Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa
File:                     34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa (raw, json)
Hash identifier:          4XwyZeL3QxFSbIJIM/i1FAX7eXmBFcGDfA/LyliPSus=
Subject key identifier:   D7:FA:75:1C:97:75:E9:84:F4:9D:75:A5:22:8F:54:64:04:DE:17:87
Certificate issuer:       /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial:       56688F14A48C693AB5446D9C540010F866893B9E
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa
Signing time:             Thu 28 Dec 2023 17:54:21 +0000
ROA not before:           Thu 28 Dec 2023 17:49:21 +0000
ROA not after:            Thu 26 Dec 2024 17:54:21 +0000
asID:                     268710
IP address blocks:        45.170.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:68:8f:14:a4:8c:69:3a:b5:44:6d:9c:54:00:10:f8:66:89:3b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
        Validity
            Not Before: Dec 28 17:49:21 2023 GMT
            Not After : Dec 26 17:54:21 2024 GMT
        Subject: CN=D7FA751C9775E984F49D75A5228F546404DE1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:55:aa:c8:19:03:10:f4:06:69:10:28:24:7f:
                    41:16:54:f5:ab:06:6e:94:f6:61:e1:9c:79:48:4b:
                    ec:ea:e3:9f:0f:a9:00:e6:f3:0d:ac:94:c5:ef:08:
                    dc:99:80:0f:23:f9:b3:91:1f:14:03:8d:ed:51:c2:
                    c5:ea:fe:d7:32:17:78:15:f3:a6:16:e7:92:d0:18:
                    15:d0:a1:69:7e:39:22:60:ff:b1:a5:18:c0:5a:71:
                    bd:65:96:98:84:48:0a:7f:9d:f3:63:98:e8:18:23:
                    34:b5:c5:f7:8e:3b:9e:6a:1d:d4:8b:40:ed:79:40:
                    d9:a3:be:70:c8:ba:a1:24:ff:26:1a:70:1f:fa:cf:
                    8c:1c:5b:3e:62:d4:43:03:9a:97:2c:98:bb:7a:45:
                    38:15:a2:26:61:de:fc:b1:17:04:b5:5d:dc:2d:77:
                    a9:45:37:a4:8e:e4:90:b6:59:c3:2b:af:5c:8f:63:
                    a2:f1:5c:2f:76:a5:90:ea:be:fe:42:56:c5:97:aa:
                    bf:50:b4:ec:8c:af:95:86:5a:04:61:39:c0:86:1a:
                    31:c2:92:b8:56:70:87:8e:79:d2:d0:73:14:a2:36:
                    71:e1:98:39:95:bd:bd:23:dd:5f:d6:98:b5:5d:69:
                    07:c9:b8:90:c2:a5:6e:60:22:ea:3f:93:bc:b1:c4:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:FA:75:1C:97:75:E9:84:F4:9D:75:A5:22:8F:54:64:04:DE:17:87
            X509v3 Authority Key Identifier:
                keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3233302e302f32332d3233203d3e20323638373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:1f:d5:65:f8:4a:7c:61:f1:5f:ae:6c:f4:6d:97:ca:27:15:
         1a:fd:95:21:44:52:70:9b:37:60:d4:c1:92:54:89:cf:85:85:
         9a:3f:84:a9:88:38:cd:83:e4:05:95:71:5a:00:56:d4:c6:41:
         c4:9e:cd:6a:f2:c1:6c:cd:40:e1:fd:93:f8:72:f7:c4:02:a5:
         f3:91:24:b3:d8:a7:e0:db:ef:bc:7c:50:56:e8:c5:2d:e9:2c:
         bb:6c:b0:03:23:53:42:cb:36:62:b4:df:9a:2f:a8:b0:c5:26:
         1d:42:bb:16:8a:6d:9b:4b:cb:fb:45:28:2e:d2:66:32:81:75:
         2f:4f:c6:76:89:b4:3e:30:08:82:74:b7:12:bc:7c:f3:ae:6a:
         8a:09:44:c7:a6:a2:ca:4b:58:90:08:e8:76:4e:05:e1:a4:81:
         6f:4b:5c:e1:4f:9c:d5:18:d0:64:c9:b0:c5:c0:a7:dd:f8:1c:
         8f:68:41:3f:5d:44:94:a7:cb:1d:01:d1:9a:6f:b6:4d:aa:2f:
         4e:80:3a:67:7d:1b:86:c7:22:a2:77:4b:59:6a:28:78:6d:6e:
         78:f6:04:e8:c3:ca:01:8f:d7:7c:6b:2e:d8:c6:75:5b:76:4a:
         4e:6b:72:c4:93:b6:bc:a0:75:15:ec:c0:5c:63:28:14:8e:9f:
         cd:ea:a0:2f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVmiPFKSMaTq1RG2cVAAQ+GaJO54wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY5QjA1QUY2OEE1NzhDQUY3OUZEQkE3QjcyQUUwNDdB
OTY0MzZFNjAeFw0yMzEyMjgxNzQ5MjFaFw0yNDEyMjYxNzU0MjFaMDMxMTAvBgNV
BAMTKEQ3RkE3NTFDOTc3NUU5ODRGNDlENzVBNTIyOEY1NDY0MDRERTE3ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpVarIGQMQ9AZpECgkf0EWVPWr
Bm6U9mHhnHlIS+zq458PqQDm8w2slMXvCNyZgA8j+bORHxQDje1RwsXq/tcyF3gV
86YW55LQGBXQoWl+OSJg/7GlGMBacb1llpiESAp/nfNjmOgYIzS1xfeOO55qHdSL
QO15QNmjvnDIuqEk/yYacB/6z4wcWz5i1EMDmpcsmLt6RTgVoiZh3vyxFwS1Xdwt
d6lFN6SO5JC2WcMrr1yPY6LxXC92pZDqvv5CVsWXqr9QtOyMr5WGWgRhOcCGGjHC
krhWcIeOedLQcxSiNnHhmDmVvb0j3V/WmLVdaQfJuJDCpW5gIuo/k7yxxPc9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU1/p1HJd16YT0nXWlIo9UZATeF4cwHwYDVR0j
BBgwFoAUZpsFr2ileMr3n9untyrgR6lkNuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM
N3MvMC82NjlCMDVBRjY4QTU3OENBRjc5RkRCQTdCNzJBRTA0N0E5NjQzNkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2OUIwNUFGNjhBNTc4Q0FG
NzlGREJBN0I3MkFFMDQ3QTk2NDM2RTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5VDVSalpZOGhQQnpRcWpLcUsyd0FoU3lWQ2hxQ1ZDOUo3QjFRdkQ2TDdzLzAv
MzQzNTJlMzEzNzMwMmUzMjMzMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtquYwDQYJKoZIhvcNAQELBQADggEBADwf1WX4
Snxh8V+ubPRtl8onFRr9lSFEUnCbN2DUwZJUic+FhZo/hKmIOM2D5AWVcVoAVtTG
QcSezWrywWzNQOH9k/hy98QCpfORJLPYp+Db77x8UFboxS3pLLtssAMjU0LLNmK0
35ovqLDFJh1CuxaKbZtLy/tFKC7SZjKBdS9PxnaJtD4wCIJ0txK8fPOuaooJRMem
ospLWJAI6HZOBeGkgW9LXOFPnNUY0GTJsMXAp934HI9oQT9dRJSnyx0B0Zpvtk2q
L06AOmd9G4bHIqJ3S1lqKHhtbnj2BOjDygGP13xrLtjGdVt2Sk5rcsSTtrygdRXs
wFxjKBSOn83qoC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org