Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/34352e3136342e3131322e302f32322d3234203d3e20323638363134.roa
File:                     34352e3136342e3131322e302f32322d3234203d3e20323638363134.roa (raw, json)
Hash identifier:          SgzmXco5VoHPnPo73auFg9q3Zhu6AMwqsdZx1JXQXio=
Subject key identifier:   36:56:82:E7:D4:B6:CD:1F:CD:6E:E8:8B:15:BD:CF:9A:BB:DC:BD:DB
Certificate issuer:       /CN=B2A2487A9726D782A9349A5E95A6B583BE8F27EC
Certificate serial:       7DDC1040799DBD33866BABAD5929871508A43501
Authority key identifier: B2:A2:48:7A:97:26:D7:82:A9:34:9A:5E:95:A6:B5:83:BE:8F:27:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/34352e3136342e3131322e302f32322d3234203d3e20323638363134.roa
Signing time:             Tue 12 Mar 2024 14:48:08 +0000
ROA not before:           Tue 12 Mar 2024 14:43:08 +0000
ROA not after:            Tue 11 Mar 2025 14:48:08 +0000
asID:                     268614
IP address blocks:        45.164.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:dc:10:40:79:9d:bd:33:86:6b:ab:ad:59:29:87:15:08:a4:35:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2A2487A9726D782A9349A5E95A6B583BE8F27EC
        Validity
            Not Before: Mar 12 14:43:08 2024 GMT
            Not After : Mar 11 14:48:08 2025 GMT
        Subject: CN=365682E7D4B6CD1FCD6EE88B15BDCF9ABBDCBDDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:9e:f2:e5:da:4d:b6:e8:72:ed:ca:3e:72:
                    9a:49:82:24:5f:45:bc:bc:7d:24:e9:51:99:9c:9c:
                    ce:70:2b:1c:ad:4b:aa:f7:4b:bb:ec:32:1e:6e:4f:
                    24:72:b2:17:6b:82:5d:9b:bc:54:28:c0:21:86:10:
                    a7:54:b3:66:ad:c4:b4:74:66:71:ea:e8:9c:8a:b0:
                    c8:10:17:b5:3a:f1:76:6b:7f:39:88:fa:d6:1d:b9:
                    06:bc:51:86:70:47:91:e2:12:2e:3a:fa:87:ed:cc:
                    74:17:c1:15:6d:87:04:22:79:86:0a:29:8a:9c:4c:
                    6c:07:ef:f7:c1:8a:6e:22:80:a7:46:4b:c2:a2:12:
                    a9:ef:e0:63:e7:b3:ab:99:9e:ae:64:88:90:c7:e9:
                    8c:31:8e:84:a2:3b:54:10:f0:65:3b:0f:9c:60:6b:
                    4d:80:1f:d2:ff:9f:c7:40:b6:b4:f5:2c:57:ce:7f:
                    f5:dd:d4:51:5f:cd:a9:a8:d3:6a:3d:cb:a3:1a:cf:
                    23:ac:8b:4d:db:e6:51:3e:0a:44:66:4e:ea:e6:d8:
                    b8:c7:cc:83:4d:4f:17:6b:4a:57:73:61:04:c4:c4:
                    dd:f7:af:87:d1:43:55:f1:db:85:b2:6f:3d:4e:21:
                    e8:fa:5b:3a:72:75:69:b8:3e:30:a5:bf:37:bd:fd:
                    3a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:56:82:E7:D4:B6:CD:1F:CD:6E:E8:8B:15:BD:CF:9A:BB:DC:BD:DB
            X509v3 Authority Key Identifier:
                keyid:B2:A2:48:7A:97:26:D7:82:A9:34:9A:5E:95:A6:B5:83:BE:8F:27:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2A2487A9726D782A9349A5E95A6B583BE8F27EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mTGRMf9aiRR76Ci7nvo8oL5wDz7mv9GgCDkzZJi4Ers/0/34352e3136342e3131322e302f32322d3234203d3e20323638363134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:19:e5:0f:68:dd:7b:c0:07:2d:1f:b1:a9:c7:7d:89:9a:6b:
         d1:4f:86:86:4d:11:35:5b:13:0a:60:8f:60:bb:6f:19:2b:b2:
         db:00:e8:0e:f3:51:62:17:93:ff:f3:c5:a2:40:78:ae:2c:5d:
         2b:c8:d1:d9:e2:f9:b8:df:5d:53:6b:92:a1:3a:31:70:c3:09:
         d0:97:cd:19:a5:2a:af:6d:90:76:ec:da:01:83:31:d9:35:a8:
         a7:d9:f3:ff:b2:e5:0b:ac:47:3c:c0:59:db:1a:04:a5:d2:9a:
         a0:03:e2:fc:0a:cf:61:e0:c7:17:3a:43:a6:79:bf:c1:3b:54:
         0b:3a:d3:d9:e5:6b:27:25:9b:5e:3e:ab:39:3f:08:8d:32:19:
         48:b3:bd:c1:6a:64:c4:55:e1:6d:d8:5e:63:a8:db:f3:af:0a:
         50:a0:3e:88:05:78:16:36:da:24:31:fd:33:31:e5:40:5a:66:
         bc:5f:c1:42:33:dc:b5:86:ce:08:4f:33:34:e9:af:0f:5d:67:
         5a:6a:c7:55:5d:6f:37:97:4f:0b:3a:00:c6:36:a1:30:bf:23:
         aa:35:c6:fb:17:33:e3:43:60:4f:9c:6d:e2:69:27:70:9f:c2:
         9b:ad:4d:ef:d7:90:f1:7d:87:63:97:f7:5c:4c:00:aa:b0:2b:
         0e:7a:aa:ac
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfdwQQHmdvTOGa6utWSmHFQikNQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJBMjQ4N0E5NzI2RDc4MkE5MzQ5QTVFOTVBNkI1ODNC
RThGMjdFQzAeFw0yNDAzMTIxNDQzMDhaFw0yNTAzMTExNDQ4MDhaMDMxMTAvBgNV
BAMTKDM2NTY4MkU3RDRCNkNEMUZDRDZFRTg4QjE1QkRDRjlBQkJEQ0JEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbMJ7y5dpNtuhy7co+cppJgiRf
Rby8fSTpUZmcnM5wKxytS6r3S7vsMh5uTyRyshdrgl2bvFQowCGGEKdUs2atxLR0
ZnHq6JyKsMgQF7U68XZrfzmI+tYduQa8UYZwR5HiEi46+oftzHQXwRVthwQieYYK
KYqcTGwH7/fBim4igKdGS8KiEqnv4GPns6uZnq5kiJDH6YwxjoSiO1QQ8GU7D5xg
a02AH9L/n8dAtrT1LFfOf/Xd1FFfzamo02o9y6MazyOsi03b5lE+CkRmTurm2LjH
zINNTxdrSldzYQTExN33r4fRQ1Xx24Wybz1OIej6WzpydWm4PjClvze9/ToDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNlaC59S2zR/NbuiLFb3PmrvcvdswHwYDVR0j
BBgwFoAUsqJIepcm14KpNJpelaa1g76PJ+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG1UR1JNZjlhaVJSNzZDaTdudm84b0w1d0R6N212OUdnQ0RrelpKaTRF
cnMvMC9CMkEyNDg3QTk3MjZENzgyQTkzNDlBNUU5NUE2QjU4M0JFOEYyN0VDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQTI0ODdBOTcyNkQ3ODJB
OTM0OUE1RTk1QTZCNTgzQkU4RjI3RUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRtVEdSTWY5YWlSUjc2Q2k3bnZvOG9MNXdEejdtdjlHZ0NEa3paSmk0RXJzLzAv
MzQzNTJlMzEzNjM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpHAwDQYJKoZIhvcNAQELBQADggEBAE0Z5Q9o
3XvABy0fsanHfYmaa9FPhoZNETVbEwpgj2C7bxkrstsA6A7zUWIXk//zxaJAeK4s
XSvI0dni+bjfXVNrkqE6MXDDCdCXzRmlKq9tkHbs2gGDMdk1qKfZ8/+y5QusRzzA
WdsaBKXSmqAD4vwKz2Hgxxc6Q6Z5v8E7VAs609nlayclm14+qzk/CI0yGUizvcFq
ZMRV4W3YXmOo2/OvClCgPogFeBY22iQx/TMx5UBaZrxfwUIz3LWGzghPMzTprw9d
Z1pqx1VdbzeXTws6AMY2oTC/I6o1xvsXM+NDYE+cbeJpJ3CfwputTe/XkPF9h2OX
91xMAKqwKw56qqw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org