Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323630393536.roa
File:                     34352e3137382e3230342e302f32332d3233203d3e20323630393536.roa (raw, json)
Hash identifier:          yBh2t8kAIArlQ9vu3TFdyquOgJODeySRrj57+x6JzVQ=
Subject key identifier:   8D:D4:AB:DD:D6:79:43:83:DA:A4:E9:64:D4:EE:BB:14:1D:12:9D:DB
Certificate issuer:       /CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
Certificate serial:       6D0D1E079CF934C8DB00983C3A585965A1C01AE1
Authority key identifier: 32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323630393536.roa
Signing time:             Fri 04 Aug 2023 11:35:17 +0000
ROA not before:           Fri 04 Aug 2023 11:30:17 +0000
ROA not after:            Fri 02 Aug 2024 11:35:17 +0000
asID:                     260956
IP address blocks:        45.178.204.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0d:1e:07:9c:f9:34:c8:db:00:98:3c:3a:58:59:65:a1:c0:1a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3295E3B481EE9D21F4414766870EF17DEDACBAAB
        Validity
            Not Before: Aug  4 11:30:17 2023 GMT
            Not After : Aug  2 11:35:17 2024 GMT
        Subject: CN=8DD4ABDDD6794383DAA4E964D4EEBB141D129DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:aa:89:f3:c3:c2:06:77:59:7e:ea:d1:bd:
                    ac:0d:e2:8e:d8:84:a9:c2:2d:1b:3d:23:fc:bf:22:
                    84:56:18:fa:b3:24:9c:3d:47:39:ec:14:ce:0c:6c:
                    3c:a9:94:cd:05:87:91:fb:53:61:17:e0:16:7f:ac:
                    54:39:71:3d:b9:75:38:20:6c:82:5e:89:29:22:5c:
                    22:65:7d:52:15:3b:7e:f4:92:81:b1:42:6a:24:53:
                    32:7e:ef:79:a3:02:6f:90:78:a2:a4:eb:11:04:7c:
                    3d:ab:ce:76:ca:fd:80:35:4d:ff:c7:52:0d:8b:15:
                    91:c0:93:bd:56:2f:43:e3:6b:93:53:9f:7f:05:c2:
                    be:27:7d:b4:03:5e:32:e4:0a:1f:85:ad:c5:e1:09:
                    b3:83:e8:e3:58:7e:1c:fd:a3:69:78:91:9b:1e:4c:
                    28:56:e6:81:a6:93:af:48:af:5c:f2:3a:ef:b3:f1:
                    8c:58:f7:f8:30:49:34:77:c6:fb:35:99:5e:cc:cb:
                    8a:aa:46:e4:69:39:82:e6:a2:93:94:e6:6b:ec:f8:
                    f0:fd:e1:fe:79:ef:38:eb:6b:66:2f:d0:a9:eb:37:
                    15:9e:9b:31:2a:d3:c1:a7:d6:4b:cb:6c:13:64:7a:
                    80:7a:0e:db:3f:c0:16:0e:1c:3e:2b:5f:71:c1:a7:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D4:AB:DD:D6:79:43:83:DA:A4:E9:64:D4:EE:BB:14:1D:12:9D:DB
            X509v3 Authority Key Identifier:
                keyid:32:95:E3:B4:81:EE:9D:21:F4:41:47:66:87:0E:F1:7D:ED:AC:BA:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3295E3B481EE9D21F4414766870EF17DEDACBAAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/34352e3137382e3230342e302f32332d3233203d3e20323630393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:a8:07:26:e2:12:d6:c1:0d:9b:bf:72:c8:a6:ec:e3:66:fb:
