Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132332e302f32342d3234203d3e20323636303731.roa
File:                     34352e342e3132332e302f32342d3234203d3e20323636303731.roa (raw, json)
Hash identifier:          FdO3dj/nvgYp/OX3xpC5e1Ugt5FqxzzTQ3YVbYayynE=
Subject key identifier:   A1:50:2C:26:F6:4B:8B:33:BF:84:98:2D:67:32:03:60:BC:26:9D:EE
Certificate issuer:       /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial:       31C7A5D5636580FB2C5AF47F91E596A5694C7C28
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132332e302f32342d3234203d3e20323636303731.roa
Signing time:             Thu 11 Jan 2024 12:28:31 +0000
ROA not before:           Thu 11 Jan 2024 12:23:31 +0000
ROA not after:            Thu 09 Jan 2025 12:28:31 +0000
asID:                     266071
IP address blocks:        45.4.123.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c7:a5:d5:63:65:80:fb:2c:5a:f4:7f:91:e5:96:a5:69:4c:7c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
        Validity
            Not Before: Jan 11 12:23:31 2024 GMT
            Not After : Jan  9 12:28:31 2025 GMT
        Subject: CN=A1502C26F64B8B33BF84982D67320360BC269DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:12:be:3a:4e:b6:40:81:b3:4f:e9:00:84:80:
                    05:a3:e4:c9:6f:61:e5:ad:0f:6e:ac:ee:ae:d2:d4:
                    49:62:9f:cd:8a:41:30:58:45:88:ca:bc:0a:6e:0f:
                    38:95:13:1a:9f:19:d5:78:08:95:70:7e:1a:da:cf:
                    ae:1e:7e:3f:74:7e:36:5f:b4:45:ba:80:fa:40:ae:
                    ea:25:70:ef:0a:99:03:19:2f:fd:a0:04:32:1c:cd:
                    06:13:33:17:5b:6b:68:36:2c:1f:cb:d8:ef:66:a3:
                    ac:24:fe:d9:6b:87:ca:09:16:65:14:22:43:31:12:
                    b6:7e:c9:dc:db:24:c7:d6:15:9d:f8:cc:fa:33:8b:
                    91:d5:6d:39:3f:64:64:be:d9:0b:9c:c5:ee:bf:f1:
                    d5:25:ee:4f:5a:0b:82:b7:f3:0f:ec:bc:3f:25:37:
                    ac:9c:46:00:a3:28:34:83:fd:05:db:43:08:66:41:
                    a5:40:3a:04:15:63:d9:7e:40:bf:2d:b3:93:fd:b7:
                    19:b2:42:7d:fc:36:68:18:95:f8:3e:61:97:bb:4c:
                    7b:67:71:b0:5f:75:1e:c6:25:0a:33:00:67:b8:6f:
                    92:e4:8c:d1:09:d5:72:1f:b7:51:41:e9:28:47:f5:
                    89:0c:c4:4b:5f:6d:11:90:7a:95:13:80:80:65:06:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:50:2C:26:F6:4B:8B:33:BF:84:98:2D:67:32:03:60:BC:26:9D:EE
            X509v3 Authority Key Identifier:
                keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132332e302f32342d3234203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:9f:ae:b4:a0:cf:49:c1:b9:30:7e:75:d9:29:0a:79:c7:01:
