Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134362e302f32332d3234203d3e20323638313630.roa
File:                     34352e3137302e3134362e302f32332d3234203d3e20323638313630.roa (raw, json)
Hash identifier:          EvfuERCDohTJ6qiwURaHUbZ/03IXys6Hm951C+DXK/s=
Subject key identifier:   D0:DB:0D:63:9E:B2:2F:BB:CF:96:23:AD:E0:CE:CD:C4:D6:CE:FD:EC
Certificate issuer:       /CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
Certificate serial:       62D964D96EBB4E0F183B5AC602DD1554939BD199
Authority key identifier: B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134362e302f32332d3234203d3e20323638313630.roa
Signing time:             Mon 20 Nov 2023 21:24:45 +0000
ROA not before:           Mon 20 Nov 2023 21:19:45 +0000
ROA not after:            Mon 18 Nov 2024 21:24:45 +0000
asID:                     268160
IP address blocks:        45.170.146.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d9:64:d9:6e:bb:4e:0f:18:3b:5a:c6:02:dd:15:54:93:9b:d1:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
        Validity
            Not Before: Nov 20 21:19:45 2023 GMT
            Not After : Nov 18 21:24:45 2024 GMT
        Subject: CN=D0DB0D639EB22FBBCF9623ADE0CECDC4D6CEFDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:a5:2b:41:8e:3a:09:55:b0:c2:1b:73:7a:
                    6d:f4:93:6c:77:16:be:17:bc:75:12:ac:01:86:0c:
                    d2:b3:df:b9:1a:bb:03:8a:a5:1c:e9:0f:80:57:86:
                    31:71:e4:ec:8d:51:9d:bf:72:a0:b5:83:21:23:12:
                    8e:50:87:af:5f:ef:71:8e:f0:91:82:41:8c:58:cb:
                    b1:f8:3c:4d:ac:94:c0:c6:e1:6e:6b:f2:6a:3d:d1:
                    3d:27:15:f4:5e:5e:61:81:cd:2b:fe:6f:a1:6e:dd:
                    15:b9:f5:d7:01:1b:ac:4d:79:74:e3:33:50:b2:d7:
                    71:dc:6b:d4:15:2d:17:19:db:a6:e0:f8:8d:d9:16:
                    b3:bd:19:a2:6a:66:50:7f:36:0e:1b:47:5d:07:08:
                    29:ea:ef:63:26:46:ea:94:4f:32:2f:08:4f:12:4b:
                    f3:ad:d8:4c:a8:a3:2d:62:9c:b9:c4:0e:0c:36:c3:
                    96:c2:ad:c3:0a:5b:5b:19:a5:72:57:5d:6a:79:59:
                    bd:81:7d:69:d8:72:20:01:ed:93:79:c3:e1:99:c4:
                    78:44:58:3f:c9:cf:9c:9a:21:4a:b4:4e:7d:94:ec:
                    6a:14:01:fc:d6:9b:ff:fb:4b:53:9e:2e:56:23:0e:
                    d8:55:46:c7:6c:b0:39:4d:c7:c7:1b:44:f4:35:5e:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:0D:63:9E:B2:2F:BB:CF:96:23:AD:E0:CE:CD:C4:D6:CE:FD:EC
            X509v3 Authority Key Identifier:
                keyid:B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134362e302f32332d3234203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:11:c3:13:35:22:95:9f:d1:6e:0e:76:f9:8b:b7:df:53:55:
