Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa
File:                     34352e3138342e36372e302f32342d3234203d3e20323639333230.roa (raw, json)
Hash identifier:          5bWhQOJXM7Ov30VRbovpDv2y3cstksUNJuSXHb8EoMc=
Subject key identifier:   5A:E5:7F:34:8C:3C:C3:C6:31:AF:D7:39:D0:54:EA:7D:AC:95:C0:CB
Certificate issuer:       /CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
Certificate serial:       3DACCDD6C383B8F300F1C3BEE3034069DE7BFC2C
Authority key identifier: 1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa
Signing time:             Thu 09 Nov 2023 14:30:53 +0000
ROA not before:           Thu 09 Nov 2023 14:25:53 +0000
ROA not after:            Thu 07 Nov 2024 14:30:53 +0000
asID:                     269320
IP address blocks:        45.184.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:cd:d6:c3:83:b8:f3:00:f1:c3:be:e3:03:40:69:de:7b:fc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2C70C653D3E71D6F3474E6BE60A22AA1244095
        Validity
            Not Before: Nov  9 14:25:53 2023 GMT
            Not After : Nov  7 14:30:53 2024 GMT
        Subject: CN=5AE57F348C3CC3C631AFD739D054EA7DAC95C0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:90:1e:b8:a6:04:1e:cb:f6:f1:7d:8d:e1:
                    9a:c4:f1:7c:7f:30:36:78:bf:0a:06:a1:9b:b6:87:
                    8c:a2:8f:5b:9d:b0:78:7e:48:30:79:1d:dd:14:19:
                    50:88:85:be:1e:a3:1e:f4:ca:2c:10:a9:05:8b:95:
                    f1:93:d9:e5:07:b0:a2:b3:6d:2b:46:79:8e:d6:ec:
                    83:22:93:55:e3:05:0f:ac:b0:0e:0e:1d:a5:ac:67:
                    b6:e4:be:bd:e9:cc:2a:71:fc:0d:f7:09:a6:1a:32:
                    35:f3:61:3a:48:ae:f0:f0:ec:e2:94:84:72:00:9d:
                    8d:1f:2d:7f:70:10:53:d2:51:cd:dd:f8:43:97:23:
                    bf:7d:28:81:c6:b5:84:18:fc:76:79:50:53:7a:79:
                    41:9c:e1:cf:f3:02:85:1b:04:e2:2f:52:f2:c5:61:
                    b3:11:87:43:92:a4:ce:1e:b7:cf:19:b5:d7:af:b3:
                    f8:bd:96:36:74:94:bc:f3:a2:76:d5:c1:50:19:6b:
                    00:b1:b0:9c:61:bd:55:e2:9e:52:91:50:3d:b8:67:
                    ed:39:a1:21:a8:a7:6c:14:4d:d0:2e:c3:fc:9f:a5:
                    1f:22:73:e4:16:20:76:c4:29:4a:6d:fd:30:77:7b:
                    2b:e8:2d:0f:57:94:8a:57:04:24:4e:d1:2d:ca:01:
                    2a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E5:7F:34:8C:3C:C3:C6:31:AF:D7:39:D0:54:EA:7D:AC:95:C0:CB
            X509v3 Authority Key Identifier:
                keyid:1B:2C:70:C6:53:D3:E7:1D:6F:34:74:E6:BE:60:A2:2A:A1:24:40:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1B2C70C653D3E71D6F3474E6BE60A22AA1244095.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39Zvq1bnobb3nyCN47f99otAXewJavCPsbQ1Cqi6htPL/0/34352e3138342e36372e302f32342d3234203d3e20323639333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:ab:4e:49:61:13:79:27:b1:a0:e9:8d:a4:de:ef:db:02:
         49:d7:d2:cd:28:d5:20:7c:04:fb:87:d9:bf:cf:62:31:59:51:
         5e:e4:7e:d9:53:7d:ff:a8:c4:49:ba:03:3a:c6:12:de:2e:b8:
         a5:f5:48:44:96:be:82:c0:6e:74:20:fc:52:9a:2e:9e:66:72:
         4e:88:ab:11:0b:22:11:8d:30:ca:74:93:e9:59:d3:ed:ce:69:
         02:80:55:93:39:ad:1f:a8:f4:5b:1e:3e:f7:91:05:b2:76:15:
         0d:9a:dd:9f:5e:40:b4:b6:de:cb:f0:4a:2c:06:85:f2:df:16:
         1c:39:73:92:db:87:5e:1c:bd:6e:64:01:ec:8f:8d:58:19:2c:
         f4:ea:ed:e1:23:ff:2c:e3:a7:d6:bd:9b:6e:0c:22:41:af:b1:
         4b:3a:6e:2b:23:30:97:59:ea:99:16:f5:6f:a6:18:c0:bb:ad:
         dc:58:1a:43:d5:a4:17:51:1f:47:d7:98:e0:a4:ed:7f:a8:da:
         91:b6:3f:00:a0:fb:67:1d:7d:46:b6:32:95:6b:f0:e8:e6:35:
         d8:02:39:3b:92:83:ff:09:b6:52:ad:33:9f:ae:f5:23:b7:3c:
         e3:1e:c0:e2:c6:11:74:d0:e8:83:01:db:a8:b5:08:3f:7c:1f:
         75:1c:45:31
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPazN1sODuPMA8cO+4wNAad57/CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyQzcwQzY1M0QzRTcxRDZGMzQ3NEU2QkU2MEEyMkFB
MTI0NDA5NTAeFw0yMzExMDkxNDI1NTNaFw0yNDExMDcxNDMwNTNaMDMxMTAvBgNV
BAMTKDVBRTU3RjM0OEMzQ0MzQzYzMUFGRDczOUQwNTRFQTdEQUM5NUMwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs85AeuKYEHsv28X2N4ZrE8Xx/
MDZ4vwoGoZu2h4yij1udsHh+SDB5Hd0UGVCIhb4eox70yiwQqQWLlfGT2eUHsKKz
bStGeY7W7IMik1XjBQ+ssA4OHaWsZ7bkvr3pzCpx/A33CaYaMjXzYTpIrvDw7OKU
hHIAnY0fLX9wEFPSUc3d+EOXI799KIHGtYQY/HZ5UFN6eUGc4c/zAoUbBOIvUvLF
YbMRh0OSpM4et88Ztdevs/i9ljZ0lLzzonbVwVAZawCxsJxhvVXinlKRUD24Z+05
oSGop2wUTdAuw/yfpR8ic+QWIHbEKUpt/TB3eyvoLQ9XlIpXBCRO0S3KASr3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWuV/NIw8w8Yxr9c50FTqfayVwMswHwYDVR0j
BBgwFoAUGyxwxlPT5x1vNHTmvmCiKqEkQJUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMzladnExYm5vYmIzbnlDTjQ3Zjk5b3RBWGV3SmF2Q1BzYlExQ3FpNmh0
UEwvMC8xQjJDNzBDNjUzRDNFNzFENkYzNDc0RTZCRTYwQTIyQUExMjQ0MDk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFCMkM3MEM2NTNEM0U3MUQ2
RjM0NzRFNkJFNjBBMjJBQTEyNDQwOTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzM5WnZxMWJub2JiM255Q040N2Y5OW90QVhld0phdkNQc2JRMUNxaTZodFBMLzAv
MzQzNTJlMzEzODM0MmUzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbhDMA0GCSqGSIb3DQEBCwUAA4IBAQB47qtOSWET
eSexoOmNpN7v2wJJ19LNKNUgfAT7h9m/z2IxWVFe5H7ZU33/qMRJugM6xhLeLril
9UhElr6CwG50IPxSmi6eZnJOiKsRCyIRjTDKdJPpWdPtzmkCgFWTOa0fqPRbHj73
kQWydhUNmt2fXkC0tt7L8EosBoXy3xYcOXOS24deHL1uZAHsj41YGSz06u3hI/8s
46fWvZtuDCJBr7FLOm4rIzCXWeqZFvVvphjAu63cWBpD1aQXUR9H15jgpO1/qNqR
tj8AoPtnHX1GtjKVa/Do5jXYAjk7koP/CbZSrTOfrvUjtzzjHsDixhF00OiDAduo
tQg/fB91HEUx
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org