Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
File:                     34352e3233322e35312e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier:          8+13IqQEPtfuLXHvNhFa2yI4886FA03X26cb/lyLZSU=
Subject key identifier:   62:3C:61:04:6E:25:0E:F4:C2:E5:D1:F8:DC:6D:69:5F:8E:A2:F9:F7
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       26AC5797C2A2218ADF6F082522F3E9C7DACA04E8
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa
Signing time:             Fri 08 Mar 2024 20:03:21 +0000
ROA not before:           Fri 08 Mar 2024 19:58:21 +0000
ROA not after:            Fri 07 Mar 2025 20:03:21 +0000
asID:                     267256
IP address blocks:        45.232.51.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ac:57:97:c2:a2:21:8a:df:6f:08:25:22:f3:e9:c7:da:ca:04:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Mar  8 19:58:21 2024 GMT
            Not After : Mar  7 20:03:21 2025 GMT
        Subject: CN=623C61046E250EF4C2E5D1F8DC6D695F8EA2F9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:c0:60:16:2f:96:d3:07:55:f6:4f:09:2b:
                    88:67:d0:cf:cb:10:88:37:c0:77:e4:59:b6:e6:1d:
                    91:66:27:cf:f4:14:ea:5c:23:6e:31:89:27:9f:2e:
                    ca:d5:6e:81:85:ef:3f:f8:fd:89:af:ab:ee:3d:5b:
                    18:6a:96:45:3d:97:63:e8:54:88:7d:6c:4f:b3:9c:
                    97:99:23:ba:fc:dc:9a:65:64:75:8f:ef:36:cf:3b:
                    d8:fd:74:5a:24:0d:63:c7:7c:16:e0:63:d9:6f:b1:
                    0b:57:8d:1e:fb:8f:1c:de:bc:f2:b4:05:5c:de:24:
                    9c:69:38:58:ce:9d:44:e9:d6:af:3e:a3:5a:2c:e7:
                    90:a1:9d:c4:19:e5:34:6e:a1:8b:73:fc:9c:2a:32:
                    ad:1a:af:4a:96:b8:d3:68:2a:ba:b3:d1:92:02:3f:
                    43:0e:21:ee:05:8e:e3:e8:fa:a4:b8:a2:ae:9c:e1:
                    f4:a2:3f:7f:be:58:2b:58:b1:2e:2f:12:fc:0e:13:
                    8b:cf:95:c2:9c:6c:57:c5:70:94:21:19:7f:d1:e0:
                    94:b1:f5:22:0d:20:29:30:5a:90:cb:23:05:b9:50:
                    b0:4e:da:7a:6a:cf:7a:fb:3f:a4:91:f6:b9:fb:fc:
                    55:b1:47:ad:21:35:b5:c9:f5:2f:05:0a:b7:8e:a7:
                    4d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3C:61:04:6E:25:0E:F4:C2:E5:D1:F8:DC:6D:69:5F:8E:A2:F9:F7
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/34352e3233322e35312e302f32342d3234203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:dd:6e:fa:e6:8d:4c:46:2c:f8:92:57:e3:bb:e5:9c:a3:e8:
         39:f5:ae:65:5d:d0:7a:59:83:11:f5:1e:56:d8:ef:f7:c7:a8:
