Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3232203d3e20323637303737.roa
File:                     34352e3232382e3130342e302f32322d3232203d3e20323637303737.roa (raw, json)
Hash identifier:          WACUx79x6GDF03qBV2aCIuYRdkINuqJqU1MTlLs1yIQ=
Subject key identifier:   61:C6:9B:72:CB:CB:43:28:46:83:8A:7D:7F:2B:7F:79:C2:A6:DA:AC
Certificate issuer:       /CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
Certificate serial:       5D757D78990BCB9CC6781110DBCD3D31E3A47E24
Authority key identifier: 84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3232203d3e20323637303737.roa
Signing time:             Mon 27 Nov 2023 01:18:29 +0000
ROA not before:           Mon 27 Nov 2023 01:13:29 +0000
ROA not after:            Mon 25 Nov 2024 01:18:29 +0000
asID:                     267077
IP address blocks:        45.228.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:7d:78:99:0b:cb:9c:c6:78:11:10:db:cd:3d:31:e3:a4:7e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C
        Validity
            Not Before: Nov 27 01:13:29 2023 GMT
            Not After : Nov 25 01:18:29 2024 GMT
        Subject: CN=61C69B72CBCB432846838A7D7F2B7F79C2A6DAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:63:c1:1d:b8:d1:bc:7b:fd:aa:dc:9d:cb:
                    55:3d:29:e5:36:92:dd:82:3e:7a:42:1b:41:b8:98:
                    57:d1:10:0e:80:85:f7:b7:ab:ab:a2:6f:ee:9b:fe:
                    fb:f2:ef:ae:45:46:48:2f:fd:e2:e8:4f:63:5e:46:
                    a2:01:10:7a:23:ed:e0:e0:4d:d8:b7:cb:9b:dd:55:
                    1c:49:66:69:32:87:e4:88:60:c6:fd:f4:a2:26:96:
                    58:ad:d3:5d:89:6f:1f:50:c4:9b:93:b6:cc:2d:fd:
                    65:f9:90:8d:41:ab:00:dd:5a:c3:34:ad:0e:31:59:
                    d3:41:76:ad:82:e2:20:8d:b0:c6:70:c6:2b:70:e6:
                    b6:96:8f:cc:06:d8:e2:f6:86:2f:51:07:62:9f:f8:
                    05:8c:73:a4:06:47:5e:22:79:7a:96:c9:8e:59:ca:
                    99:b0:f3:ad:0a:32:d0:22:69:dc:48:26:aa:9e:b2:
                    84:af:77:32:a1:02:64:c9:b3:37:a6:64:60:bc:b0:
                    65:bf:47:0c:dc:3c:3a:03:ff:93:17:92:13:7f:ef:
                    1e:43:e1:eb:c7:b2:7b:af:04:1c:e4:07:42:bc:9d:
                    19:57:c0:b0:0c:8c:8d:b4:93:bc:a5:0e:3f:d4:17:
                    c0:6f:9e:0c:29:71:5d:ee:a4:34:f4:83:a2:e0:af:
                    1b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C6:9B:72:CB:CB:43:28:46:83:8A:7D:7F:2B:7F:79:C2:A6:DA:AC
            X509v3 Authority Key Identifier:
                keyid:84:FB:0F:EA:8A:D3:6C:C1:0F:FE:15:6A:76:3D:4E:FA:5A:6F:3A:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/84FB0FEA8AD36CC10FFE156A763D4EFA5A6F3A7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/0/34352e3232382e3130342e302f32322d3232203d3e20323637303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:54:6d:37:f4:b8:f7:75:e7:fc:15:c7:a4:f3:7c:8d:28:
         59:dc:90:67:24:19:e6:9b:b8:09:00:d7:cb:ed:1f:26:b1:af:
         a2:10:95:21:4a:1c:59:36:d9:44:f9:67:2a:b8:9d:9e:ca:f9:
         ae:91:fb:78:83:51:a8:b7:e2:0c:5f:bf:c6:63:d0:01:90:52:
         07:c8:64:9f:ec:78:6a:8f:d7:a5:f1:3d:50:6d:5e:3c:47:96:
         9d:01:2f:2d:8d:71:64:ae:d7:4f:dc:0a:28:c7:87:f5:53:ec:
         9c:93:fd:67:93:b6:1f:93:2a:ae:02:dc:37:6f:aa:ea:2b:dd:
         6a:b8:ec:fc:b9:57:91:16:be:92:50:d2:0c:18:5b:23:13:c0:
         fb:aa:ea:bd:23:a8:60:09:39:dd:2d:92:3c:7e:5c:2d:29:01:
         15:a1:f6:a2:f4:fb:5d:3c:26:cc:a0:f0:f3:12:e1:5e:4f:7b:
         38:b7:32:11:81:3d:18:40:9b:31:1d:ff:22:0f:7c:14:fc:0c:
         fc:3a:3d:44:3a:4e:3d:31:9a:e0:f0:28:47:2f:cc:8e:bd:53:
         d1:e8:1c:ba:a0:13:e3:ee:f0:da:52:b3:bc:53:ec:f9:67:9f:
         20:36:4c:cf:e5:77:a2:b2:ae:04:30:b9:3b:b1:f8:a9:cc:0b:
         4b:2e:69:31
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXXV9eJkLy5zGeBEQ2809MeOkfiQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODRGQjBGRUE4QUQzNkNDMTBGRkUxNTZBNzYzRDRFRkE1
QTZGM0E3QzAeFw0yMzExMjcwMTEzMjlaFw0yNDExMjUwMTE4MjlaMDMxMTAvBgNV
BAMTKDYxQzY5QjcyQ0JDQjQzMjg0NjgzOEE3RDdGMkI3Rjc5QzJBNkRBQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0C2PBHbjRvHv9qtydy1U9KeU2
kt2CPnpCG0G4mFfREA6Ahfe3q6uib+6b/vvy765FRkgv/eLoT2NeRqIBEHoj7eDg
Tdi3y5vdVRxJZmkyh+SIYMb99KImllit012Jbx9QxJuTtswt/WX5kI1BqwDdWsM0
rQ4xWdNBdq2C4iCNsMZwxitw5raWj8wG2OL2hi9RB2Kf+AWMc6QGR14ieXqWyY5Z
ypmw860KMtAiadxIJqqesoSvdzKhAmTJszemZGC8sGW/RwzcPDoD/5MXkhN/7x5D
4evHsnuvBBzkB0K8nRlXwLAMjI20k7ylDj/UF8BvngwpcV3upDT0g6LgrxuHAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUYcabcsvLQyhGg4p9fyt/ecKm2qwwHwYDVR0j
BBgwFoAUhPsP6orTbMEP/hVqdj1O+lpvOnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFphVUpBZ01Yall0WjhwZW9LMnlCY0hkeGpKU0FZMmI5U3pYczQ3NjNL
MUovMC84NEZCMEZFQThBRDM2Q0MxMEZGRTE1NkE3NjNENEVGQTVBNkYzQTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg0RkIwRkVBOEFEMzZDQzEw
RkZFMTU2QTc2M0Q0RUZBNUE2RjNBN0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhaYVVKQWdNWGpZdFo4cGVvSzJ5QmNIZHhqSlNBWTJiOVN6WHM0NzYzSzFKLzAv
MzQzNTJlMzIzMjM4MmUzMTMwMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5GgwDQYJKoZIhvcNAQELBQADggEBAJsrVG03
9Lj3def8Fcek83yNKFnckGckGeabuAkA18vtHyaxr6IQlSFKHFk22UT5Zyq4nZ7K
+a6R+3iDUai34gxfv8Zj0AGQUgfIZJ/seGqP16XxPVBtXjxHlp0BLy2NcWSu10/c
CijHh/VT7JyT/WeTth+TKq4C3Ddvquor3Wq47Py5V5EWvpJQ0gwYWyMTwPuq6r0j
qGAJOd0tkjx+XC0pARWh9qL0+108Jsyg8PMS4V5Pezi3MhGBPRhAmzEd/yIPfBT8
DPw6PUQ6Tj0xmuDwKEcvzI69U9HoHLqgE+Pu8NpSs7xT7PlnnyA2TM/ld6KyrgQw
uTux+KnMC0suaTE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org