Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa
File:                     34352e3232362e39312e302f32342d3234203d3e20323632343934.roa (raw, json)
Hash identifier:          5ILhufHIe4Ti49BthI9FDWBuZtnvXCksIe29ZZS+K4U=
Subject key identifier:   56:31:09:AD:AA:39:6A:2C:B7:70:03:31:01:A9:48:96:75:92:8C:E4
Certificate issuer:       /CN=87BB708DC32E9016081213188D40053E40CA51AB
Certificate serial:       2640B115FFB840FE5F3647DA99C219F382293999
Authority key identifier: 87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa
Signing time:             Thu 19 Sep 2024 14:11:53 +0000
ROA not before:           Thu 19 Sep 2024 14:06:53 +0000
ROA not after:            Thu 18 Sep 2025 14:11:53 +0000
asID:                     262494
IP address blocks:        45.226.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:40:b1:15:ff:b8:40:fe:5f:36:47:da:99:c2:19:f3:82:29:39:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87BB708DC32E9016081213188D40053E40CA51AB
        Validity
            Not Before: Sep 19 14:06:53 2024 GMT
            Not After : Sep 18 14:11:53 2025 GMT
        Subject: CN=563109ADAA396A2CB770033101A9489675928CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bd:0a:24:65:04:cb:f7:36:92:81:1d:c2:f9:
                    d7:25:13:25:4e:02:1d:3c:b8:f3:b2:bc:76:67:fc:
                    34:4e:94:48:d5:7b:0d:27:b4:32:58:ba:0f:56:4f:
                    b0:13:8d:4b:87:c8:a5:ed:51:4c:49:a2:a5:fa:3a:
                    63:3d:e0:be:f5:10:66:68:65:53:17:b5:e8:39:6e:
                    91:6b:51:64:50:c5:32:6e:39:c9:e1:ad:ad:1d:7e:
                    39:e5:c6:17:17:8f:8a:09:90:fe:21:12:27:fd:5c:
                    e3:ce:28:d8:7a:5d:67:7c:4e:10:fe:8f:78:ae:c2:
                    5d:25:db:a0:8d:be:32:44:14:2d:c5:f5:f2:03:68:
                    d4:92:db:19:ae:67:47:10:b0:66:2f:52:55:0e:4c:
                    ec:50:5e:6b:71:b4:aa:dc:b9:03:72:6a:3d:0e:f6:
                    08:33:68:ed:01:92:50:ca:c4:49:2d:b6:18:03:83:
                    05:b6:37:20:90:c4:6f:83:3d:9c:16:59:c8:0b:15:
                    79:42:95:d7:dc:71:d5:60:b7:e8:4d:98:b9:11:4e:
                    03:35:ce:a4:2d:d9:68:02:e3:fe:ef:32:83:9e:7b:
                    77:d6:6b:f3:16:59:68:fb:bc:43:e3:05:9a:ec:a0:
                    6c:47:9f:34:c1:8c:cf:3b:61:ff:c9:28:97:d5:3e:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:09:AD:AA:39:6A:2C:B7:70:03:31:01:A9:48:96:75:92:8C:E4
            X509v3 Authority Key Identifier:
                keyid:87:BB:70:8D:C3:2E:90:16:08:12:13:18:8D:40:05:3E:40:CA:51:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/87BB708DC32E9016081213188D40053E40CA51AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87BB708DC32E9016081213188D40053E40CA51AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/34352e3232362e39312e302f32342d3234203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:04:f3:10:7a:c0:90:5a:56:61:3a:dd:d1:bf:d7:3a:4d:1f:
