Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/34352e3138322e31312e302f32342d3234203d3e20323639323632.roa
File:                     34352e3138322e31312e302f32342d3234203d3e20323639323632.roa (raw, json)
Hash identifier:          5S2lCOuBVD+xRqZoLvZ1dc0mYN3HmRw3wMdv83qcic0=
Subject key identifier:   9A:CD:80:70:D2:B2:AD:63:F0:E0:77:B4:E3:32:09:91:45:28:EF:88
Certificate issuer:       /CN=EAD33A3441821E9062612878C0B6A2C153665E93
Certificate serial:       6560B8046D74D6EE87C3F22ACF5A6E33DC833337
Authority key identifier: EA:D3:3A:34:41:82:1E:90:62:61:28:78:C0:B6:A2:C1:53:66:5E:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD33A3441821E9062612878C0B6A2C153665E93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/34352e3138322e31312e302f32342d3234203d3e20323639323632.roa
Signing time:             Wed 07 Jun 2023 15:34:11 +0000
ROA not before:           Wed 07 Jun 2023 15:29:11 +0000
ROA not after:            Wed 05 Jun 2024 15:34:11 +0000
asID:                     269262
IP address blocks:        45.182.11.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:60:b8:04:6d:74:d6:ee:87:c3:f2:2a:cf:5a:6e:33:dc:83:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAD33A3441821E9062612878C0B6A2C153665E93
        Validity
            Not Before: Jun  7 15:29:11 2023 GMT
            Not After : Jun  5 15:34:11 2024 GMT
        Subject: CN=9ACD8070D2B2AD63F0E077B4E33209914528EF88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:45:5d:6d:6d:7b:5f:58:00:a2:80:50:12:
                    bb:c3:da:39:a9:ff:51:7a:ba:7e:3c:76:2a:1c:31:
                    95:67:41:b7:9c:bc:a4:1b:80:f8:1a:9a:0e:22:b3:
                    f9:e5:e6:b1:05:0f:d1:34:01:c0:09:32:b7:eb:e4:
                    fa:0c:b1:f2:d8:26:e0:f0:3e:c5:ea:99:5e:61:74:
                    89:c0:f3:0d:4a:1e:a0:90:ff:e2:ce:28:fc:6d:4f:
                    d9:5e:ca:d9:a5:52:f9:b8:2e:ab:cd:78:b5:97:e4:
                    56:f5:06:44:43:20:02:a1:79:78:a8:36:61:53:81:
                    ee:c8:5e:ef:df:c9:dc:38:41:45:13:e4:dc:8e:00:
                    cd:67:5a:e9:90:77:b6:af:1c:2b:f9:7a:be:a8:2e:
                    63:ec:df:18:8f:b2:17:84:a6:78:a0:07:21:d5:a6:
                    50:c8:fc:ce:20:ea:66:46:59:47:4b:94:01:dc:9d:
                    8a:38:b6:17:64:1c:f9:21:0e:5f:44:57:fc:4e:df:
                    c1:99:81:ea:53:63:fc:f1:29:f4:74:6f:95:8d:b7:
                    c4:18:2c:3a:c7:f6:c5:3d:74:eb:ed:a3:d9:d8:46:
                    b0:2a:ea:20:06:45:09:19:f0:c7:27:03:84:39:f2:
                    b9:f9:61:d9:d4:8f:12:da:5d:68:8f:cd:60:38:63:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CD:80:70:D2:B2:AD:63:F0:E0:77:B4:E3:32:09:91:45:28:EF:88
            X509v3 Authority Key Identifier:
