Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/34352e3138322e3230382e302f32322d3232203d3e20323639323338.roa
File:                     34352e3138322e3230382e302f32322d3232203d3e20323639323338.roa (raw, json)
Hash identifier:          oy9XuV/MFhGKb4YcwSE0WSFHugTirYgobAfnSlk1IP4=
Subject key identifier:   63:85:52:88:CA:AD:48:32:E3:A1:30:0A:C1:32:39:08:F5:87:1D:7F
Certificate issuer:       /CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
Certificate serial:       36C8D1AC6BFF38D77B8A9F689CCE52439D541260
Authority key identifier: 5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/34352e3138322e3230382e302f32322d3232203d3e20323639323338.roa
Signing time:             Thu 15 Feb 2024 01:34:49 +0000
ROA not before:           Thu 15 Feb 2024 01:29:49 +0000
ROA not after:            Thu 13 Feb 2025 01:34:49 +0000
asID:                     269238
IP address blocks:        45.182.208.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c8:d1:ac:6b:ff:38:d7:7b:8a:9f:68:9c:ce:52:43:9d:54:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEF1069E775D55236467B1751C7F6CE5EF180F2
        Validity
            Not Before: Feb 15 01:29:49 2024 GMT
            Not After : Feb 13 01:34:49 2025 GMT
        Subject: CN=63855288CAAD4832E3A1300AC1323908F5871D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:24:ee:e6:31:f6:57:5f:ea:4a:6b:1d:e2:4a:
                    40:b2:dd:c1:ff:38:e3:a9:28:f6:99:29:a7:2c:ef:
                    0d:79:f7:91:71:c5:90:07:13:b5:b9:ad:8e:c1:eb:
                    53:99:2b:64:1f:f3:63:97:1c:18:ff:2a:06:58:7d:
                    58:cd:f6:5d:cd:b0:1d:af:b9:ee:55:c5:0e:91:bb:
                    59:e1:e3:c0:4b:2d:eb:71:d0:71:76:8c:be:d4:91:
                    0a:8b:5a:d6:49:e6:dc:3a:07:49:b2:ab:3f:0b:72:
                    c9:b5:28:0e:eb:c8:35:c1:1c:d0:9f:5b:c8:7b:db:
                    63:4e:1c:4b:e9:7b:d3:ae:09:cc:34:1a:a2:b1:3e:
                    34:4e:d1:d7:8b:28:76:dc:06:53:57:69:ec:93:1f:
                    7f:d3:24:8f:81:83:8a:19:f3:5e:77:48:99:c2:02:
                    ec:75:7d:ea:11:ac:50:28:30:04:5b:fe:d8:9e:62:
                    b6:91:04:6c:d2:85:81:36:b7:6e:c9:43:25:80:c0:
                    a3:97:ec:d4:51:d8:08:18:03:2c:15:95:fe:99:7d:
                    d8:56:a5:39:ff:11:84:74:59:9a:ac:02:24:9b:2c:
                    a9:2a:c1:bf:4c:6b:d8:2b:06:91:d3:45:62:aa:01:
                    fa:b5:f1:8f:ae:02:ee:3c:52:17:63:ea:34:e9:51:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:85:52:88:CA:AD:48:32:E3:A1:30:0A:C1:32:39:08:F5:87:1D:7F
            X509v3 Authority Key Identifier:
