Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36372e302f32342d3234203d3e20323638393335.roa
File:                     34352e3137362e36372e302f32342d3234203d3e20323638393335.roa (raw, json)
Hash identifier:          etQrGejGHULbkLPYQVMDpz2b7XzIGclhLdYTVwTjAZw=
Subject key identifier:   89:A7:A5:0A:CC:A4:0E:C9:C4:4A:04:A9:DF:69:CA:81:57:37:59:C1
Certificate issuer:       /CN=E8582E039650110CF2DDC6CCF5038DD0B5290271
Certificate serial:       1BB13BF15F4354B5A9B6FE443F163FF836FA04AB
Authority key identifier: E8:58:2E:03:96:50:11:0C:F2:DD:C6:CC:F5:03:8D:D0:B5:29:02:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8582E039650110CF2DDC6CCF5038DD0B5290271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36372e302f32342d3234203d3e20323638393335.roa
Signing time:             Mon 22 Jan 2024 11:36:10 +0000
ROA not before:           Mon 22 Jan 2024 11:31:10 +0000
ROA not after:            Mon 20 Jan 2025 11:36:10 +0000
asID:                     268935
IP address blocks:        45.176.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:3b:f1:5f:43:54:b5:a9:b6:fe:44:3f:16:3f:f8:36:fa:04:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8582E039650110CF2DDC6CCF5038DD0B5290271
        Validity
            Not Before: Jan 22 11:31:10 2024 GMT
            Not After : Jan 20 11:36:10 2025 GMT
        Subject: CN=89A7A50ACCA40EC9C44A04A9DF69CA81573759C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:84:f7:fe:aa:44:e0:02:10:ee:3f:3e:bf:ed:
                    a3:b3:c3:d3:3c:f2:3f:69:8a:4f:d4:8d:ab:e7:6b:
                    69:86:64:8e:33:61:7c:47:f2:bd:4e:92:aa:9d:40:
                    78:6f:bd:a9:03:47:f6:50:3a:2a:f5:76:36:a3:28:
                    03:ba:0c:fb:54:12:e9:f0:22:a3:22:16:16:11:2c:
                    b8:5d:12:c9:8d:f6:e3:07:83:15:a5:68:1d:9f:32:
                    53:4b:4f:fb:54:f2:7b:ce:35:86:19:df:b1:7f:ec:
                    86:b7:4c:24:dd:0d:7e:9a:54:fa:0a:15:4f:8d:41:
                    9c:6f:74:d0:68:a1:0a:5a:3e:03:53:ea:38:12:1b:
                    cb:b4:28:00:dd:7f:4f:4c:66:a0:28:6b:00:04:61:
                    cd:1c:b1:ed:77:a1:d6:a5:eb:fa:af:57:88:37:f2:
                    20:d5:b4:a8:79:79:2d:8c:fa:6f:85:e2:39:7f:06:
                    c5:3f:f3:c6:ce:cb:2b:20:35:61:c9:2a:4e:3b:ee:
                    1a:25:93:aa:a6:11:c0:8b:f7:df:f2:aa:91:4e:69:
                    f7:63:3f:6f:d7:e9:d9:7f:c6:40:63:ac:12:df:d8:
                    51:77:a1:0b:23:32:7e:5c:47:49:72:66:bb:a0:9e:
                    e0:f9:9e:e8:49:6b:fd:d3:82:2e:e5:2e:73:39:67:
                    3c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A7:A5:0A:CC:A4:0E:C9:C4:4A:04:A9:DF:69:CA:81:57:37:59:C1
            X509v3 Authority Key Identifier:
                keyid:E8:58:2E:03:96:50:11:0C:F2:DD:C6:CC:F5:03:8D:D0:B5:29:02:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/E8582E039650110CF2DDC6CCF5038DD0B5290271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8582E039650110CF2DDC6CCF5038DD0B5290271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/34352e3137362e36372e302f32342d3234203d3e20323638393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:85:0b:af:f1:91:0b:2f:e1:94:d3:f6:5c:ea:07:a8:32:03:
         8e:6f:0e:18:05:b8:f5:c2:ee:c4:0c:01:19:26:ec:e1:a7:5b:
         6d:7f:3d:92:a3:c1:f0:f9:4d:a8:1f:b2:a2:52:13:b5:aa:a6:
         b5:68:e9:c6:fc:dc:21:52:79:f1:11:e0:7b:6a:29:56:54:1f:
         c8:a7:5c:f4:f3:b1:38:97:8a:0c:32:46:88:79:56:ec:d0:c1:
         21:0c:e8:c1:c0:50:f7:0d:48:35:d9:0f:e4:dd:77:8e:b4:c4:
         63:fc:98:2d:1a:e2:2f:3a:8f:c1:4e:3e:d3:e1:17:17:3c:ce:
         4a:88:f5:a7:be:58:c7:c4:2f:6c:33:31:b2:82:62:4d:a3:aa:
         5a:b4:9c:56:97:99:17:ec:dd:2e:73:b1:e1:8c:86:8b:0e:43:
         82:81:83:9d:bc:ba:17:83:73:a5:40:c3:ec:02:1e:cd:cf:2d:
         b6:f9:e7:81:99:95:0b:51:a7:5f:03:8d:bf:18:4a:e8:da:b1:
         1d:54:90:11:5a:fa:9c:a9:86:97:47:ce:5d:2b:cc:3d:46:ba:
         89:b8:c9:54:28:d8:45:b2:23:af:52:d0:e3:1b:76:96:9c:dc:
         6c:cb:e7:86:03:82:33:8f:1f:47:50:2f:72:72:e4:a3:f3:88:
         ff:5a:a4:fb
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG7E78V9DVLWptv5EPxY/+Db6BKswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg1ODJFMDM5NjUwMTEwQ0YyRERDNkNDRjUwMzhERDBC
NTI5MDI3MTAeFw0yNDAxMjIxMTMxMTBaFw0yNTAxMjAxMTM2MTBaMDMxMTAvBgNV
BAMTKDg5QTdBNTBBQ0NBNDBFQzlDNDRBMDRBOURGNjlDQTgxNTczNzU5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbhPf+qkTgAhDuPz6/7aOzw9M8
8j9pik/Ujavna2mGZI4zYXxH8r1OkqqdQHhvvakDR/ZQOir1djajKAO6DPtUEunw
IqMiFhYRLLhdEsmN9uMHgxWlaB2fMlNLT/tU8nvONYYZ37F/7Ia3TCTdDX6aVPoK
FU+NQZxvdNBooQpaPgNT6jgSG8u0KADdf09MZqAoawAEYc0cse13odal6/qvV4g3
8iDVtKh5eS2M+m+F4jl/BsU/88bOyysgNWHJKk477holk6qmEcCL99/yqpFOafdj
P2/X6dl/xkBjrBLf2FF3oQsjMn5cR0lyZrugnuD5nuhJa/3Tgi7lLnM5ZzyVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUiaelCsykDsnESgSp32nKgVc3WcEwHwYDVR0j
BBgwFoAU6FguA5ZQEQzy3cbM9QON0LUpAnEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNnRpSG8yQ2lBbjFyYVFiUXRnVHpSanJZMUJBM0RRcnA5a29MaFdEaFRl
V2MvMC9FODU4MkUwMzk2NTAxMTBDRjJEREM2Q0NGNTAzOEREMEI1MjkwMjcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0U4NTgyRTAzOTY1MDExMENG
MkREQzZDQ0Y1MDM4REQwQjUyOTAyNzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ0aUhvMkNpQW4xcmFRYlF0Z1R6UmpyWTFCQTNEUXJwOWtvTGhXRGhUZVdjLzAv
MzQzNTJlMzEzNzM2MmUzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzkzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbBDMA0GCSqGSIb3DQEBCwUAA4IBAQAchQuv8ZEL
L+GU0/Zc6geoMgOObw4YBbj1wu7EDAEZJuzhp1ttfz2So8Hw+U2oH7KiUhO1qqa1
aOnG/NwhUnnxEeB7ailWVB/Ip1z087E4l4oMMkaIeVbs0MEhDOjBwFD3DUg12Q/k
3XeOtMRj/JgtGuIvOo/BTj7T4RcXPM5KiPWnvljHxC9sMzGygmJNo6patJxWl5kX
7N0uc7HhjIaLDkOCgYOdvLoXg3OlQMPsAh7Nzy22+eeBmZULUadfA42/GEro2rEd
VJARWvqcqYaXR85dK8w9RrqJuMlUKNhFsiOvUtDjG3aWnNxsy+eGA4Izjx9HUC9y
cuSj84j/WqT7
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org