Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134352e302f32342d3234203d3e20323638313630.roa
File:                     34352e3137302e3134352e302f32342d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          aQmiOVSZa8Z4OGlyNMlUvNZCjjIf+3E5ofL0P+SreMU=
Subject key identifier:   59:F8:E0:8C:4A:68:53:D4:44:0D:39:83:FD:6D:A8:56:ED:04:D6:CC
Certificate issuer:       /CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
Certificate serial:       1B2F94401CE1C9C06E94BBB69C9794412763ECE4
Authority key identifier: 1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134352e302f32342d3234203d3e20323638313630.roa
Signing time:             Tue 06 Dec 2022 15:22:48 +0000
ROA not before:           Tue 06 Dec 2022 15:17:48 +0000
ROA not after:            Tue 05 Dec 2023 15:22:48 +0000
asID:                     268160
IP address blocks:        45.170.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2f:94:40:1c:e1:c9:c0:6e:94:bb:b6:9c:97:94:41:27:63:ec:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Validity
            Not Before: Dec  6 15:17:48 2022 GMT
            Not After : Dec  5 15:22:48 2023 GMT
        Subject: CN=59F8E08C4A6853D4440D3983FD6DA856ED04D6CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fc:82:e4:c0:0a:c6:cb:dd:8c:67:df:6e:8e:
                    bc:1d:fb:29:2b:f9:63:b2:c5:74:64:48:18:7d:40:
                    7a:ae:6d:44:c2:ff:f5:eb:55:17:94:56:36:8c:a0:
                    99:cc:e0:dd:5a:0a:8b:47:88:8c:c0:8d:ee:51:ae:
                    13:06:3e:f9:8f:ec:a7:8b:0a:35:d5:6e:3f:17:1e:
                    e9:8a:7c:89:ac:3c:20:e2:35:fd:fa:1a:82:c7:d2:
                    09:2a:85:0a:07:09:cc:c2:49:68:89:b8:d6:e7:da:
                    9a:de:84:3a:f8:fe:cc:12:f4:be:f6:3d:7a:8e:8d:
                    e2:71:8a:36:8f:7d:e8:a8:61:28:09:c2:f6:cc:68:
                    7c:2d:61:14:55:53:8e:c1:82:65:89:d2:02:26:e7:
                    99:84:b7:ac:f5:37:f1:57:04:26:1b:49:fc:7c:ea:
                    6a:1d:e7:cd:05:ba:70:3f:e8:44:0d:43:9f:6b:b1:
                    70:5b:93:e9:6b:02:00:b2:7d:75:91:84:35:3c:74:
                    14:e1:d4:2c:c9:c4:cc:2f:13:78:99:ef:9a:0c:e7:
                    f2:a8:80:b3:14:6b:05:25:42:b2:fc:0f:96:c2:59:
                    56:9c:4a:98:7a:c9:c2:8d:5f:9d:f3:97:d6:88:9f:
                    0e:54:0d:e0:28:f7:e0:0a:47:87:45:90:1e:22:95:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:E0:8C:4A:68:53:D4:44:0D:39:83:FD:6D:A8:56:ED:04:D6:CC
            X509v3 Authority Key Identifier:
                keyid:1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134352e302f32342d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:c7:55:9a:e0:16:1f:3d:23:9e:1d:2c:36:41:e4:55:e1:
         3d:2d:08:5d:e8:3d:fb:d9:d1:ba:a7:48:15:cb:8e:e5:c3:78:
         1d:f4:37:7a:af:c0:1c:36:1a:a6:f1:da:0e:51:77:eb:95:df:
         b4:5e:f0:0b:86:48:e2:5f:55:13:10:08:a0:e6:19:44:3a:74:
         fc:26:b7:25:34:3e:ab:4b:8f:e0:ef:2d:d2:f3:75:f2:4b:50:
         5f:ce:fa:5f:c5:ad:03:6e:8e:e3:44:06:e5:0d:cf:57:6a:08:
         94:de:ad:30:f3:23:a0:3c:2f:26:e8:a2:2a:bf:cf:50:e2:8f:
         42:18:e7:d6:46:1a:be:d4:07:7a:15:b9:e0:02:64:51:df:8b:
         10:8a:75:10:4e:75:c8:81:41:05:d1:3d:eb:ff:8a:28:77:13:
         2a:06:8d:55:fd:04:ab:30:0b:0e:4e:d7:f2:07:cb:8c:51:85:
         19:c1:a7:33:3d:87:78:a6:5e:01:68:35:b3:ca:26:a3:3e:59:
         e0:f2:26:c5:e0:76:da:55:1f:8d:65:58:6e:ff:55:38:bb:69:
         3b:be:5e:99:33:4d:a4:34:3b:a1:67:78:fe:82:84:e3:e4:f2:
         a8:68:47:4f:13:38:b9:35:ae:80:17:1e:31:2d:ce:b3:aa:a5:
         9c:56:ea:16
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUGy+UQBzhycBulLu2nJeUQSdj7OQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMxMUU4NzcwRkE2MkNCMjNGN0Q3N0UyQzI2MkQ4MEQ1
NEI2MEJGMDAeFw0yMjEyMDYxNTE3NDhaFw0yMzEyMDUxNTIyNDhaMDMxMTAvBgNV
BAMTKDU5RjhFMDhDNEE2ODUzRDQ0NDBEMzk4M0ZENkRBODU2RUQwNEQ2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX/ILkwArGy92MZ99ujrwd+ykr
+WOyxXRkSBh9QHqubUTC//XrVReUVjaMoJnM4N1aCotHiIzAje5RrhMGPvmP7KeL
CjXVbj8XHumKfImsPCDiNf36GoLH0gkqhQoHCczCSWiJuNbn2prehDr4/swS9L72
PXqOjeJxijaPfeioYSgJwvbMaHwtYRRVU47BgmWJ0gIm55mEt6z1N/FXBCYbSfx8
6mod580FunA/6EQNQ59rsXBbk+lrAgCyfXWRhDU8dBTh1CzJxMwvE3iZ75oM5/Ko
gLMUawUlQrL8D5bCWVacSph6ycKNX53zl9aInw5UDeAo9+AKR4dFkB4ilSBxAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUWfjgjEpoU9REDTmD/W2oVu0E1swwHwYDVR0j
BBgwFoAUHBHodw+mLLI/fXfiwmLYDVS2C/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JXb290YzNxYVYxb0s3SDZyY1E0RFgzMktCVFB3ZnFvTnluUTRVYmdy
VHkvMC8xQzExRTg3NzBGQTYyQ0IyM0Y3RDc3RTJDMjYyRDgwRDU0QjYwQkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDMTFFODc3MEZBNjJDQjIz
RjdENzdFMkMyNjJEODBENTRCNjBCRjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiV29vdGMzcWFWMW9LN0g2cmNRNERYMzJLQlRQd2Zxb055blE0VWJnclR5LzAv
MzQzNTJlMzEzNzMwMmUzMTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqpEwDQYJKoZIhvcNAQELBQADggEBAFbcx1Wa
4BYfPSOeHSw2QeRV4T0tCF3oPfvZ0bqnSBXLjuXDeB30N3qvwBw2Gqbx2g5Rd+uV
37Re8AuGSOJfVRMQCKDmGUQ6dPwmtyU0PqtLj+DvLdLzdfJLUF/O+l/FrQNujuNE
BuUNz1dqCJTerTDzI6A8Lybooiq/z1Dij0IY59ZGGr7UB3oVueACZFHfixCKdRBO
dciBQQXRPev/iih3EyoGjVX9BKswCw5O1/IHy4xRhRnBpzM9h3imXgFoNbPKJqM+
WeDyJsXgdtpVH41lWG7/VTi7aTu+XpkzTaQ0O6FneP6ChOPk8qhoR08TOLk1roAX
HjEtzrOqpZxW6hY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:22 2023 by rpki-client on console-fra.rpki-client.org