Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa
File:                     34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa (raw, json)
Hash identifier:          TwfWDKak4O1jQIFXVe9SuZ9JbQIF5d0zKHEF9FVqqHg=
Subject key identifier:   9D:88:F3:41:56:C1:CC:36:55:DA:F2:35:6A:51:F3:2F:BD:CC:DE:ED
Certificate issuer:       /CN=8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0
Certificate serial:       30ADE1CD51474EE3A549C4E8BD07815C822D125D
Authority key identifier: 8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa
Signing time:             Wed 03 Apr 2024 19:13:33 +0000
ROA not before:           Wed 03 Apr 2024 19:08:33 +0000
ROA not after:            Wed 02 Apr 2025 19:13:33 +0000
asID:                     268797
IP address blocks:        45.172.244.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ad:e1:cd:51:47:4e:e3:a5:49:c4:e8:bd:07:81:5c:82:2d:12:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0
        Validity
            Not Before: Apr  3 19:08:33 2024 GMT
            Not After : Apr  2 19:13:33 2025 GMT
        Subject: CN=9D88F34156C1CC3655DAF2356A51F32FBDCCDEED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:65:76:3b:70:4c:d7:c5:eb:4b:a3:1a:a3:33:
                    bf:60:c3:e7:64:3d:2b:f2:f0:cd:bc:a9:2b:91:ae:
                    f8:a3:fb:10:f7:d7:fd:5d:85:7d:f2:c1:4e:1f:b0:
                    9b:43:76:2b:22:d4:a2:cc:24:0f:00:a2:fe:32:88:
                    50:e5:d2:e5:32:fb:06:a6:b8:64:6b:66:18:5e:e8:
                    08:aa:c0:f7:f3:f8:cd:1b:4d:70:53:03:fe:06:66:
                    4c:03:6a:8b:80:45:eb:06:e0:0d:d4:8f:04:75:ee:
                    6b:65:74:33:7d:da:31:44:24:f8:6f:42:87:54:20:
                    96:63:88:18:0c:d2:b2:05:00:a3:1f:6f:f4:5f:f9:
                    e1:91:51:c5:54:e6:73:f6:0d:b1:05:d2:b8:6f:9d:
                    d9:ac:97:59:eb:90:7f:6e:36:49:48:51:82:f9:85:
                    4c:30:d2:ef:f8:fe:2b:4b:c2:1c:d0:61:48:aa:15:
                    3a:6a:03:97:37:d2:0a:50:b5:d1:fb:d1:89:47:f3:
                    19:ca:fa:6b:53:c1:38:21:7e:8d:fb:66:23:5b:af:
                    ed:b2:a0:7d:b6:72:8f:f2:14:5b:17:7c:41:66:bc:
                    b1:30:ba:8f:92:71:44:07:78:02:75:38:c2:1b:9f:
                    d0:92:e4:5f:9b:88:fc:85:09:72:1c:d9:71:c1:5f:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:88:F3:41:56:C1:CC:36:55:DA:F2:35:6A:51:F3:2F:BD:CC:DE:ED
            X509v3 Authority Key Identifier:
                keyid:8D:DD:5B:4E:CD:EA:93:0D:3E:92:37:49:0D:72:A4:1D:F4:D9:53:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DDD5B4ECDEA930D3E9237490D72A41DF4D953C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84Yx3GrAh7X5b7pXZJRPPm8LeTChq7rWH8zfgaz71Mfe/1/34352e3137322e3234342e302f32322d3234203d3e20323638373937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:15:8e:d3:cd:cb:5d:02:e0:49:92:c5:ff:fd:fa:6a:b7:3a:
         31:d6:9a:be:d1:54:1b:9c:48:d7:df:b7:ef:6d:c5:ba:54:3c:
         63:ea:60:e4:4f:30:95:60:4a:ca:e9:40:a7:31:71:3f:ee:f6:
         b8:29:96:a3:a9:60:26:59:9e:8e:be:03:4d:c1:a7:d8:74:a6:
         3b:72:44:fc:0a:32:0a:58:98:b3:f3:5b:72:bb:a2:a1:39:e4:
         73:c5:7a:e2:f7:76:e9:f3:c6:59:d9:88:2a:cb:73:56:61:f0:
         ae:b1:b1:2d:07:fa:47:23:aa:59:22:eb:a4:bf:2c:ba:09:f5:
         d0:c2:c8:f7:ac:c6:43:1c:df:1a:42:d1:7e:cc:86:8d:35:01:
         4a:56:ab:bc:c9:5a:a6:33:60:ed:fe:9a:8c:0e:76:27:6f:dd:
         a4:f3:9b:1a:d7:55:c6:71:4c:c7:63:2e:76:89:1e:37:96:ed:
         08:43:74:d0:24:ed:c8:eb:85:f6:32:ea:e4:32:90:e9:c0:bb:
         a0:84:b9:b9:1f:f4:c0:75:2a:3e:f2:f8:e9:c3:e8:5e:02:57:
         76:e5:8a:c0:2c:26:c6:38:cd:f1:3c:5d:a8:c9:59:58:fe:e8:
         a8:e9:d0:60:a4:bb:a3:1f:c8:26:7f:60:f4:04:69:87:8f:cf:
         80:b2:fc:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMK3hzVFHTuOlScTovQeBXIItEl0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOERERDVCNEVDREVBOTMwRDNFOTIzNzQ5MEQ3MkE0MURG
NEQ5NTNDMDAeFw0yNDA0MDMxOTA4MzNaFw0yNTA0MDIxOTEzMzNaMDMxMTAvBgNV
BAMTKDlEODhGMzQxNTZDMUNDMzY1NURBRjIzNTZBNTFGMzJGQkRDQ0RFRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwZXY7cEzXxetLoxqjM79gw+dk
PSvy8M28qSuRrvij+xD31/1dhX3ywU4fsJtDdisi1KLMJA8Aov4yiFDl0uUy+wam
uGRrZhhe6AiqwPfz+M0bTXBTA/4GZkwDaouAResG4A3UjwR17mtldDN92jFEJPhv
QodUIJZjiBgM0rIFAKMfb/Rf+eGRUcVU5nP2DbEF0rhvndmsl1nrkH9uNklIUYL5
hUww0u/4/itLwhzQYUiqFTpqA5c30gpQtdH70YlH8xnK+mtTwTghfo37ZiNbr+2y
oH22co/yFFsXfEFmvLEwuo+ScUQHeAJ1OMIbn9CS5F+biPyFCXIc2XHBXxW3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUnYjzQVbBzDZV2vI1alHzL73M3u0wHwYDVR0j
BBgwFoAUjd1bTs3qkw0+kjdJDXKkHfTZU8AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRZeDNHckFoN1g1YjdwWFpKUlBQbThMZVRDaHE3cldIOHpmZ2F6NzFN
ZmUvMS84RERENUI0RUNERUE5MzBEM0U5MjM3NDkwRDcyQTQxREY0RDk1M0MwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhEREQ1QjRFQ0RFQTkzMEQz
RTkyMzc0OTBENzJBNDFERjREOTUzQzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0WXgzR3JBaDdYNWI3cFhaSlJQUG04TGVUQ2hxN3JXSDh6ZmdhejcxTWZlLzEv
MzQzNTJlMzEzNzMyMmUzMjM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrPQwDQYJKoZIhvcNAQELBQADggEBAK0VjtPN
y10C4EmSxf/9+mq3OjHWmr7RVBucSNfft+9txbpUPGPqYORPMJVgSsrpQKcxcT/u
9rgplqOpYCZZno6+A03Bp9h0pjtyRPwKMgpYmLPzW3K7oqE55HPFeuL3dunzxlnZ
iCrLc1Zh8K6xsS0H+kcjqlki66S/LLoJ9dDCyPesxkMc3xpC0X7Mho01AUpWq7zJ
WqYzYO3+mowOdidv3aTzmxrXVcZxTMdjLnaJHjeW7QhDdNAk7cjrhfYy6uQykOnA
u6CEubkf9MB1Kj7y+OnD6F4CV3blisAsJsY4zfE8XajJWVj+6Kjp0GCku6MfyCZ/
YPQEaYePz4Cy/F8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org