Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
File:                     34352e3137382e32302e302f32332d3233203d3e20323639303135.roa (raw, json)
Hash identifier:          d3oXOkjG5vt1f15b1XBH8mjyFRLGzAK30zXXfFgOvAs=
Subject key identifier:   2A:0C:9B:47:6B:7A:E1:5C:4E:22:74:4B:3D:ED:11:6C:CA:6B:F1:0C
Certificate issuer:       /CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
Certificate serial:       4854BD0319B9447984BF34BDCC4B39243E8D4EBC
Authority key identifier: 5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa
Signing time:             Thu 10 Nov 2022 13:01:28 +0000
ROA not before:           Thu 10 Nov 2022 12:56:28 +0000
ROA not after:            Thu 09 Nov 2023 13:01:28 +0000
asID:                     269015
IP address blocks:        45.178.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:54:bd:03:19:b9:44:79:84:bf:34:bd:cc:4b:39:24:3e:8d:4e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DD67EDB0CBA6C222F193D244301CEDA035DB765
        Validity
            Not Before: Nov 10 12:56:28 2022 GMT
            Not After : Nov  9 13:01:28 2023 GMT
        Subject: CN=2A0C9B476B7AE15C4E22744B3DED116CCA6BF10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:23:49:d0:2e:43:6f:ea:10:85:b0:cb:69:
                    49:26:e8:b5:b9:04:0e:46:ab:22:36:65:ff:61:50:
                    58:7a:f8:b9:95:02:84:f0:a2:81:83:ef:c1:ce:ca:
                    cf:db:cc:3e:57:53:be:2c:84:bc:bf:f2:b7:56:d9:
                    33:51:41:76:ce:4e:2b:ce:42:1a:83:56:66:21:fa:
                    5a:f0:0a:6b:40:12:4e:bf:4a:e3:c6:28:85:28:ad:
                    82:4a:f3:36:1b:8d:7d:2a:3b:0b:15:fe:b3:be:fe:
                    c9:2f:f7:bb:45:44:63:97:0f:29:f5:e2:9c:18:13:
                    ad:d6:07:2b:fa:81:71:7a:ce:7a:e9:d5:79:94:fc:
                    4b:ec:fb:c8:f4:8a:c3:93:36:7d:29:e8:50:53:97:
                    b2:e7:8f:d3:3f:f3:e8:90:8b:0d:ec:7b:47:7a:23:
                    ad:2d:cd:d6:f3:94:5f:3d:f4:89:1a:d0:e2:66:77:
                    17:4d:01:cf:84:71:44:88:a7:c2:06:d9:76:24:02:
                    40:3e:c6:c4:89:6a:b3:ca:30:60:3e:f7:ed:a5:ee:
                    72:9d:d9:28:e0:c5:65:ef:c8:df:06:35:ee:f5:05:
                    93:aa:f8:d4:e4:0e:34:78:c3:48:b9:17:4e:88:a1:
                    29:32:ed:1a:01:7e:c5:b2:17:04:10:43:1d:1b:02:
                    a7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:9B:47:6B:7A:E1:5C:4E:22:74:4B:3D:ED:11:6C:CA:6B:F1:0C
            X509v3 Authority Key Identifier:
                keyid:5D:D6:7E:DB:0C:BA:6C:22:2F:19:3D:24:43:01:CE:DA:03:5D:B7:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DD67EDB0CBA6C222F193D244301CEDA035DB765.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/0/34352e3137382e32302e302f32332d3233203d3e20323639303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:e4:cf:64:c1:ac:8f:6f:20:e9:da:60:1d:ef:25:21:e3:3d:
