Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa
File:                     34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa (raw, json)
Hash identifier:          ZBQ4kSp1obs6dilSYMQpupdjG8btymLhd4gC/I5BCk8=
Subject key identifier:   43:B2:A6:46:C0:9F:04:39:0C:F3:30:F1:63:E6:D5:5D:17:74:9A:FB
Certificate issuer:       /CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
Certificate serial:       4C4D1C40DA6B01540BB903CFB21119E53923D592
Authority key identifier: 16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa
Signing time:             Wed 14 Feb 2024 20:09:50 +0000
ROA not before:           Wed 14 Feb 2024 20:04:50 +0000
ROA not after:            Wed 12 Feb 2025 20:09:50 +0000
asID:                     268678
IP address blocks:        45.165.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:4d:1c:40:da:6b:01:54:0b:b9:03:cf:b2:11:19:e5:39:23:d5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16E394B7AD89042F1F54B813EC0DA6DE112EC0D1
        Validity
            Not Before: Feb 14 20:04:50 2024 GMT
            Not After : Feb 12 20:09:50 2025 GMT
        Subject: CN=43B2A646C09F04390CF330F163E6D55D17749AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0b:e2:11:7e:c8:1b:22:1b:45:66:34:88:5e:
                    ea:8a:48:0c:62:46:6f:4d:fd:c0:b9:88:1a:ed:50:
                    8a:af:0c:31:c4:ef:00:89:87:57:c1:51:b2:6b:be:
                    77:89:60:49:07:9a:8f:fe:f4:1d:7b:9a:ef:d7:7c:
                    70:09:40:cf:60:52:02:9b:38:76:da:ae:46:db:1d:
                    d1:2c:3b:40:1d:e6:59:6b:b8:88:d7:37:15:cc:77:
                    59:b2:17:36:54:50:21:df:7c:29:7e:e2:87:73:57:
                    10:29:e6:db:48:9d:e9:4d:65:f2:e0:2d:46:cd:2a:
                    5c:7e:53:57:9b:f2:cc:29:5c:b2:9b:82:04:ec:9e:
                    ec:bf:92:74:c1:90:9d:1e:0b:74:35:af:8d:5b:7c:
                    5f:91:24:ea:19:cc:0a:2b:59:e9:48:c4:96:ed:45:
                    18:6e:db:24:26:88:58:a5:66:bd:15:ff:3c:4f:cd:
                    62:d2:e4:b0:3a:6e:c7:d4:d5:91:1d:94:63:39:b0:
                    4a:af:ed:bd:6b:48:92:fe:ba:f1:4f:ef:96:f6:68:
                    15:92:c6:51:82:1b:79:da:f4:e8:d0:cc:8f:4a:77:
                    1b:6c:d1:bf:92:c3:68:80:78:af:f6:99:19:82:d6:
                    f1:2e:d4:c6:57:00:b3:5a:08:fb:48:39:50:2a:5b:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B2:A6:46:C0:9F:04:39:0C:F3:30:F1:63:E6:D5:5D:17:74:9A:FB
            X509v3 Authority Key Identifier:
                keyid:16:E3:94:B7:AD:89:04:2F:1F:54:B8:13:EC:0D:A6:DE:11:2E:C0:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16E394B7AD89042F1F54B813EC0DA6DE112EC0D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/0/34352e3136352e3134392e302f32342d3234203d3e20323638363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:6f:7f:ce:56:dc:75:e1:9b:1c:7f:96:71:14:5d:f6:9b:6f:
         7d:4a:33:4c:dc:e9:d2:cc:dc:49:32:ae:d9:f7:68:d2:df:ef:
         ad:d3:35:25:0d:1e:a7:65:f1:5e:e6:44:85:d0:17:c3:56:93:
         b6:69:72:8a:c3:53:7d:3f:df:cc:48:e7:62:ce:99:6c:a0:15:
         3b:e0:96:50:59:85:54:20:33:a1:f4:4b:d2:44:3a:b6:00:f7:
         89:70:03:1b:8a:a0:93:40:48:70:3a:07:91:0e:7c:12:01:44:
         8b:3f:0a:b0:f8:56:6c:7b:56:f3:1f:f2:29:c0:56:6c:83:f5:
         ce:22:3e:d3:97:05:60:a7:18:36:bf:db:76:11:fe:0b:83:1f:
         e6:25:68:d8:a4:50:46:6e:14:f8:9a:0b:b4:88:6f:99:c3:1e:
         59:5a:2f:0a:01:b1:d9:40:92:ff:47:fc:dd:d0:f9:2b:05:62:
         22:4c:55:72:1d:bb:e7:35:15:1c:03:fc:c9:68:c6:8e:b8:f2:
         c1:b0:eb:ec:f1:56:d8:0f:8c:3b:0a:3f:81:66:5a:28:9c:e0:
         bd:91:25:48:52:f5:a7:ff:a1:1f:c9:cf:36:5a:80:71:fe:26:
         91:87:7f:21:ac:3a:88:03:07:28:a4:ee:1d:bf:79:a7:ba:b7:
         67:94:c7:e6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTE0cQNprAVQLuQPPshEZ5Tkj1ZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMzk0QjdBRDg5MDQyRjFGNTRCODEzRUMwREE2REUx
MTJFQzBEMTAeFw0yNDAyMTQyMDA0NTBaFw0yNTAyMTIyMDA5NTBaMDMxMTAvBgNV
BAMTKDQzQjJBNjQ2QzA5RjA0MzkwQ0YzMzBGMTYzRTZENTVEMTc3NDlBRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYC+IRfsgbIhtFZjSIXuqKSAxi
Rm9N/cC5iBrtUIqvDDHE7wCJh1fBUbJrvneJYEkHmo/+9B17mu/XfHAJQM9gUgKb
OHbarkbbHdEsO0Ad5llruIjXNxXMd1myFzZUUCHffCl+4odzVxAp5ttInelNZfLg
LUbNKlx+U1eb8swpXLKbggTsnuy/knTBkJ0eC3Q1r41bfF+RJOoZzAorWelIxJbt
RRhu2yQmiFilZr0V/zxPzWLS5LA6bsfU1ZEdlGM5sEqv7b1rSJL+uvFP75b2aBWS
xlGCG3na9OjQzI9Kdxts0b+Sw2iAeK/2mRmC1vEu1MZXALNaCPtIOVAqW83zAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQ7KmRsCfBDkM8zDxY+bVXRd0mvswHwYDVR0j
BBgwFoAUFuOUt62JBC8fVLgT7A2m3hEuwNEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUdyZ2pLRFdOSmgyZ25kVjFpeGRSelBVYmZDd0wxdU1YMzZBS2l3U3Yy
VHovMC8xNkUzOTRCN0FEODkwNDJGMUY1NEI4MTNFQzBEQTZERTExMkVDMEQxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE2RTM5NEI3QUQ4OTA0MkYx
RjU0QjgxM0VDMERBNkRFMTEyRUMwRDEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVHcmdqS0RXTkpoMmduZFYxaXhkUnpQVWJmQ3dMMXVNWDM2QUtpd1N2MlR6LzAv
MzQzNTJlMzEzNjM1MmUzMTM0MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM3Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpZUwDQYJKoZIhvcNAQELBQADggEBAFJvf85W
3HXhmxx/lnEUXfabb31KM0zc6dLM3Ekyrtn3aNLf763TNSUNHqdl8V7mRIXQF8NW
k7ZpcorDU30/38xI52LOmWygFTvgllBZhVQgM6H0S9JEOrYA94lwAxuKoJNASHA6
B5EOfBIBRIs/CrD4Vmx7VvMf8inAVmyD9c4iPtOXBWCnGDa/23YR/guDH+YlaNik
UEZuFPiaC7SIb5nDHllaLwoBsdlAkv9H/N3Q+SsFYiJMVXIdu+c1FRwD/Mloxo64
8sGw6+zxVtgPjDsKP4FmWiic4L2RJUhS9af/oR/JzzZagHH+JpGHfyGsOogDByik
7h2/eae6t2eUx+Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org