Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e362e302f32342d3234203d3e20323638343234.roa
File:                     34352e3136312e362e302f32342d3234203d3e20323638343234.roa (raw, json)
Hash identifier:          UjGRqQTbAE5V3dug7GXDj8Ex2EpDhk+rzwfqiP2qjLQ=
Subject key identifier:   B7:24:F6:E1:9F:C0:1B:77:23:10:C2:59:E0:59:8B:4D:E2:9F:F2:E4
Certificate issuer:       /CN=E429F35E74597C6DE39F18CE6F1303823FC75955
Certificate serial:       0B4E8C3FB45F46A2B254A0152282D4571A012D84
Authority key identifier: E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e362e302f32342d3234203d3e20323638343234.roa
Signing time:             Mon 04 Mar 2024 19:34:22 +0000
ROA not before:           Mon 04 Mar 2024 19:29:22 +0000
ROA not after:            Mon 03 Mar 2025 19:34:22 +0000
asID:                     268424
IP address blocks:        45.161.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4e:8c:3f:b4:5f:46:a2:b2:54:a0:15:22:82:d4:57:1a:01:2d:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E429F35E74597C6DE39F18CE6F1303823FC75955
        Validity
            Not Before: Mar  4 19:29:22 2024 GMT
            Not After : Mar  3 19:34:22 2025 GMT
        Subject: CN=B724F6E19FC01B772310C259E0598B4DE29FF2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:f7:a6:79:ed:23:e4:9a:64:0c:99:8d:33:
                    33:8e:92:22:ee:6e:68:e1:2f:58:40:39:40:b3:12:
                    4a:e6:56:20:c1:ef:3c:e5:38:71:c9:94:59:9a:dd:
                    83:a9:97:09:fd:a1:31:c1:2e:58:80:46:c8:93:2e:
                    1e:f4:49:ac:d1:bb:53:96:d5:64:9b:2b:40:6b:9b:
                    2c:f9:c1:ab:dc:a9:18:8f:24:37:f2:4e:b5:9e:e4:
                    72:b2:f6:00:7f:c0:cd:ad:90:a3:a1:55:c4:45:77:
                    d5:37:dc:16:09:ed:26:a5:c2:6d:0f:0c:42:48:a8:
                    b9:1d:19:90:71:d9:2a:0d:14:e2:83:2d:b7:dd:7d:
                    ca:b0:e0:8d:2f:4b:01:88:57:f8:06:62:28:5e:9d:
                    79:5f:34:cc:54:49:82:1e:ac:31:3a:5e:12:2e:d3:
                    4d:37:25:e4:6e:30:99:98:f3:0f:f1:d5:bc:96:2f:
                    1b:ea:da:2e:ac:d8:1e:3e:89:3f:d7:5e:4b:63:17:
                    88:50:0f:7b:ed:b8:10:1f:e9:bc:1a:93:24:2c:73:
                    42:c5:a4:9d:62:26:cc:24:4e:b0:60:0e:df:c7:31:
                    b3:bb:47:02:c9:fc:9f:79:f6:aa:42:82:b9:14:e6:
                    9d:7d:33:11:e0:09:b7:0c:97:b2:f8:db:ab:ad:db:
                    9c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:24:F6:E1:9F:C0:1B:77:23:10:C2:59:E0:59:8B:4D:E2:9F:F2:E4
            X509v3 Authority Key Identifier:
                keyid:E4:29:F3:5E:74:59:7C:6D:E3:9F:18:CE:6F:13:03:82:3F:C7:59:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/E429F35E74597C6DE39F18CE6F1303823FC75955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E429F35E74597C6DE39F18CE6F1303823FC75955.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MrmEmRR6ax4jWTi8k8p83Lcn6SUWAjJGDMV9RhJhTe5/0/34352e3136312e362e302f32342d3234203d3e20323638343234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:67:9c:bf:13:4d:b0:f5:a0:d3:fb:c1:3c:86:22:f8:a0:07:
         ee:41:44:74:76:ef:c2:17:aa:7a:48:67:62:bc:7f:68:31:fe:
         99:8b:97:2f:c0:d1:3b:d2:1f:d1:65:47:bd:0d:cb:42:23:88:
         8a:8a:3a:be:a5:55:04:04:dd:d4:cc:09:f7:74:ec:00:d0:57:
         65:f4:06:c5:5f:8e:f6:b0:dc:70:b3:b5:98:d3:52:cd:f4:51:
         d6:06:0a:9e:78:bb:42:bb:0a:77:e0:5b:64:63:02:0e:3c:06:
         91:b1:e2:10:59:62:a0:20:66:1d:83:61:74:93:b8:c4:22:49:
         a2:66:18:22:8c:b2:28:43:20:46:fe:f2:2f:ae:3b:f7:66:e9:
         cf:34:2f:97:ea:19:55:27:bf:a0:09:5f:f4:ae:ad:96:bc:69:
         fe:c7:b9:22:4b:48:d0:71:b2:ec:22:71:39:80:b8:8d:6b:0a:
         87:e4:30:23:cf:4a:39:b5:cd:ef:bd:3d:43:75:f2:48:04:d7:
         9c:00:b1:0a:29:ea:ed:53:89:35:8b:0e:c0:b9:7d:c3:8a:0d:
         11:ed:78:45:86:1e:05:a4:1e:19:34:c6:99:75:cb:30:b7:8e:
         70:22:b9:25:83:95:b3:ca:7e:5a:31:4b:cc:85:cd:c4:dc:76:
         05:a5:84:c3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC06MP7RfRqKyVKAVIoLUVxoBLYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQyOUYzNUU3NDU5N0M2REUzOUYxOENFNkYxMzAzODIz
RkM3NTk1NTAeFw0yNDAzMDQxOTI5MjJaFw0yNTAzMDMxOTM0MjJaMDMxMTAvBgNV
BAMTKEI3MjRGNkUxOUZDMDFCNzcyMzEwQzI1OUUwNTk4QjRERTI5RkYyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+evemee0j5JpkDJmNMzOOkiLu
bmjhL1hAOUCzEkrmViDB7zzlOHHJlFma3YOplwn9oTHBLliARsiTLh70SazRu1OW
1WSbK0Brmyz5wavcqRiPJDfyTrWe5HKy9gB/wM2tkKOhVcRFd9U33BYJ7Salwm0P
DEJIqLkdGZBx2SoNFOKDLbfdfcqw4I0vSwGIV/gGYihenXlfNMxUSYIerDE6XhIu
0003JeRuMJmY8w/x1byWLxvq2i6s2B4+iT/XXktjF4hQD3vtuBAf6bwakyQsc0LF
pJ1iJswkTrBgDt/HMbO7RwLJ/J959qpCgrkU5p19MxHgCbcMl7L426ut25zhAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUtyT24Z/AG3cjEMJZ4FmLTeKf8uQwHwYDVR0j
BBgwFoAU5CnzXnRZfG3jnxjObxMDgj/HWVUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNE1ybUVtUlI2YXg0aldUaThrOHA4M0xjbjZTVVdBakpHRE1WOVJoSmhU
ZTUvMC9FNDI5RjM1RTc0NTk3QzZERTM5RjE4Q0U2RjEzMDM4MjNGQzc1OTU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U0MjlGMzVFNzQ1OTdDNkRF
MzlGMThDRTZGMTMwMzgyM0ZDNzU5NTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRNcm1FbVJSNmF4NGpXVGk4azhwODNMY242U1VXQWpKR0RNVjlSaEpoVGU1LzAv
MzQzNTJlMzEzNjMxMmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM0
MzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC2hBjANBgkqhkiG9w0BAQsFAAOCAQEAFWecvxNNsPWg
0/vBPIYi+KAH7kFEdHbvwheqekhnYrx/aDH+mYuXL8DRO9If0WVHvQ3LQiOIioo6
vqVVBATd1MwJ93TsANBXZfQGxV+O9rDccLO1mNNSzfRR1gYKnni7QrsKd+BbZGMC
DjwGkbHiEFlioCBmHYNhdJO4xCJJomYYIoyyKEMgRv7yL64792bpzzQvl+oZVSe/
oAlf9K6tlrxp/se5IktI0HGy7CJxOYC4jWsKh+QwI89KObXN7709Q3XySATXnACx
Cinq7VOJNYsOwLl9w4oNEe14RYYeBaQeGTTGmXXLMLeOcCK5JYOVs8p+WjFLzIXN
xNx2BaWEww==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:41 2024 by rpki-client on console-fra.rpki-client.org