                keyid:EA:D3:3A:34:41:82:1E:90:62:61:28:78:C0:B6:A2:C1:53:66:5E:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/EAD33A3441821E9062612878C0B6A2C153665E93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAD33A3441821E9062612878C0B6A2C153665E93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5SdbCTaiysR7z8LF4Ve29JnVKB1SYWjcun5WT84UocmY/1/34352e3138322e31312e302f32342d3234203d3e20323639323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:a6:6d:9c:fd:cd:a9:62:02:f5:85:d4:3a:fc:26:8c:a6:2a:
         ac:a0:dd:99:6d:fc:af:06:59:0b:46:bb:b2:5e:6e:8c:f2:32:
         bc:36:8f:2e:32:8f:8e:ad:a4:0c:f0:cf:43:87:08:db:92:cf:
         01:b2:ce:74:d0:1c:c0:1f:12:12:6e:2c:59:ec:b5:b3:c6:56:
         ae:d8:dc:e4:08:dd:f5:b6:f5:e8:b1:da:44:86:92:9d:85:2d:
         3b:50:1f:7b:68:ef:10:f4:47:87:4f:bc:a1:1b:66:77:7c:22:
         35:ac:fc:63:ef:0f:cb:3c:67:29:8d:19:d5:7e:c3:a0:5d:d9:
         f6:2e:47:d8:2b:07:ab:f7:2b:06:74:31:cc:85:5a:40:17:8e:
         32:d6:d9:be:6e:08:a2:9b:be:21:e4:2f:16:9e:47:64:62:56:
         d9:3a:42:b7:3c:0e:84:47:df:64:37:40:9d:0e:48:6c:79:d1:
         fe:9f:2c:b3:e5:8f:d3:bb:d5:8d:b5:bc:31:63:09:d6:4c:5c:
         6f:15:86:67:7e:7a:aa:23:24:f3:86:35:3f:e2:b4:d1:27:10:
         74:ce:7d:05:65:24:65:d7:2e:8b:cb:dd:e5:75:fb:a1:26:da:
         1c:8a:c9:85:e8:5d:3d:e9:4c:82:7d:21:8c:38:3a:79:55:b6:
         af:5f:a7:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZWC4BG101u6Hw/Iqz1puM9yDMzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFEMzNBMzQ0MTgyMUU5MDYyNjEyODc4QzBCNkEyQzE1
MzY2NUU5MzAeFw0yMzA2MDcxNTI5MTFaFw0yNDA2MDUxNTM0MTFaMDMxMTAvBgNV
BAMTKDlBQ0Q4MDcwRDJCMkFENjNGMEUwNzdCNEUzMzIwOTkxNDUyOEVGODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/4EVdbW17X1gAooBQErvD2jmp
/1F6un48diocMZVnQbecvKQbgPgamg4is/nl5rEFD9E0AcAJMrfr5PoMsfLYJuDw
PsXqmV5hdInA8w1KHqCQ/+LOKPxtT9leytmlUvm4LqvNeLWX5Fb1BkRDIAKheXio
NmFTge7IXu/fydw4QUUT5NyOAM1nWumQd7avHCv5er6oLmPs3xiPsheEpnigByHV
plDI/M4g6mZGWUdLlAHcnYo4thdkHPkhDl9EV/xO38GZgepTY/zxKfR0b5WNt8QY
LDrH9sU9dOvto9nYRrAq6iAGRQkZ8McnA4Q58rn5YdnUjxLaXWiPzWA4Y65fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUms2AcNKyrWPw4He04zIJkUUo74gwHwYDVR0j
BBgwFoAU6tM6NEGCHpBiYSh4wLaiwVNmXpMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVNkYkNUYWl5c1I3ejhMRjRWZTI5Sm5WS0IxU1lXamN1bjVXVDg0VW9j
bVkvMS9FQUQzM0EzNDQxODIxRTkwNjI2MTI4NzhDMEI2QTJDMTUzNjY1RTkzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBRDMzQTM0NDE4MjFFOTA2
MjYxMjg3OEMwQjZBMkMxNTM2NjVFOTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVTZGJDVGFpeXNSN3o4TEY0VmUyOUpuVktCMVNZV2pjdW41V1Q4NFVvY21ZLzEv
MzQzNTJlMzEzODMyMmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbYLMA0GCSqGSIb3DQEBCwUAA4IBAQC/pm2c/c2p
YgL1hdQ6/CaMpiqsoN2ZbfyvBlkLRruyXm6M8jK8No8uMo+OraQM8M9Dhwjbks8B
ss500BzAHxISbixZ7LWzxlau2NzkCN31tvXosdpEhpKdhS07UB97aO8Q9EeHT7yh
G2Z3fCI1rPxj7w/LPGcpjRnVfsOgXdn2LkfYKwer9ysGdDHMhVpAF44y1tm+bgii
m74h5C8WnkdkYlbZOkK3PA6ER99kN0CdDkhsedH+nyyz5Y/Tu9WNtbwxYwnWTFxv
FYZnfnqqIyTzhjU/4rTRJxB0zn0FZSRl1y6Ly93ldfuhJtocismF6F096UyCfSGM
ODp5VbavX6f0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org