Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa
File:                     34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa (raw, json)
Hash identifier:          hMOZzRPR/u/VEa8Udfx3nWmdtJTiXq1V8RsvpF23s6w=
Subject key identifier:   09:2E:A8:BB:E8:BA:4A:88:7B:7E:07:4E:0D:F5:07:48:DB:04:4A:0C
Certificate issuer:       /CN=BBE92D739A5257115139F5983820BA7CAF473B40
Certificate serial:       026190D72323B07512972C2C9C9E547486616F2F
Authority key identifier: BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa
Signing time:             Fri 21 Jul 2023 18:43:56 +0000
ROA not before:           Fri 21 Jul 2023 18:38:56 +0000
ROA not after:            Fri 19 Jul 2024 18:43:56 +0000
asID:                     267219
IP address blocks:        45.231.212.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:61:90:d7:23:23:b0:75:12:97:2c:2c:9c:9e:54:74:86:61:6f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBE92D739A5257115139F5983820BA7CAF473B40
        Validity
            Not Before: Jul 21 18:38:56 2023 GMT
            Not After : Jul 19 18:43:56 2024 GMT
        Subject: CN=092EA8BBE8BA4A887B7E074E0DF50748DB044A0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e7:53:17:40:8b:b6:54:98:5c:e9:d1:c5:7c:
                    f2:b6:f8:04:f3:45:72:70:53:c4:4b:81:6f:f6:6a:
                    a0:c8:ca:9c:f0:85:d2:d7:14:9f:66:9c:f5:9b:02:
                    77:b1:8a:11:6a:3e:d6:82:71:6e:aa:07:cb:28:4e:
                    5c:b8:ab:44:44:5b:e8:ca:7d:e2:69:0b:ea:e6:b3:
                    cc:fe:29:5a:2e:71:e0:53:a9:90:a6:9f:0b:79:cd:
                    55:0f:ef:bc:a1:c6:9d:60:c3:3d:01:ea:9f:96:89:
                    1c:3a:65:7d:fa:5f:b2:ca:2b:3d:4f:25:92:19:5d:
                    ba:e0:e2:25:f1:34:1b:84:13:fd:d8:75:d1:2d:76:
                    ed:ed:a1:ac:82:ae:aa:62:72:23:0c:27:12:1b:df:
                    b8:19:18:bc:4f:d0:05:37:2e:c5:8b:2a:30:1b:2b:
                    b2:86:3f:3c:98:91:d3:ac:af:a7:38:ed:60:23:c7:
                    4c:5b:16:6f:75:d2:a4:27:0b:7a:d8:d0:40:58:cf:
                    47:39:f5:00:e9:25:30:4a:f7:40:19:7c:e1:95:2f:
                    54:67:1f:75:0a:32:83:9c:a2:c6:96:3e:0d:0c:09:
                    2b:41:22:c0:5b:18:5f:28:73:e1:a3:0a:c4:52:22:
                    14:5e:a9:71:1a:19:21:ad:a8:60:9c:45:46:8f:79:
                    44:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2E:A8:BB:E8:BA:4A:88:7B:7E:07:4E:0D:F5:07:48:DB:04:4A:0C
            X509v3 Authority Key Identifier:
                keyid:BB:E9:2D:73:9A:52:57:11:51:39:F5:98:38:20:BA:7C:AF:47:3B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/BBE92D739A5257115139F5983820BA7CAF473B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BBE92D739A5257115139F5983820BA7CAF473B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/0/34352e3233312e3231322e302f32332d3233203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:c9:48:55:24:0a:d3:f4:66:52:02:fa:09:61:fb:75:ae:
