Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3232203d3e20323636313233.roa
File:                     34352e352e3232302e302f32322d3232203d3e20323636313233.roa (raw, json)
Hash identifier:          yoRcjT6KmQy8ULJYXYMP3wJcFuOm0rn/qXkRXfIAjr8=
Subject key identifier:   FB:40:ED:19:AC:59:7C:B8:A8:69:CB:26:8A:5E:9F:B6:63:DF:7A:99
Certificate issuer:       /CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
Certificate serial:       3173BC3E6B2EB6CDA956C7B6ACD25C7C6CB7BF03
Authority key identifier: 83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3232203d3e20323636313233.roa
Signing time:             Mon 09 May 2022 17:55:01 +0000
ROA not before:           Mon 09 May 2022 17:50:01 +0000
ROA not after:            Mon 08 May 2023 17:55:01 +0000
asID:                     266123
IP address blocks:        45.5.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:73:bc:3e:6b:2e:b6:cd:a9:56:c7:b6:ac:d2:5c:7c:6c:b7:bf:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=830A104C477DBE298AFD95D6C3773E9A1E7CC397
        Validity
            Not Before: May  9 17:50:01 2022 GMT
            Not After : May  8 17:55:01 2023 GMT
        Subject: CN=FB40ED19AC597CB8A869CB268A5E9FB663DF7A99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:a0:66:12:12:b8:2e:bc:b3:a1:ab:cf:10:89:
                    19:db:4a:c2:31:fe:6b:29:98:a1:a0:f4:8b:7d:14:
                    74:84:7a:73:1a:29:c9:46:35:fd:9b:65:6c:7b:49:
                    76:ab:e7:21:7a:33:1d:29:61:7c:9c:fb:cc:75:5c:
                    39:d7:88:97:ad:3a:38:9c:07:51:7c:37:35:35:68:
                    a6:4c:93:b4:28:b6:a2:66:2c:4b:c9:92:68:0a:cf:
                    5f:a9:23:c3:3c:0d:69:ce:ca:86:b2:ad:74:1d:c7:
                    c2:8e:2e:21:7e:96:7c:f0:c4:e3:b8:d4:39:18:39:
                    ea:cf:6c:9b:b7:ee:4c:f9:37:5a:ea:41:5e:55:e9:
                    d3:cf:94:e7:b6:b1:95:c7:af:9a:1d:40:04:65:09:
                    75:fb:02:3a:60:52:41:7f:3e:cd:66:d2:27:eb:30:
                    ed:d6:2d:c3:be:bf:38:19:73:37:cb:a9:fb:cf:e2:
                    5c:37:d5:5a:30:2e:c6:8d:e1:a1:b2:94:52:1d:44:
                    6b:9a:81:a8:54:5b:8d:c3:bf:64:17:f2:87:16:c3:
                    f5:dc:55:97:46:dd:3d:a3:0f:f8:a9:3c:da:53:ae:
                    db:5c:36:aa:9d:2e:8e:43:b5:2e:99:44:a4:ff:61:
                    ae:77:58:4f:b3:65:8d:5d:e9:54:6f:43:53:a8:1f:
                    05:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:40:ED:19:AC:59:7C:B8:A8:69:CB:26:8A:5E:9F:B6:63:DF:7A:99
            X509v3 Authority Key Identifier:
                keyid:83:0A:10:4C:47:7D:BE:29:8A:FD:95:D6:C3:77:3E:9A:1E:7C:C3:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/830A104C477DBE298AFD95D6C3773E9A1E7CC397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3232203d3e20323636313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:53:5a:02:ce:b0:90:bc:9d:ce:8e:ca:b4:e6:58:d8:71:c4:
         61:e8:ff:d5:69:bc:94:96:a9:fd:11:21:20:7d:9a:c9:91:dc:
         3e:2c:9a:05:ed:07:eb:7a:66:20:e3:ce:f0:8e:81:f6:30:a6:
         86:81:69:ab:80:63:f3:c3:e2:d8:74:d6:a8:14:98:58:3e:78:
         3d:9c:4a:1c:cf:0f:1c:b1:04:00:6a:8a:3d:7e:ed:2f:89:52:
         b2:db:bb:ad:8e:81:97:6d:bb:03:82:2b:73:36:53:3c:5e:bd:
         72:2c:60:47:15:5c:6c:ec:a7:49:c3:41:29:43:ae:43:3d:28:
         79:3f:8d:0a:00:85:f5:11:bd:e3:9c:c7:e6:49:03:16:8b:05:
         45:ea:83:05:71:67:fa:c3:b2:bb:6c:f0:f4:7c:20:ab:6b:58:
         fd:7f:5f:9a:83:ea:a3:8b:01:74:5a:a7:1c:60:42:29:99:1f:
         a4:2b:3d:b9:e0:ac:b8:3a:9e:19:f0:73:71:fc:bd:1c:3a:59:
         41:1d:59:82:c3:34:24:66:6b:6b:ab:26:46:77:f3:3e:de:e1:
         32:16:2c:4a:4b:c2:e0:18:54:e2:2c:36:fc:e7:78:6f:fb:84:
         fe:29:28:50:4f:3c:31:3c:04:75:43:e3:a2:19:9d:89:06:2f:
         39:73:86:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMXO8Pmsuts2pVse2rNJcfGy3vwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODMwQTEwNEM0NzdEQkUyOThBRkQ5NUQ2QzM3NzNFOUEx
RTdDQzM5NzAeFw0yMjA1MDkxNzUwMDFaFw0yMzA1MDgxNzU1MDFaMDMxMTAvBgNV
BAMTKEZCNDBFRDE5QUM1OTdDQjhBODY5Q0IyNjhBNUU5RkI2NjNERjdBOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1oGYSErguvLOhq88QiRnbSsIx
/mspmKGg9It9FHSEenMaKclGNf2bZWx7SXar5yF6Mx0pYXyc+8x1XDnXiJetOjic
B1F8NzU1aKZMk7QotqJmLEvJkmgKz1+pI8M8DWnOyoayrXQdx8KOLiF+lnzwxOO4
1DkYOerPbJu37kz5N1rqQV5V6dPPlOe2sZXHr5odQARlCXX7AjpgUkF/Ps1m0ifr
MO3WLcO+vzgZczfLqfvP4lw31VowLsaN4aGylFIdRGuagahUW43Dv2QX8ocWw/Xc
VZdG3T2jD/ipPNpTrttcNqqdLo5DtS6ZRKT/Ya53WE+zZY1d6VRvQ1OoHwXLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU+0DtGaxZfLioacsmil6ftmPfepkwHwYDVR0j
BBgwFoAUgwoQTEd9vimK/ZXWw3c+mh58w5cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWY3VndxYnZITDFaYmt1eGFmaDhpbjNDMUplRzYzNDNkVFR3NmZkVjJ1
Y3QvMC84MzBBMTA0QzQ3N0RCRTI5OEFGRDk1RDZDMzc3M0U5QTFFN0NDMzk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzgzMEExMDRDNDc3REJFMjk4
QUZEOTVENkMzNzczRTlBMUU3Q0MzOTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmN1Z3cWJ2SEwxWmJrdXhhZmg4aW4zQzFKZUc2MzQzZFRUdzZmZFYydWN0LzAv
MzQzNTJlMzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjMx
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0F3DANBgkqhkiG9w0BAQsFAAOCAQEAGFNaAs6wkLyd
zo7KtOZY2HHEYej/1Wm8lJap/REhIH2ayZHcPiyaBe0H63pmIOPO8I6B9jCmhoFp
q4Bj88Pi2HTWqBSYWD54PZxKHM8PHLEEAGqKPX7tL4lSstu7rY6Bl227A4IrczZT
PF69cixgRxVcbOynScNBKUOuQz0oeT+NCgCF9RG945zH5kkDFosFReqDBXFn+sOy
u2zw9Hwgq2tY/X9fmoPqo4sBdFqnHGBCKZkfpCs9ueCsuDqeGfBzcfy9HDpZQR1Z
gsM0JGZra6smRnfzPt7hMhYsSkvC4BhU4iw2/Od4b/uE/ikoUE88MTwEdUPjohmd
iQYvOXOGVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org