Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa
File:                     34352e3233382e39322e302f32322d3232203d3e20323638333230.roa (raw, json)
Hash identifier:          5wbGqcZMEh1xDK7XbQOdHR/tJwoAPmnlbCXni5/wA/o=
Subject key identifier:   A1:88:2A:E2:CF:B3:E2:24:55:55:5D:2D:FB:D3:BE:88:26:EE:E0:A6
Certificate issuer:       /CN=D0436FEA91781D055687421CAEF481A6EC223F53
Certificate serial:       5F49AE89355FE2BEBF9027974ABEB7F2ABA0827B
Authority key identifier: D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa
Signing time:             Thu 03 Aug 2023 17:00:56 +0000
ROA not before:           Thu 03 Aug 2023 16:55:56 +0000
ROA not after:            Thu 01 Aug 2024 17:00:56 +0000
asID:                     268320
IP address blocks:        45.238.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:49:ae:89:35:5f:e2:be:bf:90:27:97:4a:be:b7:f2:ab:a0:82:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0436FEA91781D055687421CAEF481A6EC223F53
        Validity
            Not Before: Aug  3 16:55:56 2023 GMT
            Not After : Aug  1 17:00:56 2024 GMT
        Subject: CN=A1882AE2CFB3E22455555D2DFBD3BE8826EEE0A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:19:fc:16:bf:8a:83:94:54:09:df:1b:39:
                    fc:e4:b7:fd:b8:9e:34:db:f7:8d:f2:9c:54:f8:d6:
                    26:1a:89:92:87:b1:ed:92:01:cd:1e:f7:c8:fd:29:
                    5e:1b:2b:ff:e4:6c:3f:54:eb:b4:d5:6d:1a:d2:2b:
                    2a:17:df:98:18:43:cc:e4:7e:0b:92:3a:07:81:f0:
                    a9:f2:3c:67:b9:29:4d:5c:9b:0b:fd:f3:f9:ad:c1:
                    d0:4c:55:45:66:72:3b:c0:59:99:d0:04:08:12:46:
                    09:b4:0e:a5:aa:21:6d:73:05:88:82:bd:9e:1b:cb:
                    6f:ec:58:62:fa:4b:5c:2d:92:1e:f4:49:4b:aa:01:
                    d8:7c:b4:f1:a5:80:b9:2a:8e:2c:a4:f1:86:84:3e:
                    b1:f9:10:ac:5a:d5:56:bd:3e:25:19:4b:0b:db:99:
                    35:6f:c9:fc:b0:1a:2b:ee:e0:fc:35:86:78:9c:54:
                    94:46:cf:15:41:fe:f5:b4:24:16:b7:ef:d9:5c:75:
                    af:46:93:80:bc:a2:1b:46:50:55:b6:db:28:58:93:
                    28:02:db:0a:bd:af:bf:b5:a8:31:22:d3:57:e7:5f:
                    68:8b:0f:cb:b8:60:c8:bf:d8:82:8d:77:36:c5:bf:
                    6f:4a:2f:a9:1c:65:5f:21:b3:bb:e9:81:ac:91:8e:
                    89:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:2A:E2:CF:B3:E2:24:55:55:5D:2D:FB:D3:BE:88:26:EE:E0:A6
            X509v3 Authority Key Identifier:
                keyid:D0:43:6F:EA:91:78:1D:05:56:87:42:1C:AE:F4:81:A6:EC:22:3F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/D0436FEA91781D055687421CAEF481A6EC223F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0436FEA91781D055687421CAEF481A6EC223F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yguMt9usbjbCMhft4oWUduFBfPkdPnGZ2QQX2Z4Zcba/0/34352e3233382e39322e302f32322d3232203d3e20323638333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:ef:8f:57:0b:ee:cf:83:7e:65:20:2c:06:6e:d9:dd:00:0a:
         13:cd:56:24:0b:d4:89:a4:fb:53:62:59:30:62:10:58:e1:21:
         14:46:b2:43:49:a3:70:c2:3b:c9:17:e6:db:d6:d6:83:b3:df:
         d8:71:0d:96:09:f6:69:ec:86:99:b7:e1:9b:49:80:94:a7:17:
         6b:95:9f:5e:9b:f5:b6:67:54:16:22:92:de:60:26:b8:59:f3:
         c3:1e:41:61:99:81:0a:2b:99:51:fc:7e:5d:40:b1:2a:24:c3:
         cb:77:9b:61:7f:62:54:6f:0f:4d:2c:d2:8f:e4:de:75:91:4f:
         59:da:e0:4b:4a:66:08:cb:e2:e6:77:18:ee:97:30:74:7d:d3:
         a8:b4:33:05:ed:a1:5c:33:c1:1b:63:c6:2f:03:86:fb:f7:56:
         2f:31:c7:9b:13:2a:8b:16:2a:ab:24:fa:d3:96:71:3c:b2:95:
         d6:a1:ac:25:55:16:cd:41:17:b5:33:c1:80:af:a9:d2:3b:d2:
         83:43:c4:b5:fc:56:9d:d4:3e:38:dc:c7:76:dd:8a:e5:4b:f3:
         df:54:d1:31:de:0e:20:62:45:1d:a2:c7:d3:4f:ba:55:56:66:
         72:f6:3b:75:1b:a2:09:d5:ec:8e:fb:96:01:94:7a:4a:46:e9:
         54:8a:3e:ee
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX0muiTVf4r6/kCeXSr638quggnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA0MzZGRUE5MTc4MUQwNTU2ODc0MjFDQUVGNDgxQTZF
QzIyM0Y1MzAeFw0yMzA4MDMxNjU1NTZaFw0yNDA4MDExNzAwNTZaMDMxMTAvBgNV
BAMTKEExODgyQUUyQ0ZCM0UyMjQ1NTU1NUQyREZCRDNCRTg4MjZFRUUwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NBn8Fr+Kg5RUCd8bOfzkt/24
njTb943ynFT41iYaiZKHse2SAc0e98j9KV4bK//kbD9U67TVbRrSKyoX35gYQ8zk
fguSOgeB8KnyPGe5KU1cmwv98/mtwdBMVUVmcjvAWZnQBAgSRgm0DqWqIW1zBYiC
vZ4by2/sWGL6S1wtkh70SUuqAdh8tPGlgLkqjiyk8YaEPrH5EKxa1Va9PiUZSwvb
mTVvyfywGivu4Pw1hnicVJRGzxVB/vW0JBa379lcda9Gk4C8ohtGUFW22yhYkygC
2wq9r7+1qDEi01fnX2iLD8u4YMi/2IKNdzbFv29KL6kcZV8hs7vpgayRjomjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoYgq4s+z4iRVVV0t+9O+iCbu4KYwHwYDVR0j
BBgwFoAU0ENv6pF4HQVWh0IcrvSBpuwiP1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lndU10OXVzYmpiQ01oZnQ0b1dVZHVGQmZQa2RQbkdaMlFRWDJaNFpj
YmEvMC9EMDQzNkZFQTkxNzgxRDA1NTY4NzQyMUNBRUY0ODFBNkVDMjIzRjUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwNDM2RkVBOTE3ODFEMDU1
Njg3NDIxQ0FFRjQ4MUE2RUMyMjNGNTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5Z3VNdDl1c2JqYkNNaGZ0NG9XVWR1RkJmUGtkUG5HWjJRUVgyWjRaY2JhLzAv
MzQzNTJlMzIzMzM4MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe5cMA0GCSqGSIb3DQEBCwUAA4IBAQC2749XC+7P
g35lICwGbtndAAoTzVYkC9SJpPtTYlkwYhBY4SEURrJDSaNwwjvJF+bb1taDs9/Y
cQ2WCfZp7IaZt+GbSYCUpxdrlZ9em/W2Z1QWIpLeYCa4WfPDHkFhmYEKK5lR/H5d
QLEqJMPLd5thf2JUbw9NLNKP5N51kU9Z2uBLSmYIy+LmdxjulzB0fdOotDMF7aFc
M8EbY8YvA4b791YvMcebEyqLFiqrJPrTlnE8spXWoawlVRbNQRe1M8GAr6nSO9KD
Q8S1/Fad1D443Md23YrlS/PfVNEx3g4gYkUdosfTT7pVVmZy9jt1G6IJ1eyO+5YB
lHpKRulUij7u
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org