         4f:ef:43:7d:d6:8b:67:3e:11:83:c1:01:7d:af:b0:ca:a1:ad:
         5e:e1:16:ac:a4:35:04:1b:96:7b:86:d6:47:ef:e3:0d:b1:13:
         be:6d:e4:95:4a:83:c7:36:43:a2:17:97:63:d8:2e:de:90:c2:
         70:9c:95:d5:83:34:b1:88:65:f1:f9:18:fb:27:78:50:f0:ac:
         ad:6c:e9:d6:80:7d:1f:35:e6:53:a2:7b:bb:b9:11:ce:00:79:
         57:51:0f:42:a9:aa:79:3b:5f:0f:89:78:37:b6:fb:a4:f8:4a:
         c8:5d:5b:20:f3:6f:b9:42:f4:89:7d:54:ab:07:73:a5:0e:eb:
         16:1e:42:80:52:bf:36:5e:f0:27:30:c4:22:a0:95:4c:e8:e8:
         e5:fb:45:2a:90:01:99:bf:0c:ee:ca:91:c0:35:13:df:d2:17:
         f5:8b:b3:22:93:aa:7a:57:93:1a:28:56:e3:0b:1d:c5:1d:23:
         6b:f5:80:82:fb:4b:c7:3b:be:a0:bd:74:5e:a9:59:9e:3b:d5:
         56:9a:a9:64:93:ac:ce:75:7e:dd:25:93:c1:dd:3f:f8:e5:d3:
         9c:bf:e5:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJqxXl8KiIYrfbwglIvPpx9rKBOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODkyRTZEM0MwRDkzOTVCMTZFRTc0RjQwMjdBOThDMDg3
NkMyRTc4RDAeFw0yNDAzMDgxOTU4MjFaFw0yNTAzMDcyMDAzMjFaMDMxMTAvBgNV
BAMTKDYyM0M2MTA0NkUyNTBFRjRDMkU1RDFGOERDNkQ2OTVGOEVBMkY5RjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwvcBgFi+W0wdV9k8JK4hn0M/L
EIg3wHfkWbbmHZFmJ8/0FOpcI24xiSefLsrVboGF7z/4/Ymvq+49WxhqlkU9l2Po
VIh9bE+znJeZI7r83JplZHWP7zbPO9j9dFokDWPHfBbgY9lvsQtXjR77jxzevPK0
BVzeJJxpOFjOnUTp1q8+o1os55ChncQZ5TRuoYtz/JwqMq0ar0qWuNNoKrqz0ZIC
P0MOIe4FjuPo+qS4oq6c4fSiP3++WCtYsS4vEvwOE4vPlcKcbFfFcJQhGX/R4JSx
9SINICkwWpDLIwW5ULBO2npqz3r7P6SR9rn7/FWxR60hNbXJ9S8FCreOp01nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUYjxhBG4lDvTC5dH43G1pX46i+fcwHwYDVR0j
BBgwFoAUiS5tPA2TlbFu509AJ6mMCHbC540wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzVlSzRoOEhreUxUNDlIRGkxY1BjZGh1NnNDWHE0QjVQb3FEWjRQbVpr
bmgvMC84OTJFNkQzQzBEOTM5NUIxNkVFNzRGNDAyN0E5OEMwODc2QzJFNzhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg5MkU2RDNDMEQ5Mzk1QjE2
RUU3NEY0MDI3QTk4QzA4NzZDMkU3OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM1ZUs0aDhIa3lMVDQ5SERpMWNQY2RodTZzQ1hxNEI1UG9xRFo0UG1aa25oLzAv
MzQzNTJlMzIzMzMyMmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALegzMA0GCSqGSIb3DQEBCwUAA4IBAQAM3W765o1M
Riz4klfju+Wco+g59a5lXdB6WYMR9R5W2O/3x6hP70N91otnPhGDwQF9r7DKoa1e
4RaspDUEG5Z7htZH7+MNsRO+beSVSoPHNkOiF5dj2C7ekMJwnJXVgzSxiGXx+Rj7
J3hQ8KytbOnWgH0fNeZTonu7uRHOAHlXUQ9Cqap5O18PiXg3tvuk+ErIXVsg82+5
QvSJfVSrB3OlDusWHkKAUr82XvAnMMQioJVM6Ojl+0UqkAGZvwzuypHANRPf0hf1
i7Mik6p6V5MaKFbjCx3FHSNr9YCC+0vHO76gvXReqVmeO9VWmqlkk6zOdX7dJZPB
3T/45dOcv+VQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org