Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
File:                     34352e3137342e31302e302f32332d3233203d3e20323638393338.roa (raw, json)
Hash identifier:          L3CDK+Hrfpk78hcFn70OFJVyGAfaoMHzvsqcSXh9S4g=
Subject key identifier:   5B:23:5C:38:B9:9B:4A:3D:F4:2B:82:1B:10:89:9F:F9:BF:97:ED:EE
Certificate issuer:       /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial:       71C509EE4ABE18A3BDB72CC2866AAD0F1511E1FA
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa
Signing time:             Thu 01 Feb 2024 20:29:48 +0000
ROA not before:           Thu 01 Feb 2024 20:24:48 +0000
ROA not after:            Thu 30 Jan 2025 20:29:48 +0000
asID:                     268938
IP address blocks:        45.174.10.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c5:09:ee:4a:be:18:a3:bd:b7:2c:c2:86:6a:ad:0f:15:11:e1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Validity
            Not Before: Feb  1 20:24:48 2024 GMT
            Not After : Jan 30 20:29:48 2025 GMT
        Subject: CN=5B235C38B99B4A3DF42B821B10899FF9BF97EDEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:8b:e8:5e:ef:06:0a:ee:18:e9:b8:87:47:
                    de:64:50:9d:27:ed:51:40:ed:19:bd:ac:f0:0e:4a:
                    f5:ba:4c:58:1f:e5:f3:46:1b:c4:22:75:f8:94:3e:
                    db:bd:bf:75:d2:79:75:c3:eb:d9:52:28:5a:aa:e8:
                    5d:a1:5a:1c:bf:6e:cf:32:31:a3:0e:bb:29:c6:b8:
                    91:d4:14:3d:f6:f4:20:10:6c:dc:ee:c1:5c:40:f2:
                    f1:88:e0:74:85:2b:ed:7f:39:b8:53:cb:a5:26:5a:
                    0f:b2:77:e6:37:7b:da:d9:37:d5:b0:15:b9:b4:46:
                    f5:eb:d9:d9:48:0f:85:dd:1c:0e:1f:25:5a:1f:85:
                    77:43:af:bd:3f:c2:4b:87:35:d5:32:a2:35:a7:34:
                    49:d4:eb:0a:cb:4c:71:59:22:b4:79:f7:ed:20:69:
                    c3:90:a3:3d:4a:28:cc:b0:a4:0e:c6:bc:24:82:a3:
                    f8:cc:a1:0d:99:99:b7:c4:28:0c:59:35:db:01:ae:
                    a8:e0:28:5a:24:40:00:02:d0:10:07:db:6a:eb:69:
                    e2:e7:eb:c1:fd:55:47:e2:7b:71:df:fe:00:65:3e:
                    6d:9d:24:5d:ba:59:ec:f1:84:82:5d:a4:e6:0e:5d:
                    ba:a8:e7:25:30:d6:b5:33:21:57:0d:99:6f:9b:ac:
                    25:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:23:5C:38:B9:9B:4A:3D:F4:2B:82:1B:10:89:9F:F9:BF:97:ED:EE
            X509v3 Authority Key Identifier:
                keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31302e302f32332d3233203d3e20323638393338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:5f:1f:4c:b0:94:27:7a:2c:e3:6f:2e:fa:3f:74:34:11:
