Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32372f33322d3332203d3e20323637323536.roa
File:                     34352e3233322e35302e32372f33322d3332203d3e20323637323536.roa (raw, json)
Hash identifier:          McorBeRjXsgTJAOMObh8R0gAidlVInCTe7OsoTyIBxo=
Subject key identifier:   30:9F:66:D6:B2:96:BF:F9:C1:7E:CE:C9:A4:F7:C2:1E:0D:A3:40:98
Certificate issuer:       /CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
Certificate serial:       33DAF38F29369CCD63D0A5A6AAA9CDB6D3009245
Authority key identifier: 0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32372f33322d3332203d3e20323637323536.roa
Signing time:             Sun 11 Sep 2022 23:12:06 +0000
ROA not before:           Sun 11 Sep 2022 23:07:06 +0000
ROA not after:            Sun 10 Sep 2023 23:12:06 +0000
asID:                     267256
IP address blocks:        45.232.50.27/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:da:f3:8f:29:36:9c:cd:63:d0:a5:a6:aa:a9:cd:b6:d3:00:92:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B
        Validity
            Not Before: Sep 11 23:07:06 2022 GMT
            Not After : Sep 10 23:12:06 2023 GMT
        Subject: CN=309F66D6B296BFF9C17ECEC9A4F7C21E0DA34098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:a5:10:70:ae:59:f2:5f:b6:9f:2f:7e:bc:
                    c0:b6:4b:49:40:65:cd:6c:5f:dc:40:2b:4b:0c:17:
                    f6:3c:fb:d1:a7:70:36:c9:ca:88:bc:75:85:c4:7d:
                    05:76:5a:60:8e:4e:c7:99:0d:19:85:b1:2c:20:87:
                    a2:c2:bb:da:11:96:96:f4:d0:71:af:a7:d6:2f:d7:
                    ac:2b:a4:28:18:62:52:b6:f6:c4:ff:c8:99:ce:ef:
                    ab:b4:91:0b:32:2e:b4:82:e1:92:f8:80:b3:53:de:
                    26:e1:2a:71:b8:60:5b:01:29:b5:39:70:5c:7b:2c:
                    e4:aa:4e:35:55:23:4e:c6:24:cf:36:f7:8b:2e:5e:
                    83:9e:6d:30:db:f5:df:00:64:51:51:a5:bd:99:75:
                    0f:76:0a:55:ed:a5:a3:1c:70:3d:82:51:e3:09:de:
                    e4:9c:26:86:f8:5a:c2:a1:25:4b:39:86:6a:3e:f8:
                    f5:72:32:20:bf:7a:4a:00:3d:7d:19:db:12:00:b6:
                    34:1d:d1:0a:2f:4f:c5:0b:11:50:41:cb:9b:56:8b:
                    c8:48:49:f4:87:d5:13:8c:70:04:70:bb:89:db:97:
                    61:af:90:a7:c6:1d:ae:5c:0f:10:7d:ae:6e:23:10:
                    ac:94:af:89:87:9b:79:07:27:48:67:e1:21:0b:02:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9F:66:D6:B2:96:BF:F9:C1:7E:CE:C9:A4:F7:C2:1E:0D:A3:40:98
            X509v3 Authority Key Identifier:
                keyid:0D:C3:30:1F:CB:DE:2B:A3:C4:D2:9A:F5:8D:A6:14:50:72:D1:00:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DC3301FCBDE2BA3C4D29AF58DA6145072D1006B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35302e32372f33322d3332203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.50.27/32

