Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa
File:                     34352e3232362e34372e302f32342d3234203d3e20323636393538.roa (raw, json)
Hash identifier:          PXNWctN19KZ+o44ldpWHixGzRqwiJ7RlQJUgO4VApm0=
Subject key identifier:   C6:74:A8:86:9E:C1:F5:A0:7D:5D:8E:C8:84:A8:4B:48:E6:B0:F0:89
Certificate issuer:       /CN=885C33EE8E30210425E8E25473319F24E3B686FB
Certificate serial:       4939CB9DCB210F2748CC6AD4F12E2BF5010233EE
Authority key identifier: 88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa
Signing time:             Thu 09 Nov 2023 21:00:00 +0000
ROA not before:           Thu 09 Nov 2023 20:55:00 +0000
ROA not after:            Thu 07 Nov 2024 21:00:00 +0000
asID:                     266958
IP address blocks:        45.226.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:39:cb:9d:cb:21:0f:27:48:cc:6a:d4:f1:2e:2b:f5:01:02:33:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885C33EE8E30210425E8E25473319F24E3B686FB
        Validity
            Not Before: Nov  9 20:55:00 2023 GMT
            Not After : Nov  7 21:00:00 2024 GMT
        Subject: CN=3082010A02820101009611257A37D8E392726BB9AE5FFADBF7F1E9269B862848AAC25833A78E2C52FC1F4658963C4B7BE607E5AC7251CD83F34896AC3A6D03881C3B0BF39D3B06AD8C1332C46E8B891DA81A6F64EEBB525A282C5B173C3DB710CE8962277FF0593EFE003392E982BCD1CCC6B5057B41E5A55EB136F3BA5FF086C8F5CADF3B3CCD6940FD9F0069E10E8CF01567640B7D3FA5A57B4729BC0A9AABE84CFFEBEF9575DF575BCD99BDADD95C48109A1CFFDE269B68A3E5924E1AC3643720D6FB317FF9DDAC97CA2C636413F0607E1C4418BC57F91C85D97440CB43BCFCDA02D80754E8BC6196F83F46E6010E4369367333348AC44002ECE88310FF99FE69ABD5EA06E18DC10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:25:7a:37:d8:e3:92:72:6b:b9:ae:5f:fa:
                    db:f7:f1:e9:26:9b:86:28:48:aa:c2:58:33:a7:8e:
                    2c:52:fc:1f:46:58:96:3c:4b:7b:e6:07:e5:ac:72:
                    51:cd:83:f3:48:96:ac:3a:6d:03:88:1c:3b:0b:f3:
                    9d:3b:06:ad:8c:13:32:c4:6e:8b:89:1d:a8:1a:6f:
                    64:ee:bb:52:5a:28:2c:5b:17:3c:3d:b7:10:ce:89:
                    62:27:7f:f0:59:3e:fe:00:33:92:e9:82:bc:d1:cc:
                    c6:b5:05:7b:41:e5:a5:5e:b1:36:f3:ba:5f:f0:86:
                    c8:f5:ca:df:3b:3c:cd:69:40:fd:9f:00:69:e1:0e:
                    8c:f0:15:67:64:0b:7d:3f:a5:a5:7b:47:29:bc:0a:
                    9a:ab:e8:4c:ff:eb:ef:95:75:df:57:5b:cd:99:bd:
                    ad:d9:5c:48:10:9a:1c:ff:de:26:9b:68:a3:e5:92:
                    4e:1a:c3:64:37:20:d6:fb:31:7f:f9:dd:ac:97:ca:
                    2c:63:64:13:f0:60:7e:1c:44:18:bc:57:f9:1c:85:
                    d9:74:40:cb:43:bc:fc:da:02:d8:07:54:e8:bc:61:
                    96:f8:3f:46:e6:01:0e:43:69:36:73:33:34:8a:c4:
                    40:02:ec:e8:83:10:ff:99:fe:69:ab:d5:ea:06:e1:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:74:A8:86:9E:C1:F5:A0:7D:5D:8E:C8:84:A8:4B:48:E6:B0:F0:89
            X509v3 Authority Key Identifier:
                keyid:88:5C:33:EE:8E:30:21:04:25:E8:E2:54:73:31:9F:24:E3:B6:86:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/885C33EE8E30210425E8E25473319F24E3B686FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/885C33EE8E30210425E8E25473319F24E3B686FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TcUKs4CzDqm47HasUXoqGyJqj22iwB5SKF5hwXxpuub/0/34352e3232362e34372e302f32342d3234203d3e20323636393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:33:15:69:7d:cf:f1:9d:ac:1a:06:82:dc:43:3f:ec:6d:8a:
