Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa
File:                     34352e3233362e35362e302f32322d3234203d3e20323638323332.roa (raw, json)
Hash identifier:          9jawZQjUBduo3beFt+4nD6dRvpouB8acSNXrfwwpA3E=
Subject key identifier:   B6:48:04:69:69:51:C6:6F:9C:BA:65:5D:C9:04:4A:DD:AF:EA:CF:02
Certificate issuer:       /CN=D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87
Certificate serial:       7ED5B1F4FCFD19D985BA9C877ECB51DB70CC587A
Authority key identifier: D7:D7:C1:CD:49:AB:EB:B3:94:E4:AB:FE:9C:F8:F8:15:14:AC:2A:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa
Signing time:             Fri 11 Aug 2023 19:56:31 +0000
ROA not before:           Fri 11 Aug 2023 19:51:31 +0000
ROA not after:            Fri 09 Aug 2024 19:56:31 +0000
asID:                     268232
IP address blocks:        45.236.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d5:b1:f4:fc:fd:19:d9:85:ba:9c:87:7e:cb:51:db:70:cc:58:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87
        Validity
            Not Before: Aug 11 19:51:31 2023 GMT
            Not After : Aug  9 19:56:31 2024 GMT
        Subject: CN=B64804696951C66F9CBA655DC9044ADDAFEACF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f3:ad:14:03:6e:e9:f9:25:f2:02:43:ef:87:
                    f4:8d:45:d8:12:68:40:fa:73:55:3f:2f:08:bd:02:
                    5b:22:6d:a2:8a:8a:59:66:20:d6:d8:33:1d:42:56:
                    43:9f:56:19:26:53:bd:18:b6:81:b8:a9:57:60:8f:
                    ce:2e:6f:8e:73:09:12:71:f1:aa:99:3d:64:87:c7:
                    bc:75:6a:17:47:31:bc:33:07:36:1e:ff:cf:39:b6:
                    81:93:19:16:e4:46:72:56:e2:a9:72:06:c0:5a:04:
                    45:ef:c5:3a:f8:7b:af:ce:3d:3e:64:cd:e8:b6:b2:
                    e3:f9:0f:c3:12:7c:27:5a:a3:c5:08:40:60:e3:0d:
                    2f:9d:90:fc:eb:fd:f1:08:fd:4b:6d:eb:65:38:51:
                    bb:6b:40:80:c0:5e:00:75:1a:88:02:66:ae:af:37:
                    65:a1:85:4d:fb:71:6b:f9:0b:bd:18:28:70:3c:f4:
                    06:c4:f1:4d:69:ad:88:b7:3b:d0:f4:4e:56:5c:48:
                    e0:3a:58:ba:40:48:33:c8:cc:d0:d6:2f:da:9a:a5:
                    16:ce:2c:65:66:4c:15:29:2a:75:2c:b6:c7:e8:bd:
                    34:36:30:08:ef:8d:1d:0b:89:e5:29:c7:d6:e4:89:
                    89:f7:3f:0c:a5:24:14:b5:63:64:27:92:d8:a4:80:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:48:04:69:69:51:C6:6F:9C:BA:65:5D:C9:04:4A:DD:AF:EA:CF:02
            X509v3 Authority Key Identifier:
                keyid:D7:D7:C1:CD:49:AB:EB:B3:94:E4:AB:FE:9C:F8:F8:15:14:AC:2A:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7D7C1CD49ABEBB394E4ABFE9CF8F81514AC2A87.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6p1vaP1SiWHEAapWhdJf1dfdmTtY9mdbVjUSv8Cvnszb/0/34352e3233362e35362e302f32322d3234203d3e20323638323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:8a:c8:a4:b2:e7:03:95:0a:c7:ad:cb:f9:f4:cd:22:73:bc:
         5a:f1:89:0f:ed:57:6d:e9:63:fc:c9:9f:eb:55:d9:42:65:04:
         0b:a8:08:65:cb:64:eb:12:87:b4:7d:1d:66:15:06:3c:8a:02:
         fd:e4:f3:93:cf:cd:3d:0c:63:fb:dc:2e:ef:f8:b2:06:92:aa:
         43:80:01:4d:ae:9a:b0:6b:57:0e:69:2f:15:bb:6e:b7:ce:5a:
         15:b2:c3:57:93:08:34:ca:bd:12:f2:da:ed:67:8e:29:45:44:
         d7:67:f0:43:35:07:4b:95:39:36:e0:3b:cf:ef:8d:dc:11:2b:
         cd:3e:e1:a0:ba:08:51:27:e0:30:34:d7:d1:29:dc:e0:1e:57:
         8f:06:00:32:d9:97:5b:75:9c:14:b2:26:08:e6:d1:c9:72:90:
         c6:ab:03:8a:55:3c:6c:cb:c5:34:37:31:e7:4e:d1:29:67:e6:
         e4:94:29:a0:fd:f6:eb:28:6b:9d:59:47:cd:71:a6:cd:76:23:
         e7:ff:b4:e1:3b:12:96:69:eb:29:c9:31:94:db:da:44:40:80:
         24:f5:5d:f9:48:47:20:85:c4:38:9a:b4:15:25:fa:0b:c6:b1:
         4d:e2:20:1e:07:e5:47:06:e8:83:0f:fb:cc:6a:03:a0:e9:45:
         c3:71:e2:a2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUftWx9Pz9GdmFupyHfstR23DMWHowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdEN0MxQ0Q0OUFCRUJCMzk0RTRBQkZFOUNGOEY4MTUx
NEFDMkE4NzAeFw0yMzA4MTExOTUxMzFaFw0yNDA4MDkxOTU2MzFaMDMxMTAvBgNV
BAMTKEI2NDgwNDY5Njk1MUM2NkY5Q0JBNjU1REM5MDQ0QUREQUZFQUNGMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ860UA27p+SXyAkPvh/SNRdgS
aED6c1U/Lwi9AlsibaKKillmINbYMx1CVkOfVhkmU70YtoG4qVdgj84ub45zCRJx
8aqZPWSHx7x1ahdHMbwzBzYe/885toGTGRbkRnJW4qlyBsBaBEXvxTr4e6/OPT5k
zei2suP5D8MSfCdao8UIQGDjDS+dkPzr/fEI/Utt62U4UbtrQIDAXgB1GogCZq6v
N2WhhU37cWv5C70YKHA89AbE8U1prYi3O9D0TlZcSOA6WLpASDPIzNDWL9qapRbO
LGVmTBUpKnUstsfovTQ2MAjvjR0LieUpx9bkiYn3PwylJBS1Y2QnktikgN/bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtkgEaWlRxm+cumVdyQRK3a/qzwIwHwYDVR0j
BBgwFoAU19fBzUmr67OU5Kv+nPj4FRSsKocwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnAxdmFQMVNpV0hFQWFwV2hkSmYxZGZkbVR0WTltZGJWalVTdjhDdm5z
emIvMC9EN0Q3QzFDRDQ5QUJFQkIzOTRFNEFCRkU5Q0Y4RjgxNTE0QUMyQTg3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q3RDdDMUNENDlBQkVCQjM5
NEU0QUJGRTlDRjhGODE1MTRBQzJBODcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZwMXZhUDFTaVdIRUFhcFdoZEpmMWRmZG1UdFk5bWRiVmpVU3Y4Q3Zuc3piLzAv
MzQzNTJlMzIzMzM2MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLew4MA0GCSqGSIb3DQEBCwUAA4IBAQBlisiksucD
lQrHrcv59M0ic7xa8YkP7Vdt6WP8yZ/rVdlCZQQLqAhly2TrEoe0fR1mFQY8igL9
5POTz809DGP73C7v+LIGkqpDgAFNrpqwa1cOaS8Vu263zloVssNXkwg0yr0S8trt
Z44pRUTXZ/BDNQdLlTk24DvP743cESvNPuGgughRJ+AwNNfRKdzgHlePBgAy2Zdb
dZwUsiYI5tHJcpDGqwOKVTxsy8U0NzHnTtEpZ+bklCmg/fbrKGudWUfNcabNdiPn
/7ThOxKWaespyTGU29pEQIAk9V35SEcghcQ4mrQVJfoLxrFN4iAeB+VHBuiDD/vM
agOg6UXDceKi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:17 2024 by rpki-client on console-ams.rpki-client.org