         ea:ba:24:3e:a5:12:51:84:27:ae:e9:1c:58:d1:be:80:f9:4e:
         73:30:a8:f6:b1:3c:95:f3:89:cd:b8:32:35:4e:a5:81:d3:21:
         07:93:d5:7e:48:c5:47:2b:7a:4c:a6:fe:cd:b9:87:90:54:6f:
         df:37:97:3c:22:01:57:bd:87:b7:c0:88:70:78:d0:38:e2:4c:
         2a:bc:c6:63:c6:42:4d:e6:43:2e:02:f7:f2:ef:6f:9a:7c:2b:
         02:44:55:f3:2b:ac:2c:14:82:4a:86:1e:ad:fe:74:14:a2:c5:
         ff:8b:5e:a5:a0:0b:5a:d6:f9:66:eb:53:cf:10:0c:28:43:c6:
         42:a4:df:09:fc:dd:92:4c:05:e8:0d:ee:77:3c:a3:47:96:44:
         dc:58:23:13:80:62:f5:d8:94:d3:8a:6d:aa:2a:6c:8b:07:a7:
         3a:c2:df:a3:b0:6f:47:64:00:03:87:94:56:57:cd:20:63:cf:
         32:7d:c6:01:e3:4b:6a:80:a0:e1:04:3d:86:b1:12:0f:c2:fb:
         9b:3f:e7:51:54:f1:94:c3:20:e9:5f:ed:ce:3d:c1:b4:a6:ba:
         c6:98:de:a7:c9:22:ec:7d:3d:ca:c1:0d:d5:96:00:a0:03:95:
         90:3e:c8:4a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJkCxFf+4QP5fNkfamcIZ84IpOZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdCQjcwOERDMzJFOTAxNjA4MTIxMzE4OEQ0MDA1M0U0
MENBNTFBQjAeFw0yNDA5MTkxNDA2NTNaFw0yNTA5MTgxNDExNTNaMDMxMTAvBgNV
BAMTKDU2MzEwOUFEQUEzOTZBMkNCNzcwMDMzMTAxQTk0ODk2NzU5MjhDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvQokZQTL9zaSgR3C+dclEyVO
Ah08uPOyvHZn/DROlEjVew0ntDJYug9WT7ATjUuHyKXtUUxJoqX6OmM94L71EGZo
ZVMXteg5bpFrUWRQxTJuOcnhra0dfjnlxhcXj4oJkP4hEif9XOPOKNh6XWd8ThD+
j3iuwl0l26CNvjJEFC3F9fIDaNSS2xmuZ0cQsGYvUlUOTOxQXmtxtKrcuQNyaj0O
9ggzaO0BklDKxEktthgDgwW2NyCQxG+DPZwWWcgLFXlCldfccdVgt+hNmLkRTgM1
zqQt2WgC4/7vMoOee3fWa/MWWWj7vEPjBZrsoGxHnzTBjM87Yf/JKJfVPv65AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUVjEJrao5aiy3cAMxAalIlnWSjOQwHwYDVR0j
BBgwFoAUh7twjcMukBYIEhMYjUAFPkDKUaswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDdXZDQ4VXVNdWVVQ3ViVHFRWkx3ajdFTTZVaHl1cE5zNTZrUmNXWHNF
SkMvMC84N0JCNzA4REMzMkU5MDE2MDgxMjEzMTg4RDQwMDUzRTQwQ0E1MUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg3QkI3MDhEQzMyRTkwMTYw
ODEyMTMxODhENDAwNTNFNDBDQTUxQUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ3V2Q0OFV1TXVlVUN1YlRxUVpMd2o3RU02VWh5dXBOczU2a1JjV1hzRUpDLzAv
MzQzNTJlMzIzMjM2MmUzOTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMy
MzQzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeJbMA0GCSqGSIb3DQEBCwUAA4IBAQAfBPMQesCQ
WlZhOt3Rv9c6TR/quiQ+pRJRhCeu6RxY0b6A+U5zMKj2sTyV84nNuDI1TqWB0yEH
k9V+SMVHK3pMpv7NuYeQVG/fN5c8IgFXvYe3wIhweNA44kwqvMZjxkJN5kMuAvfy
72+afCsCRFXzK6wsFIJKhh6t/nQUosX/i16loAta1vlm61PPEAwoQ8ZCpN8J/N2S
TAXoDe53PKNHlkTcWCMTgGL12JTTim2qKmyLB6c6wt+jsG9HZAADh5RWV80gY88y
fcYB40tqgKDhBD2GsRIPwvubP+dRVPGUwyDpX+3OPcG0prrGmN6nySLsfT3KwQ3V
lgCgA5WQPshK
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:35:09 2024 by rpki-client on console-ams.rpki-client.org