Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3136322e3133362e302f32322d3332203d3e20323638313638.roa
File:                     34352e3136322e3133362e302f32322d3332203d3e20323638313638.roa (raw, json)
Hash identifier:          zQrheTOnkxmRo5t86sioUeorkSIEri6pAZj/S8C8NTI=
Subject key identifier:   42:33:94:F6:CF:0A:F0:37:4C:4F:E2:2F:B6:05:5B:FB:F9:D5:E0:9F
Certificate issuer:       /CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
Certificate serial:       04363C566A4F97761CB7943BE44DC2DCF3915F1A
Authority key identifier: 71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3136322e3133362e302f32322d3332203d3e20323638313638.roa
Signing time:             Mon 26 Feb 2024 19:01:41 +0000
ROA not before:           Mon 26 Feb 2024 18:56:41 +0000
ROA not after:            Mon 24 Feb 2025 19:01:41 +0000
asID:                     268168
IP address blocks:        45.162.136.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:36:3c:56:6a:4f:97:76:1c:b7:94:3b:e4:4d:c2:dc:f3:91:5f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
        Validity
            Not Before: Feb 26 18:56:41 2024 GMT
            Not After : Feb 24 19:01:41 2025 GMT
        Subject: CN=423394F6CF0AF0374C4FE22FB6055BFBF9D5E09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f4:96:54:a9:56:97:7c:9d:38:8f:a9:30:88:
                    ef:1f:7c:38:55:2b:0e:e4:78:cb:93:f2:fa:de:8b:
                    a0:c4:30:f9:67:cf:ca:99:32:c8:e5:d0:9d:9c:4e:
                    6e:07:32:9e:1a:30:9e:ae:e1:6c:e5:43:35:08:ba:
                    31:be:d4:48:dd:ca:08:e4:15:6f:89:0d:af:f1:e3:
                    9c:b0:6b:10:2b:a0:15:16:f4:71:93:05:c2:17:76:
                    25:d5:9a:0c:d4:d8:9a:3e:f7:ae:98:e0:6d:01:b2:
                    da:83:3e:06:a6:77:54:00:2b:92:7b:de:6f:8f:06:
                    67:4c:3c:fa:18:46:2c:6b:dd:51:27:07:2f:eb:75:
                    f8:64:f6:ec:0d:3e:d5:bf:ba:43:9e:e2:7d:b4:e2:
                    ca:5f:79:11:4b:4b:6e:cd:66:0a:f9:91:b6:7c:35:
                    1f:e3:0e:60:9d:df:3f:7e:54:d4:b1:50:43:19:d3:
                    60:cd:24:77:cd:90:a7:0c:9d:1c:10:cf:e6:75:36:
                    f8:3d:8f:12:21:3f:32:48:31:34:3d:87:29:89:d8:
                    76:40:e7:5e:37:26:c0:f8:63:1b:48:7b:86:ef:ef:
                    e9:fc:6b:a4:48:28:ba:69:81:94:ee:dd:a2:4b:ed:
                    b5:07:dd:38:23:bf:27:3a:50:f7:77:38:96:c9:fb:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:94:F6:CF:0A:F0:37:4C:4F:E2:2F:B6:05:5B:FB:F9:D5:E0:9F
            X509v3 Authority Key Identifier:
                keyid:71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/34352e3136322e3133362e302f32322d3332203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:6c:8c:a0:ff:56:c6:36:2f:04:0c:20:09:57:fd:78:29:
         52:ed:9a:40:c2:f7:23:21:d4:d7:fc:73:29:d6:d9:d8:43:a2:
         c5:83:da:3a:e5:39:b5:d5:2d:d1:cb:e3:fb:f5:88:ff:cc:2d:
         19:c4:bf:b4:88:a8:66:36:d0:c6:f3:33:0b:f5:85:09:63:7a:
         26:90:1f:86:99:51:03:57:a9:d7:8c:66:be:de:36:e3:48:c0:
         26:b7:c0:2e:6d:34:41:a8:46:4e:41:3d:23:c2:15:e2:ed:97:
         9e:8a:ba:2a:4b:d5:2c:c5:17:ff:8e:8d:4c:38:e5:b3:5d:7b:
         55:07:45:bf:9c:98:a8:82:63:16:4e:bc:22:6a:77:f2:cd:da:
         25:ba:41:ac:ea:92:a6:c3:b4:e8:7c:a4:8d:cd:6b:80:70:4e:
         1b:2b:05:51:2c:0c:7c:8b:30:a8:fd:7e:95:c0:db:4d:25:6b:
         51:ef:e1:c9:34:8f:21:63:3f:aa:00:9d:ca:03:b1:af:0c:2f:
         7a:b8:c5:92:40:49:85:0d:21:5f:24:93:be:b8:04:23:a0:2e:
         d9:84:e6:87:d3:20:28:4d:2e:f2:ae:b4:f3:8d:e9:b8:81:cf:
         a3:33:38:18:eb:e7:f4:87:5b:7f:59:ad:56:1a:50:b9:9c:b0:
         1e:f2:8d:d9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBDY8VmpPl3Yct5Q75E3C3PORXxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzEyMDdFNTYwN0RCNjQwMjUyMEEzQzU2QTI4OUUyRjJC
NjNCRUYwQTAeFw0yNDAyMjYxODU2NDFaFw0yNTAyMjQxOTAxNDFaMDMxMTAvBgNV
BAMTKDQyMzM5NEY2Q0YwQUYwMzc0QzRGRTIyRkI2MDU1QkZCRjlENUUwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9JZUqVaXfJ04j6kwiO8ffDhV
Kw7keMuT8vrei6DEMPlnz8qZMsjl0J2cTm4HMp4aMJ6u4WzlQzUIujG+1Ejdygjk
FW+JDa/x45ywaxAroBUW9HGTBcIXdiXVmgzU2Jo+966Y4G0BstqDPgamd1QAK5J7
3m+PBmdMPPoYRixr3VEnBy/rdfhk9uwNPtW/ukOe4n204spfeRFLS27NZgr5kbZ8
NR/jDmCd3z9+VNSxUEMZ02DNJHfNkKcMnRwQz+Z1Nvg9jxIhPzJIMTQ9hymJ2HZA
5143JsD4YxtIe4bv7+n8a6RIKLppgZTu3aJL7bUH3Tgjvyc6UPd3OJbJ+9ojAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQjOU9s8K8DdMT+IvtgVb+/nV4J8wHwYDVR0j
BBgwFoAUcSB+VgfbZAJSCjxWooni8rY77wowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHczVWZCRlZQNmhLbm93SlZpRHY4aVpYV1liY0ZrTFhXYjNOcWpLdXkz
SEovMC83MTIwN0U1NjA3REI2NDAyNTIwQTNDNTZBMjg5RTJGMkI2M0JFRjBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxMjA3RTU2MDdEQjY0MDI1
MjBBM0M1NkEyODlFMkYyQjYzQkVGMEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR3M1VmQkZWUDZoS25vd0pWaUR2OGlaWFdZYmNGa0xYV2IzTnFqS3V5M0hKLzAv
MzQzNTJlMzEzNjMyMmUzMTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzMTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoogwDQYJKoZIhvcNAQELBQADggEBABB6bIyg
/1bGNi8EDCAJV/14KVLtmkDC9yMh1Nf8cynW2dhDosWD2jrlObXVLdHL4/v1iP/M
LRnEv7SIqGY20MbzMwv1hQljeiaQH4aZUQNXqdeMZr7eNuNIwCa3wC5tNEGoRk5B
PSPCFeLtl56KuipL1SzFF/+OjUw45bNde1UHRb+cmKiCYxZOvCJqd/LN2iW6Qazq
kqbDtOh8pI3Na4BwThsrBVEsDHyLMKj9fpXA200la1Hv4ck0jyFjP6oAncoDsa8M
L3q4xZJASYUNIV8kk764BCOgLtmE5ofTIChNLvKutPON6biBz6MzOBjr5/SHW39Z
rVYaULmcsB7yjdk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org