Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa
File:                     34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa (raw, json)
Hash identifier:          dUPR3et1AdwZ3QwA348LHThZdWjQFjjd+ggBstzI99k=
Subject key identifier:   FF:D7:59:12:B8:66:03:00:FE:14:D9:EE:4E:57:63:19:A3:06:94:1B
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       11A890ABE8C05F68B6B87A2E62E9E1E18E5B9C17
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:23 +0000
ROA not before:           Thu 29 Feb 2024 23:15:23 +0000
ROA not after:            Thu 27 Feb 2025 23:20:23 +0000
asID:                     267675
IP address blocks:        45.224.238.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a8:90:ab:e8:c0:5f:68:b6:b8:7a:2e:62:e9:e1:e1:8e:5b:9c:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:23 2024 GMT
            Not After : Feb 27 23:20:23 2025 GMT
        Subject: CN=FFD75912B8660300FE14D9EE4E576319A306941B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:44:14:13:bf:ee:29:68:a3:a7:83:d6:11:b6:
                    f1:3d:99:67:ba:0f:8f:02:68:1d:2f:02:cc:db:49:
                    96:b5:f1:db:20:e2:8e:b4:d2:e7:18:a8:1d:34:0f:
                    a9:57:d8:72:00:b4:4d:66:50:d8:35:57:68:92:a8:
                    11:ed:63:89:ef:4c:e6:8f:7e:4d:93:62:bc:e4:c3:
                    19:6d:c5:9f:da:9f:33:f8:e7:52:d9:9a:a1:08:0b:
                    df:56:8d:f1:2f:93:84:c6:f2:f2:90:39:97:f7:95:
                    f5:a6:b8:4f:94:a5:95:de:df:1f:24:90:b1:bc:12:
                    77:03:65:11:ba:b1:9b:d1:34:27:46:5b:ae:3a:f3:
                    f9:62:20:3b:c1:81:15:05:93:fd:e7:b3:87:26:0a:
                    2a:21:5c:ee:93:18:94:13:fb:48:d5:41:72:f3:d8:
                    db:87:6f:e1:68:0c:b8:85:a9:39:fe:92:74:fa:4e:
                    98:86:e2:b4:f5:ab:91:37:b8:1e:31:b3:1a:a3:43:
                    80:db:c3:b8:f7:7b:00:ff:11:28:44:26:1d:bb:7b:
                    89:07:f5:56:bf:02:03:d2:6f:90:3d:fc:76:8e:3a:
                    dc:96:db:f5:9f:05:4f:08:fa:61:4b:ef:98:b3:a4:
                    6d:38:00:e8:a9:03:23:be:9f:b6:12:14:f0:1a:98:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D7:59:12:B8:66:03:00:FE:14:D9:EE:4E:57:63:19:A3:06:94:1B
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/34352e3232342e3233382e302f32332d3233203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:86:3a:32:df:96:be:72:bf:50:d5:60:19:8c:db:e7:26:e8:
         43:72:c7:3c:de:4c:54:7a:76:34:03:c3:45:75:47:5a:ea:67:
         f6:9d:d9:d4:0f:c6:52:bf:cc:d7:eb:22:bc:d5:6a:06:03:ae:
         23:2c:39:6d:39:ee:be:08:f4:8e:1a:19:90:be:05:0b:03:ca:
         d3:df:89:95:d7:fa:b9:3a:6b:f6:18:64:83:a5:b8:16:dc:82:
         1c:36:f9:84:d1:a9:68:c7:28:f0:fb:6f:f2:27:1c:ab:75:77:
         cc:ab:87:fc:3b:f1:c9:dd:45:95:6d:11:7b:a8:4c:f6:70:c8:
         62:5d:34:8b:9b:2c:bf:e4:25:d9:3f:37:61:c7:92:21:4f:fc:
         59:ab:1f:10:d0:a0:5a:ec:03:6c:96:78:26:32:0c:cf:af:c4:
         b3:79:64:c8:5e:a9:73:a7:e3:04:63:6f:47:c3:eb:ef:81:d8:
         80:88:45:02:9b:93:a9:a2:61:64:42:fd:97:13:87:2b:d8:02:
         68:6a:11:6c:40:38:13:8c:35:94:a3:69:42:51:d0:69:44:c4:
         a5:f2:23:78:dc:1e:62:43:87:6f:9c:c9:9c:13:93:ea:48:52:
         2b:1d:0c:6b:7c:9e:f3:ca:74:b3:23:87:42:f0:43:58:9c:b4:
         24:b3:ac:82
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEaiQq+jAX2i2uHouYunh4Y5bnBcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY3MDVCQzg2OEQxNjFCMkI0MkVCNjQzNDkzMjE4OEYy
NzcyMkRGMzAeFw0yNDAyMjkyMzE1MjNaFw0yNTAyMjcyMzIwMjNaMDMxMTAvBgNV
BAMTKEZGRDc1OTEyQjg2NjAzMDBGRTE0RDlFRTRFNTc2MzE5QTMwNjk0MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRBQTv+4paKOng9YRtvE9mWe6
D48CaB0vAszbSZa18dsg4o600ucYqB00D6lX2HIAtE1mUNg1V2iSqBHtY4nvTOaP
fk2TYrzkwxltxZ/anzP451LZmqEIC99WjfEvk4TG8vKQOZf3lfWmuE+UpZXe3x8k
kLG8EncDZRG6sZvRNCdGW6468/liIDvBgRUFk/3ns4cmCiohXO6TGJQT+0jVQXLz
2NuHb+FoDLiFqTn+knT6TpiG4rT1q5E3uB4xsxqjQ4Dbw7j3ewD/EShEJh27e4kH
9Va/AgPSb5A9/HaOOtyW2/WfBU8I+mFL75izpG04AOipAyO+n7YSFPAamMuHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/9dZErhmAwD+FNnuTldjGaMGlBswHwYDVR0j
BBgwFoAU1nBbyGjRYbK0LrZDSTIYjydyLfMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNFpaTmMxa1gxaUZNMjFraUQ4NmR3bjRGU3gxZFdFNFB5MW1US2VOM1Q0
Y2EvMC9ENjcwNUJDODY4RDE2MUIyQjQyRUI2NDM0OTMyMTg4RjI3NzIyREYzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q2NzA1QkM4NjhEMTYxQjJC
NDJFQjY0MzQ5MzIxODhGMjc3MjJERjMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRaWk5jMWtYMWlGTTIxa2lEODZkd240RlN4MWRXRTRQeTFtVEtlTjNUNGNhLzAv
MzQzNTJlMzIzMjM0MmUzMjMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczNjM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt4O4wDQYJKoZIhvcNAQELBQADggEBABWGOjLf
lr5yv1DVYBmM2+cm6ENyxzzeTFR6djQDw0V1R1rqZ/ad2dQPxlK/zNfrIrzVagYD
riMsOW057r4I9I4aGZC+BQsDytPfiZXX+rk6a/YYZIOluBbcghw2+YTRqWjHKPD7
b/InHKt1d8yrh/w78cndRZVtEXuoTPZwyGJdNIubLL/kJdk/N2HHkiFP/FmrHxDQ
oFrsA2yWeCYyDM+vxLN5ZMheqXOn4wRjb0fD6++B2ICIRQKbk6miYWRC/ZcThyvY
AmhqEWxAOBOMNZSjaUJR0GlExKXyI3jcHmJDh2+cyZwTk+pIUisdDGt8nvPKdLMj
h0LwQ1ictCSzrII=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org