         fb:c0:e4:cd:5d:c2:ca:a2:6c:a1:8f:bf:0f:2f:c3:8d:45:e0:
         d3:17:9a:17:72:e6:5a:2d:c6:a9:31:7e:b9:f2:aa:e1:6c:0b:
         98:34:dc:52:ae:6c:30:01:23:ba:b7:e9:ca:24:c5:55:0e:e7:
         42:f7:52:eb:e2:39:36:ed:b3:f4:06:f6:3a:4f:d1:23:64:c2:
         b5:cc:9f:61:e1:a0:8a:47:b6:a5:53:5a:0b:2f:2b:48:ff:16:
         b7:89:1a:e1:e3:6e:c0:50:c5:51:3e:81:76:a8:e9:a6:07:e6:
         0f:53:6e:7e:e7:57:9c:b8:53:c2:b7:d2:34:87:24:2b:83:6a:
         66:b2:75:9b:8a:b3:89:8e:f0:e2:77:fb:5e:dd:d4:89:44:18:
         e6:f4:67:08:41:a4:4e:8c:fd:9b:24:c8:cb:78:f6:41:24:b9:
         dd:42:12:78:63:4b:49:da:24:a6:87:10:31:6e:71:3e:ac:1b:
         fd:d9:fb:57:e8:6d:de:ee:06:40:03:6e:17:e7:a3:89:02:2c:
         3c:d1:6a:0d:22:59:ed:d5:9f:ac:d2:a4:0d:40:22:19:a1:4d:
         0c:3a:9c:89:82:50:da:df:40:84:8f:fe:0a:16:03:ef:4b:9c:
         9d:7e:ac:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYtlk2W67Tg8YO1rGAt0VVJOb0ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc5NUU2NEJBMUUyRjVCMTU4MEFBMEU3OTg0MjZGRUFG
MjU4RkE4RjAeFw0yMzExMjAyMTE5NDVaFw0yNDExMTgyMTI0NDVaMDMxMTAvBgNV
BAMTKEQwREIwRDYzOUVCMjJGQkJDRjk2MjNBREUwQ0VDREM0RDZDRUZERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfZqUrQY46CVWwwhtzem30k2x3
Fr4XvHUSrAGGDNKz37kauwOKpRzpD4BXhjFx5OyNUZ2/cqC1gyEjEo5Qh69f73GO
8JGCQYxYy7H4PE2slMDG4W5r8mo90T0nFfReXmGBzSv+b6Fu3RW59dcBG6xNeXTj
M1Cy13Hca9QVLRcZ26bg+I3ZFrO9GaJqZlB/Ng4bR10HCCnq72MmRuqUTzIvCE8S
S/Ot2Eyooy1inLnEDgw2w5bCrcMKW1sZpXJXXWp5Wb2BfWnYciAB7ZN5w+GZxHhE
WD/Jz5yaIUq0Tn2U7GoUAfzWm//7S1OeLlYjDthVRsdssDlNx8cbRPQ1XvUNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0NsNY56yL7vPliOt4M7NxNbO/ewwHwYDVR0j
BBgwFoAUt5XmS6Hi9bFYCqDnmEJv6vJY+o8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2JXb290YzNxYVYxb0s3SDZyY1E0RFgzMktCVFB3ZnFvTnluUTRVYmdy
VHkvMC9CNzk1RTY0QkExRTJGNUIxNTgwQUEwRTc5ODQyNkZFQUYyNThGQThGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I3OTVFNjRCQTFFMkY1QjE1
ODBBQTBFNzk4NDI2RkVBRjI1OEZBOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdiV29vdGMzcWFWMW9LN0g2cmNRNERYMzJLQlRQd2Zxb055blE0VWJnclR5LzAv
MzQzNTJlMzEzNzMwMmUzMTM0MzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM2MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqpIwDQYJKoZIhvcNAQELBQADggEBAF0RwxM1
IpWf0W4OdvmLt99TVfvA5M1dwsqibKGPvw8vw41F4NMXmhdy5lotxqkxfrnyquFs
C5g03FKubDABI7q36cokxVUO50L3UuviOTbts/QG9jpP0SNkwrXMn2HhoIpHtqVT
WgsvK0j/FreJGuHjbsBQxVE+gXao6aYH5g9Tbn7nV5y4U8K30jSHJCuDamaydZuK
s4mO8OJ3+17d1IlEGOb0ZwhBpE6M/ZskyMt49kEkud1CEnhjS0naJKaHEDFucT6s
G/3Z+1fobd7uBkADbhfno4kCLDzRag0iWe3Vn6zSpA1AIhmhTQw6nImCUNrfQISP
/goWA+9LnJ1+rNA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org