Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32302f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32302f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          YMfi0ZE96nPD0/Z1xwrps/1S+Ew04c3lqr9F3xXjAY8=
Subject key identifier:   AA:F1:AD:83:79:FD:E4:C8:47:28:17:D6:64:7B:53:C8:D3:4D:CC:59
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       392798ADB1E76A0051F87ED06E4A997FB4078DB9
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32302f33322d3332203d3e20323637323536.roa
Signing time:             Tue 13 Sep 2022 16:00:37 +0000
ROA not before:           Tue 13 Sep 2022 15:55:37 +0000
ROA not after:            Tue 12 Sep 2023 16:00:37 +0000
asID:                     267256
IP address blocks:        45.232.50.20/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:27:98:ad:b1:e7:6a:00:51:f8:7e:d0:6e:4a:99:7f:b4:07:8d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 13 15:55:37 2022 GMT
            Not After : Sep 12 16:00:37 2023 GMT
        Subject: CN=AAF1AD8379FDE4C8472817D6647B53C8D34DCC59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:44:0a:cb:98:0c:f7:8b:03:b0:a4:c1:98:d3:
                    36:7e:b6:12:93:26:1a:5d:c7:3a:35:1c:2f:a3:4c:
                    c8:84:0e:b0:e3:91:11:f1:00:22:45:89:fe:bb:fd:
                    a4:3f:6d:5d:37:5b:35:44:ec:c7:2a:a6:eb:ae:9f:
                    e5:b0:d4:a9:00:de:2b:b9:36:19:dc:9f:ec:b1:ef:
                    05:e1:16:d9:38:8d:35:dc:c7:b6:e9:f0:8e:af:f1:
                    ed:16:e4:ec:2a:60:c0:be:44:05:83:6b:87:04:0f:
                    c5:7f:88:41:2d:76:01:dc:4e:28:91:ba:3c:c2:56:
                    24:28:02:6a:2d:35:19:f0:1c:2f:62:74:c7:f3:bc:
                    65:06:c5:15:7d:ec:7c:52:c2:8a:5c:71:46:89:d4:
                    d0:07:5c:50:3d:51:40:6d:6e:82:e4:09:b6:e6:84:
                    60:ef:4e:d8:3a:54:e8:70:8c:46:7e:fb:4b:54:c0:
                    85:67:2a:2b:e8:4c:a3:d4:ed:4f:69:fb:48:b0:bb:
                    fa:89:b8:6b:a3:ca:72:dc:c0:5f:be:4a:47:66:24:
                    40:61:f4:81:0c:b2:c1:53:3d:11:a2:74:76:e4:49:
                    4a:7e:22:93:50:64:86:f4:f7:95:b8:0a:59:0b:07:
                    0f:8f:48:df:58:ad:eb:55:be:a4:90:c7:fd:68:1a:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F1:AD:83:79:FD:E4:C8:47:28:17:D6:64:7B:53:C8:D3:4D:CC:59
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32302f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.20/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b1:98:68:51:f6:c3:a4:9f:00:5d:5d:b5:83:da:c3:13:0a:
         c6:5f:84:f9:a8:73:95:3b:a1:68:6b:54:87:7a:3c:d0:32:a6:
         6b:a8:e4:04:6b:cb:e6:42:de:60:6c:dd:3d:a7:3f:fd:07:80:
         6f:c6:8f:ac:81:69:2e:15:02:7d:19:91:61:9a:d5:60:a2:ca:
         0b:85:14:b9:d0:ce:f9:66:08:76:11:dc:ea:17:28:9e:89:e5:
         e4:4a:6d:ec:79:ca:02:4e:a4:81:b3:14:64:75:da:f1:b3:b0:
         d3:85:e7:ff:29:94:45:b6:45:90:b8:03:db:fd:9c:88:57:6d:
         da:f3:bd:21:31:b5:12:b4:a3:db:db:6d:05:95:87:35:38:89:
         0e:ba:ec:37:35:c3:ee:8a:36:af:e9:fc:93:bd:54:5a:d8:ee:
         c3:fa:1b:20:26:8f:86:15:d4:d2:81:0b:88:f2:03:e5:1e:4f:
         5b:9e:69:ae:e2:b5:60:e3:84:d5:b2:7e:40:27:8d:94:03:8f:
         27:55:71:09:ed:7f:33:7c:6f:50:7c:af:16:f9:68:47:cf:3c:
         bf:08:e0:81:6d:1e:47:7c:1c:97:a3:50:e8:59:cd:10:19:a4:
         57:b4:e1:57:3c:5e:99:f4:9a:eb:5a:29:81:96:46:73:53:3d:
         f5:28:af:c5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUOSeYrbHnagBR+H7QbkqZf7QHjbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTMxNTU1MzdaFw0yMzA5MTIxNjAwMzdaMDMxMTAvBgNV
BAMTKEFBRjFBRDgzNzlGREU0Qzg0NzI4MTdENjY0N0I1M0M4RDM0RENDNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdRArLmAz3iwOwpMGY0zZ+thKT
Jhpdxzo1HC+jTMiEDrDjkRHxACJFif67/aQ/bV03WzVE7Mcqpuuun+Ww1KkA3iu5
Nhncn+yx7wXhFtk4jTXcx7bp8I6v8e0W5OwqYMC+RAWDa4cED8V/iEEtdgHcTiiR
ujzCViQoAmotNRnwHC9idMfzvGUGxRV97HxSwopccUaJ1NAHXFA9UUBtboLkCbbm
hGDvTtg6VOhwjEZ++0tUwIVnKivoTKPU7U9p+0iwu/qJuGujynLcwF++SkdmJEBh
9IEMssFTPRGidHbkSUp+IpNQZIb095W4ClkLBw+PSN9YretVvqSQx/1oGhm/AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUqvGtg3n95MhHKBfWZHtTyNNNzFkwHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMjMwMmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQAt6DIUMA0GCSqGSIb3DQEBCwUAA4IBAQAasZho
UfbDpJ8AXV21g9rDEwrGX4T5qHOVO6Foa1SHejzQMqZrqOQEa8vmQt5gbN09pz/9
B4Bvxo+sgWkuFQJ9GZFhmtVgosoLhRS50M75Zgh2EdzqFyieieXkSm3secoCTqSB
sxRkddrxs7DThef/KZRFtkWQuAPb/ZyIV23a870hMbUStKPb220FlYc1OIkOuuw3
NcPuijav6fyTvVRa2O7D+hsgJo+GFdTSgQuI8gPlHk9bnmmu4rVg44TVsn5AJ42U
A48nVXEJ7X8zfG9QfK8W+WhHzzy/COCBbR5HfByXo1DoWc0QGaRXtOFXPF6Z9Jrr
WimBlkZzUz31KK/F
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org