         01:86:a0:53:f7:49:9b:0e:9f:69:10:d6:e5:2c:4a:6b:5e:83:
         39:c3:72:8c:da:89:0c:05:e0:a2:96:6e:d5:81:b8:bd:d1:ee:
         9e:92:4e:87:f2:1b:40:5d:ac:19:97:25:8d:c3:80:28:55:3a:
         ee:d2:b6:30:26:e7:6f:bb:49:18:57:a0:b3:8d:0c:11:9f:97:
         6d:6c:df:e0:96:9b:3e:ab:29:95:79:47:7c:5c:e3:c4:87:cb:
         9c:9a:a7:68:77:e5:41:68:1a:dc:eb:97:83:e4:aa:46:c6:c6:
         a3:1c:b3:1f:fa:73:91:d7:e5:e6:db:7f:9d:ec:00:0a:22:2d:
         f4:b4:81:9d:70:2e:9e:4a:b7:97:d6:30:98:6b:02:84:28:6f:
         01:14:03:39:57:24:1f:4e:6d:d3:f2:f1:c6:92:02:27:15:93:
         a4:af:bb:26:a5:e0:13:fc:08:49:f4:ae:b9:77:6a:7a:9e:a3:
         66:bc:da:17:a8:db:b1:f0:a2:5b:a4:7a:ae:bc:c9:23:c4:0e:
         53:bf:4b:18:6f:e3:70:18:22:50:56:bc:4f:0e:cb:f7:00:19:
         ff:82:a1:4f:42:32:71:38:a7:44:b1:d0:f8:35:6c:4a:c3:1c:
         d8:3c:30:56
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMcel1WNlgPssWvR/keWWpWlMfCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUMwRDU3QjZBMzI0NTI4M0RDMDgxMTE4RjVGQTc3NzIz
ODEzRUZFRDAeFw0yNDAxMTExMjIzMzFaFw0yNTAxMDkxMjI4MzFaMDMxMTAvBgNV
BAMTKEExNTAyQzI2RjY0QjhCMzNCRjg0OTgyRDY3MzIwMzYwQkMyNjlERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmEr46TrZAgbNP6QCEgAWj5Mlv
YeWtD26s7q7S1Elin82KQTBYRYjKvApuDziVExqfGdV4CJVwfhraz64efj90fjZf
tEW6gPpAruolcO8KmQMZL/2gBDIczQYTMxdba2g2LB/L2O9mo6wk/tlrh8oJFmUU
IkMxErZ+ydzbJMfWFZ34zPozi5HVbTk/ZGS+2Qucxe6/8dUl7k9aC4K38w/svD8l
N6ycRgCjKDSD/QXbQwhmQaVAOgQVY9l+QL8ts5P9txmyQn38NmgYlfg+YZe7THtn
cbBfdR7GJQozAGe4b5LkjNEJ1XIft1FB6ShH9YkMxEtfbRGQepUTgIBlBt9vAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoVAsJvZLizO/hJgtZzIDYLwmne4wHwYDVR0j
BBgwFoAUHA1XtqMkUoPcCBEY9fp3cjgT7+0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2ZFVjNHUngyQU5OY2lWOVJoTXhiUlM5YU5VdXBwTkdmV0htbmoycWhy
dlcvMC8xQzBENTdCNkEzMjQ1MjgzREMwODExMThGNUZBNzc3MjM4MTNFRkVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDMEQ1N0I2QTMyNDUyODNE
QzA4MTExOEY1RkE3NzcyMzgxM0VGRUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdmRVYzR1J4MkFOTmNpVjlSaE14YlJTOWFOVXVwcE5HZldIbW5qMnFocnZXLzAv
MzQzNTJlMzQyZTMxMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0EezANBgkqhkiG9w0BAQsFAAOCAQEAT5+utKDPScG5
MH512SkKeccBAYagU/dJmw6faRDW5SxKa16DOcNyjNqJDAXgopZu1YG4vdHunpJO
h/IbQF2sGZcljcOAKFU67tK2MCbnb7tJGFegs40MEZ+XbWzf4JabPqsplXlHfFzj
xIfLnJqnaHflQWga3OuXg+SqRsbGoxyzH/pzkdfl5tt/newACiIt9LSBnXAunkq3
l9YwmGsChChvARQDOVckH05t0/LxxpICJxWTpK+7JqXgE/wISfSuuXdqep6jZrza
F6jbsfCiW6R6rrzJI8QOU79LGG/jcBgiUFa8Tw7L9wAZ/4KhT0IycTinRLHQ+DVs
SsMc2DwwVg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org