Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa
File:                     34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa (raw, json)
Hash identifier:          5nwoN7n1x7KMps4e80hvqQuoFyxbxl6J6G7srvplz7U=
Subject key identifier:   FF:65:24:21:AB:76:5E:8E:69:A5:A1:6D:3C:56:3E:72:0D:46:29:B8
Certificate issuer:       /CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
Certificate serial:       1B52D7AED03400043E65EBD4E3879BD30DC40CED
Authority key identifier: 84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa
Signing time:             Wed 22 Nov 2023 17:53:00 +0000
ROA not before:           Wed 22 Nov 2023 17:48:00 +0000
ROA not after:            Wed 20 Nov 2024 17:53:00 +0000
asID:                     268011
IP address blocks:        45.167.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:52:d7:ae:d0:34:00:04:3e:65:eb:d4:e3:87:9b:d3:0d:c4:0c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Validity
            Not Before: Nov 22 17:48:00 2023 GMT
            Not After : Nov 20 17:53:00 2024 GMT
        Subject: CN=FF652421AB765E8E69A5A16D3C563E720D4629B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:f8:59:67:4e:b4:fb:74:e0:70:5f:d0:0b:
                    04:8d:00:8b:5f:ca:f0:23:28:80:ad:2e:8b:d1:f4:
                    5c:d9:82:30:28:79:86:fb:be:34:6c:e2:b1:52:ac:
                    9e:6c:f7:95:ee:8f:66:8d:a6:24:78:06:a7:77:d6:
                    04:c9:31:99:8f:d9:98:6d:96:34:69:e2:51:b8:02:
                    c5:b8:ea:9c:fd:d7:9a:3a:fd:59:98:de:4f:0a:bc:
                    04:0c:8d:d1:15:53:f0:4c:5a:7c:e4:65:a0:60:76:
                    78:d1:ea:0f:1d:35:3c:2a:36:da:61:65:11:31:c8:
                    df:3b:da:8f:54:c1:ad:7a:0e:58:db:a0:b3:07:17:
                    b4:bd:dd:fb:24:15:7f:9a:eb:ff:54:0d:f4:ef:b6:
                    9e:16:a0:af:85:ff:96:5d:10:a2:1f:d7:2c:aa:e9:
                    b2:5e:51:59:74:9c:f0:02:5b:c4:1d:71:7e:b5:40:
                    45:72:57:0d:d4:7e:5e:e7:50:94:5f:c9:87:1a:44:
                    3c:ae:b3:2e:c6:90:a0:c3:a5:53:cb:11:f9:3f:63:
                    55:a1:32:2f:ab:c6:99:44:6f:67:76:07:86:41:40:
                    0a:a3:8b:99:87:e6:d6:4a:9e:d5:69:39:2e:3b:da:
                    2c:d3:40:3b:57:14:1f:91:15:ca:c3:50:8b:84:91:
                    1d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:65:24:21:AB:76:5E:8E:69:A5:A1:6D:3C:56:3E:72:0D:46:29:B8
            X509v3 Authority Key Identifier:
                keyid:84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/34352e3136372e3134312e302f32342d3234203d3e20323638303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:20:62:34:26:5a:8a:c5:28:cd:da:25:7b:09:8a:c8:19:
