Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e34392e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          iaiYJ8YLtJdn6qoWCY0d6qvQPahJ+3+vRL6oYBR/XaA=
Subject key identifier:   0C:8E:85:CB:4E:67:24:A6:BD:10:96:8A:CD:2A:D9:CB:61:D9:CB:4B
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       7F0AB841455B4AFB57381F1E64B0A12AEB3EEF47
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:21 +0000
ROA not before:           Fri 08 Mar 2024 19:58:21 +0000
ROA not after:            Fri 07 Mar 2025 20:03:21 +0000
asID:                     267256
IP address blocks:        45.232.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0a:b8:41:45:5b:4a:fb:57:38:1f:1e:64:b0:a1:2a:eb:3e:ef:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:21 2024 GMT
            Not After : Mar  7 20:03:21 2025 GMT
        Subject: CN=0C8E85CB4E6724A6BD10968ACD2AD9CB61D9CB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:30:d3:dc:f0:d2:0f:8a:1d:00:0f:e9:6a:42:
                    95:61:e7:0c:52:b1:66:54:24:7d:fe:e7:4e:45:30:
                    c2:3a:59:a2:d1:c0:7d:46:48:a5:0e:f3:b7:3f:8c:
                    9d:ff:45:81:0a:d5:b5:2c:08:c6:b5:43:58:44:57:
                    fc:46:7c:3e:6e:c3:f2:3d:f4:60:70:85:cf:e7:c1:
                    b2:7b:9e:e3:1f:b2:b3:a4:f5:d3:53:c2:c8:69:19:
                    3b:ed:a2:3d:f5:fe:5b:97:bc:77:8b:79:67:56:e8:
                    04:2c:17:c8:f0:e4:b1:92:fe:b8:66:9f:a8:89:b7:
                    c2:6e:38:74:64:b2:0a:ae:5f:9a:1b:99:2c:f4:7c:
                    72:7c:6d:70:6e:2a:8d:4a:36:ec:55:e0:05:1f:32:
                    6a:d3:b7:33:2b:29:af:29:e7:dc:54:af:10:23:3e:
                    d7:16:2c:a6:c4:23:2c:50:aa:5a:a9:b7:39:e4:08:
                    da:75:0e:51:f2:b0:cc:97:c4:b7:f3:a0:2d:0b:9c:
                    98:9a:49:f6:8d:53:ee:66:91:b4:0e:de:25:d3:f1:
                    c7:79:42:3e:23:1d:62:e1:b1:8d:8f:1c:e1:d1:1c:
                    a6:6d:fa:c1:a0:d0:0b:dc:1d:1a:fa:c9:35:98:0e:
                    b2:58:a8:4b:0e:2b:bd:14:49:9b:34:3f:d6:a6:f5:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:85:CB:4E:67:24:A6:BD:10:96:8A:CD:2A:D9:CB:61:D9:CB:4B
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:bd:5f:2c:f2:8b:35:53:41:74:53:8a:43:44:17:93:e9:e0:
         be:18:c9:d0:6a:fc:bd:21:1d:ec:86:76:14:c4:c8:f7:43:ec:
         62:0a:49:0e:be:35:c6:01:7b:b7:ed:59:c8:56:68:c3:44:aa:
         1c:e3:b8:c6:26:f6:98:ba:c2:46:a8:84:48:45:eb:c9:57:b2:
         60:28:34:df:8a:5f:6a:f5:b3:c5:5d:d1:f1:e6:3b:e6:f3:c7:
         65:71:37:b0:6b:8a:76:77:c5:5a:84:ef:68:3c:85:39:2a:66:
         41:a3:1e:5b:27:60:80:f9:f8:b7:51:77:75:16:3f:80:33:9d:
         76:26:2c:0c:c2:bb:0a:70:a5:02:ae:2c:33:d3:24:2a:1c:ae:
         98:3f:83:88:bd:bc:00:a2:61:c4:93:31:e5:25:00:28:76:7c:
         17:4c:b2:9d:87:fb:6e:b5:2c:f0:03:89:d7:22:b2:24:9c:a7:
         ac:04:f8:29:63:81:a3:14:3b:eb:31:f0:c5:de:cf:6a:ba:b9:
         3d:48:2a:5f:c2:4b:7a:46:b6:6d:dc:cc:b8:06:97:99:ce:10:
         eb:40:5b:9f:68:15:7c:b0:bb:e6:ef:88:b7:4e:af:a1:10:7e:
         1c:1d:c7:ee:b3:ab:85:ba:e6:47:b9:5f:c5:3c:7e:2e:ae:8f:
         36:a8:92:3b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfwq4QUVbSvtXOB8eZLChKus+70cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyRTZEM0MwRDkzOTVCMTZFRTc0RjQwMjdBOThDMDg3
NkMyRTc4RDAeFw0yNDAzMDgxOTU4MjFaFw0yNTAzMDcyMDAzMjFaMDMxMTAvBgNV
BAMTKDBDOEU4NUNCNEU2NzI0QTZCRDEwOTY4QUNEMkFEOUNCNjFEOUNCNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeMNPc8NIPih0AD+lqQpVh5wxS
sWZUJH3+505FMMI6WaLRwH1GSKUO87c/jJ3/RYEK1bUsCMa1Q1hEV/xGfD5uw/I9
9GBwhc/nwbJ7nuMfsrOk9dNTwshpGTvtoj31/luXvHeLeWdW6AQsF8jw5LGS/rhm
n6iJt8JuOHRksgquX5obmSz0fHJ8bXBuKo1KNuxV4AUfMmrTtzMrKa8p59xUrxAj
PtcWLKbEIyxQqlqptznkCNp1DlHysMyXxLfzoC0LnJiaSfaNU+5mkbQO3iXT8cd5
Qj4jHWLhsY2PHOHRHKZt+sGg0AvcHRr6yTWYDrJYqEsOK70USZs0P9am9agtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDI6Fy05nJKa9EJaKzSrZy2HZy0swHwYDVR0j
BBgwFoAUiS5tPA2TlbFu509AJ6mMCHbC540wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC84OTJFNkQzQzBEOTM5NUIxNkVFNzRGNDAyN0E5OEMwODc2QzJFNzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5MkU2RDNDMEQ5Mzk1QjE2
RUU3NEY0MDI3QTk4QzA4NzZDMkU3OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALegxMA0GCSqGSIb3DQEBCwUAA4IBAQCFvV8s8os1
U0F0U4pDRBeT6eC+GMnQavy9IR3shnYUxMj3Q+xiCkkOvjXGAXu37VnIVmjDRKoc
47jGJvaYusJGqIRIRevJV7JgKDTfil9q9bPFXdHx5jvm88dlcTewa4p2d8VahO9o
PIU5KmZBox5bJ2CA+fi3UXd1Fj+AM512JiwMwrsKcKUCriwz0yQqHK6YP4OIvbwA
omHEkzHlJQAodnwXTLKdh/tutSzwA4nXIrIknKesBPgpY4GjFDvrMfDF3s9qurk9
SCpfwkt6RrZt3My4BpeZzhDrQFufaBV8sLvm74i3Tq+hEH4cHcfus6uFuuZHuV/F
PH4uro82qJI7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org