Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134362e302f32342d3234203d3e20323636363035.roa
File:                     34352e372e3134362e302f32342d3234203d3e20323636363035.roa (raw, json)
Hash identifier:          p4oR+v+I8WwhLGGxtwRg8tLtGt+OX3aT6IUbpq0t6YI=
Subject key identifier:   37:E0:1C:2B:EF:99:29:7D:2C:1A:A2:1D:D6:56:4E:41:A6:5C:9D:6D
Certificate issuer:       /CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
Certificate serial:       7B31064B70D47DBF1EEF62176AEEB16823969C09
Authority key identifier: 72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134362e302f32342d3234203d3e20323636363035.roa
Signing time:             Wed 03 May 2023 14:47:56 +0000
ROA not before:           Wed 03 May 2023 14:42:56 +0000
ROA not after:            Wed 01 May 2024 14:47:56 +0000
asID:                     266605
IP address blocks:        45.7.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:31:06:4b:70:d4:7d:bf:1e:ef:62:17:6a:ee:b1:68:23:96:9c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D873FAFB0393C93F1E89BAE1E171F762DA38F1
        Validity
            Not Before: May  3 14:42:56 2023 GMT
            Not After : May  1 14:47:56 2024 GMT
        Subject: CN=37E01C2BEF99297D2C1AA21DD6564E41A65C9D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:d2:ee:21:47:3a:05:6a:64:ec:38:5a:86:
                    42:6e:15:89:65:09:2b:03:93:c2:b3:d8:b3:e7:57:
                    c3:c2:b6:a8:55:82:94:50:9a:ce:a9:5e:9f:40:31:
                    2f:a9:90:71:6f:a0:ba:1b:03:32:0c:5b:d8:32:31:
                    b9:47:d6:cf:94:38:e3:f2:f3:02:ca:dd:5c:77:ac:
                    eb:83:c9:bb:89:2f:e5:45:c6:0d:75:3b:97:e2:13:
                    43:5b:b5:8f:0c:89:1b:e2:48:76:39:b3:56:b7:98:
                    f7:36:59:41:05:ce:21:81:b9:a2:25:2a:22:7c:b8:
                    a3:22:97:07:33:1b:01:2e:fa:4a:3d:5d:45:eb:70:
                    a8:cc:e2:4d:a2:bd:f5:05:b8:30:1c:ab:ab:f7:04:
                    98:db:79:8e:73:d1:f3:bb:cc:28:4a:af:c2:48:0a:
                    eb:5e:83:fc:97:4e:dc:25:be:6d:4b:9b:61:47:e8:
                    ab:4a:ed:64:65:7e:99:ee:85:a7:68:9e:ee:90:0d:
                    0f:e1:7d:dc:c8:a2:61:a2:2d:96:c4:53:da:7b:3c:
                    86:f5:a4:c8:81:5e:40:d4:6f:28:d5:0a:34:a6:02:
                    c9:56:6b:f9:4c:53:5b:ac:b5:cf:e6:5e:44:11:eb:
                    31:b0:e1:2b:1f:31:cb:82:29:6b:46:cc:a3:50:87:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E0:1C:2B:EF:99:29:7D:2C:1A:A2:1D:D6:56:4E:41:A6:5C:9D:6D
            X509v3 Authority Key Identifier:
                keyid:72:D8:73:FA:FB:03:93:C9:3F:1E:89:BA:E1:E1:71:F7:62:DA:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D873FAFB0393C93F1E89BAE1E171F762DA38F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bGHvFUgqKK1e5mqtZJeJ92nWhtomWLnNzxbWeaPqJby/0/34352e372e3134362e302f32342d3234203d3e20323636363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:9e:63:22:a7:a5:b0:25:47:c7:dd:14:a8:65:7c:0d:97:c7:
         40:4d:f8:0c:14:ed:c1:ae:2d:d6:36:ac:22:8e:99:c1:51:46:
         1b:3b:c2:36:eb:ee:e1:0c:97:40:88:3c:67:5d:83:f0:29:ff:
         2f:6c:62:cf:d0:86:bd:04:0b:cf:af:ae:61:6c:c7:59:b2:7d:
         61:d9:52:e5:5c:6e:cc:0e:80:24:01:89:fc:3b:be:13:03:bc:
         70:48:f8:fd:ac:c8:27:70:c3:e9:21:ad:80:17:e2:6e:6b:e1:
         fa:65:64:55:a1:01:d4:98:24:ca:e3:d3:30:8d:70:48:7a:5f:
         06:94:42:45:9c:ec:ab:2c:a8:f8:18:83:6f:21:a2:cb:49:df:
         50:95:9b:94:bd:34:13:f9:ed:cb:11:33:cf:4d:da:41:0c:c9:
         29:b2:f8:60:5c:c5:fb:7a:a6:78:cf:19:18:65:b5:1d:80:a7:
         db:0c:f1:9c:89:6f:27:c1:8c:f4:65:92:7c:cb:22:1a:c8:4e:
         36:5a:8c:00:32:c1:23:b4:e4:92:83:d6:f9:ea:75:3c:cc:84:
         a7:a4:d7:a9:18:4b:4e:93:80:1e:1b:b6:a1:cb:a6:4b:f7:78:
         94:dc:37:58:fb:cd:43:2f:ac:95:8f:53:ec:6a:a8:85:5e:85:
         97:ee:1d:f5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUezEGS3DUfb8e72IXau6xaCOWnAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEODczRkFGQjAzOTNDOTNGMUU4OUJBRTFFMTcxRjc2
MkRBMzhGMTAeFw0yMzA1MDMxNDQyNTZaFw0yNDA1MDExNDQ3NTZaMDMxMTAvBgNV
BAMTKDM3RTAxQzJCRUY5OTI5N0QyQzFBQTIxREQ2NTY0RTQxQTY1QzlENkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ldLuIUc6BWpk7DhahkJuFYll
CSsDk8Kz2LPnV8PCtqhVgpRQms6pXp9AMS+pkHFvoLobAzIMW9gyMblH1s+UOOPy
8wLK3Vx3rOuDybuJL+VFxg11O5fiE0NbtY8MiRviSHY5s1a3mPc2WUEFziGBuaIl
KiJ8uKMilwczGwEu+ko9XUXrcKjM4k2ivfUFuDAcq6v3BJjbeY5z0fO7zChKr8JI
Cuteg/yXTtwlvm1Lm2FH6KtK7WRlfpnuhadonu6QDQ/hfdzIomGiLZbEU9p7PIb1
pMiBXkDUbyjVCjSmAslWa/lMU1ustc/mXkQR6zGw4SsfMcuCKWtGzKNQh+K1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUN+AcK++ZKX0sGqId1lZOQaZcnW0wHwYDVR0j
BBgwFoAUcthz+vsDk8k/Hom64eFx92LaOPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JHSHZGVWdxS0sxZTVtcXRaSmVKOTJuV2h0b21XTG5OenhiV2VhUHFK
YnkvMC83MkQ4NzNGQUZCMDM5M0M5M0YxRTg5QkFFMUUxNzFGNzYyREEzOEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyRDg3M0ZBRkIwMzkzQzkz
RjFFODlCQUUxRTE3MUY3NjJEQTM4RjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiR0h2RlVncUtLMWU1bXF0WkplSjkybldodG9tV0xuTnp4YldlYVBxSmJ5LzAv
MzQzNTJlMzcyZTMxMzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzAzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0HkjANBgkqhkiG9w0BAQsFAAOCAQEAWZ5jIqelsCVH
x90UqGV8DZfHQE34DBTtwa4t1jasIo6ZwVFGGzvCNuvu4QyXQIg8Z12D8Cn/L2xi
z9CGvQQLz6+uYWzHWbJ9YdlS5VxuzA6AJAGJ/Du+EwO8cEj4/azIJ3DD6SGtgBfi
bmvh+mVkVaEB1JgkyuPTMI1wSHpfBpRCRZzsqyyo+BiDbyGiy0nfUJWblL00E/nt
yxEzz03aQQzJKbL4YFzF+3qmeM8ZGGW1HYCn2wzxnIlvJ8GM9GWSfMsiGshONlqM
ADLBI7TkkoPW+ep1PMyEp6TXqRhLTpOAHhu2ocumS/d4lNw3WPvNQy+slY9T7Gqo
hV6Fl+4d9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org