         79:0f:c9:16:09:4e:80:59:4c:5c:71:5f:ea:ea:a6:59:83:75:
         52:aa:a4:35:db:5f:3f:e7:87:b5:ad:d0:94:32:32:7f:bc:87:
         66:e7:38:d8:8e:68:e8:bc:12:9a:d5:90:d4:4f:ec:23:da:99:
         20:a8:e4:f6:06:bd:f6:b4:4b:75:e3:5c:eb:88:aa:c9:65:41:
         9e:4f:1b:34:c1:eb:e1:a5:db:16:73:93:9f:96:03:bd:27:09:
         dc:5a:f8:f1:0a:54:a9:1d:16:6b:e4:6e:2f:51:49:b8:8d:67:
         d7:c6:43:30:d2:c9:c9:52:db:9b:fc:02:4f:0d:9f:ae:69:ea:
         e4:a9:d3:62:a6:35:98:a3:8e:13:8e:04:a2:d4:db:dd:51:6e:
         c9:3d:48:da:a9:c3:7b:98:a5:b6:49:68:f0:c0:e5:7c:f7:00:
         37:2c:67:e8:8d:c3:df:79:1b:c6:ad:af:93:fc:0c:b7:e5:b6:
         1f:e5:dd:a7:f9:eb:21:10:37:9c:e0:98:8c:da:d7:5f:a0:30:
         bc:8b:3d:d1:d9:ea:87:3f:21:cf:19:65:ae:22:46:67:89:55:
         c2:fb:af:64:a0:bb:65:96:d1:94:58:a4:7d:2a:bb:1a:af:cb:
         3f:5d:10:63
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUSTnLncshDydIzGrU8S4r9QECM+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg1QzMzRUU4RTMwMjEwNDI1RThFMjU0NzMzMTlGMjRF
M0I2ODZGQjAeFw0yMzExMDkyMDU1MDBaFw0yNDExMDcyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTYxMTI1N0EzN0Q4RTM5Mjcy
NkJCOUFFNUZGQURCRjdGMUU5MjY5Qjg2Mjg0OEFBQzI1ODMzQTc4RTJDNTJGQzFG
NDY1ODk2M0M0QjdCRTYwN0U1QUM3MjUxQ0Q4M0YzNDg5NkFDM0E2RDAzODgxQzNC
MEJGMzlEM0IwNkFEOEMxMzMyQzQ2RThCODkxREE4MUE2RjY0RUVCQjUyNUEyODJD
NUIxNzNDM0RCNzEwQ0U4OTYyMjc3RkYwNTkzRUZFMDAzMzkyRTk4MkJDRDFDQ0M2
QjUwNTdCNDFFNUE1NUVCMTM2RjNCQTVGRjA4NkM4RjVDQURGM0IzQ0NENjk0MEZE
OUYwMDY5RTEwRThDRjAxNTY3NjQwQjdEM0ZBNUE1N0I0NzI5QkMwQTlBQUJFODRD
RkZFQkVGOTU3NURGNTc1QkNEOTlCREFERDk1QzQ4MTA5QTFDRkZERTI2OUI2OEEz
RTU5MjRFMUFDMzY0MzcyMEQ2RkIzMTdGRjlEREFDOTdDQTJDNjM2NDEzRjA2MDdF
MUM0NDE4QkM1N0Y5MUM4NUQ5NzQ0MENCNDNCQ0ZDREEwMkQ4MDc1NEU4QkM2MTk2
RjgzRjQ2RTYwMTBFNDM2OTM2NzMzMzM0OEFDNDQwMDJFQ0U4ODMxMEZGOTlGRTY5
QUJENUVBMDZFMThEQzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAlhElejfY45Jya7muX/rb9/HpJpuGKEiqwlgzp44sUvwfRliWPEt7
5gflrHJRzYPzSJasOm0DiBw7C/OdOwatjBMyxG6LiR2oGm9k7rtSWigsWxc8PbcQ
zoliJ3/wWT7+ADOS6YK80czGtQV7QeWlXrE287pf8IbI9crfOzzNaUD9nwBp4Q6M
8BVnZAt9P6Wle0cpvAqaq+hM/+vvlXXfV1vNmb2t2VxIEJoc/94mm2ij5ZJOGsNk
NyDW+zF/+d2sl8osY2QT8GB+HEQYvFf5HIXZdEDLQ7z82gLYB1TovGGW+D9G5gEO
Q2k2czM0isRAAuzogxD/mf5pq9XqBuGNwQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FMZ0qIaewfWgfV2OyISoS0jmsPCJMB8GA1UdIwQYMBaAFIhcM+6OMCEEJejiVHMx
nyTjtob7MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzhUY1VLczRDekRxbTQ3
SGFzVVhvcUd5SnFqMjJpd0I1U0tGNWh3WHhwdXViLzAvODg1QzMzRUU4RTMwMjEw
NDI1RThFMjU0NzMzMTlGMjRFM0I2ODZGQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84ODVDMzNFRThFMzAyMTA0MjVFOEUyNTQ3MzMxOUYyNEUzQjY4
NkZCLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby84VGNVS3M0Q3pEcW00N0hhc1VY
b3FHeUpxajIyaXdCNVNLRjVod1h4cHV1Yi8wLzM0MzUyZTMyMzIzNjJlMzQzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM5MzUzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC3i
LzANBgkqhkiG9w0BAQsFAAOCAQEACDMVaX3P8Z2sGgaC3EM/7G2KeQ/JFglOgFlM
XHFf6uqmWYN1UqqkNdtfP+eHta3QlDIyf7yHZuc42I5o6LwSmtWQ1E/sI9qZIKjk
9ga99rRLdeNc64iqyWVBnk8bNMHr4aXbFnOTn5YDvScJ3Fr48QpUqR0Wa+RuL1FJ
uI1n18ZDMNLJyVLbm/wCTw2frmnq5KnTYqY1mKOOE44EotTb3VFuyT1I2qnDe5il
tklo8MDlfPcANyxn6I3D33kbxq2vk/wMt+W2H+Xdp/nrIRA3nOCYjNrXX6AwvIs9
0dnqhz8hzxllriJGZ4lVwvuvZKC7ZZbRlFikfSq7Gq/LP10QYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org