Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa
File:                     34352e342e34322e302f32342d3234203d3e20323636303534.roa (raw, json)
Hash identifier:          XSTjEeLfmmrlWHA/nzeUfFLWj0LHDSn1BxSzCvKjkQc=
Subject key identifier:   91:F5:5A:E0:E1:28:22:EF:81:E4:1F:1A:19:7D:43:62:F6:85:4E:81
Certificate issuer:       /CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
Certificate serial:       33FB288C0FB8C7CEFEF7E74E656407A553BE982B
Authority key identifier: EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa
Signing time:             Thu 15 Feb 2024 14:56:45 +0000
ROA not before:           Thu 15 Feb 2024 14:51:45 +0000
ROA not after:            Thu 13 Feb 2025 14:56:45 +0000
asID:                     266054
IP address blocks:        45.4.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:fb:28:8c:0f:b8:c7:ce:fe:f7:e7:4e:65:64:07:a5:53:be:98:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB4A656871549E0B22ACDABF2BD1A2A119735D84
        Validity
            Not Before: Feb 15 14:51:45 2024 GMT
            Not After : Feb 13 14:56:45 2025 GMT
        Subject: CN=91F55AE0E12822EF81E41F1A197D4362F6854E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:59:c9:24:50:c6:c5:86:35:6d:1c:0d:8c:
                    ce:43:36:8e:87:40:45:2e:91:62:80:78:aa:76:a0:
                    5f:2d:ce:93:d8:eb:e9:44:af:29:59:c4:38:85:f5:
                    6e:89:ac:de:2e:31:52:6d:91:09:68:98:20:d1:7e:
                    57:d2:9f:70:9b:e7:68:5a:8b:91:75:53:5d:dd:3c:
                    02:14:c1:e5:b0:59:5d:89:73:8f:06:a1:2a:d1:e2:
                    b1:89:97:7c:93:48:e5:10:90:f9:ae:00:95:de:54:
                    d5:ef:44:e7:9b:f7:31:96:f5:88:d4:80:24:ad:f1:
                    19:78:16:81:f0:88:c9:15:e2:bc:d6:36:76:fe:c9:
                    8d:29:b1:ee:2b:00:6e:93:f6:8a:31:de:ee:29:cc:
                    24:30:38:98:f5:80:ec:c4:07:a8:ff:2d:19:c8:30:
                    59:66:ae:d6:9c:b7:7f:70:ed:29:b2:d5:f2:0a:c5:
                    2b:7a:a0:7d:90:4e:dc:19:56:28:4b:3a:ac:8c:6d:
                    db:7f:cc:4a:ed:91:7f:74:9e:ad:e5:29:78:c0:85:
                    d5:87:e0:0f:b3:22:ff:14:d1:5c:58:7f:db:fd:c7:
                    0b:59:b8:4d:f2:cc:e2:5c:c1:98:c7:79:ec:84:71:
                    61:38:4d:8a:2a:16:a5:ce:16:b5:c8:8e:9c:93:e2:
                    a3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:5A:E0:E1:28:22:EF:81:E4:1F:1A:19:7D:43:62:F6:85:4E:81
            X509v3 Authority Key Identifier:
                keyid:EB:4A:65:68:71:54:9E:0B:22:AC:DA:BF:2B:D1:A2:A1:19:73:5D:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB4A656871549E0B22ACDABF2BD1A2A119735D84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6JhJ2U85E22AtMVdSxLETathULV1zgTkLBKcSqPTeTTu/0/34352e342e34322e302f32342d3234203d3e20323636303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:89:e0:ad:b8:97:69:f1:f0:bd:21:24:50:f2:a5:84:5b:f2:
         df:24:5c:3e:a2:66:42:70:cb:72:cf:84:43:f3:61:d3:11:8a:
         ec:5a:0e:c2:63:f1:6c:4f:2e:41:5b:a9:3d:bb:7d:36:45:bf:
         2d:f1:06:ca:ec:47:05:62:9b:1d:32:2b:92:4e:c5:4a:b5:7d:
         5a:b0:e0:bc:c2:dc:f9:3c:97:c8:b3:c8:72:78:25:ad:97:96:
         f1:15:eb:f1:ac:f3:e2:9a:16:b5:3c:11:f5:ed:31:0f:01:7c:
         15:e7:d9:f9:4e:05:6b:6c:36:71:3d:28:c8:3f:00:25:30:b1:
         c5:6e:7b:04:49:b0:e6:0f:b3:de:ed:eb:1f:a0:3c:0a:0c:23:
         85:54:2e:e5:75:6b:3e:97:fc:45:2a:bc:04:65:31:60:9b:a5:
         5a:49:56:42:bf:91:6d:ee:47:89:18:5f:f6:79:6a:d6:79:71:
         1c:70:09:7e:ef:ec:f8:bc:13:85:5b:7b:73:db:77:d2:ea:2a:
         da:b7:c4:98:13:e1:6d:cf:47:58:da:f3:83:07:e2:31:b9:cc:
         32:18:52:0e:04:cd:60:b2:cb:8a:cd:19:65:04:f3:79:7f:18:
         1f:4b:fa:8b:50:ec:88:e3:a1:41:05:a6:15:0d:9f:71:ab:9d:
         65:b0:a3:37
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUM/sojA+4x87+9+dOZWQHpVO+mCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI0QTY1Njg3MTU0OUUwQjIyQUNEQUJGMkJEMUEyQTEx
OTczNUQ4NDAeFw0yNDAyMTUxNDUxNDVaFw0yNTAyMTMxNDU2NDVaMDMxMTAvBgNV
BAMTKDkxRjU1QUUwRTEyODIyRUY4MUU0MUYxQTE5N0Q0MzYyRjY4NTRFODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZlnJJFDGxYY1bRwNjM5DNo6H
QEUukWKAeKp2oF8tzpPY6+lErylZxDiF9W6JrN4uMVJtkQlomCDRflfSn3Cb52ha
i5F1U13dPAIUweWwWV2Jc48GoSrR4rGJl3yTSOUQkPmuAJXeVNXvROeb9zGW9YjU
gCSt8Rl4FoHwiMkV4rzWNnb+yY0pse4rAG6T9oox3u4pzCQwOJj1gOzEB6j/LRnI
MFlmrtact39w7Smy1fIKxSt6oH2QTtwZVihLOqyMbdt/zErtkX90nq3lKXjAhdWH
4A+zIv8U0VxYf9v9xwtZuE3yzOJcwZjHeeyEcWE4TYoqFqXOFrXIjpyT4qN5AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUkfVa4OEoIu+B5B8aGX1DYvaFToEwHwYDVR0j
BBgwFoAU60plaHFUngsirNq/K9GioRlzXYQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkpoSjJVODVFMjJBdE1WZFN4TEVUYXRoVUxWMXpnVGtMQktjU3FQVGVU
VHUvMC9FQjRBNjU2ODcxNTQ5RTBCMjJBQ0RBQkYyQkQxQTJBMTE5NzM1RDg0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VCNEE2NTY4NzE1NDlFMEIy
MkFDREFCRjJCRDFBMkExMTk3MzVEODQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZKaEoyVTg1RTIyQXRNVmRTeExFVGF0aFVMVjF6Z1RrTEJLY1NxUFRlVFR1LzAv
MzQzNTJlMzQyZTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMDM1
MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBCowDQYJKoZIhvcNAQELBQADggEBAD2J4K24l2nx8L0h
JFDypYRb8t8kXD6iZkJwy3LPhEPzYdMRiuxaDsJj8WxPLkFbqT27fTZFvy3xBsrs
RwVimx0yK5JOxUq1fVqw4LzC3Pk8l8izyHJ4Ja2XlvEV6/Gs8+KaFrU8EfXtMQ8B
fBXn2flOBWtsNnE9KMg/ACUwscVuewRJsOYPs97t6x+gPAoMI4VULuV1az6X/EUq
vARlMWCbpVpJVkK/kW3uR4kYX/Z5atZ5cRxwCX7v7Pi8E4Vbe3Pbd9LqKtq3xJgT
4W3PR1ja84MH4jG5zDIYUg4EzWCyy4rNGWUE83l/GB9L+otQ7IjjoUEFphUNn3Gr
nWWwozc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org