                keyid:5D:EF:10:69:E7:75:D5:52:36:46:7B:17:51:C7:F6:CE:5E:F1:80:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DEF1069E775D55236467B1751C7F6CE5EF180F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8LzcJJpFJ6qTzUSMihftkk5LdtfH7EuFHUkbpQK4cjxG/0/34352e3138322e3230382e302f32322d3232203d3e20323639323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:56:38:81:e4:d8:06:00:f4:bd:bd:c2:33:1c:d7:a3:19:
         62:75:6e:66:59:da:16:ce:52:bf:5a:a4:b0:8a:be:c3:04:ad:
         14:3c:c6:5e:93:1e:d2:6b:30:97:b4:01:f5:0b:3e:4f:36:ec:
         c7:16:fe:e4:f4:9a:f3:a0:b6:a5:65:3e:f0:da:1b:5c:a3:ef:
         72:18:7e:a4:ab:55:a7:18:63:01:eb:f5:b1:38:73:e4:ef:1a:
         9c:67:57:39:4c:43:f3:9a:d8:6f:0c:c0:f2:89:a1:02:df:14:
         57:d7:5c:f4:26:da:ad:39:1f:96:17:cc:d3:8e:68:0e:da:3d:
         a7:a2:d1:3e:ab:96:1e:56:2f:47:89:20:6a:a5:0c:83:9d:88:
         b4:92:1f:4d:03:a0:a2:6e:13:29:c8:01:d8:07:dc:21:0b:4f:
         b6:3b:b6:0c:7a:83:2b:db:a7:10:b6:b7:88:73:50:1a:80:71:
         ec:4c:03:91:1f:ee:97:8b:57:e4:87:e6:e8:ec:d1:9b:38:c9:
         91:b0:5f:44:0c:2b:81:70:86:d6:d8:74:96:bb:0a:25:f5:16:
         22:42:01:97:3b:17:ac:39:a4:c9:43:11:3c:68:07:a2:51:2e:
         4b:f5:7a:a3:29:ea:03:3f:4e:fd:cd:ad:44:1b:0b:cf:4d:39:
         63:41:f3:f3
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUNsjRrGv/ONd7ip9onM5SQ51UEmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNURFRjEwNjlFNzc1RDU1MjM2NDY3QjE3NTFDN0Y2Q0U1
RUYxODBGMjAeFw0yNDAyMTUwMTI5NDlaFw0yNTAyMTMwMTM0NDlaMDMxMTAvBgNV
BAMTKDYzODU1Mjg4Q0FBRDQ4MzJFM0ExMzAwQUMxMzIzOTA4RjU4NzFEN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JO7mMfZXX+pKax3iSkCy3cH/
OOOpKPaZKacs7w1595FxxZAHE7W5rY7B61OZK2Qf82OXHBj/KgZYfVjN9l3NsB2v
ue5VxQ6Ru1nh48BLLetx0HF2jL7UkQqLWtZJ5tw6B0myqz8Lcsm1KA7ryDXBHNCf
W8h722NOHEvpe9OuCcw0GqKxPjRO0deLKHbcBlNXaeyTH3/TJI+Bg4oZ8153SJnC
Aux1feoRrFAoMARb/tieYraRBGzShYE2t27JQyWAwKOX7NRR2AgYAywVlf6ZfdhW
pTn/EYR0WZqsAiSbLKkqwb9Ma9grBpHTRWKqAfq18Y+uAu48Uhdj6jTpUbBzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUY4VSiMqtSDLjoTAKwTI5CPWHHX8wHwYDVR0j
BBgwFoAUXe8Qaed11VI2RnsXUcf2zl7xgPIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEx6Y0pKcEZKNnFUelVTTWloZnRrazVMZHRmSDdFdUZIVWticFFLNGNq
eEcvMC81REVGMTA2OUU3NzVENTUyMzY0NjdCMTc1MUM3RjZDRTVFRjE4MEYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVERUYxMDY5RTc3NUQ1NTIz
NjQ2N0IxNzUxQzdGNkNFNUVGMTgwRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhMemNKSnBGSjZxVHpVU01paGZ0a2s1TGR0Zkg3RXVGSFVrYnBRSzRjanhHLzAv
MzQzNTJlMzEzODMyMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItttAwDQYJKoZIhvcNAQELBQADggEBACFrVjiB
5NgGAPS9vcIzHNejGWJ1bmZZ2hbOUr9apLCKvsMErRQ8xl6THtJrMJe0AfULPk82
7McW/uT0mvOgtqVlPvDaG1yj73IYfqSrVacYYwHr9bE4c+TvGpxnVzlMQ/Oa2G8M
wPKJoQLfFFfXXPQm2q05H5YXzNOOaA7aPaei0T6rlh5WL0eJIGqlDIOdiLSSH00D
oKJuEynIAdgH3CELT7Y7tgx6gyvbpxC2t4hzUBqAcexMA5Ef7peLV+SH5ujs0Zs4
yZGwX0QMK4FwhtbYdJa7CiX1FiJCAZc7F6w5pMlDETxoB6JRLkv1eqMp6gM/Tv3N
rUQbC89NOWNB8/M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org