Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231302e302f32332d3233203d3e20323637363339.roa
File:                     34352e37312e3231302e302f32332d3233203d3e20323637363339.roa (raw, json)
Hash identifier:          12d36NzayRR9DqY6V/ACzH6wgBWhDBw4f01lfPcqBA8=
Subject key identifier:   70:6D:5B:D4:AF:C9:C0:4A:0E:FA:3E:02:57:28:91:4A:21:60:C8:86
Certificate issuer:       /CN=96C551B1BED1686A4D75A83505D3FD0D95045824
Certificate serial:       2E37E46CD32CD0EA6325E96E0A729A5B50984CAF
Authority key identifier: 96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231302e302f32332d3233203d3e20323637363339.roa
Signing time:             Thu 29 Jun 2023 17:19:14 +0000
ROA not before:           Thu 29 Jun 2023 17:14:14 +0000
ROA not after:            Thu 27 Jun 2024 17:19:14 +0000
asID:                     267639
IP address blocks:        45.71.210.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:37:e4:6c:d3:2c:d0:ea:63:25:e9:6e:0a:72:9a:5b:50:98:4c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96C551B1BED1686A4D75A83505D3FD0D95045824
        Validity
            Not Before: Jun 29 17:14:14 2023 GMT
            Not After : Jun 27 17:19:14 2024 GMT
        Subject: CN=706D5BD4AFC9C04A0EFA3E025728914A2160C886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:4c:c5:4b:e2:bd:0d:e4:ac:5b:77:38:a0:
                    52:d3:7d:9c:b4:e5:b6:5c:57:3c:4c:9f:6d:1b:ec:
                    68:67:90:3a:1a:54:0e:c8:2f:65:78:6a:38:8a:4d:
                    1e:b5:18:af:28:6e:4d:b6:34:dc:cb:77:fb:20:68:
                    fc:42:d3:d7:be:8a:f5:8a:e9:17:e4:7b:1e:06:ed:
                    6a:11:c0:78:88:71:fb:2f:56:e8:a6:ac:ec:fc:6f:
                    87:33:42:3a:31:00:00:3f:74:90:ee:71:b8:5c:be:
                    dc:f0:60:db:fa:4c:81:60:5f:a6:46:24:0c:41:a9:
                    06:4e:73:ca:c1:81:b2:5e:87:9b:4e:fc:15:fc:88:
                    d6:b6:86:77:ef:ea:0a:02:da:8f:90:ee:82:9a:36:
                    6f:a2:f3:94:d9:94:9c:2e:97:37:47:b6:77:6a:cf:
                    18:21:18:fe:70:6f:6e:5c:94:57:11:c9:ce:36:97:
                    4b:01:6f:b8:ab:14:91:83:25:91:64:7f:60:40:8d:
                    dd:0b:25:42:a8:df:3f:bc:57:9d:13:0f:ff:69:48:
                    f6:3d:06:80:69:7c:b4:1a:ed:42:32:92:4b:a8:1a:
                    d7:be:d7:50:40:2b:ff:0d:e6:2d:98:49:0d:e8:10:
                    0b:ed:28:88:a4:54:90:87:d2:de:e2:af:d2:52:d4:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:5B:D4:AF:C9:C0:4A:0E:FA:3E:02:57:28:91:4A:21:60:C8:86
            X509v3 Authority Key Identifier:
                keyid:96:C5:51:B1:BE:D1:68:6A:4D:75:A8:35:05:D3:FD:0D:95:04:58:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/96C551B1BED1686A4D75A83505D3FD0D95045824.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96C551B1BED1686A4D75A83505D3FD0D95045824.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cPTgBqC6A9JS3PcxTQH9AJsjqSrLVnzVuYo8qhMBgi2/0/34352e37312e3231302e302f32332d3233203d3e20323637363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:30:bf:78:3e:b5:de:10:64:e9:6f:1d:7e:7c:eb:f8:f3:6e:
         b5:12:d2:0d:0e:6e:d5:0e:fc:4d:84:2c:1f:fb:56:ab:cb:19:
         77:36:55:e9:cc:a2:c7:80:1b:c3:a3:4b:3a:9b:54:9c:fa:dc:
         9c:9d:7c:c0:e8:92:3e:6b:3b:b9:24:84:98:a6:d3:f6:c1:26:
         e6:aa:c5:e4:c2:8e:8e:87:7c:9f:b7:9d:95:b0:88:02:f7:dd:
         d0:b7:02:b1:a8:24:a9:e6:8a:dc:4d:31:4f:90:aa:c2:da:ad:
         37:2b:62:b9:45:cf:29:cd:4a:63:e6:10:18:b0:27:3e:ba:af:
         4b:0a:21:83:d2:df:f0:65:fb:7d:23:75:a7:91:8d:b7:f3:e9:
         70:73:a3:38:38:cb:b2:35:cd:57:8b:94:d7:8e:d1:bd:9e:27:
         3e:bb:37:c0:c7:13:58:8f:49:aa:8e:01:78:85:35:86:b5:ca:
         7a:49:9a:20:2a:65:21:2d:b9:1c:af:77:4c:32:de:dc:82:7b:
         2c:ff:26:c7:e4:09:b4:58:e9:4b:1b:fc:86:b2:2f:37:30:e9:
         14:ea:69:91:63:87:c9:9d:02:68:5b:a9:54:75:a8:3d:af:e1:
         bb:8f:76:60:e2:06:c8:7c:4f:a4:09:3f:64:84:99:d0:05:dc:
         a9:da:f5:a8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULjfkbNMs0OpjJeluCnKaW1CYTK8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZDNTUxQjFCRUQxNjg2QTRENzVBODM1MDVEM0ZEMEQ5
NTA0NTgyNDAeFw0yMzA2MjkxNzE0MTRaFw0yNDA2MjcxNzE5MTRaMDMxMTAvBgNV
BAMTKDcwNkQ1QkQ0QUZDOUMwNEEwRUZBM0UwMjU3Mjg5MTRBMjE2MEM4ODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQckzFS+K9DeSsW3c4oFLTfZy0
5bZcVzxMn20b7GhnkDoaVA7IL2V4ajiKTR61GK8obk22NNzLd/sgaPxC09e+ivWK
6Rfkex4G7WoRwHiIcfsvVuimrOz8b4czQjoxAAA/dJDucbhcvtzwYNv6TIFgX6ZG
JAxBqQZOc8rBgbJeh5tO/BX8iNa2hnfv6goC2o+Q7oKaNm+i85TZlJwulzdHtndq
zxghGP5wb25clFcRyc42l0sBb7irFJGDJZFkf2BAjd0LJUKo3z+8V50TD/9pSPY9
BoBpfLQa7UIykkuoGte+11BAK/8N5i2YSQ3oEAvtKIikVJCH0t7ir9JS1GVXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcG1b1K/JwEoO+j4CVyiRSiFgyIYwHwYDVR0j
BBgwFoAUlsVRsb7RaGpNdag1BdP9DZUEWCQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGNQVGdCcUM2QTlKUzNQY3hUUUg5QUpzanFTckxWbnpWdVlvOHFoTUJn
aTIvMC85NkM1NTFCMUJFRDE2ODZBNEQ3NUE4MzUwNUQzRkQwRDk1MDQ1ODI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2QzU1MUIxQkVEMTY4NkE0
RDc1QTgzNTA1RDNGRDBEOTUwNDU4MjQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRjUFRnQnFDNkE5SlMzUGN4VFFIOUFKc2pxU3JMVm56VnVZbzhxaE1CZ2kyLzAv
MzQzNTJlMzczMTJlMzIzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUfSMA0GCSqGSIb3DQEBCwUAA4IBAQBlML94PrXe
EGTpbx1+fOv48261EtINDm7VDvxNhCwf+1aryxl3NlXpzKLHgBvDo0s6m1Sc+tyc
nXzA6JI+azu5JISYptP2wSbmqsXkwo6Oh3yft52VsIgC993QtwKxqCSp5orcTTFP
kKrC2q03K2K5Rc8pzUpj5hAYsCc+uq9LCiGD0t/wZft9I3WnkY238+lwc6M4OMuy
Nc1Xi5TXjtG9nic+uzfAxxNYj0mqjgF4hTWGtcp6SZogKmUhLbkcr3dMMt7cgnss
/ybH5Am0WOlLG/yGsi83MOkU6mmRY4fJnQJoW6lUdag9r+G7j3Zg4gbIfE+kCT9k
hJnQBdyp2vWo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org