Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32322d3232203d3e20323638353132.roa
File:                     34352e3136312e3138342e302f32322d3232203d3e20323638353132.roa (raw, json)
Hash identifier:          JaAipdFGcnBWaT7vCcGJuIhGQ3p6QdywcdG/OtTUguY=
Subject key identifier:   F2:42:FD:3D:2B:4F:32:2B:C5:A1:A7:B5:49:C2:01:94:6D:EF:53:CF
Certificate issuer:       /CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
Certificate serial:       3F22AFC27B42D7EC89515C0C104F715E60B5FD02
Authority key identifier: EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32322d3232203d3e20323638353132.roa
Signing time:             Wed 08 Mar 2023 17:00:00 +0000
ROA not before:           Wed 08 Mar 2023 16:55:00 +0000
ROA not after:            Wed 06 Mar 2024 17:00:00 +0000
asID:                     268512
IP address blocks:        45.161.184.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:af:c2:7b:42:d7:ec:89:51:5c:0c:10:4f:71:5e:60:b5:fd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579
        Validity
            Not Before: Mar  8 16:55:00 2023 GMT
            Not After : Mar  6 17:00:00 2024 GMT
        Subject: CN=F242FD3D2B4F322BC5A1A7B549C201946DEF53CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:67:c7:78:76:78:66:3f:22:d7:c4:ae:8b:8e:
                    5b:da:06:9d:65:0d:f9:38:44:cb:ba:95:c2:2d:8d:
                    86:38:a4:ad:80:18:e5:fd:a6:08:df:c7:e9:b0:02:
                    27:dc:be:36:97:2b:87:87:1c:c8:01:7b:a9:27:ba:
                    b3:2b:f8:18:4f:83:92:44:c9:36:cd:ef:f5:53:bd:
                    f4:45:cf:6e:a9:1f:5b:b2:39:6a:98:bc:69:03:68:
                    04:93:47:22:06:dd:25:2a:00:90:18:c8:f0:e6:74:
                    f6:b2:79:c1:64:1e:ff:d2:6f:54:95:7c:c0:b4:2a:
                    3b:58:13:9f:84:25:01:98:73:c0:15:d3:9c:b8:67:
                    88:73:61:c0:f0:89:c5:8d:45:81:9b:0c:54:da:ef:
                    33:41:78:58:9a:91:d5:27:3c:75:2b:c9:b5:2a:1e:
                    71:81:a2:56:c3:24:8f:5e:84:cc:7e:ef:09:17:c3:
                    c0:c5:d5:b1:7f:01:4e:6b:5b:7f:4b:f1:32:f8:52:
                    99:35:01:84:f5:4c:ef:a4:44:ce:c5:ae:b7:0b:c7:
                    15:59:b1:3f:54:19:5c:a5:e7:fa:a1:47:27:e0:c9:
                    51:d0:4e:4c:f1:68:71:d1:5f:dd:36:a3:87:10:3e:
                    c2:33:51:b1:5a:80:30:88:df:e7:3c:dd:4a:6a:21:
                    5c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:42:FD:3D:2B:4F:32:2B:C5:A1:A7:B5:49:C2:01:94:6D:EF:53:CF
            X509v3 Authority Key Identifier:
                keyid:EF:AC:37:CA:DC:6C:A9:D7:D0:C3:B9:52:D0:E6:F9:C7:0B:98:95:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EFAC37CADC6CA9D7D0C3B952D0E6F9C70B989579.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7zrWtGMmbymoyReRMibNz6TUTwYH8wTn4Dk7SPVXY2Y5/0/34352e3136312e3138342e302f32322d3232203d3e20323638353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:23:a0:3a:73:4b:f3:19:07:f8:53:be:cc:c9:37:48:6b:43:
         c5:4b:99:ad:08:9e:3d:82:46:a4:26:0a:9b:ef:79:2c:48:64:
         58:6e:a7:ea:25:eb:fc:7f:4e:ba:71:23:1d:32:bb:3e:fa:fd:
         6e:70:35:ec:24:ff:d8:a4:c1:2d:63:1d:27:98:ec:64:c6:b0:
         3c:6a:54:e2:31:d9:34:c3:d7:6f:1b:12:bc:ca:11:04:01:ad:
         71:83:71:2e:f3:52:7e:bd:03:12:67:06:3d:ac:81:37:bf:49:
         a9:bc:0c:78:d1:af:14:dd:85:d7:4a:ef:22:26:eb:bc:9c:0e:
         ce:48:db:c1:98:15:ac:56:0c:c3:55:a0:ad:92:0d:49:af:ae:
         6a:4f:65:9e:7e:0e:13:4f:4a:77:d0:d1:e9:45:f0:02:fa:6a:
         a9:b8:e0:4a:04:79:9b:db:ad:6f:8f:b7:e9:64:fc:44:96:db:
         a0:71:c6:83:45:7c:ac:d7:0d:ff:5e:b2:6e:3d:93:3d:56:10:
         a5:c3:11:5a:66:96:5a:5b:d5:34:9d:b5:b0:cd:ae:9b:15:bf:
         18:f4:e2:34:49:5f:82:05:ba:0a:f2:99:e8:86:2d:a4:b8:72:
         eb:ef:1d:23:89:6a:3e:d7:7f:08:b4:31:20:86:8b:66:99:5a:
         4f:cf:14:c2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPyKvwntC1+yJUVwMEE9xXmC1/QIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUZBQzM3Q0FEQzZDQTlEN0QwQzNCOTUyRDBFNkY5Qzcw
Qjk4OTU3OTAeFw0yMzAzMDgxNjU1MDBaFw0yNDAzMDYxNzAwMDBaMDMxMTAvBgNV
BAMTKEYyNDJGRDNEMkI0RjMyMkJDNUExQTdCNTQ5QzIwMTk0NkRFRjUzQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Z8d4dnhmPyLXxK6LjlvaBp1l
Dfk4RMu6lcItjYY4pK2AGOX9pgjfx+mwAifcvjaXK4eHHMgBe6knurMr+BhPg5JE
yTbN7/VTvfRFz26pH1uyOWqYvGkDaASTRyIG3SUqAJAYyPDmdPayecFkHv/Sb1SV
fMC0KjtYE5+EJQGYc8AV05y4Z4hzYcDwicWNRYGbDFTa7zNBeFiakdUnPHUrybUq
HnGBolbDJI9ehMx+7wkXw8DF1bF/AU5rW39L8TL4Upk1AYT1TO+kRM7FrrcLxxVZ
sT9UGVyl5/qhRyfgyVHQTkzxaHHRX902o4cQPsIzUbFagDCI3+c83UpqIVx9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU8kL9PStPMivFoae1ScIBlG3vU88wHwYDVR0j
BBgwFoAU76w3ytxsqdfQw7lS0Ob5xwuYlXkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN3pyV3RHTW1ieW1veVJlUk1pYk56NlRVVHdZSDh3VG40RGs3U1BWWFky
WTUvMC9FRkFDMzdDQURDNkNBOUQ3RDBDM0I5NTJEMEU2RjlDNzBCOTg5NTc5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0VGQUMzN0NBREM2Q0E5RDdE
MEMzQjk1MkQwRTZGOUM3MEI5ODk1NzkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzd6cld0R01tYnltb3lSZVJNaWJOejZUVVR3WUg4d1RuNERrN1NQVlhZMlk1LzAv
MzQzNTJlMzEzNjMxMmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNTMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItobgwDQYJKoZIhvcNAQELBQADggEBABIjoDpz
S/MZB/hTvszJN0hrQ8VLma0Inj2CRqQmCpvveSxIZFhup+ol6/x/TrpxIx0yuz76
/W5wNewk/9ikwS1jHSeY7GTGsDxqVOIx2TTD128bErzKEQQBrXGDcS7zUn69AxJn
Bj2sgTe/Sam8DHjRrxTdhddK7yIm67ycDs5I28GYFaxWDMNVoK2SDUmvrmpPZZ5+
DhNPSnfQ0elF8AL6aqm44EoEeZvbrW+Pt+lk/ESW26BxxoNFfKzXDf9esm49kz1W
EKXDEVpmllpb1TSdtbDNrpsVvxj04jRJX4IFugrymeiGLaS4cuvvHSOJaj7Xfwi0
MSCGi2aZWk/PFMI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org