Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
File:                     34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa (raw, json)
Hash identifier:          gTHZWtdV9KN0jZNsrviksqETrbn2T5AdzLgqiJkwMg0=
Subject key identifier:   B8:77:7E:44:7D:18:B7:B9:23:78:B7:72:87:35:54:D8:18:08:DF:88
Certificate issuer:       /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial:       4249CB94B88FD41576651D0D140944FF40753980
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
Signing time:             Fri 14 Jul 2023 18:57:58 +0000
ROA not before:           Fri 14 Jul 2023 18:52:58 +0000
ROA not after:            Fri 12 Jul 2024 18:57:58 +0000
asID:                     268101
IP address blocks:        45.168.156.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:49:cb:94:b8:8f:d4:15:76:65:1d:0d:14:09:44:ff:40:75:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
        Validity
            Not Before: Jul 14 18:52:58 2023 GMT
            Not After : Jul 12 18:57:58 2024 GMT
        Subject: CN=B8777E447D18B7B92378B772873554D81808DF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:d8:06:b6:8e:8b:8b:aa:8d:28:cf:92:1a:
                    82:e5:c7:6b:5f:c0:86:1e:f2:9b:b6:dc:a3:88:d7:
                    64:4f:91:2c:3d:e4:a7:b1:b7:a2:d0:d1:bf:5c:57:
                    54:cd:b9:db:75:79:8f:bb:14:00:ee:22:aa:23:42:
                    32:6f:ec:50:d8:33:7d:b6:a2:95:f9:bb:28:4e:d1:
                    39:80:01:30:81:92:44:5e:59:c7:23:fe:fa:68:0d:
                    8c:f9:e8:0b:89:7f:c5:6c:43:5d:df:95:ce:23:3e:
                    67:69:1d:c3:a9:c8:34:0a:22:0e:6f:0b:71:a6:be:
                    8e:17:75:52:79:f9:08:e3:b4:7f:b8:e4:04:c8:69:
                    74:4c:7d:4c:a1:a7:84:b2:b3:77:18:3a:38:ef:03:
                    d9:d2:67:c0:b6:fa:87:d2:f8:50:f1:f5:34:84:e4:
                    70:99:b8:14:5d:04:1e:49:0f:f3:3b:97:af:62:49:
                    e1:ef:c2:c6:b4:f8:ef:36:2c:d5:31:08:c4:af:14:
                    dc:53:47:f4:24:59:d3:23:00:e5:10:be:cc:07:96:
                    7e:11:9f:d4:8a:55:71:63:c1:21:98:af:e9:4d:83:
                    57:a5:68:de:d1:5e:eb:fa:7b:a0:fe:77:96:dc:d4:
                    4a:d0:24:8b:ba:77:cc:59:59:18:00:16:89:79:96:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:77:7E:44:7D:18:B7:B9:23:78:B7:72:87:35:54:D8:18:08:DF:88
            X509v3 Authority Key Identifier:
                keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:be:a6:e2:2f:92:52:93:5d:62:b7:ce:25:03:01:41:90:31:
         63:08:0b:5f:d4:54:c7:43:bb:34:9e:f3:24:b5:6b:79:c2:9a:
         0e:ea:82:2d:4e:9f:bf:8d:6d:c5:2e:c7:65:a9:ff:c1:4c:33:
         e7:41:f2:61:7a:60:3c:08:c8:70:32:8e:95:5f:a0:f3:8c:4b:
         98:26:04:df:7d:e3:13:38:48:28:54:b3:0e:63:80:69:10:c4:
         f1:1d:25:aa:e4:24:11:6d:cd:a6:55:2f:cd:c3:e3:67:a9:c5:
         cd:fb:67:3d:c1:9b:4b:fb:c6:13:47:65:1f:c0:6e:75:f7:4c:
         f2:03:93:58:9b:3a:ad:98:d8:37:af:d2:c4:fc:79:d5:e7:48:
         0f:66:14:04:47:5a:d5:8f:25:c1:f7:87:4e:96:68:aa:ff:3c:
         31:75:44:19:20:61:ef:6a:e3:6d:68:b5:a7:00:cc:06:fe:78:
         e8:3a:e0:ed:6b:69:50:9b:70:4b:fb:43:38:df:d4:e4:8b:13:
         ae:d3:6d:bb:6d:30:da:ee:5c:0a:18:5d:db:7c:da:53:88:97:
         c3:25:7f:db:d7:12:fe:41:5f:0d:08:bc:45:22:e4:7c:b2:d3:
         c2:5f:12:d8:10:c9:50:ca:cd:e1:a3:63:32:c2:0e:23:52:b5:
         0a:12:f0:d3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQknLlLiP1BV2ZR0NFAlE/0B1OYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzN0U2MTBGMzg4QTFEREQ2QjcxQjhBREQ5NDVGOTYw
NUVBMjQ3MjAeFw0yMzA3MTQxODUyNThaFw0yNDA3MTIxODU3NThaMDMxMTAvBgNV
BAMTKEI4Nzc3RTQ0N0QxOEI3QjkyMzc4Qjc3Mjg3MzU1NEQ4MTgwOERGODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM5dgGto6Li6qNKM+SGoLlx2tf
wIYe8pu23KOI12RPkSw95Kext6LQ0b9cV1TNudt1eY+7FADuIqojQjJv7FDYM322
opX5uyhO0TmAATCBkkReWccj/vpoDYz56AuJf8VsQ13flc4jPmdpHcOpyDQKIg5v
C3Gmvo4XdVJ5+QjjtH+45ATIaXRMfUyhp4Sys3cYOjjvA9nSZ8C2+ofS+FDx9TSE
5HCZuBRdBB5JD/M7l69iSeHvwsa0+O82LNUxCMSvFNxTR/QkWdMjAOUQvswHln4R
n9SKVXFjwSGYr+lNg1elaN7RXuv6e6D+d5bc1ErQJIu6d8xZWRgAFol5lvsVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuHd+RH0Yt7kjeLdyhzVU2BgI34gwHwYDVR0j
BBgwFoAUyjfmEPOIod3WtxuK3ZRflgXqJHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL
TlgvMC9DQTM3RTYxMEYzODhBMURERDZCNzFCOEFERDk0NUY5NjA1RUEyNDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMzdFNjEwRjM4OEExRERE
NkI3MUI4QUREOTQ1Rjk2MDVFQTI0NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzAv
MzQzNTJlMzEzNjM4MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqJwwDQYJKoZIhvcNAQELBQADggEBAD2+puIv
klKTXWK3ziUDAUGQMWMIC1/UVMdDuzSe8yS1a3nCmg7qgi1On7+NbcUux2Wp/8FM
M+dB8mF6YDwIyHAyjpVfoPOMS5gmBN994xM4SChUsw5jgGkQxPEdJarkJBFtzaZV
L83D42epxc37Zz3Bm0v7xhNHZR/AbnX3TPIDk1ibOq2Y2Dev0sT8edXnSA9mFARH
WtWPJcH3h06WaKr/PDF1RBkgYe9q421otacAzAb+eOg64O1raVCbcEv7Qzjf1OSL
E67TbbttMNruXAoYXdt82lOIl8Mlf9vXEv5BXw0IvEUi5Hyy08JfEtgQyVDKzeGj
YzLCDiNStQoS8NM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org