         af:03:4d:9c:55:b0:e1:d1:8d:15:ba:c2:e0:91:53:49:e3:11:
         c0:63:81:74:5c:c5:98:34:e6:b0:fd:1d:47:9f:58:0b:ba:8f:
         8d:b2:c8:46:be:65:7f:c3:61:ac:2f:2f:64:47:c3:d0:a4:9f:
         36:41:c1:50:6b:22:b0:02:ae:be:f9:4a:fe:c1:50:af:6c:1c:
         fe:88:b6:ab:3f:0f:0f:5e:ac:1c:63:5c:ca:e4:5f:2c:01:10:
         99:6d:2b:45:57:2a:5b:25:89:49:ea:eb:08:ac:e2:71:6b:fa:
         3b:f4:dd:ba:c4:35:c0:b7:e8:e9:7e:29:f0:15:fb:12:60:56:
         c4:9e:a9:a2:00:05:60:41:6e:5f:d4:58:43:8e:96:9b:16:ec:
         52:63:dd:f1:24:c8:54:83:f1:47:01:5d:aa:e1:d0:02:3a:1f:
         28:03:cb:67:76:01:81:b9:99:98:00:af:bc:c5:dc:42:dd:ef:
         4b:c0:9b:8d:7e:f7:33:69:dd:c0:8b:73:1f:23:0b:09:92:aa:
         3d:30:80:7d:c4:ba:aa:38:20:5b:c2:89:31:d7:31:7e:a5:bd:
         5a:0f:45:fa:4b:07:0d:e4:bd:6b:f0:2a:93:43:87:0d:c3:50:
         18:40:07:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAmGQ1yMjsHUSlywsnJ5UdIZhby8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkJFOTJENzM5QTUyNTcxMTUxMzlGNTk4MzgyMEJBN0NB
RjQ3M0I0MDAeFw0yMzA3MjExODM4NTZaFw0yNDA3MTkxODQzNTZaMDMxMTAvBgNV
BAMTKDA5MkVBOEJCRThCQTRBODg3QjdFMDc0RTBERjUwNzQ4REIwNDRBMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq51MXQIu2VJhc6dHFfPK2+ATz
RXJwU8RLgW/2aqDIypzwhdLXFJ9mnPWbAnexihFqPtaCcW6qB8soTly4q0REW+jK
feJpC+rms8z+KVouceBTqZCmnwt5zVUP77yhxp1gwz0B6p+WiRw6ZX36X7LKKz1P
JZIZXbrg4iXxNBuEE/3YddEtdu3toayCrqpiciMMJxIb37gZGLxP0AU3LsWLKjAb
K7KGPzyYkdOsr6c47WAjx0xbFm910qQnC3rY0EBYz0c59QDpJTBK90AZfOGVL1Rn
H3UKMoOcosaWPg0MCStBIsBbGF8oc+GjCsRSIhReqXEaGSGtqGCcRUaPeUSLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUCS6ou+i6Soh7fgdODfUHSNsESgwwHwYDVR0j
BBgwFoAUu+ktc5pSVxFROfWYOCC6fK9HO0AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHkyaGhYWUVlSzN1Sll0MlRLcDNQUEY1OU1xV3hnRTNuVzNYYUc4OGs2
TDQvMC9CQkU5MkQ3MzlBNTI1NzExNTEzOUY1OTgzODIwQkE3Q0FGNDczQjQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCRTkyRDczOUE1MjU3MTE1
MTM5RjU5ODM4MjBCQTdDQUY0NzNCNDAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR5MmhoWFlFZUszdUpZdDJUS3AzUFBGNTlNcVd4Z0UzblczWGFHODhrNkw0LzAv
MzQzNTJlMzIzMzMxMmUzMjMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMjMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt59QwDQYJKoZIhvcNAQELBQADggEBAE9YyUhV
JArT9GZSAvoJYft1rq8DTZxVsOHRjRW6wuCRU0njEcBjgXRcxZg05rD9HUefWAu6
j42yyEa+ZX/DYawvL2RHw9CknzZBwVBrIrACrr75Sv7BUK9sHP6Itqs/Dw9erBxj
XMrkXywBEJltK0VXKlsliUnq6wis4nFr+jv03brENcC36Ol+KfAV+xJgVsSeqaIA
BWBBbl/UWEOOlpsW7FJj3fEkyFSD8UcBXarh0AI6HygDy2d2AYG5mZgAr7zF3ELd
70vAm41+9zNp3cCLcx8jCwmSqj0wgH3Euqo4IFvCiTHXMX6lvVoPRfpLBw3kvWvw
KpNDhw3DUBhAB2k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org