Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/34352e342e32302e302f32322d3234203d3e20323636303530.roa
File:                     34352e342e32302e302f32322d3234203d3e20323636303530.roa (raw, json)
Hash identifier:          x2yLSGAAHsnm1HVz/7Tg/+jLaXybvIawr0vsW3+d1Fg=
Subject key identifier:   82:09:CC:5A:61:2C:99:B1:74:E9:9D:22:78:2D:78:EE:2D:37:0C:72
Certificate issuer:       /CN=0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53
Certificate serial:       50C9177F6DF5D8E52C52FBED8FECDFD5550C811E
Authority key identifier: 0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/34352e342e32302e302f32322d3234203d3e20323636303530.roa
Signing time:             Tue 15 Aug 2023 19:00:26 +0000
ROA not before:           Tue 15 Aug 2023 18:55:26 +0000
ROA not after:            Tue 13 Aug 2024 19:00:26 +0000
asID:                     266050
IP address blocks:        45.4.20.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c9:17:7f:6d:f5:d8:e5:2c:52:fb:ed:8f:ec:df:d5:55:0c:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53
        Validity
            Not Before: Aug 15 18:55:26 2023 GMT
            Not After : Aug 13 19:00:26 2024 GMT
        Subject: CN=8209CC5A612C99B174E99D22782D78EE2D370C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:66:7a:8a:44:54:86:fe:6c:02:13:08:c5:
                    44:a9:a2:e0:b3:e4:fc:e5:9d:2a:4d:ad:f2:08:5c:
                    02:48:3a:da:2e:12:50:7f:06:34:a9:d9:24:69:9b:
                    50:88:b8:da:38:26:07:00:e8:cb:5b:97:20:f0:fc:
                    c3:24:72:cf:e3:c7:b2:3b:36:7e:9a:cc:bc:f2:26:
                    97:39:01:c7:9b:8d:3e:25:34:29:d2:b0:a2:d4:82:
                    fb:c8:da:b4:f9:f7:c7:35:42:3d:c5:80:f1:f8:ad:
                    94:89:97:49:3d:81:ea:08:c4:a7:f7:38:09:6a:06:
                    d0:b0:30:7e:57:91:9c:32:d5:15:3f:1b:b0:87:c4:
                    1a:4f:c7:97:c1:7b:07:1f:bc:6a:4e:53:d5:25:4b:
                    03:d7:70:96:8e:05:df:0e:6c:b7:06:38:e6:17:5b:
                    e1:6b:f5:56:72:8b:58:4b:8d:db:5c:3a:df:67:56:
                    7d:b2:1d:1b:7b:d8:b6:71:7c:3f:4f:07:e5:a8:33:
                    f1:e3:de:d1:63:24:16:08:75:ad:82:36:88:57:bc:
                    c7:7f:f7:4f:4b:fc:95:8f:12:d9:6f:7f:13:ac:21:
                    66:53:e3:ef:0a:dc:59:54:78:35:94:fe:f5:f6:1d:
                    09:96:f6:6a:57:a6:82:e3:ab:a3:d5:d2:57:17:84:
                    2c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:CC:5A:61:2C:99:B1:74:E9:9D:22:78:2D:78:EE:2D:37:0C:72
            X509v3 Authority Key Identifier:
                keyid:0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/34352e342e32302e302f32322d3234203d3e20323636303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:e3:35:98:1f:b9:58:f0:ac:6a:06:85:fd:62:f6:ad:ad:
         05:43:8b:e7:20:fa:56:de:45:e9:0f:a6:fb:7c:28:38:74:66:
         fd:f0:74:75:c6:39:f1:b6:87:03:01:b7:92:2f:0e:15:ac:74:
         2c:38:de:26:ce:f6:af:a9:ca:4b:ae:7f:e6:52:f4:98:83:6c:
         ee:c1:3b:3b:49:cf:8e:55:49:31:09:72:d6:ca:e9:54:fc:d9:
         8d:3f:e0:1d:4b:52:f5:8c:e3:65:5c:72:dd:b6:59:d1:ac:0f:
         74:91:74:46:7d:ec:e8:28:77:95:3b:08:d1:06:5e:29:33:1b:
         48:6b:0c:04:6e:90:71:42:94:0f:25:dd:b7:1f:d7:ca:ae:38:
         b1:b6:f6:57:aa:18:78:ca:31:84:38:22:52:70:8a:f4:7a:31:
         45:19:27:cb:99:75:f5:9e:6a:56:d2:ae:44:23:56:9e:cc:42:
         39:76:6a:93:94:2f:30:73:fb:32:af:69:0c:fb:0f:5a:6f:8d:
         44:dd:86:e6:91:11:4a:06:38:a6:f6:b6:b0:f0:00:3b:86:dd:
         9e:bc:07:ad:1a:78:fd:6d:b8:2f:74:48:2f:b3:af:0c:d6:9a:
         b9:0a:cb:2b:65:37:2d:e3:dd:57:58:e7:6e:27:f9:25:b5:b2:
         63:12:1f:95
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUUMkXf2312OUsUvvtj+zf1VUMgR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMENGRTk4NEFBM0YzODI2MEFBQkY5RkJGMEZFMkIyREY4
RENGRUU1MzAeFw0yMzA4MTUxODU1MjZaFw0yNDA4MTMxOTAwMjZaMDMxMTAvBgNV
BAMTKDgyMDlDQzVBNjEyQzk5QjE3NEU5OUQyMjc4MkQ3OEVFMkQzNzBDNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5GZ6ikRUhv5sAhMIxUSpouCz
5PzlnSpNrfIIXAJIOtouElB/BjSp2SRpm1CIuNo4JgcA6MtblyDw/MMkcs/jx7I7
Nn6azLzyJpc5AcebjT4lNCnSsKLUgvvI2rT598c1Qj3FgPH4rZSJl0k9geoIxKf3
OAlqBtCwMH5XkZwy1RU/G7CHxBpPx5fBewcfvGpOU9UlSwPXcJaOBd8ObLcGOOYX
W+Fr9VZyi1hLjdtcOt9nVn2yHRt72LZxfD9PB+WoM/Hj3tFjJBYIda2CNohXvMd/
909L/JWPEtlvfxOsIWZT4+8K3FlUeDWU/vX2HQmW9mpXpoLjq6PV0lcXhCwJAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUggnMWmEsmbF06Z0ieC147i03DHIwHwYDVR0j
BBgwFoAUDP6YSqPzgmCqv5+/D+Ky343P7lMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VHTDhSOTdvUDQ2QW1zUVBNcG9VQ0RUNnl0OHFFV21pVFNZc2luRXZM
eDQvMC8wQ0ZFOTg0QUEzRjM4MjYwQUFCRjlGQkYwRkUyQjJERjhEQ0ZFRTUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBDRkU5ODRBQTNGMzgyNjBB
QUJGOUZCRjBGRTJCMkRGOERDRkVFNTMuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNlR0w4Ujk3b1A0NkFtc1FQTXBvVUNEVDZ5dDhxRVdtaVRTWXNpbkV2THg0LzAv
MzQzNTJlMzQyZTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM1
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBBQwDQYJKoZIhvcNAQELBQADggEBADsH4zWYH7lY8Kxq
BoX9YvatrQVDi+cg+lbeRekPpvt8KDh0Zv3wdHXGOfG2hwMBt5IvDhWsdCw43ibO
9q+pykuuf+ZS9JiDbO7BOztJz45VSTEJctbK6VT82Y0/4B1LUvWM42Vcct22WdGs
D3SRdEZ97Ogod5U7CNEGXikzG0hrDARukHFClA8l3bcf18quOLG29leqGHjKMYQ4
IlJwivR6MUUZJ8uZdfWealbSrkQjVp7MQjl2apOULzBz+zKvaQz7D1pvjUTdhuaR
EUoGOKb2trDwADuG3Z68B60aeP1tuC90SC+zrwzWmrkKyytlNy3j3VdY524n+SW1
smMSH5U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org