Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa
File:                     34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa (raw, json)
Hash identifier:          yQ7iM9xHTkvmROPvZcqZ8WLyx4OuclkZMPRM5E0rLeE=
Subject key identifier:   48:06:CF:40:B6:FD:9C:7B:35:B2:35:41:06:E2:0D:BA:9A:71:B0:C1
Certificate issuer:       /CN=EAA395B0A2B483C6C50BC176392A71A900364987
Certificate serial:       798756ED92F27EBE6176A32D0A033CFD10713EC5
Authority key identifier: EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa
Signing time:             Wed 21 Feb 2024 19:06:13 +0000
ROA not before:           Wed 21 Feb 2024 19:01:13 +0000
ROA not after:            Wed 19 Feb 2025 19:06:13 +0000
asID:                     268673
IP address blocks:        45.165.106.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:87:56:ed:92:f2:7e:be:61:76:a3:2d:0a:03:3c:fd:10:71:3e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAA395B0A2B483C6C50BC176392A71A900364987
        Validity
            Not Before: Feb 21 19:01:13 2024 GMT
            Not After : Feb 19 19:06:13 2025 GMT
        Subject: CN=4806CF40B6FD9C7B35B2354106E20DBA9A71B0C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d0:03:c7:71:83:88:28:9a:46:12:e4:de:eb:
                    fc:b8:c6:22:c4:84:35:12:de:26:79:ac:45:28:13:
                    d2:25:78:e1:7f:f5:94:f9:68:86:06:05:be:c5:45:
                    7a:2b:60:12:6a:06:81:5f:17:95:40:8b:19:27:9e:
                    fa:ae:2e:da:44:b9:46:5f:52:ee:27:59:98:18:09:
                    f2:fd:66:28:63:cd:0d:f8:6c:e3:f8:3b:f2:c1:e7:
                    eb:64:03:f5:e8:8f:12:eb:9c:25:64:a9:19:dc:aa:
                    6f:67:ea:0e:35:ff:45:93:5e:c9:94:32:72:ad:79:
                    90:c3:d6:42:3f:11:7d:01:1c:e2:0c:27:48:b4:52:
                    76:84:29:57:66:6f:8f:c8:f0:f6:fe:ef:64:84:b8:
                    49:39:99:4b:91:0b:1c:fc:f6:14:28:6f:dc:f7:94:
                    66:e1:c3:97:ab:3c:83:7d:48:5f:c0:1d:3e:e8:e4:
                    f0:9a:8d:4e:81:dd:7f:22:61:d8:a6:89:67:a5:25:
                    3a:ba:d0:b3:26:a7:3e:5e:9e:cc:bd:8d:cb:ed:ca:
                    16:42:fa:1f:dc:09:85:18:68:b9:b6:09:bf:88:6d:
                    0d:4a:b5:02:23:9c:b6:8a:0b:e6:2c:20:3d:45:4c:
                    bd:ca:e2:78:7b:fc:b7:d2:1d:da:5f:2d:5d:02:ff:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:CF:40:B6:FD:9C:7B:35:B2:35:41:06:E2:0D:BA:9A:71:B0:C1
            X509v3 Authority Key Identifier:
                keyid:EA:A3:95:B0:A2:B4:83:C6:C5:0B:C1:76:39:2A:71:A9:00:36:49:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/EAA395B0A2B483C6C50BC176392A71A900364987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAA395B0A2B483C6C50BC176392A71A900364987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XyPwysahSMbeziBCpjSv61jjNyR1dW9jgqsaP2ZMWCa/0/34352e3136352e3130362e302f32342d3234203d3e20323638363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:68:37:2b:df:33:74:c2:f3:ec:4f:dc:7d:c3:77:fe:e8:
