Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/34352e3136332e3138302e302f32322d3332203d3e20323638353739.roa
File:                     34352e3136332e3138302e302f32322d3332203d3e20323638353739.roa (raw, json)
Hash identifier:          P9is4M4+d+juedFhKF656oJRF0nV463pL32O03yu96c=
Subject key identifier:   60:D9:0F:AF:97:E4:BE:44:B7:4A:18:78:79:E4:FF:47:1C:4B:F9:43
Certificate issuer:       /CN=B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0
Certificate serial:       34AD22B25C49380E26E801488C229D18347A92AD
Authority key identifier: B2:9C:A4:CD:70:D7:BE:07:8C:D5:85:0A:3D:7A:14:B2:DC:08:9A:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/34352e3136332e3138302e302f32322d3332203d3e20323638353739.roa
Signing time:             Wed 08 Nov 2023 18:28:03 +0000
ROA not before:           Wed 08 Nov 2023 18:23:03 +0000
ROA not after:            Wed 06 Nov 2024 18:28:03 +0000
asID:                     268579
IP address blocks:        45.163.180.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ad:22:b2:5c:49:38:0e:26:e8:01:48:8c:22:9d:18:34:7a:92:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0
        Validity
            Not Before: Nov  8 18:23:03 2023 GMT
            Not After : Nov  6 18:28:03 2024 GMT
        Subject: CN=60D90FAF97E4BE44B74A187879E4FF471C4BF943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:76:08:bf:05:2d:d6:ef:6f:e2:95:72:73:
                    7d:68:fa:c5:b2:be:48:39:42:d9:5e:ee:17:db:c7:
                    58:f3:f7:a2:e2:3f:fe:16:1e:25:14:4e:99:36:04:
                    7c:6c:7c:ea:48:5b:80:94:6a:33:99:b8:ee:9a:3a:
                    9d:2c:80:1a:db:ae:0a:de:69:67:45:61:39:e9:1d:
                    bd:48:93:63:7b:77:1f:9f:ba:f8:d1:46:1f:21:0b:
                    84:d5:a7:37:ba:d2:ca:55:e4:35:ae:4a:2f:c6:13:
                    ce:26:c5:20:6e:5a:db:2e:7f:88:9a:a1:9f:3c:b6:
                    ce:c9:fb:38:80:96:7a:8f:25:2d:29:b2:60:0e:7a:
                    df:38:80:c4:df:a3:dd:0c:76:78:30:69:53:14:c0:
                    e0:f5:eb:2f:97:2e:c6:b7:27:d3:ed:d1:13:80:be:
                    57:4c:b8:4b:23:33:ca:63:88:00:b4:5e:c0:bd:4a:
                    18:30:57:fd:fc:dd:8c:74:fc:63:f1:bd:81:50:30:
                    a1:24:a5:9f:5b:9c:00:eb:20:f0:d1:cc:7a:fd:6a:
                    1c:32:bd:e4:85:09:5d:b7:82:58:dd:55:47:f8:16:
                    41:3d:16:d7:2a:22:2b:97:19:ca:ef:b9:e4:3c:ea:
                    8d:cc:2b:c1:9e:a7:54:57:23:e6:28:a3:4a:db:20:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D9:0F:AF:97:E4:BE:44:B7:4A:18:78:79:E4:FF:47:1C:4B:F9:43
            X509v3 Authority Key Identifier:
                keyid:B2:9C:A4:CD:70:D7:BE:07:8C:D5:85:0A:3D:7A:14:B2:DC:08:9A:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B29CA4CD70D7BE078CD5850A3D7A14B2DC089AB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KmmNQ8b3VjAreTG2w2HyZqS5JXwGb3MGVGCqNmvvKNE/0/34352e3136332e3138302e302f32322d3332203d3e20323638353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:23:d1:1a:ea:11:60:c1:2d:45:22:19:62:ab:2b:23:78:7e:
         a1:85:99:df:c4:c7:c2:4c:a7:f9:b0:e0:2c:dd:27:8b:a0:c3:
         59:34:57:81:61:84:ab:69:50:62:38:80:da:27:a7:98:40:91:
         3f:ad:e2:22:5c:11:99:18:72:ec:79:0f:5a:48:54:f8:f3:21:
         f5:14:97:2a:c1:ee:75:7b:fd:d6:56:6d:63:37:90:b1:56:c7:
         72:7b:75:4c:be:fc:7d:29:ab:58:2e:84:2c:c4:28:02:e8:fe:
         68:89:4e:77:29:c0:78:bf:65:e5:28:41:79:28:12:a0:de:54:
         b9:72:1b:d5:11:7b:a8:0e:79:5b:d0:37:d6:e2:9d:da:c0:e0:
         b0:d8:93:15:e6:89:8e:da:a4:36:53:27:16:89:3b:cc:a6:24:
         aa:4b:6a:32:c0:bf:26:a0:4f:11:37:fa:0a:d0:62:d3:8e:8f:
         71:af:5d:3e:b7:a7:9f:7c:89:60:ce:f1:95:6e:52:80:eb:76:
         35:12:c2:c0:a5:6f:53:ef:d3:fc:67:54:3e:4a:32:2e:a2:dc:
         21:8b:35:84:fd:57:e6:d0:94:90:2a:34:d7:1c:5a:5e:a5:09:
         74:ae:c3:98:3e:1f:99:d8:79:bf:42:a3:28:4c:57:51:d4:8e:
         38:21:e0:1e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNK0islxJOA4m6AFIjCKdGDR6kq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5Q0E0Q0Q3MEQ3QkUwNzhDRDU4NTBBM0Q3QTE0QjJE
QzA4OUFCMDAeFw0yMzExMDgxODIzMDNaFw0yNDExMDYxODI4MDNaMDMxMTAvBgNV
BAMTKDYwRDkwRkFGOTdFNEJFNDRCNzRBMTg3ODc5RTRGRjQ3MUM0QkY5NDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9HYIvwUt1u9v4pVyc31o+sWy
vkg5Qtle7hfbx1jz96LiP/4WHiUUTpk2BHxsfOpIW4CUajOZuO6aOp0sgBrbrgre
aWdFYTnpHb1Ik2N7dx+fuvjRRh8hC4TVpze60spV5DWuSi/GE84mxSBuWtsuf4ia
oZ88ts7J+ziAlnqPJS0psmAOet84gMTfo90MdngwaVMUwOD16y+XLsa3J9Pt0ROA
vldMuEsjM8pjiAC0XsC9ShgwV/383Yx0/GPxvYFQMKEkpZ9bnADrIPDRzHr9ahwy
veSFCV23gljdVUf4FkE9FtcqIiuXGcrvueQ86o3MK8Gep1RXI+Yoo0rbIOtLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYNkPr5fkvkS3Shh4eeT/RxxL+UMwHwYDVR0j
BBgwFoAUspykzXDXvgeM1YUKPXoUstwImrAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNkttbU5ROGIzVmpBcmVURzJ3Mkh5WnFTNUpYd0diM01HVkdDcU5tdnZL
TkUvMC9CMjlDQTRDRDcwRDdCRTA3OENENTg1MEEzRDdBMTRCMkRDMDg5QUIwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyOUNBNENENzBEN0JFMDc4
Q0Q1ODUwQTNEN0ExNEIyREMwODlBQjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZLbW1OUThiM1ZqQXJlVEcydzJIeVpxUzVKWHdHYjNNR1ZHQ3FObXZ2S05FLzAv
MzQzNTJlMzEzNjMzMmUzMTM4MzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNTM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIto7QwDQYJKoZIhvcNAQELBQADggEBAJgj0Rrq
EWDBLUUiGWKrKyN4fqGFmd/Ex8JMp/mw4CzdJ4ugw1k0V4FhhKtpUGI4gNonp5hA
kT+t4iJcEZkYcux5D1pIVPjzIfUUlyrB7nV7/dZWbWM3kLFWx3J7dUy+/H0pq1gu
hCzEKALo/miJTncpwHi/ZeUoQXkoEqDeVLlyG9URe6gOeVvQN9bindrA4LDYkxXm
iY7apDZTJxaJO8ymJKpLajLAvyagTxE3+grQYtOOj3GvXT63p598iWDO8ZVuUoDr
djUSwsClb1Pv0/xnVD5KMi6i3CGLNYT9V+bQlJAqNNccWl6lCXSuw5g+H5nYeb9C
oyhMV1HUjjgh4B4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org