Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31312e302f32342d3234203d3e20323638363531.roa
File:                     34352e3136352e31312e302f32342d3234203d3e20323638363531.roa (raw, json)
Hash identifier:          T04SlC6UNmuzrkBkavlE2PBLiiexKf47oxW4g06a7Dg=
Subject key identifier:   05:69:E7:68:1C:C2:D6:E2:47:B6:F7:62:B8:5B:95:91:F7:F9:50:9D
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       404C268D1523CC872741446CBC7DCAAA816556BA
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31312e302f32342d3234203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        45.165.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4c:26:8d:15:23:cc:87:27:41:44:6c:bc:7d:ca:aa:81:65:56:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:3b:e7:8b:b9:fa:4a:e7:0f:a6:32:72:b0:
                    08:41:24:5e:62:a9:a9:91:9e:ee:76:e8:86:ef:e5:
                    17:04:bd:b1:fe:a5:a9:3f:57:18:4a:3b:1c:7f:3f:
                    f1:9f:e0:6d:17:73:3a:59:a8:b3:28:59:96:8a:c4:
                    32:b6:2d:a0:c1:bf:a3:3b:59:3c:86:94:a2:4e:1a:
                    4b:19:28:95:13:dd:93:42:73:b1:69:a6:07:3b:e0:
                    4e:c5:71:f7:ab:b5:0a:06:5a:cf:1c:c9:90:f9:07:
                    5b:0f:ce:47:6d:9c:31:bc:71:e1:a0:99:26:48:b4:
                    bb:ba:44:21:8f:5c:f1:cf:dd:47:4d:d6:86:d9:4e:
                    19:0a:e0:38:3b:70:d6:f0:68:c5:c5:4a:7a:4d:43:
                    cd:de:7c:57:ae:dc:ee:39:6b:fc:af:7d:43:36:e5:
                    dd:42:6d:c1:d3:9f:4c:e7:13:2d:f2:58:c4:8f:fc:
                    36:db:1a:a5:31:d1:fa:82:e0:7f:5b:4c:f8:19:fc:
                    95:03:75:7a:91:7e:39:a7:42:4c:15:aa:d9:f9:be:
                    9c:92:af:2e:ad:cd:1b:81:4a:7b:01:92:dd:38:96:
                    6b:ac:59:29:a3:2a:14:a6:d9:b8:c4:1e:e9:a6:f8:
                    c1:15:75:e4:70:b9:fa:8c:e7:6a:d0:05:17:fb:6c:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:69:E7:68:1C:C2:D6:E2:47:B6:F7:62:B8:5B:95:91:F7:F9:50:9D
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/34352e3136352e31312e302f32342d3234203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:05:ae:c0:21:53:04:8e:f4:20:37:51:e0:55:b9:57:5d:25:
         bf:1f:51:cd:f0:48:57:4c:ba:6b:36:6e:00:54:b7:b0:ef:45:
         ac:7b:d6:be:30:87:86:cd:89:b1:b0:60:7b:31:c7:48:7d:4a:
         88:7a:0a:e8:62:05:4a:62:3f:0e:69:cc:49:af:ae:71:f8:8c:
         7c:ea:b8:f7:44:f4:67:16:ee:2a:e9:27:4a:00:4d:18:d2:17:
         b3:f7:1c:39:d8:71:d1:bf:3f:0b:d0:73:1d:4c:63:60:d4:5b:
         cc:77:3f:f9:ed:5e:8b:28:99:ea:26:da:b0:56:bb:4c:c0:30:
         9c:77:45:c1:b8:e9:46:60:e9:d3:c4:48:85:de:62:79:40:1a:
         94:f5:30:c6:ae:16:da:0f:ac:22:12:50:df:35:02:46:08:18:
         b6:80:02:77:4f:6b:28:7d:73:09:fe:94:8c:8c:7a:fc:d4:51:
         a6:c6:74:f2:dc:f6:aa:85:d5:95:1f:ec:8d:86:7f:55:6a:58:
         98:36:94:57:ec:83:9f:1d:eb:f0:b4:81:4f:79:0e:3b:dc:60:
         77:b7:53:a6:7b:87:e2:99:41:06:55:6b:eb:ef:ed:fd:fc:ed:
         94:39:04:da:33:1c:fb:de:9d:6d:f8:23:a6:5c:43:67:17:da:
         29:4d:9f:69
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUQEwmjRUjzIcnQURsvH3KqoFlVrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDYzRjY1QkM4NjhBOTg5RjUwMTZGQzVGOTIzODU3RDI2
RUUyQTA2ODAeFw0yNDA0MDcxNjU1MDBaFw0yNTA0MDYxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjkzMTNCRTc4QkI5RkE0QUU3
MEZBNjMyNzJCMDA4NDEyNDVFNjJBOUE5OTE5RUVFNzZFODg2RUZFNTE3MDRCREIx
RkVBNUE5M0Y1NzE4NEEzQjFDN0YzRkYxOUZFMDZEMTc3MzNBNTlBOEIzMjg1OTk2
OEFDNDMyQjYyREEwQzFCRkEzM0I1OTNDODY5NEEyNEUxQTRCMTkyODk1MTNERDkz
NDI3M0IxNjlBNjA3M0JFMDRFQzU3MUY3QUJCNTBBMDY1QUNGMUNDOTkwRjkwNzVC
MEZDRTQ3NkQ5QzMxQkM3MUUxQTA5OTI2NDhCNEJCQkE0NDIxOEY1Q0YxQ0ZERDQ3
NERENjg2RDk0RTE5MEFFMDM4M0I3MEQ2RjA2OEM1QzU0QTdBNEQ0M0NEREU3QzU3
QUVEQ0VFMzk2QkZDQUY3RDQzMzZFNURENDI2REMxRDM5RjRDRTcxMzJERjI1OEM0
OEZGQzM2REIxQUE1MzFEMUZBODJFMDdGNUI0Q0Y4MTlGQzk1MDM3NTdBOTE3RTM5
QTc0MjRDMTVBQUQ5RjlCRTlDOTJBRjJFQURDRDFCODE0QTdCMDE5MkREMzg5NjZC
QUM1OTI5QTMyQTE0QTZEOUI4QzQxRUU5QTZGOEMxMTU3NUU0NzBCOUZBOENFNzZB
RDAwNTE3RkI2QzdGODcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuTE754u5+krnD6YycrAIQSReYqmpkZ7uduiG7+UXBL2x/qWpP1cY
Sjscfz/xn+BtF3M6WaizKFmWisQyti2gwb+jO1k8hpSiThpLGSiVE92TQnOxaaYH
O+BOxXH3q7UKBlrPHMmQ+QdbD85HbZwxvHHhoJkmSLS7ukQhj1zxz91HTdaG2U4Z
CuA4O3DW8GjFxUp6TUPN3nxXrtzuOWv8r31DNuXdQm3B059M5xMt8ljEj/w22xql
MdH6guB/W0z4GfyVA3V6kX45p0JMFarZ+b6ckq8urc0bgUp7AZLdOJZrrFkpoyoU
ptm4xB7ppvjBFXXkcLn6jOdq0AUX+2x/hwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FAVp52gcwtbiR7b3YrhblZH3+VCdMB8GA1UdIwQYMBaAFNY/ZbyGipifUBb8X5I4
V9Ju4qBoMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzRxZmtXUmZjM1UyZjZa
VG9MNWNtZFltVEZ4c1IzVXI5alU5R0g3VVV4b1htLzAvRDYzRjY1QkM4NjhBOTg5
RjUwMTZGQzVGOTIzODU3RDI2RUUyQTA2OC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENjNGNjVCQzg2OEE5ODlGNTAxNkZDNUY5MjM4NTdEMjZFRTJB
MDY4LmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby80cWZrV1JmYzNVMmY2WlRvTDVj
bWRZbVRGeHNSM1VyOWpVOUdIN1VVeG9YbS8wLzM0MzUyZTMxMzYzNTJlMzEzMTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODM2MzUzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2l
CzANBgkqhkiG9w0BAQsFAAOCAQEAfAWuwCFTBI70IDdR4FW5V10lvx9RzfBIV0y6
azZuAFS3sO9FrHvWvjCHhs2JsbBgezHHSH1KiHoK6GIFSmI/DmnMSa+ucfiMfOq4
90T0ZxbuKuknSgBNGNIXs/ccOdhx0b8/C9BzHUxjYNRbzHc/+e1eiyiZ6ibasFa7
TMAwnHdFwbjpRmDp08RIhd5ieUAalPUwxq4W2g+sIhJQ3zUCRggYtoACd09rKH1z
Cf6UjIx6/NRRpsZ08tz2qoXVlR/sjYZ/VWpYmDaUV+yDnx3r8LSBT3kOO9xgd7dT
pnuH4plBBlVr6+/t/fztlDkE2jMc+96dbfgjplxDZxfaKU2faQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org