b:8f:
         0c:4f:b0:80:0d:3c:ef:7c:f0:9b:41:d0:15:1e:db:72:d4:47:
         9e:90:70:63:45:96:72:69:f5:2b:b5:94:e2:9e:55:d6:d8:1b:
         29:5f:d8:0e:94:1e:a4:ce:5b:d1:a2:f3:3d:d1:63:06:ec:07:
         f8:db:a2:09:3e:8f:a1:4f:be:13:32:5d:ec:40:e3:ad:fa:74:
         c1:07:f5:87:c3:8d:d0:ca:be:38:ba:a4:e5:c5:55:69:1a:ea:
         fd:b9:00:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUMDBiExhgslqYbdb/BuTEKfkp6akwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyMDdEM0FBMzIyMjk4QTA5QkU0N0ZFNTZCRTZCODQ3
Q0JENTk2RTAeFw0yNDAzMDUxNTQ5NDRaFw0yNTAzMDQxNTU0NDRaMDMxMTAvBgNV
BAMTKDhGODI1REIxOEY0MzhFRTgyMDBBNDkzQUZCMEVEMDE5RDQyODM4NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc675aEUkE1RFLjlpxcmrhuyjs
9o7PQTT1Eyj8aYwSDYpdDj/HKy4ysotdLuRGYlmqHQ/zHuCSfoZ6Zm5f4Sufk64t
tt0xFbNz2qOIwvdOLo4mG5Qc8u8cR0iRMk6CXuGr+vkDVQ2LfVMUuSDXwXPQBbwr
u1SQ2h7FJPRftOzuFosIpWhrHv58NP6plIBrpkHYigQO8EPMgPDDMtd+/Z0ktAAP
8hTeZ2DnTBe+34oGGLFgfXbSVbe81100JXx06B99nLJU+1pUn9yev6rrid60MHSH
CykqnGVEWCHNH36LsIhO0LYYEDbfstp3FocdHCh+tOFvHNGjI6LblrxF3x+dAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUj4JdsY9DjuggCkk6+w7QGdQoOHQwHwYDVR0j
BBgwFoAUlSB9OqMiKYoJvkf+Vr5rhHy9WW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU
SFovMC85NTIwN0QzQUEzMjIyOThBMDlCRTQ3RkU1NkJFNkI4NDdDQkQ1OTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MjA3RDNBQTMyMjI5OEEw
OUJFNDdGRTU2QkU2Qjg0N0NCRDU5NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2a2RkNTJiRGRkcmpiRm1xOENYd3BNTjRKZFhydDdYUzJUalBldEdVVEhaLzAv
MzQzNTJlMzEzNjM5MmUzNTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALak6MA0GCSqGSIb3DQEBCwUAA4IBAQAWEzOI4xeC
9BBZcU0cxFXfDN3VKI/MaBDq4YNkFdk+9+NEWg68i6Ba1kvUGRDAUIdV5CrfHGYD
ogGd4lz9EoFh4hMGcczQfoa+tyOiG0WxrLj9SikYYfsBKH0wz05o7TAzTYg0vCgG
VFWFxW8BjtQO5L1I0ohzbSTpIQdmdKaL6hsjakfG22jFhtfJOa4W1mi4uPmETQNJ
fMwxbGjHTdv/S48MT7CADTzvfPCbQdAVHtty1EeekHBjRZZyafUrtZTinlXW2Bsp
X9gOlB6kzlvRovM90WMG7Af426IJPo+hT74TMl3sQOOt+nTBB/WHw43Qyr44uqTl
xVVpGur9uQBQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org