Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32342d3234203d3e20323639343431.roa
File:                     34352e3138352e33382e302f32342d3234203d3e20323639343431.roa (raw, json)
Hash identifier:          3vrUTP02jmxXhAliw/w1bwrzUq+NeuLuLixDye4stz8=
Subject key identifier:   13:30:DF:8C:34:CB:D2:13:0F:10:F9:2C:A7:02:77:D0:B0:48:17:C0
Certificate issuer:       /CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
Certificate serial:       4069FB79A8B97ED476C72957AFDB068DD2B1DB9B
Authority key identifier: 00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32342d3234203d3e20323639343431.roa
Signing time:             Fri 01 Mar 2024 23:33:58 +0000
ROA not before:           Fri 01 Mar 2024 23:28:58 +0000
ROA not after:            Fri 28 Feb 2025 23:33:58 +0000
asID:                     269441
IP address blocks:        45.185.38.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:69:fb:79:a8:b9:7e:d4:76:c7:29:57:af:db:06:8d:d2:b1:db:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00FFFF94E89C12D2D266ECF9ACD62277C894680B
        Validity
            Not Before: Mar  1 23:28:58 2024 GMT
            Not After : Feb 28 23:33:58 2025 GMT
        Subject: CN=1330DF8C34CBD2130F10F92CA70277D0B04817C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:ce:51:d0:9f:f5:67:d8:d2:7d:f2:e5:28:
                    8b:f3:2f:46:7d:ad:57:6f:1f:40:77:53:ef:29:db:
                    2d:2a:19:ad:8f:04:b9:b5:1a:9c:f1:10:fd:85:9e:
                    68:e0:0d:eb:a1:15:ac:b5:e2:27:b0:9c:53:38:9e:
                    ba:a7:5e:bd:ca:f8:b2:b1:91:1f:2d:c2:6c:da:70:
                    28:91:a4:90:94:09:fc:c4:d6:c0:4e:9c:fb:c8:17:
                    63:82:b6:e5:1c:44:14:b5:0d:fe:c8:82:a5:a0:68:
                    6c:99:aa:6e:4b:da:14:fd:bb:d3:16:a1:25:3c:21:
                    3a:f5:92:2a:1b:ac:db:e2:93:52:ac:18:0e:73:45:
                    70:bd:84:13:6e:75:12:44:15:78:7c:1e:28:75:4f:
                    3e:0b:2d:a1:2a:d0:9b:45:12:b5:04:09:33:4c:aa:
                    e6:46:1c:25:ff:a3:98:14:b0:07:7f:2b:f6:49:bd:
                    5e:3d:ad:46:71:ea:ad:7e:c3:ca:98:8a:99:24:ab:
                    4d:9d:35:a8:4a:63:68:3a:71:f9:0c:d3:08:88:8a:
                    ad:bb:6f:d3:13:4c:10:f9:7a:54:2a:95:51:72:c8:
                    24:c7:1f:d8:25:b0:b7:bb:5c:bd:37:7b:b2:75:c0:
                    74:bd:4f:8c:4d:e2:76:55:ca:3b:e1:b2:78:59:94:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:DF:8C:34:CB:D2:13:0F:10:F9:2C:A7:02:77:D0:B0:48:17:C0
            X509v3 Authority Key Identifier:
                keyid:00:FF:FF:94:E8:9C:12:D2:D2:66:EC:F9:AC:D6:22:77:C8:94:68:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/00FFFF94E89C12D2D266ECF9ACD62277C894680B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32342d3234203d3e20323639343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:2f:bc:0b:fd:2f:14:df:97:da:31:ae:cd:79:15:4e:ef:af:
         91:42:3c:e0:40:5f:de:ba:71:8d:1a:96:e3:61:38:41:32:cf:
         07:2c:cc:69:60:60:02:ac:01:ae:72:63:ef:63:0f:c1:07:6f:
         0c:d4:00:bc:b8:e6:1c:41:c9:81:87:8b:60:6e:2b:f1:77:1d:
         af:17:27:bf:94:e0:7f:a7:e2:be:8d:b8:7f:36:0e:e5:74:b0:
         99:f6:56:e6:59:65:d7:bb:38:63:f2:0c:6d:ec:a8:56:f7:0d:
         be:69:62:62:51:6f:73:c8:89:58:ae:06:f1:7a:91:f4:0f:68:
         8c:a8:8f:fa:0b:4d:6f:e8:75:73:cc:fe:86:4f:aa:aa:4a:a3:
         59:1d:5f:38:5e:cb:f9:99:31:04:b7:9a:cb:7a:f5:29:d4:d8:
         92:7b:5e:95:7f:cb:5b:a9:86:d5:15:86:31:61:de:f1:12:52:
         ad:d0:fb:a2:18:6d:04:a1:f3:c1:d8:5c:90:e7:46:80:64:70:
         0d:8a:5d:2b:61:05:b0:bb:ae:09:2e:e2:b2:44:55:81:39:0f:
         87:dd:a9:04:6d:5b:ec:ed:0f:96:3e:c9:9c:f5:b2:b9:cd:96:
         28:f7:f7:9f:08:2f:70:61:13:c8:5a:a7:b0:c7:51:98:f1:8e:
         58:66:4b:27
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQGn7eai5ftR2xylXr9sGjdKx25swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBGRkZGOTRFODlDMTJEMkQyNjZFQ0Y5QUNENjIyNzdD
ODk0NjgwQjAeFw0yNDAzMDEyMzI4NThaFw0yNTAyMjgyMzMzNThaMDMxMTAvBgNV
BAMTKDEzMzBERjhDMzRDQkQyMTMwRjEwRjkyQ0E3MDI3N0QwQjA0ODE3QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3M5R0J/1Z9jSffLlKIvzL0Z9
rVdvH0B3U+8p2y0qGa2PBLm1GpzxEP2FnmjgDeuhFay14iewnFM4nrqnXr3K+LKx
kR8twmzacCiRpJCUCfzE1sBOnPvIF2OCtuUcRBS1Df7IgqWgaGyZqm5L2hT9u9MW
oSU8ITr1kiobrNvik1KsGA5zRXC9hBNudRJEFXh8Hih1Tz4LLaEq0JtFErUECTNM
quZGHCX/o5gUsAd/K/ZJvV49rUZx6q1+w8qYipkkq02dNahKY2g6cfkM0wiIiq27
b9MTTBD5elQqlVFyyCTHH9glsLe7XL03e7J1wHS9T4xN4nZVyjvhsnhZlDdrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEzDfjDTL0hMPEPkspwJ30LBIF8AwHwYDVR0j
BBgwFoAUAP//lOicEtLSZuz5rNYid8iUaAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUFwS1NqeXdHTm5ZS0pMYlplNEc3WVViY1dkVTlhSFo0QXZjamtUVGl1
NU0vMC8wMEZGRkY5NEU4OUMxMkQyRDI2NkVDRjlBQ0Q2MjI3N0M4OTQ2ODBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAwRkZGRjk0RTg5QzEyRDJE
MjY2RUNGOUFDRDYyMjc3Qzg5NDY4MEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVBcEtTanl3R05uWUtKTGJaZTRHN1lVYmNXZFU5YUhaNEF2Y2prVFRpdTVNLzAv
MzQzNTJlMzEzODM1MmUzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbkmMA0GCSqGSIb3DQEBCwUAA4IBAQBVL7wL/S8U
35faMa7NeRVO76+RQjzgQF/eunGNGpbjYThBMs8HLMxpYGACrAGucmPvYw/BB28M
1AC8uOYcQcmBh4tgbivxdx2vFye/lOB/p+K+jbh/Ng7ldLCZ9lbmWWXXuzhj8gxt
7KhW9w2+aWJiUW9zyIlYrgbxepH0D2iMqI/6C01v6HVzzP6GT6qqSqNZHV84Xsv5
mTEEt5rLevUp1NiSe16Vf8tbqYbVFYYxYd7xElKt0PuiGG0EofPB2FyQ50aAZHAN
il0rYQWwu64JLuKyRFWBOQ+H3akEbVvs7Q+WPsmc9bK5zZYo9/efCC9wYRPIWqew
x1GY8Y5YZksn
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org