         35:17:31:69:59:06:6e:47:79:5e:2b:29:9b:25:43:cf:49:28:
         44:f0:cf:69:2c:54:16:d9:8a:ec:4a:39:3f:a4:72:ee:9a:bd:
         33:4d:90:25:b0:b7:52:34:3a:08:07:a0:41:9f:dd:07:67:16:
         8f:32:ec:f5:48:58:1b:ce:09:9e:f1:14:5c:ed:be:f5:94:0a:
         b4:fb:82:61:e4:21:2a:2b:b0:0d:e0:76:f5:9b:9c:67:34:db:
         de:40:46:2b:50:69:66:7b:f0:5b:52:7e:27:14:81:4c:34:5a:
         16:cc:df:12:1d:60:21:77:a8:59:57:51:8c:ec:aa:71:5b:1b:
         b1:25:cb:30:d7:77:10:ef:b3:61:45:6d:60:06:ba:86:12:0a:
         28:b5:06:8b:85:1e:de:e4:43:0d:10:42:35:59:93:98:5c:f6:
         67:d3:72:bf:2a:87:3a:fe:d9:32:3f:04:f3:5b:23:a5:a5:84:
         f8:35:70:73:7b:40:e9:cf:58:7b:c2:2e:5e:f1:31:b4:97:35:
         0b:84:0c:c8:e9:78:50:ea:7a:bd:9d:dc:30:b2:8a:30:1f:4b:
         ca:71:ac:36:c6:55:b5:11:44:fd:00:a9:79:93:8f:7b:38:64:
         3f:dc:62:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUeYdW7ZLyfr5hdqMtCgM8/RBxPsUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUFBMzk1QjBBMkI0ODNDNkM1MEJDMTc2MzkyQTcxQTkw
MDM2NDk4NzAeFw0yNDAyMjExOTAxMTNaFw0yNTAyMTkxOTA2MTNaMDMxMTAvBgNV
BAMTKDQ4MDZDRjQwQjZGRDlDN0IzNUIyMzU0MTA2RTIwREJBOUE3MUIwQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD00APHcYOIKJpGEuTe6/y4xiLE
hDUS3iZ5rEUoE9IleOF/9ZT5aIYGBb7FRXorYBJqBoFfF5VAixknnvquLtpEuUZf
Uu4nWZgYCfL9ZihjzQ34bOP4O/LB5+tkA/XojxLrnCVkqRncqm9n6g41/0WTXsmU
MnKteZDD1kI/EX0BHOIMJ0i0UnaEKVdmb4/I8Pb+72SEuEk5mUuRCxz89hQob9z3
lGbhw5erPIN9SF/AHT7o5PCajU6B3X8iYdimiWelJTq60LMmpz5ensy9jcvtyhZC
+h/cCYUYaLm2Cb+IbQ1KtQIjnLaKC+YsID1FTL3K4nh7/LfSHdpfLV0C/1BRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSAbPQLb9nHs1sjVBBuINuppxsMEwHwYDVR0j
BBgwFoAU6qOVsKK0g8bFC8F2OSpxqQA2SYcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVh5UHd5c2FoU01iZXppQkNwalN2NjFqak55UjFkVzlqZ3FzYVAyWk1X
Q2EvMC9FQUEzOTVCMEEyQjQ4M0M2QzUwQkMxNzYzOTJBNzFBOTAwMzY0OTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VBQTM5NUIwQTJCNDgzQzZD
NTBCQzE3NjM5MkE3MUE5MDAzNjQ5ODcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVYeVB3eXNhaFNNYmV6aUJDcGpTdjYxampOeVIxZFc5amdxc2FQMlpNV0NhLzAv
MzQzNTJlMzEzNjM1MmUzMTMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpWowDQYJKoZIhvcNAQELBQADggEBAATAaDcr
3zN0wvPsT9x9w3f+6DUXMWlZBm5HeV4rKZslQ89JKETwz2ksVBbZiuxKOT+kcu6a
vTNNkCWwt1I0OggHoEGf3QdnFo8y7PVIWBvOCZ7xFFztvvWUCrT7gmHkISorsA3g
dvWbnGc0295ARitQaWZ78FtSficUgUw0WhbM3xIdYCF3qFlXUYzsqnFbG7ElyzDX
dxDvs2FFbWAGuoYSCii1BouFHt7kQw0QQjVZk5hc9mfTcr8qhzr+2TI/BPNbI6Wl
hPg1cHN7QOnPWHvCLl7xMbSXNQuEDMjpeFDqer2d3DCyijAfS8pxrDbGVbURRP0A
qXmTj3s4ZD/cYps=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org