    Signature Algorithm: sha256WithRSAEncryption
         72:e2:4e:6b:33:08:1c:2e:5b:1d:35:eb:43:96:e6:ec:03:e8:
         f0:a3:23:c1:c0:c3:b0:22:fe:f6:dd:94:66:d0:c8:38:28:36:
         51:2b:90:bf:4f:ce:d6:41:46:76:69:9e:d6:62:b6:9a:09:a3:
         92:8e:89:15:1e:c6:0c:a2:71:a7:8e:15:30:6e:62:a4:15:37:
         b2:ba:a9:21:2d:50:ed:08:e4:ac:96:39:c1:3a:d1:35:97:95:
         dc:ff:a8:d5:ea:78:01:b4:d2:81:17:9e:0c:02:41:19:b9:c6:
         f8:af:3b:99:1e:ef:bd:c1:10:57:ff:a8:d6:49:69:22:41:6c:
         82:b3:8d:ab:74:fb:7e:de:2f:6f:7e:81:83:f6:c0:70:bb:49:
         1f:2b:97:d8:dd:c6:fc:84:a8:94:4b:7e:e8:a2:67:01:f6:6e:
         b9:65:21:35:85:86:1a:b1:7a:3c:5e:63:43:b4:b3:76:77:fa:
         e7:f6:61:5e:6a:9f:b4:d7:df:ce:9a:81:46:ab:45:f7:23:37:
         bd:ef:b6:93:01:b0:74:fd:77:3f:c9:2b:d0:af:75:94:29:da:
         9f:01:09:8b:a1:d6:72:e8:4b:67:cf:89:73:74:62:d2:30:80:
         fd:3d:d3:1d:03:f9:a6:84:18:d4:9b:52:16:d4:05:f2:d1:60:
         75:31:9f:66
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUM9rzjyk2nM1j0KWmqqnNttMAkkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERDMzMwMUZDQkRFMkJBM0M0RDI5QUY1OERBNjE0NTA3
MkQxMDA2QjAeFw0yMjA5MTEyMzA3MDZaFw0yMzA5MTAyMzEyMDZaMDMxMTAvBgNV
BAMTKDMwOUY2NkQ2QjI5NkJGRjlDMTdFQ0VDOUE0RjdDMjFFMERBMzQwOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpqUQcK5Z8l+2ny9+vMC2S0lA
Zc1sX9xAK0sMF/Y8+9GncDbJyoi8dYXEfQV2WmCOTseZDRmFsSwgh6LCu9oRlpb0
0HGvp9Yv16wrpCgYYlK29sT/yJnO76u0kQsyLrSC4ZL4gLNT3ibhKnG4YFsBKbU5
cFx7LOSqTjVVI07GJM8294suXoOebTDb9d8AZFFRpb2ZdQ92ClXtpaMccD2CUeMJ
3uScJob4WsKhJUs5hmo++PVyMiC/ekoAPX0Z2xIAtjQd0QovT8ULEVBBy5tWi8hI
SfSH1ROMcARwu4nbl2GvkKfGHa5cDxB9rm4jEKyUr4mHm3kHJ0hn4SELAtF7AgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUMJ9m1rKWv/nBfs7JpPfCHg2jQJgwHwYDVR0j
BBgwFoAUDcMwH8veK6PE0pr1jaYUUHLRAGswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC8wREMzMzAxRkNCREUyQkEzQzREMjlBRjU4REE2MTQ1MDcyRDEwMDZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBEQzMzMDFGQ0JERTJCQTND
NEQyOUFGNThEQTYxNDUwNzJEMTAwNkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMwMmUzMjM3MmYzMzMyMmQzMzMyMjAzZDNlMjAzMjM2
MzczMjM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgABMAcDBQAt6DIbMA0GCSqGSIb3DQEBCwUAA4IBAQBy4k5r
MwgcLlsdNetDlubsA+jwoyPBwMOwIv723ZRm0Mg4KDZRK5C/T87WQUZ2aZ7WYraa
CaOSjokVHsYMonGnjhUwbmKkFTeyuqkhLVDtCOSsljnBOtE1l5Xc/6jV6ngBtNKB
F54MAkEZucb4rzuZHu+9wRBX/6jWSWkiQWyCs42rdPt+3i9vfoGD9sBwu0kfK5fY
3cb8hKiUS37oomcB9m65ZSE1hYYasXo8XmNDtLN2d/rn9mFeap+019/OmoFGq0X3
Ize977aTAbB0/Xc/ySvQr3WUKdqfAQmLodZy6Etnz4lzdGLSMID9PdMdA/mmhBjU
m1IW1AXy0WB1MZ9m
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org