Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa
File:                     34352e3232392e36382e302f32322d3232203d3e20323637323232.roa (raw, json)
Hash identifier:          vFmF0r5SPR+VylyLvlSGXDgb26P0JgpHMBZwiRDHE7U=
Subject key identifier:   09:47:78:F5:A1:F0:EE:C9:07:9B:76:85:B0:DF:0E:45:9C:09:A8:23
Certificate issuer:       /CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
Certificate serial:       6BAFED0D384E97440B87539950FEFBECA00C1CD0
Authority key identifier: 57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa
Signing time:             Fri 25 Aug 2023 14:53:46 +0000
ROA not before:           Fri 25 Aug 2023 14:48:46 +0000
ROA not after:            Fri 23 Aug 2024 14:53:46 +0000
asID:                     267222
IP address blocks:        45.229.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:af:ed:0d:38:4e:97:44:0b:87:53:99:50:fe:fb:ec:a0:0c:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57E1EF4BF33A4B6BADF62628F3160D0264F408B9
        Validity
            Not Before: Aug 25 14:48:46 2023 GMT
            Not After : Aug 23 14:53:46 2024 GMT
        Subject: CN=094778F5A1F0EEC9079B7685B0DF0E459C09A823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:b9:7e:9a:1a:95:d1:87:12:3f:4d:6b:be:
                    0c:92:73:5e:20:05:1e:56:a7:06:72:51:0b:86:11:
                    97:77:3b:a4:d9:96:1d:5e:6f:d6:8d:7b:e7:46:29:
                    2a:c6:56:a3:c0:11:9d:e5:44:a0:57:55:f1:84:ed:
                    07:d9:d7:3e:9a:ba:7b:61:20:41:1b:af:cc:59:6b:
                    a2:da:90:94:82:9d:96:4d:76:70:06:68:4d:8a:34:
                    af:d0:f4:22:6f:eb:13:46:c8:2f:81:ea:7f:96:27:
                    4a:8d:1d:80:06:2e:42:5f:28:8d:e5:f6:79:80:b9:
                    07:b7:58:36:54:12:e2:29:74:89:62:7a:8e:bd:87:
                    69:b7:c7:1a:ed:50:6e:82:49:7d:fd:18:ba:6a:bd:
                    d6:4c:97:f0:51:4b:46:0b:f2:51:37:53:d2:85:4a:
                    23:e6:20:d5:ad:75:ef:78:55:a9:8b:38:43:b5:1a:
                    84:4f:bb:8d:f8:34:f6:b0:f3:55:f9:f1:5d:fe:bb:
                    82:15:c1:b4:77:0d:4a:e3:37:23:73:8f:5d:16:43:
                    5b:1c:02:2f:1f:0b:a6:5d:f2:af:3a:91:af:29:de:
                    b3:53:29:f5:db:3a:60:35:76:3a:8e:10:6c:97:8e:
                    f3:7e:04:60:29:91:d6:f8:a3:74:45:50:c4:34:b8:
                    78:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:78:F5:A1:F0:EE:C9:07:9B:76:85:B0:DF:0E:45:9C:09:A8:23
            X509v3 Authority Key Identifier:
                keyid:57:E1:EF:4B:F3:3A:4B:6B:AD:F6:26:28:F3:16:0D:02:64:F4:08:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57E1EF4BF33A4B6BADF62628F3160D0264F408B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/0/34352e3232392e36382e302f32322d3232203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:cf:2a:de:04:4b:9f:ae:7a:33:0f:8c:79:c9:64:15:66:ea:
         0c:c6:a8:3d:81:47:2a:99:92:38:e2:2e:7d:b0:c1:79:2f:bb:
         72:09:36:4d:f0:dc:1d:95:1e:ae:85:fa:d3:fb:ef:69:1b:2b:
         1b:c9:4c:78:fa:bd:e5:4b:eb:59:13:75:d5:4f:0c:34:db:80:
         af:19:ed:9c:75:1e:f4:a5:c2:3f:8e:34:c1:6e:e3:cc:98:f2:
         4a:85:c4:78:8a:46:85:a1:bd:cd:b0:1d:49:4b:48:df:05:ed:
         b7:02:68:bb:1d:27:2f:d2:94:a1:c3:d7:fd:28:a3:6b:bf:08:
         4e:40:d0:54:74:25:b3:39:8c:db:1a:30:7d:62:21:56:67:2d:
         08:db:1a:2c:46:3e:52:5a:43:db:4e:a8:13:96:27:17:97:f9:
         28:8b:eb:94:5a:ae:97:3f:c2:c1:3c:63:c5:a7:e5:54:c3:2b:
         0d:c9:47:4e:4c:ba:5b:82:c7:b0:9b:9d:96:c6:c2:92:2d:cf:
         69:a8:89:d3:66:48:9f:9e:7e:d4:65:b4:ed:dd:19:d3:09:5b:
         c0:b1:0d:15:3c:4b:a6:be:b6:65:f4:8c:cd:f1:01:aa:86:2c:
         f5:79:91:1a:11:c9:bc:3f:49:6e:d1:02:30:e7:29:0a:48:d9:
         79:3a:00:99
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa6/tDThOl0QLh1OZUP777KAMHNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdFMUVGNEJGMzNBNEI2QkFERjYyNjI4RjMxNjBEMDI2
NEY0MDhCOTAeFw0yMzA4MjUxNDQ4NDZaFw0yNDA4MjMxNDUzNDZaMDMxMTAvBgNV
BAMTKDA5NDc3OEY1QTFGMEVFQzkwNzlCNzY4NUIwREYwRTQ1OUMwOUE4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7zLl+mhqV0YcSP01rvgySc14g
BR5WpwZyUQuGEZd3O6TZlh1eb9aNe+dGKSrGVqPAEZ3lRKBXVfGE7QfZ1z6aunth
IEEbr8xZa6LakJSCnZZNdnAGaE2KNK/Q9CJv6xNGyC+B6n+WJ0qNHYAGLkJfKI3l
9nmAuQe3WDZUEuIpdIlieo69h2m3xxrtUG6CSX39GLpqvdZMl/BRS0YL8lE3U9KF
SiPmINWtde94VamLOEO1GoRPu434NPaw81X58V3+u4IVwbR3DUrjNyNzj10WQ1sc
Ai8fC6Zd8q86ka8p3rNTKfXbOmA1djqOEGyXjvN+BGApkdb4o3RFUMQ0uHinAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCUd49aHw7skHm3aFsN8ORZwJqCMwHwYDVR0j
BBgwFoAUV+HvS/M6S2ut9iYo8xYNAmT0CLkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2UzcVRQWnBEY2Jtb1p2aG14ZkJ3WTNzZFJ2dHY2VnNLVHk0NHl5UU1o
a2UvMC81N0UxRUY0QkYzM0E0QjZCQURGNjI2MjhGMzE2MEQwMjY0RjQwOEI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU3RTFFRjRCRjMzQTRCNkJB
REY2MjYyOEYzMTYwRDAyNjRGNDA4QjkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlM3FUUFpwRGNibW9admhteGZCd1kzc2RSdnR2NlZzS1R5NDR5eVFNaGtlLzAv
MzQzNTJlMzIzMjM5MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM3
MzIzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeVEMA0GCSqGSIb3DQEBCwUAA4IBAQBfzyreBEuf
rnozD4x5yWQVZuoMxqg9gUcqmZI44i59sMF5L7tyCTZN8NwdlR6uhfrT++9pGysb
yUx4+r3lS+tZE3XVTww024CvGe2cdR70pcI/jjTBbuPMmPJKhcR4ikaFob3NsB1J
S0jfBe23Ami7HScv0pShw9f9KKNrvwhOQNBUdCWzOYzbGjB9YiFWZy0I2xosRj5S
WkPbTqgTlicXl/koi+uUWq6XP8LBPGPFp+VUwysNyUdOTLpbgsewm52WxsKSLc9p
qInTZkifnn7UZbTt3RnTCVvAsQ0VPEumvrZl9IzN8QGqhiz1eZEaEcm8P0lu0QIw
5ykKSNl5OgCZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org