Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/34352e3138322e38382e302f32322d3232203d3e20323639323736.roa
File:                     34352e3138322e38382e302f32322d3232203d3e20323639323736.roa (raw, json)
Hash identifier:          C9cM2bJnk3r+S3XYnEfcdCGIOMlVRPtfodRm1vvmq6I=
Subject key identifier:   9A:E9:A9:71:73:32:64:BC:DF:94:C4:1A:F2:43:1B:04:B8:18:63:59
Certificate issuer:       /CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
Certificate serial:       25F5EB84D3FA830ABD53703825115BFF643AC487
Authority key identifier: B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/34352e3138322e38382e302f32322d3232203d3e20323639323736.roa
Signing time:             Mon 18 Dec 2023 18:53:23 +0000
ROA not before:           Mon 18 Dec 2023 18:48:23 +0000
ROA not after:            Mon 16 Dec 2024 18:53:23 +0000
asID:                     269276
IP address blocks:        45.182.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:eb:84:d3:fa:83:0a:bd:53:70:38:25:11:5b:ff:64:3a:c4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA
        Validity
            Not Before: Dec 18 18:48:23 2023 GMT
            Not After : Dec 16 18:53:23 2024 GMT
        Subject: CN=9AE9A971733264BCDF94C41AF2431B04B8186359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:e0:a6:13:8c:8d:45:d9:77:6e:f9:14:12:
                    2a:18:ed:51:17:5d:4a:ac:89:e8:74:6a:40:41:b8:
                    a6:bb:ae:b4:91:fd:6f:14:76:32:ae:ac:7c:76:e9:
                    9e:20:d1:18:c6:ee:ff:3a:dc:98:c4:86:c1:45:f1:
                    80:b7:96:1b:8f:d2:09:f1:f3:ab:17:7c:5d:85:6f:
                    59:3d:70:94:35:d7:d8:d1:97:8c:29:af:ce:91:ed:
                    95:51:e8:bd:5a:e4:b3:8a:a0:48:1f:a8:76:aa:c1:
                    cd:60:7a:4a:a9:25:07:50:47:15:34:df:d6:04:cf:
                    47:5d:66:6f:f7:c6:c2:b1:48:2e:42:93:c7:0d:24:
                    97:4a:a4:33:7a:4b:7f:c4:5d:33:75:b0:98:b5:e0:
                    55:b8:ff:79:e4:7b:7c:d6:57:68:d8:ab:db:87:e3:
                    5b:b7:49:a0:82:22:0c:a6:4f:95:03:89:74:99:a1:
                    6c:09:cd:48:66:20:50:af:28:de:1f:56:43:96:93:
                    3a:4e:22:af:ab:23:0b:27:a5:a3:f9:ae:f1:fa:55:
                    97:ff:7d:c9:6b:04:4b:e5:29:0e:c5:11:4a:53:ff:
                    f2:70:ce:a1:a2:98:08:a1:43:cb:2f:7d:6e:b1:52:
                    de:06:55:2a:1c:f9:01:bc:9c:34:88:6f:15:94:7b:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E9:A9:71:73:32:64:BC:DF:94:C4:1A:F2:43:1B:04:B8:18:63:59
            X509v3 Authority Key Identifier:
                keyid:B7:FA:4D:E3:78:CD:54:DE:57:9C:94:C2:05:9C:B4:52:1F:0B:A6:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B7FA4DE378CD54DE579C94C2059CB4521F0BA6BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/34352e3138322e38382e302f32322d3232203d3e20323639323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:3d:99:c8:fe:55:84:6f:3e:f6:af:b2:ae:82:5c:7a:f8:
         78:a9:1b:a9:04:2c:18:93:4e:e2:f7:d6:b1:d5:6c:7e:a4:8d:
         78:99:c6:35:cf:a6:55:82:06:d9:17:b9:9b:91:b7:a2:39:56:
         84:28:ae:64:98:76:ef:97:a6:cd:1d:9a:82:7d:cc:cb:63:1f:
         dd:37:f8:c1:af:4a:35:2d:e6:2d:9d:99:b5:67:57:e5:98:1f:
         b7:b4:d9:8a:80:f0:47:0e:71:7e:30:fc:a4:58:87:de:32:aa:
         74:fc:96:92:87:88:86:4f:1a:5a:61:2d:41:04:ef:19:41:76:
         ee:7d:19:4f:e2:98:09:32:39:8e:48:00:52:45:78:2d:eb:9f:
         9a:3f:2f:c0:7e:56:db:6a:db:02:7b:09:6f:7d:ca:42:c6:f5:
         0f:fb:f1:2d:c3:3a:b1:ea:8e:55:f1:ad:6f:b2:cd:be:fc:73:
         55:76:c5:6b:b3:1c:67:22:1b:c0:44:03:87:98:75:57:10:58:
         20:8d:9c:2c:b6:2e:a6:59:c1:e7:bb:dd:91:7f:c5:49:8f:6b:
         02:63:56:88:8c:36:a4:7e:01:94:32:02:e1:40:d4:da:54:2c:
         9f:2f:92:5d:6b:b7:69:f4:29:0c:d0:cf:32:ae:cd:ad:80:5d:
         da:a6:4b:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJfXrhNP6gwq9U3A4JRFb/2Q6xIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjdGQTRERTM3OENENTRERTU3OUM5NEMyMDU5Q0I0NTIx
RjBCQTZCQTAeFw0yMzEyMTgxODQ4MjNaFw0yNDEyMTYxODUzMjNaMDMxMTAvBgNV
BAMTKDlBRTlBOTcxNzMzMjY0QkNERjk0QzQxQUYyNDMxQjA0QjgxODYzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0+CmE4yNRdl3bvkUEioY7VEX
XUqsieh0akBBuKa7rrSR/W8UdjKurHx26Z4g0RjG7v863JjEhsFF8YC3lhuP0gnx
86sXfF2Fb1k9cJQ119jRl4wpr86R7ZVR6L1a5LOKoEgfqHaqwc1gekqpJQdQRxU0
39YEz0ddZm/3xsKxSC5Ck8cNJJdKpDN6S3/EXTN1sJi14FW4/3nke3zWV2jYq9uH
41u3SaCCIgymT5UDiXSZoWwJzUhmIFCvKN4fVkOWkzpOIq+rIwsnpaP5rvH6VZf/
fclrBEvlKQ7FEUpT//JwzqGimAihQ8svfW6xUt4GVSoc+QG8nDSIbxWUe24ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmumpcXMyZLzflMQa8kMbBLgYY1kwHwYDVR0j
BBgwFoAUt/pN43jNVN5XnJTCBZy0Uh8LprowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNng2R3dTSFdVS1FyOUg5c3VLcjY3QVVmcENycHF4V0tkUXpmZ21VWlFq
alcvMC9CN0ZBNERFMzc4Q0Q1NERFNTc5Qzk0QzIwNTlDQjQ1MjFGMEJBNkJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3RkE0REUzNzhDRDU0REU1
NzlDOTRDMjA1OUNCNDUyMUYwQkE2QkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZ4Nkd3U0hXVUtRcjlIOXN1S3I2N0FVZnBDcnBxeFdLZFF6ZmdtVVpRampXLzAv
MzQzNTJlMzEzODMyMmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM5
MzIzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbZYMA0GCSqGSIb3DQEBCwUAA4IBAQAkxj2ZyP5V
hG8+9q+yroJcevh4qRupBCwYk07i99ax1Wx+pI14mcY1z6ZVggbZF7mbkbeiOVaE
KK5kmHbvl6bNHZqCfczLYx/dN/jBr0o1LeYtnZm1Z1flmB+3tNmKgPBHDnF+MPyk
WIfeMqp0/JaSh4iGTxpaYS1BBO8ZQXbufRlP4pgJMjmOSABSRXgt65+aPy/Aflbb
atsCewlvfcpCxvUP+/Etwzqx6o5V8a1vss2+/HNVdsVrsxxnIhvARAOHmHVXEFgg
jZwsti6mWcHnu92Rf8VJj2sCY1aIjDakfgGUMgLhQNTaVCyfL5Jda7dp9CkM0M8y
rs2tgF3apkt4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org