Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3234203d3e20323639333637.roa
File:                     34352e3138352e37362e302f32322d3234203d3e20323639333637.roa (raw, json)
Hash identifier:          4ra47giuA3baIVFAe5mJgLrLgTJrJU6liA+nRQbnZk0=
Subject key identifier:   D9:BC:55:87:5C:03:4A:31:58:9F:64:82:ED:05:3D:C6:D6:06:5E:59
Certificate issuer:       /CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
Certificate serial:       0D2FC30677E24C07120E1D401B239A6125A0B17C
Authority key identifier: 58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3234203d3e20323639333637.roa
Signing time:             Sat 10 Feb 2024 02:24:31 +0000
ROA not before:           Sat 10 Feb 2024 02:19:31 +0000
ROA not after:            Sat 08 Feb 2025 02:24:31 +0000
asID:                     269367
IP address blocks:        45.185.76.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2f:c3:06:77:e2:4c:07:12:0e:1d:40:1b:23:9a:61:25:a0:b1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5820A7350809BA171F6B4004D5F8AD4654AD3A9C
        Validity
            Not Before: Feb 10 02:19:31 2024 GMT
            Not After : Feb  8 02:24:31 2025 GMT
        Subject: CN=D9BC55875C034A31589F6482ED053DC6D6065E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:79:a1:37:a4:2b:c2:2d:dd:19:a7:a8:dc:61:
                    5d:c5:ec:5c:a0:76:bb:b0:97:8f:4b:f1:dc:6d:f4:
                    50:03:21:78:d8:fa:b3:9b:c8:cc:0b:0b:87:2e:30:
                    b4:be:42:5a:35:38:be:43:8c:15:49:4e:ea:de:38:
                    10:45:3a:e2:d7:13:38:61:ab:de:51:91:1b:0a:d7:
                    98:c5:c2:ec:4c:8c:04:73:d5:de:32:9d:42:5a:fa:
                    2f:01:87:8d:34:76:be:24:56:d5:99:57:40:dd:8c:
                    2a:1e:52:27:ba:08:71:14:a4:bb:07:0a:bf:6d:ff:
                    27:a0:7d:cf:b1:5a:da:c1:81:39:46:53:5b:7c:2c:
                    ab:3b:93:53:0f:9d:e3:ac:ac:bd:f9:c1:14:42:62:
                    8a:f9:72:c6:4d:9a:3a:6b:57:de:65:00:b2:be:bb:
                    44:26:0a:22:15:74:35:5a:e3:f9:90:54:b9:0f:6a:
                    77:78:29:9a:6e:fe:49:33:52:63:e4:e7:74:2a:6d:
                    9b:e7:b7:ac:07:82:cf:b5:dc:32:3f:00:09:5d:28:
                    e0:4d:e2:ce:e2:4f:9f:3f:d6:ca:6b:2c:95:9d:2b:
                    f9:08:65:8c:21:67:ce:ab:58:07:b3:30:5b:1f:32:
                    56:a2:ba:52:c4:ca:93:ef:24:2b:43:a7:fd:71:91:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BC:55:87:5C:03:4A:31:58:9F:64:82:ED:05:3D:C6:D6:06:5E:59
            X509v3 Authority Key Identifier:
                keyid:58:20:A7:35:08:09:BA:17:1F:6B:40:04:D5:F8:AD:46:54:AD:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5820A7350809BA171F6B4004D5F8AD4654AD3A9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3dY59Jjuhvq93StbvhHy5pMXkcb6bSV8SKwjTaExiNqH/0/34352e3138352e37362e302f32322d3234203d3e20323639333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:77:5e:5f:45:5d:4f:2d:08:59:97:6b:ba:b5:b3:fb:7a:b2:
         d3:5d:22:2a:e3:0f:13:7c:9b:c2:c5:6a:e4:9c:ad:f8:ad:47:
         11:9e:0a:46:27:88:aa:2e:8f:ed:38:c1:ac:84:bb:0d:6e:53:
         66:1f:72:bc:e7:f3:4c:34:41:c7:c7:ab:5d:de:3f:59:a7:3e:
         48:0e:a1:20:39:f5:a7:23:32:1b:c5:b9:cc:9b:51:1b:19:2a:
         dd:a2:7a:12:4a:de:91:16:a7:f7:10:12:7f:ea:fc:b7:fd:c2:
         15:97:6a:f4:45:ef:ec:5e:a1:82:06:f5:6d:62:5d:f2:75:35:
         75:42:c0:a3:48:e7:b0:4e:05:09:a8:d3:a4:be:de:32:55:1c:
         0b:83:c2:69:1d:de:e3:38:26:eb:af:b7:ce:df:a3:d8:91:a7:
         60:ed:1e:fc:04:1a:92:d0:ef:95:33:8e:79:a1:53:20:63:30:
         59:10:83:7b:70:db:66:58:d6:ce:77:82:bd:f6:7f:34:e2:25:
         1e:10:6a:28:e5:49:bc:15:12:d9:2f:92:36:17:b6:18:4a:2b:
         69:c8:65:68:10:93:e9:4a:1d:58:8b:7a:95:f6:08:a7:b5:52:
         3c:6f:f5:3b:55:da:2c:4f:8b:8e:14:bb:38:00:85:71:0f:18:
         50:bb:7d:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDS/DBnfiTAcSDh1AGyOaYSWgsXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTgyMEE3MzUwODA5QkExNzFGNkI0MDA0RDVGOEFENDY1
NEFEM0E5QzAeFw0yNDAyMTAwMjE5MzFaFw0yNTAyMDgwMjI0MzFaMDMxMTAvBgNV
BAMTKEQ5QkM1NTg3NUMwMzRBMzE1ODlGNjQ4MkVEMDUzREM2RDYwNjVFNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFeaE3pCvCLd0Zp6jcYV3F7Fyg
druwl49L8dxt9FADIXjY+rObyMwLC4cuMLS+Qlo1OL5DjBVJTureOBBFOuLXEzhh
q95RkRsK15jFwuxMjARz1d4ynUJa+i8Bh400dr4kVtWZV0DdjCoeUie6CHEUpLsH
Cr9t/yegfc+xWtrBgTlGU1t8LKs7k1MPneOsrL35wRRCYor5csZNmjprV95lALK+
u0QmCiIVdDVa4/mQVLkPand4KZpu/kkzUmPk53QqbZvnt6wHgs+13DI/AAldKOBN
4s7iT58/1sprLJWdK/kIZYwhZ86rWAezMFsfMlaiulLEypPvJCtDp/1xkRQZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2bxVh1wDSjFYn2SC7QU9xtYGXlkwHwYDVR0j
BBgwFoAUWCCnNQgJuhcfa0AE1fitRlStOpwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2RZNTlKanVodnE5M1N0YnZoSHk1cE1Ya2NiNmJTVjhTS3dqVGFFeGlO
cUgvMC81ODIwQTczNTA4MDlCQTE3MUY2QjQwMDRENUY4QUQ0NjU0QUQzQTlDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU4MjBBNzM1MDgwOUJBMTcx
RjZCNDAwNEQ1RjhBRDQ2NTRBRDNBOUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNkWTU5Smp1aHZxOTNTdGJ2aEh5NXBNWGtjYjZiU1Y4U0t3alRhRXhpTnFILzAv
MzQzNTJlMzEzODM1MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzMzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLblMMA0GCSqGSIb3DQEBCwUAA4IBAQBZd15fRV1P
LQhZl2u6tbP7erLTXSIq4w8TfJvCxWrknK34rUcRngpGJ4iqLo/tOMGshLsNblNm
H3K85/NMNEHHx6td3j9Zpz5IDqEgOfWnIzIbxbnMm1EbGSrdonoSSt6RFqf3EBJ/
6vy3/cIVl2r0Re/sXqGCBvVtYl3ydTV1QsCjSOewTgUJqNOkvt4yVRwLg8JpHd7j
OCbrr7fO36PYkadg7R78BBqS0O+VM455oVMgYzBZEIN7cNtmWNbOd4K99n804iUe
EGoo5Um8FRLZL5I2F7YYSitpyGVoEJPpSh1Yi3qV9gintVI8b/U7VdosT4uOFLs4
AIVxDxhQu33M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org