         88:0c:4a:08:a3:82:1e:1b:2a:2d:2c:fd:83:1b:bb:cc:82:7f:
         04:3e:fc:68:3a:f5:e6:c4:27:be:7d:10:21:de:57:13:f4:5d:
         5c:ac:71:25:17:f9:7b:24:f4:08:60:cf:d7:04:fc:e5:de:f2:
         23:f0:3e:40:df:e0:a8:a4:e7:6e:23:71:90:92:a8:be:43:21:
         c6:31:35:f5:fc:fa:fb:a1:76:96:e1:55:95:42:1f:5f:0a:22:
         eb:e1:37:0a:b5:71:8a:52:f2:1c:a0:b0:8d:f9:62:e6:08:6d:
         76:37:22:45:87:14:f4:fe:75:b7:29:33:f0:e5:89:2f:df:76:
         7c:64:77:55:7e:2e:86:5c:23:7e:1c:ac:7a:45:82:98:d1:87:
         23:36:cd:66:a2:d1:6e:ba:3a:dc:99:51:4f:e3:e2:86:1b:d8:
         ad:bc:68:b4:a9:82:69:78:fe:19:c3:28:c1:9e:7c:2d:ac:f2:
         16:97:b8:3d:5e:8a:66:0d:bd:d6:51:f6:e0:fc:1c:57:c9:f8:
         76:ae:30:8f:82:f0:09:77:67:de:12:54:a8:f7:0d:dc:91:bd:
         50:59:71:8a:5d:ae:1f:59:fc:0b:8e:0e:04:3d:b9:2f:7e:e8:
         16:a7:80:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUccUJ7kq+GKO9tyzChmqtDxUR4fowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI4RTZGQUYxOUNFOEM4MjNDRDcwREE1OENFRjFGMUI1
NDMzMjE0MjAeFw0yNDAyMDEyMDI0NDhaFw0yNTAxMzAyMDI5NDhaMDMxMTAvBgNV
BAMTKDVCMjM1QzM4Qjk5QjRBM0RGNDJCODIxQjEwODk5RkY5QkY5N0VERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhjIvoXu8GCu4Y6biHR95kUJ0n
7VFA7Rm9rPAOSvW6TFgf5fNGG8QidfiUPtu9v3XSeXXD69lSKFqq6F2hWhy/bs8y
MaMOuynGuJHUFD329CAQbNzuwVxA8vGI4HSFK+1/ObhTy6UmWg+yd+Y3e9rZN9Ww
Fbm0RvXr2dlID4XdHA4fJVofhXdDr70/wkuHNdUyojWnNEnU6wrLTHFZIrR59+0g
acOQoz1KKMywpA7GvCSCo/jMoQ2ZmbfEKAxZNdsBrqjgKFokQAAC0BAH22rraeLn
68H9VUfie3Hf/gBlPm2dJF26WezxhIJdpOYOXbqo5yUw1rUzIVcNmW+brCUpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWyNcOLmbSj30K4IbEImf+b+X7e4wHwYDVR0j
BBgwFoAUEo5vrxnOjII81w2ljO8fG1QzIUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXVRNEVWTGREaEp3WGJmSzVXRWE4TGMxUm5zcVJEVmNqVU55ZlVTN0pS
THAvMC8xMjhFNkZBRjE5Q0U4QzgyM0NENzBEQTU4Q0VGMUYxQjU0MzMyMTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyOEU2RkFGMTlDRThDODIz
Q0Q3MERBNThDRUYxRjFCNTQzMzIxNDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzV1UTRFVkxkRGhKd1hiZks1V0VhOExjMVJuc3FSRFZjalVOeWZVUzdKUkxwLzAv
MzQzNTJlMzEzNzM0MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzkzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa4KMA0GCSqGSIb3DQEBCwUAA4IBAQAee18fTLCU
J3os428u+j90NBGIDEoIo4IeGyotLP2DG7vMgn8EPvxoOvXmxCe+fRAh3lcT9F1c
rHElF/l7JPQIYM/XBPzl3vIj8D5A3+CopOduI3GQkqi+QyHGMTX1/Pr7oXaW4VWV
Qh9fCiLr4TcKtXGKUvIcoLCN+WLmCG12NyJFhxT0/nW3KTPw5Ykv33Z8ZHdVfi6G
XCN+HKx6RYKY0YcjNs1motFuujrcmVFP4+KGG9itvGi0qYJpeP4ZwyjBnnwtrPIW
l7g9XopmDb3WUfbg/BxXyfh2rjCPgvAJd2feElSo9w3ckb1QWXGKXa4fWfwLjg4E
PbkvfugWp4A9
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org