         97:9a:63:86:5b:aa:d6:af:03:73:73:f5:ef:5d:87:7b:73:1b:
         32:f9:ac:77:f3:ee:ae:1b:3c:02:c0:24:8b:79:38:0e:de:ca:
         29:e9:f8:42:76:25:7a:8b:e0:b0:68:e7:c5:f0:08:fb:82:5e:
         b6:ce:fc:34:c0:d7:32:3f:e7:a4:49:03:17:89:bd:84:81:1f:
         5b:92:84:67:c7:3d:c8:26:a6:a1:24:21:c9:c6:0e:11:ba:ef:
         f7:c1:c4:ae:b5:6a:df:ef:cc:f9:47:74:07:bd:0a:b4:4e:c5:
         2e:90:15:50:4c:5c:ec:3b:d7:43:f2:4b:ff:91:e5:0a:51:c0:
         d9:a7:87:f7:b4:c5:e1:0a:f1:86:68:6e:7a:87:f6:fe:a3:4f:
         00:79:6e:02:c8:99:36:bd:7c:d4:ff:34:66:19:5a:14:16:d4:
         b1:ac:0f:66:d2:db:d3:ea:b5:df:40:9e:f3:e2:36:99:b7:bf:
         0b:8f:03:aa:27:46:e1:46:fa:e0:41:1d:a8:50:bc:ec:e9:77:
         35:45:ca:d6:7e:c1:14:80:74:c0:fd:1b:a0:98:0c:7d:e5:74:
         11:cd:09:3f:51:66:db:e6:cf:30:21:c0:6c:50:73:4a:48:d5:
         c5:9a:b3:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSFS9Axm5RHmEvzS9zEs5JD6NTrwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURENjdFREIwQ0JBNkMyMjJGMTkzRDI0NDMwMUNFREEw
MzVEQjc2NTAeFw0yMjExMTAxMjU2MjhaFw0yMzExMDkxMzAxMjhaMDMxMTAvBgNV
BAMTKDJBMEM5QjQ3NkI3QUUxNUM0RTIyNzQ0QjNERUQxMTZDQ0E2QkYxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFCNJ0C5Db+oQhbDLaUkm6LW5
BA5GqyI2Zf9hUFh6+LmVAoTwooGD78HOys/bzD5XU74shLy/8rdW2TNRQXbOTivO
QhqDVmYh+lrwCmtAEk6/SuPGKIUorYJK8zYbjX0qOwsV/rO+/skv97tFRGOXDyn1
4pwYE63WByv6gXF6znrp1XmU/Evs+8j0isOTNn0p6FBTl7Lnj9M/8+iQiw3se0d6
I60tzdbzlF899Ika0OJmdxdNAc+EcUSIp8IG2XYkAkA+xsSJarPKMGA+9+2l7nKd
2SjgxWXvyN8GNe71BZOq+NTkDjR4w0i5F06IoSky7RoBfsWyFwQQQx0bAqd3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKgybR2t64VxOInRLPe0RbMpr8QwwHwYDVR0j
BBgwFoAUXdZ+2wy6bCIvGT0kQwHO2gNdt2UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFFFZFV3TFQ0MVl1NjRWWldaR3lZd2VraEZibTVjVXJLQzZRWmhrcmVF
Z3AvMC81REQ2N0VEQjBDQkE2QzIyMkYxOTNEMjQ0MzAxQ0VEQTAzNURCNzY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERDY3RURCMENCQTZDMjIy
RjE5M0QyNDQzMDFDRURBMDM1REI3NjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRRRWRVd0xUNDFZdTY0VlpXWkd5WXdla2hGYm01Y1VyS0M2UVpoa3JlRWdwLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzAzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbIUMA0GCSqGSIb3DQEBCwUAA4IBAQBc5M9kwayP
byDp2mAd7yUh4z2XmmOGW6rWrwNzc/XvXYd7cxsy+ax38+6uGzwCwCSLeTgO3sop
6fhCdiV6i+CwaOfF8Aj7gl62zvw0wNcyP+ekSQMXib2EgR9bkoRnxz3IJqahJCHJ
xg4Ruu/3wcSutWrf78z5R3QHvQq0TsUukBVQTFzsO9dD8kv/keUKUcDZp4f3tMXh
CvGGaG56h/b+o08AeW4CyJk2vXzU/zRmGVoUFtSxrA9m0tvT6rXfQJ7z4jaZt78L
jwOqJ0bhRvrgQR2oULzs6Xc1RcrWfsEUgHTA/RugmAx95XQRzQk/UWbb5s8wIcBs
UHNKSNXFmrNd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org