         c0:09:86:69:4e:b5:9f:36:97:03:22:d1:4d:cf:d4:eb:26:79:
         7e:0a:26:8d:f1:87:e5:ae:60:75:1c:a4:c1:0b:f9:2f:4f:c4:
         d4:27:8f:d6:cb:af:79:0d:c2:d1:1e:21:f6:5a:09:a6:c2:4b:
         b3:bf:0e:06:33:0a:de:64:f5:38:21:fe:63:49:7a:dd:57:f7:
         94:3f:1b:bd:d1:51:dd:dc:c5:cf:b2:bd:a2:f6:d5:30:90:05:
         5e:29:dc:84:0a:f5:1f:64:4f:e6:fc:95:79:97:76:5e:50:b2:
         f7:e2:cc:29:d8:db:3f:18:cc:e7:f0:55:d8:82:a5:bd:dd:ba:
         fd:04:e2:db:63:4a:53:05:47:7c:56:ac:0d:c9:d5:2f:a8:02:
         ea:25:c6:bb:56:0c:b4:2b:7b:f2:14:db:6d:59:f4:cf:db:6b:
         f8:0c:18:f1:36:79:ee:d2:91:e6:89:b5:04:b5:79:40:29:38:
         c4:ff:6e:f5:3c:e2:6b:e7:38:e1:ec:e0:cd:73:1c:cf:82:8e:
         09:e7:3d:4b:3a:82:0d:e4:36:77:2b:eb:92:eb:d0:70:c3:44:
         d1:43:56:13:36:df:0a:06:df:4f:ac:ca:1d:0c:dd:0f:29:31:
         6d:7c:69:a9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbQ0eB5z5NMjbAJg8OlhZZaHAGuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzI5NUUzQjQ4MUVFOUQyMUY0NDE0NzY2ODcwRUYxN0RF
REFDQkFBQjAeFw0yMzA4MDQxMTMwMTdaFw0yNDA4MDIxMTM1MTdaMDMxMTAvBgNV
BAMTKDhERDRBQkRERDY3OTQzODNEQUE0RTk2NEQ0RUVCQjE0MUQxMjlEREIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobKqJ88PCBndZfurRvawN4o7Y
hKnCLRs9I/y/IoRWGPqzJJw9RznsFM4MbDyplM0Fh5H7U2EX4BZ/rFQ5cT25dTgg
bIJeiSkiXCJlfVIVO370koGxQmokUzJ+73mjAm+QeKKk6xEEfD2rznbK/YA1Tf/H
Ug2LFZHAk71WL0Pja5NTn38Fwr4nfbQDXjLkCh+FrcXhCbOD6ONYfhz9o2l4kZse
TChW5oGmk69Ir1zyOu+z8YxY9/gwSTR3xvs1mV7My4qqRuRpOYLmopOU5mvs+PD9
4f557zjra2Yv0KnrNxWemzEq08Gn1kvLbBNkeoB6Dts/wBYOHD4rX3HBp81XAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjdSr3dZ5Q4PapOlk1O67FB0SndswHwYDVR0j
BBgwFoAUMpXjtIHunSH0QUdmhw7xfe2suqswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVZCWjhZVnA1ZW1WWkIycUVoTXNWWkJKOGpqaGlTOE5CcUJ2dWtmZThM
Q2EvMC8zMjk1RTNCNDgxRUU5RDIxRjQ0MTQ3NjY4NzBFRjE3REVEQUNCQUFCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyOTVFM0I0ODFFRTlEMjFG
NDQxNDc2Njg3MEVGMTdERURBQ0JBQUIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVWQlo4WVZwNWVtVlpCMnFFaE1zVlpCSjhqamhpUzhOQnFCdnVrZmU4TENhLzAv
MzQzNTJlMzEzNzM4MmUzMjMwMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzAzOTM1MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtsswwDQYJKoZIhvcNAQELBQADggEBAH+oBybi
EtbBDZu/csim7ONm+8AJhmlOtZ82lwMi0U3P1OsmeX4KJo3xh+WuYHUcpMEL+S9P
xNQnj9bLr3kNwtEeIfZaCabCS7O/DgYzCt5k9Tgh/mNJet1X95Q/G73RUd3cxc+y
vaL21TCQBV4p3IQK9R9kT+b8lXmXdl5QsvfizCnY2z8YzOfwVdiCpb3duv0E4ttj
SlMFR3xWrA3J1S+oAuolxrtWDLQre/IU221Z9M/ba/gMGPE2ee7SkeaJtQS1eUAp
OMT/bvU84mvnOOHs4M1zHM+CjgnnPUs6gg3kNncr65Lr0HDDRNFDVhM23woG30+s
yh0M3Q8pMW18aak=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org