Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31302f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e31302f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          BYXRK5rUqJ0xl5TwK2HKSAIGyFXJMX/AZ2D+MD5maPs=
Subject key identifier:   A3:E7:FE:86:F4:31:2B:B0:BF:F5:D6:72:67:F5:4E:89:AF:34:2E:CA
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       60FBA3199B9C21CCD36920509C99EB8BB54275BF
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31302f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:31:57 +0000
ROA not before:           Sun 11 Sep 2022 23:26:57 +0000
ROA not after:            Sun 10 Sep 2023 23:31:57 +0000
asID:                     267256
IP address blocks:        45.232.50.10/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:fb:a3:19:9b:9c:21:cc:d3:69:20:50:9c:99:eb:8b:b5:42:75:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:26:57 2022 GMT
            Not After : Sep 10 23:31:57 2023 GMT
        Subject: CN=A3E7FE86F4312BB0BFF5D67267F54E89AF342ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:41:39:d2:de:a9:5e:bd:4e:15:14:d5:49:
                    07:5f:77:0d:3b:66:19:75:a0:2c:5b:f5:a7:d7:9a:
                    c0:8e:e1:fa:66:7a:49:0b:b8:5f:06:37:64:da:0e:
                    b3:4c:e6:49:be:9f:28:3e:ed:8a:e6:59:08:3c:79:
                    95:a5:e0:1c:d0:3f:86:59:3d:ef:7a:25:ea:94:17:
                    f8:f1:8d:8a:a0:74:61:d0:71:46:ce:2a:fc:c2:eb:
                    b7:5e:a0:16:a8:51:5d:62:9b:60:be:9c:53:dd:00:
                    c6:ca:dc:8e:61:70:9f:e5:97:7a:21:4f:36:f5:38:
                    c7:26:e1:39:92:9d:ec:a2:63:ed:73:41:89:a5:9a:
                    8a:32:6b:62:58:e0:f8:81:49:64:7c:8a:b4:2b:54:
                    3c:ad:0e:ae:c4:75:00:46:04:57:e4:8f:cd:2a:27:
                    a1:f5:26:5b:5e:67:cf:92:20:83:a8:41:bc:1d:cf:
                    bb:17:f4:6f:0c:d0:84:18:92:d1:f9:f3:3b:41:03:
                    97:49:9f:57:c9:42:56:c1:c4:c6:f7:fd:4b:2e:20:
                    a2:4f:3c:a7:db:33:62:a9:06:cc:93:21:56:52:32:
                    57:1a:b9:3b:9d:99:88:08:ca:aa:15:ff:ea:d9:5b:
                    eb:b8:d3:4b:a1:db:0a:08:e1:98:53:62:d4:7c:91:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E7:FE:86:F4:31:2B:B0:BF:F5:D6:72:67:F5:4E:89:AF:34:2E:CA
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e31302f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.10/32

    Signature Algorithm: sha256WithRSAEncryption
         14:10:39:79:1b:2c:a2:41:c4:f5:a0:e0:a7:6d:95:1e:57:60:
         73:eb:98:ea:69:3d:0d:26:ff:47:4d:d3:ad:a4:5d:33:df:f0:
         ac:4d:d7:c6:fb:3b:3c:5e:5b:32:ab:84:29:81:b1:db:8f:66:
         2f:da:5a:2f:24:7f:7b:11:b0:7e:36:b7:cb:78:28:a7:27:22:
         f8:49:50:75:ad:d4:82:fb:17:ad:bf:c7:1d:15:e1:7a:fa:80:
         ba:8b:80:65:6d:82:57:ef:d7:e5:04:e3:74:54:bd:cc:ad:7a:
         95:88:66:94:94:a1:48:ec:6b:33:16:b7:60:6c:e4:9c:57:d8:
         ea:6d:f1:b0:ca:cc:a1:28:e5:41:bb:ca:78:c1:42:c9:70:6e:
         84:d9:8d:fb:69:56:3d:0f:12:b9:dc:38:4c:af:b5:c5:f6:f0:
         b1:9a:b9:57:fc:1a:23:5a:34:a2:67:d6:20:0d:99:66:a2:96:
         a1:1d:22:be:62:4c:72:33:52:8c:0d:7e:9e:6c:21:ea:4c:fd:
         18:e6:0b:c4:1d:af:bd:65:41:6d:c3:f5:a0:52:b6:67:67:61:
         83:96:3f:79:e7:8a:40:d7:cc:b7:5a:30:fe:1b:63:ff:36:31:
         69:d1:c5:e5:98:3b:89:10:75:c2:c2:34:49:96:e9:6f:0b:e3:
         39:8c:f7:fc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYPujGZucIczTaSBQnJnri7VCdb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTEyMzI2NTdaFw0yMzA5MTAyMzMxNTdaMDMxMTAvBgNV
BAMTKEEzRTdGRTg2RjQzMTJCQjBCRkY1RDY3MjY3RjU0RTg5QUYzNDJFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMC0E50t6pXr1OFRTVSQdfdw07
Zhl1oCxb9afXmsCO4fpmekkLuF8GN2TaDrNM5km+nyg+7YrmWQg8eZWl4BzQP4ZZ
Pe96JeqUF/jxjYqgdGHQcUbOKvzC67deoBaoUV1im2C+nFPdAMbK3I5hcJ/ll3oh
Tzb1OMcm4TmSneyiY+1zQYmlmooya2JY4PiBSWR8irQrVDytDq7EdQBGBFfkj80q
J6H1JlteZ8+SIIOoQbwdz7sX9G8M0IQYktH58ztBA5dJn1fJQlbBxMb3/UsuIKJP
PKfbM2KpBsyTIVZSMlcauTudmYgIyqoV/+rZW+u400uh2woI4ZhTYtR8kcqDAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUo+f+hvQxK7C/9dZyZ/VOia80LsowHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMTMwMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQAt6DIKMA0GCSqGSIb3DQEBCwUAA4IBAQAUEDl5
GyyiQcT1oOCnbZUeV2Bz65jqaT0NJv9HTdOtpF0z3/CsTdfG+zs8Xlsyq4QpgbHb
j2Yv2lovJH97EbB+NrfLeCinJyL4SVB1rdSC+xetv8cdFeF6+oC6i4BlbYJX79fl
BON0VL3MrXqViGaUlKFI7GszFrdgbOScV9jqbfGwysyhKOVBu8p4wULJcG6E2Y37
aVY9DxK53DhMr7XF9vCxmrlX/BojWjSiZ9YgDZlmopahHSK+YkxyM1KMDX6ebCHq
TP0Y5gvEHa+9ZUFtw/WgUrZnZ2GDlj9554pA18y3WjD+G2P/NjFp0cXlmDuJEHXC
wjRJlulvC+M5jPf8
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org