Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa
File:                     34352e3136352e39382e302f32342d3234203d3e20323638363734.roa (raw, json)
Hash identifier:          dcXDjrjMNKeBeegqamVvjKyoQhj6Q2pntVjBmZegLYE=
Subject key identifier:   73:8D:DF:C9:7B:37:77:CF:24:88:36:56:E5:B6:58:3B:4B:E2:5C:A8
Certificate issuer:       /CN=04004212A99696A4F283C73FE7EC609301933701
Certificate serial:       61B842BD5429F8E4677E49250AFB9B850481A2C6
Authority key identifier: 04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa
Signing time:             Thu 25 Jan 2024 17:49:35 +0000
ROA not before:           Thu 25 Jan 2024 17:44:35 +0000
ROA not after:            Thu 23 Jan 2025 17:49:35 +0000
asID:                     268674
IP address blocks:        45.165.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b8:42:bd:54:29:f8:e4:67:7e:49:25:0a:fb:9b:85:04:81:a2:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04004212A99696A4F283C73FE7EC609301933701
        Validity
            Not Before: Jan 25 17:44:35 2024 GMT
            Not After : Jan 23 17:49:35 2025 GMT
        Subject: CN=738DDFC97B3777CF24883656E5B6583B4BE25CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1e:14:20:1b:5d:be:fe:f9:e1:be:d6:60:f1:
                    58:d6:a1:30:c2:c2:b0:7f:41:72:53:16:eb:bd:62:
                    c7:04:25:fd:ed:35:90:93:0d:d8:7c:77:03:9f:49:
                    a0:ed:28:0d:31:14:bf:92:e6:8b:b6:7c:b0:12:7f:
                    0d:18:fc:7e:e3:3b:fd:ae:08:d7:bd:4e:79:7c:f4:
                    61:1d:3f:75:ee:93:39:62:77:63:2d:46:da:0b:6e:
                    e6:24:a2:b0:49:df:18:22:ff:de:0d:b8:4a:04:e4:
                    9c:cc:87:68:3e:c0:65:89:67:0c:0e:4f:b1:35:84:
                    1c:35:f7:35:d3:24:c0:74:59:98:9a:d7:d4:c7:de:
                    46:bd:ff:99:1b:30:e1:54:6d:17:4c:15:08:12:a9:
                    42:d1:bc:4b:5e:a3:fc:1b:32:57:4f:b7:25:59:a3:
                    81:44:ca:3f:ba:bc:29:34:fd:0c:9c:16:d6:31:c2:
                    a0:86:c2:d0:83:be:35:60:21:7d:bf:15:5a:2f:28:
                    2a:69:0e:d6:70:0d:98:0f:e0:04:19:d2:19:ab:3b:
                    b6:29:e0:75:57:7c:8a:da:3c:d2:0b:a2:16:bb:c4:
                    0a:95:42:03:8a:22:a9:c2:94:62:47:c1:dc:79:05:
                    0c:f4:83:fd:28:0c:fc:7b:ab:46:e5:4c:37:55:fe:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:8D:DF:C9:7B:37:77:CF:24:88:36:56:E5:B6:58:3B:4B:E2:5C:A8
            X509v3 Authority Key Identifier:
                keyid:04:00:42:12:A9:96:96:A4:F2:83:C7:3F:E7:EC:60:93:01:93:37:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/04004212A99696A4F283C73FE7EC609301933701.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/04004212A99696A4F283C73FE7EC609301933701.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7avLNSuTwzgJ1DvkqCRncY5dS6b3mbn7bypZTH9F95ym/0/34352e3136352e39382e302f32342d3234203d3e20323638363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c2:a7:db:1b:62:3d:f3:04:0e:08:50:84:52:34:f2:6a:86:
         fe:78:e6:20:1d:d7:60:30:02:4c:3e:92:20:2f:0b:34:62:8b:
         50:8f:90:25:ca:f5:41:0d:25:05:aa:fb:e9:16:69:fb:63:04:
         47:5d:03:58:be:47:6d:51:e1:ad:31:51:97:d6:79:9d:93:ca:
         1c:ea:24:db:d0:c2:7d:93:77:37:dc:0a:0e:5b:27:ab:ff:f8:
         ac:87:1b:81:a9:8c:92:b3:86:4c:d8:f9:0e:61:05:7a:4e:a2:
         f0:9b:4d:62:d1:53:77:90:83:28:07:01:09:e4:59:f9:d6:9a:
         f8:78:26:4c:80:49:17:d0:38:4b:3c:a0:3d:9a:4e:91:11:25:
         60:14:20:eb:e2:ab:11:6c:9b:7d:92:5a:b0:38:0b:ab:6f:af:
         79:28:36:c9:e7:5c:e4:4c:3b:2b:38:8f:2b:75:5b:76:19:b9:
         61:d2:d4:af:37:21:45:3f:ad:16:6f:5d:ae:00:f8:33:c1:8a:
         c9:59:6f:2e:23:39:88:2b:b8:f7:9a:42:32:be:ee:91:76:93:
         db:4d:de:69:ff:6d:b7:89:72:7b:a7:5c:43:55:ee:48:f0:91:
         64:66:96:ae:29:8e:0d:1c:10:c7:e1:c7:4a:38:c7:e7:87:a9:
         fc:a2:61:2e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYbhCvVQp+ORnfkklCvubhQSBosYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQwMDQyMTJBOTk2OTZBNEYyODNDNzNGRTdFQzYwOTMw
MTkzMzcwMTAeFw0yNDAxMjUxNzQ0MzVaFw0yNTAxMjMxNzQ5MzVaMDMxMTAvBgNV
BAMTKDczOERERkM5N0IzNzc3Q0YyNDg4MzY1NkU1QjY1ODNCNEJFMjVDQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+HhQgG12+/vnhvtZg8VjWoTDC
wrB/QXJTFuu9YscEJf3tNZCTDdh8dwOfSaDtKA0xFL+S5ou2fLASfw0Y/H7jO/2u
CNe9Tnl89GEdP3Xukzlid2MtRtoLbuYkorBJ3xgi/94NuEoE5JzMh2g+wGWJZwwO
T7E1hBw19zXTJMB0WZia19TH3ka9/5kbMOFUbRdMFQgSqULRvEteo/wbMldPtyVZ
o4FEyj+6vCk0/QycFtYxwqCGwtCDvjVgIX2/FVovKCppDtZwDZgP4AQZ0hmrO7Yp
4HVXfIraPNILoha7xAqVQgOKIqnClGJHwdx5BQz0g/0oDPx7q0blTDdV/nGHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUc43fyXs3d88kiDZW5bZYO0viXKgwHwYDVR0j
BBgwFoAUBABCEqmWlqTyg8c/5+xgkwGTNwEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2F2TE5TdVR3emdKMUR2a3FDUm5jWTVkUzZiM21ibjdieXBaVEg5Rjk1
eW0vMC8wNDAwNDIxMkE5OTY5NkE0RjI4M0M3M0ZFN0VDNjA5MzAxOTMzNzAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA0MDA0MjEyQTk5Njk2QTRG
MjgzQzczRkU3RUM2MDkzMDE5MzM3MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhdkxOU3VUd3pnSjFEdmtxQ1JuY1k1ZFM2YjNtYm43YnlwWlRIOUY5NXltLzAv
MzQzNTJlMzEzNjM1MmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaViMA0GCSqGSIb3DQEBCwUAA4IBAQB6wqfbG2I9
8wQOCFCEUjTyaob+eOYgHddgMAJMPpIgLws0YotQj5AlyvVBDSUFqvvpFmn7YwRH
XQNYvkdtUeGtMVGX1nmdk8oc6iTb0MJ9k3c33AoOWyer//ishxuBqYySs4ZM2PkO
YQV6TqLwm01i0VN3kIMoBwEJ5Fn51pr4eCZMgEkX0DhLPKA9mk6RESVgFCDr4qsR
bJt9klqwOAurb695KDbJ51zkTDsrOI8rdVt2Gblh0tSvNyFFP60Wb12uAPgzwYrJ
WW8uIzmIK7j3mkIyvu6RdpPbTd5p/223iXJ7p1xDVe5I8JFkZpauKY4NHBDH4cdK
OMfnh6n8omEu
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org