Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa
File:                     34352e3138312e39322e302f32322d3233203d3e20323639313735.roa (raw, json)
Hash identifier:          c050MWWuzabedPChCv4niugdKWz8SyiWaxhj5tKYXRs=
Subject key identifier:   05:8C:9A:99:9A:9D:7F:ED:61:6B:05:25:A9:B4:E4:C6:3C:3D:4A:51
Certificate issuer:       /CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Certificate serial:       66BFCB77B9D30474F52CF8E3103B4D32749B2CA5
Authority key identifier: D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa
Signing time:             Tue 20 Feb 2024 14:46:04 +0000
ROA not before:           Tue 20 Feb 2024 14:41:04 +0000
ROA not after:            Tue 18 Feb 2025 14:46:04 +0000
asID:                     269175
IP address blocks:        45.181.92.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:bf:cb:77:b9:d3:04:74:f5:2c:f8:e3:10:3b:4d:32:74:9b:2c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
        Validity
            Not Before: Feb 20 14:41:04 2024 GMT
            Not After : Feb 18 14:46:04 2025 GMT
        Subject: CN=058C9A999A9D7FED616B0525A9B4E4C63C3D4A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:c7:7b:77:5c:ee:f3:51:46:c2:e8:80:f3:
                    4b:09:3e:da:e4:f5:3a:24:1a:c6:49:23:10:64:d4:
                    d3:0e:39:27:7b:60:d5:41:bf:2d:37:b7:94:2a:5c:
                    54:a2:5b:ce:22:a5:17:99:19:bd:ef:20:47:25:97:
                    a3:01:f4:f7:eb:73:f3:df:03:64:28:0d:2c:52:47:
                    2e:96:7a:6d:95:85:01:9f:6b:6c:fa:08:23:56:82:
                    a9:57:85:da:bd:b2:76:48:fd:c1:f9:14:17:b4:ce:
                    68:f2:9b:ac:1c:e5:03:1c:c6:ca:db:b5:7c:8e:67:
                    b9:ac:4d:3f:8e:c4:aa:12:6d:da:58:f0:d1:90:3b:
                    78:17:c9:1f:0f:9e:a8:c8:40:b5:af:d1:65:cb:55:
                    7e:41:83:a2:d8:88:1f:78:5c:fa:8d:80:a6:8e:36:
                    03:09:02:79:47:8c:a1:1a:35:2f:aa:c9:16:0a:de:
                    a2:7c:3d:d3:4b:6c:c5:ae:4f:21:2e:d6:f6:f4:67:
                    83:91:03:82:d5:57:4a:94:0c:f9:3d:bf:48:49:3d:
                    87:5b:24:35:4c:10:ad:e6:d6:21:ff:4e:dd:c6:9f:
                    7a:bb:51:b3:be:88:a2:dd:0a:ce:3e:18:01:7c:2f:
                    a8:1d:68:12:b4:91:80:b9:34:40:23:24:47:bd:b1:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8C:9A:99:9A:9D:7F:ED:61:6B:05:25:A9:B4:E4:C6:3C:3D:4A:51
            X509v3 Authority Key Identifier:
                keyid:D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/34352e3138312e39322e302f32322d3233203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:cc:79:c2:b7:86:e7:75:de:fd:84:ff:57:ee:58:ed:0f:25:
         c3:34:93:df:90:44:e9:fc:a2:4f:ab:2b:69:f2:8b:d4:35:c9:
         94:17:cf:7f:61:98:b3:fc:e0:9e:d2:fd:cc:8b:8a:ab:3e:84:
         75:52:8e:70:d1:5a:70:9e:2b:fa:4c:b9:10:b8:01:39:08:01:
         98:23:b3:fb:90:c8:b5:50:3f:66:6e:49:cd:d1:3d:db:de:32:
         23:ce:ad:5f:29:e3:06:ac:0b:7c:e2:e3:54:59:e0:ba:9d:f3:
         1c:23:62:76:32:fa:24:f2:03:5b:3e:99:de:35:93:b4:0e:b4:
         13:fe:74:e3:b1:f3:38:26:79:16:6a:f6:74:43:70:6b:55:7f:
         f1:8a:35:ab:73:e0:2f:88:f9:59:a7:dc:94:49:7f:7d:b3:b8:
         ef:fd:0a:2e:9a:58:8d:3e:ca:eb:89:0f:aa:b5:a9:14:f9:eb:
         c9:ac:e2:30:0d:4d:2e:2c:3c:13:7c:34:a6:81:cb:31:aa:ae:
         2b:5b:5f:93:db:78:c4:62:49:18:2a:6d:fb:a5:d4:50:35:c9:
         29:a3:55:ca:c2:c5:b3:59:bc:c2:6c:d5:0f:b0:e6:e1:41:6b:
         0b:63:ae:70:eb:ec:e1:a0:c4:16:ae:33:ca:2a:ad:25:2b:18:
         bb:7f:e4:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZr/Ld7nTBHT1LPjjEDtNMnSbLKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQwMkFBRkJBRTE3OEQ1M0QxOTRFNkUxQzJENTQwNDhC
RTE1QjA4RTAeFw0yNDAyMjAxNDQxMDRaFw0yNTAyMTgxNDQ2MDRaMDMxMTAvBgNV
BAMTKDA1OEM5QTk5OUE5RDdGRUQ2MTZCMDUyNUE5QjRFNEM2M0MzRDRBNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2cd7d1zu81FGwuiA80sJPtrk
9TokGsZJIxBk1NMOOSd7YNVBvy03t5QqXFSiW84ipReZGb3vIEcll6MB9Pfrc/Pf
A2QoDSxSRy6Wem2VhQGfa2z6CCNWgqlXhdq9snZI/cH5FBe0zmjym6wc5QMcxsrb
tXyOZ7msTT+OxKoSbdpY8NGQO3gXyR8PnqjIQLWv0WXLVX5Bg6LYiB94XPqNgKaO
NgMJAnlHjKEaNS+qyRYK3qJ8PdNLbMWuTyEu1vb0Z4ORA4LVV0qUDPk9v0hJPYdb
JDVMEK3m1iH/Tt3Gn3q7UbO+iKLdCs4+GAF8L6gdaBK0kYC5NEAjJEe9seRTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBYyamZqdf+1hawUlqbTkxjw9SlEwHwYDVR0j
BBgwFoAU1AKq+64XjVPRlObhwtVASL4VsI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEd0RVk2MVZ6YlhNM3NTWG50OWNXTEFaZUxLcGI3YkpIOWp0MWt3Wkxq
dEgvMC9ENDAyQUFGQkFFMTc4RDUzRDE5NEU2RTFDMkQ1NDA0OEJFMTVCMDhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q0MDJBQUZCQUUxNzhENTNE
MTk0RTZFMUMyRDU0MDQ4QkUxNUIwOEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHdEVZNjFWemJYTTNzU1hudDljV0xBWmVMS3BiN2JKSDlqdDFrd1pManRILzAv
MzQzNTJlMzEzODMxMmUzOTMyMmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM5
MzEzNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbVcMA0GCSqGSIb3DQEBCwUAA4IBAQAmzHnCt4bn
dd79hP9X7ljtDyXDNJPfkETp/KJPqytp8ovUNcmUF89/YZiz/OCe0v3Mi4qrPoR1
Uo5w0Vpwniv6TLkQuAE5CAGYI7P7kMi1UD9mbknN0T3b3jIjzq1fKeMGrAt84uNU
WeC6nfMcI2J2Mvok8gNbPpneNZO0DrQT/nTjsfM4JnkWavZ0Q3BrVX/xijWrc+Av
iPlZp9yUSX99s7jv/QoumliNPsrriQ+qtakU+evJrOIwDU0uLDwTfDSmgcsxqq4r
W1+T23jEYkkYKm37pdRQNckpo1XKwsWzWbzCbNUPsObhQWsLY65w6+zhoMQWrjPK
Kq0lKxi7f+SH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org