         7d:25:5b:87:fd:a4:fb:c8:e4:1a:62:d9:f7:d9:03:c9:21:ee:
         ce:22:ba:c5:9b:2f:6e:82:e2:7d:82:33:1d:03:4c:17:93:78:
         24:ca:c8:82:e0:2f:5a:c9:9b:ec:ae:30:0c:99:14:ca:b9:95:
         26:12:0e:1a:0f:09:49:7f:d7:4f:c6:1a:ec:87:8f:42:23:e2:
         8a:66:00:6b:d0:4f:cf:25:59:eb:13:c2:5d:80:75:ff:51:2a:
         04:32:aa:9a:11:c6:c6:7e:d4:36:13:55:3c:c8:b1:2a:86:36:
         a5:65:1a:7d:81:2f:a8:c7:84:4d:a8:06:db:e0:b4:c1:01:f5:
         9e:bd:8a:2a:ec:2f:21:a7:31:a3:e0:ab:d6:a8:12:7b:df:a0:
         24:6c:1c:4f:ff:2e:78:02:15:85:de:64:5d:7d:d1:5e:24:eb:
         e4:a3:07:f3:44:8d:b8:29:31:72:89:09:34:77:d3:46:b7:d5:
         18:1e:a8:0d:5f:4c:c9:58:17:e0:33:64:eb:7c:09:73:ec:a9:
         08:30:3c:f9:be:a5:c9:fb:c2:18:5d:21:b0:0f:b1:46:88:d8:
         a3:6e:23:b5:0f:a8:8b:c8:a9:67:f1:73:10:45:7d:49:09:0f:
         29:cb:72:51
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUG1LXrtA0AAQ+ZevU44eb0w3EDO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQxNDQ1NUU1OTk1RUU3QzY3NEEzMUE2RTUxNDQyRTI5
Q0I2MEZCNTAeFw0yMzExMjIxNzQ4MDBaFw0yNDExMjAxNzUzMDBaMDMxMTAvBgNV
BAMTKEZGNjUyNDIxQUI3NjVFOEU2OUE1QTE2RDNDNTYzRTcyMEQ0NjI5QjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEBPhZZ060+3TgcF/QCwSNAItf
yvAjKICtLovR9FzZgjAoeYb7vjRs4rFSrJ5s95Xuj2aNpiR4Bqd31gTJMZmP2Zht
ljRp4lG4AsW46pz915o6/VmY3k8KvAQMjdEVU/BMWnzkZaBgdnjR6g8dNTwqNtph
ZRExyN872o9Uwa16DljboLMHF7S93fskFX+a6/9UDfTvtp4WoK+F/5ZdEKIf1yyq
6bJeUVl0nPACW8QdcX61QEVyVw3Ufl7nUJRfyYcaRDyusy7GkKDDpVPLEfk/Y1Wh
Mi+rxplEb2d2B4ZBQAqji5mH5tZKntVpOS472izTQDtXFB+RFcrDUIuEkR0/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU/2UkIat2Xo5ppaFtPFY+cg1GKbgwHwYDVR0j
BBgwFoAUhBRFXlmV7nxnSjGm5RRC4py2D7UwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby84QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0
LzAvODQxNDQ1NUU1OTk1RUU3QzY3NEEzMUE2RTUxNDQyRTI5Q0I2MEZCNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84NDE0NDU1RTU5OTVFRTdDNjc0
QTMxQTZFNTE0NDJFMjlDQjYwRkI1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84
QTRSanlFaVlrSFhnWkpwWUtWQnlTRTlocnB6cmdlc3JnWTlZVW1WNnp0LzAvMzQz
NTJlMzEzNjM3MmUzMTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MDMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtp40wDQYJKoZIhvcNAQELBQADggEBAFa2IGI0JlqK
xSjN2iV7CYrIGX0lW4f9pPvI5Bpi2ffZA8kh7s4iusWbL26C4n2CMx0DTBeTeCTK
yILgL1rJm+yuMAyZFMq5lSYSDhoPCUl/10/GGuyHj0Ij4opmAGvQT88lWesTwl2A
df9RKgQyqpoRxsZ+1DYTVTzIsSqGNqVlGn2BL6jHhE2oBtvgtMEB9Z69iirsLyGn
MaPgq9aoEnvfoCRsHE//LngCFYXeZF190V4k6+SjB/NEjbgpMXKJCTR300a31Rge
qA1fTMlYF+AzZOt8CXPsqQgwPPm+pcn7whhdIbAPsUaI2KNuI7UPqIvIqWfxcxBF
fUkJDynLclE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org