Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135352e302f32342d3234203d3e20323638323535.roa
File:                     34352e3233362e3135352e302f32342d3234203d3e20323638323535.roa (raw, json)
Hash identifier:          bqgRv6JIcp+GIndbsdRSNIt1zaNaVpJxo725SfXB7Bk=
Subject key identifier:   2E:F4:11:B1:1C:55:3E:BF:6C:BB:E8:8C:35:89:AF:89:1D:5B:C9:E9
Certificate issuer:       /CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
Certificate serial:       59D217166BCA3A6D1BA2E83116750B4CC3FDE0BE
Authority key identifier: B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135352e302f32342d3234203d3e20323638323535.roa
Signing time:             Mon 03 Apr 2023 10:57:45 +0000
ROA not before:           Mon 03 Apr 2023 10:52:45 +0000
ROA not after:            Mon 01 Apr 2024 10:57:45 +0000
asID:                     268255
IP address blocks:        45.236.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:17:16:6b:ca:3a:6d:1b:a2:e8:31:16:75:0b:4c:c3:fd:e0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7EACE5FCD839D3B7EB07701983C797BF744943B
        Validity
            Not Before: Apr  3 10:52:45 2023 GMT
            Not After : Apr  1 10:57:45 2024 GMT
        Subject: CN=2EF411B11C553EBF6CBBE88C3589AF891D5BC9E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:57:86:e1:15:b1:38:38:c7:bf:57:f9:bb:e9:
                    28:ca:93:75:80:31:e3:89:58:0e:34:c2:8c:61:8c:
                    b8:36:a2:d1:01:17:49:f8:a3:66:8e:d8:46:66:98:
                    40:0c:fb:65:a3:23:38:55:e4:b7:a2:be:d0:51:3e:
                    08:69:7f:08:0a:7e:0a:94:e0:88:3b:ec:fe:e3:46:
                    4a:55:9a:21:44:ac:52:f3:fd:4d:ba:59:08:ff:75:
                    d9:31:21:5b:ce:b1:4c:3f:91:0c:47:37:dd:bd:dc:
                    65:55:02:96:b6:6c:2e:7e:ce:0e:e0:b9:76:41:0c:
                    42:c4:c0:52:db:c4:69:f2:33:6c:a6:04:5e:ef:0c:
                    bd:a1:b8:15:a4:e4:bd:fc:bf:94:d9:c7:5d:4d:40:
                    47:27:39:2d:4e:30:b8:53:27:66:3b:39:82:be:32:
                    f7:95:d4:7c:30:c3:30:3f:5c:ab:98:0b:ad:d9:2e:
                    d6:d7:e3:79:68:0c:65:89:53:e2:6b:9e:0c:97:a1:
                    9b:1c:6d:bf:af:74:46:e5:ec:a3:89:21:23:f5:38:
                    7b:b6:92:b6:53:ea:99:78:c3:ff:93:10:23:35:64:
                    ae:e9:a0:da:a9:42:22:07:f4:cf:8a:91:94:79:32:
                    66:a1:a4:23:57:47:c5:d8:48:9c:99:6c:98:d8:40:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F4:11:B1:1C:55:3E:BF:6C:BB:E8:8C:35:89:AF:89:1D:5B:C9:E9
            X509v3 Authority Key Identifier:
                keyid:B7:EA:CE:5F:CD:83:9D:3B:7E:B0:77:01:98:3C:79:7B:F7:44:94:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7EACE5FCD839D3B7EB07701983C797BF744943B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4kiFrMQP6ge1FNbTSgHzQ82ok3q2SgUG3KusZws3dBES/0/34352e3233362e3135352e302f32342d3234203d3e20323638323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:8d:6c:84:fa:6a:a8:be:b6:fc:2d:f5:03:22:48:d3:69:
         6a:e7:5f:1a:de:d0:08:55:69:5e:93:3a:db:cd:9b:ae:e0:cb:
         76:eb:57:62:43:09:2c:c3:12:8f:d6:41:6c:3e:47:7a:84:33:
         89:d6:72:fa:3c:4f:0f:84:84:c9:e5:6e:d9:1e:25:b4:c9:8d:
         b1:6d:31:43:ca:8b:50:08:a6:7c:63:f8:f1:6a:1c:e8:df:f4:
         48:77:60:5d:c4:90:9d:64:72:4d:f0:29:28:72:a1:0f:0f:ee:
         4d:dc:a8:d2:b3:32:9d:b1:be:e0:b4:b1:b7:ce:7a:98:80:93:
         ae:f8:83:63:d4:b5:98:d3:0c:7a:2b:c2:b5:23:ea:bf:5a:19:
         30:88:6c:53:3f:60:e3:ff:fc:24:e1:cd:fb:fb:c3:58:c9:b1:
         25:77:44:23:bb:5c:d5:cb:b9:b4:15:5f:e8:9d:ce:16:63:a5:
         d2:e7:88:98:9b:f6:e0:3d:a6:ad:70:73:8f:52:b2:c5:98:eb:
         ec:cd:11:6b:6e:77:3a:a5:bd:9d:ef:5b:b7:95:e1:d3:c7:bd:
         80:04:f4:0d:a6:c5:65:29:b6:e8:6b:8b:8f:6b:5a:97:7b:63:
         3d:0f:a1:73:91:50:90:f9:d8:a3:7c:56:08:36:d7:d3:5e:ae:
         1b:63:91:70
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWdIXFmvKOm0bougxFnULTMP94L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdFQUNFNUZDRDgzOUQzQjdFQjA3NzAxOTgzQzc5N0JG
NzQ0OTQzQjAeFw0yMzA0MDMxMDUyNDVaFw0yNDA0MDExMDU3NDVaMDMxMTAvBgNV
BAMTKDJFRjQxMUIxMUM1NTNFQkY2Q0JCRTg4QzM1ODlBRjg5MUQ1QkM5RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFV4bhFbE4OMe/V/m76SjKk3WA
MeOJWA40woxhjLg2otEBF0n4o2aO2EZmmEAM+2WjIzhV5LeivtBRPghpfwgKfgqU
4Ig77P7jRkpVmiFErFLz/U26WQj/ddkxIVvOsUw/kQxHN9293GVVApa2bC5+zg7g
uXZBDELEwFLbxGnyM2ymBF7vDL2huBWk5L38v5TZx11NQEcnOS1OMLhTJ2Y7OYK+
MveV1HwwwzA/XKuYC63ZLtbX43loDGWJU+JrngyXoZscbb+vdEbl7KOJISP1OHu2
krZT6pl4w/+TECM1ZK7poNqpQiIH9M+KkZR5MmahpCNXR8XYSJyZbJjYQIZJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULvQRsRxVPr9su+iMNYmviR1byekwHwYDVR0j
BBgwFoAUt+rOX82DnTt+sHcBmDx5e/dElDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGtpRnJNUVA2Z2UxRk5iVFNnSHpRODJvazNxMlNnVUczS3VzWndzM2RC
RVMvMC9CN0VBQ0U1RkNEODM5RDNCN0VCMDc3MDE5ODNDNzk3QkY3NDQ5NDNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3RUFDRTVGQ0Q4MzlEM0I3
RUIwNzcwMTk4M0M3OTdCRjc0NDk0M0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRraUZyTVFQNmdlMUZOYlRTZ0h6UTgyb2szcTJTZ1VHM0t1c1p3czNkQkVTLzAv
MzQzNTJlMzIzMzM2MmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7JswDQYJKoZIhvcNAQELBQADggEBABM6jWyE
+mqovrb8LfUDIkjTaWrnXxre0AhVaV6TOtvNm67gy3brV2JDCSzDEo/WQWw+R3qE
M4nWcvo8Tw+EhMnlbtkeJbTJjbFtMUPKi1AIpnxj+PFqHOjf9Eh3YF3EkJ1kck3w
KShyoQ8P7k3cqNKzMp2xvuC0sbfOepiAk674g2PUtZjTDHorwrUj6r9aGTCIbFM/
YOP//CThzfv7w1jJsSV3RCO7XNXLubQVX+idzhZjpdLniJib9uA9pq1wc49SssWY
6+zNEWtudzqlvZ3vW7eV4dPHvYAE9A2mxWUptuhri49rWpd7Yz0PoXORUJD52KN8
Vgg219NerhtjkXA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org