Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
File:                     34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier:          nn+VBZSS7Y5lj3gTb+h3PIel72VDDTlzzvSAZKNTjIU=
Subject key identifier:   7C:B2:63:44:F3:12:C6:ED:D5:5A:9C:CF:69:B2:79:BC:B7:E9:00:75
Certificate issuer:       /CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
Certificate serial:       62B4CDF6B9069F1A014F6E24F335D967C9CEA4E8
Authority key identifier: 87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa
Signing time:             Wed 20 Dec 2023 14:14:27 +0000
ROA not before:           Wed 20 Dec 2023 14:09:27 +0000
ROA not after:            Wed 18 Dec 2024 14:14:27 +0000
asID:                     262899
IP address blocks:        45.165.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b4:cd:f6:b9:06:9f:1a:01:4f:6e:24:f3:35:d9:67:c9:ce:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EEF4599C8F5E030C03B069ABA7230FD1F342B4
        Validity
            Not Before: Dec 20 14:09:27 2023 GMT
            Not After : Dec 18 14:14:27 2024 GMT
        Subject: CN=7CB26344F312C6EDD55A9CCF69B279BCB7E90075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0a:c7:87:3c:68:a7:43:17:68:d4:3b:60:c1:
                    1b:a7:28:19:39:c0:fa:d9:18:a9:b4:32:1a:8d:15:
                    53:06:4a:b6:ee:0d:af:7e:ae:c2:b4:f1:19:c2:b9:
                    93:d6:1e:01:42:3f:b5:b0:f5:af:b7:9f:34:1b:fd:
                    30:12:58:9a:aa:0a:91:ef:b5:c9:c9:9e:6f:31:7e:
                    7e:76:93:4b:7c:08:ce:39:6d:8f:3c:a4:91:24:98:
                    0c:2d:d0:15:58:9c:99:f9:24:f3:c7:dd:e1:d8:27:
                    21:45:d8:51:f5:84:f0:34:7b:a8:dd:ed:9a:d3:4d:
                    25:6b:7b:73:fc:3c:37:e3:67:2e:ff:15:79:7f:f9:
                    0f:a9:96:80:3d:e6:81:59:a3:65:e3:93:e8:dc:20:
                    d8:62:47:13:12:1e:2e:b9:5f:b2:9c:cf:d8:66:ee:
                    10:ca:7a:e3:04:54:24:2c:3c:71:d4:94:25:dc:60:
                    3d:30:25:a2:7a:fb:4d:62:44:97:8b:09:f9:93:be:
                    b3:8a:43:12:ac:e3:45:56:fd:d5:3c:f9:90:6c:d9:
                    22:e2:11:c1:82:75:2b:f7:25:3f:7a:71:1f:43:bd:
                    74:d9:6f:cb:90:74:0e:1e:dd:39:ed:a2:bc:cb:b9:
                    9e:4f:64:74:af:70:2e:98:ac:f4:0e:21:b6:24:3c:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:63:44:F3:12:C6:ED:D5:5A:9C:CF:69:B2:79:BC:B7:E9:00:75
            X509v3 Authority Key Identifier:
                keyid:87:EE:F4:59:9C:8F:5E:03:0C:03:B0:69:AB:A7:23:0F:D1:F3:42:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87EEF4599C8F5E030C03B069ABA7230FD1F342B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133302e302f32342d3234203d3e20323632383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:fb:ca:fa:ac:4b:8e:2b:f8:c9:60:b3:ba:7c:81:ad:a5:4c:
         2b:d3:bc:3f:2a:90:45:d4:cf:b9:a6:b6:62:12:26:d6:2d:55:
         3c:ce:cf:d4:fc:af:16:d4:3c:3f:88:66:1f:88:00:9d:1c:23:
         37:d8:d8:40:65:61:24:cf:a1:69:e5:9f:99:43:c4:66:50:39:
         ea:bd:ef:da:0c:81:70:1a:c9:1c:eb:88:1f:7c:d2:03:c3:a4:
         14:f7:31:8c:c8:e4:91:29:b1:9b:b5:4a:3f:04:70:3e:b4:30:
         74:fb:f4:32:3c:a1:b5:11:27:02:a1:59:b4:e2:1d:7e:7c:bf:
         1c:b7:16:c0:df:ad:71:44:5e:43:c3:ef:10:22:0b:4b:5a:10:
         c8:43:c2:4f:7f:0c:a3:cb:21:26:a8:80:5a:2d:c7:19:70:4b:
         ac:89:40:0c:28:57:4f:a2:ac:67:40:be:d3:c5:11:7d:97:0c:
         fd:e1:fa:d0:b2:ee:3e:d4:b7:0f:a7:d5:04:ee:a4:f3:63:00:
         80:d3:aa:eb:3f:d5:3c:04:3f:2b:84:e3:fd:3f:28:3d:17:c4:
         1e:65:9c:4d:6e:46:de:20:ba:ed:5c:02:e9:c4:5f:c5:51:6b:
         45:f6:29:f0:d1:23:dd:0d:96:c9:6d:c6:58:d6:cf:4b:2f:e7:
         d2:88:15:8e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYrTN9rkGnxoBT24k8zXZZ8nOpOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdFRUY0NTk5QzhGNUUwMzBDMDNCMDY5QUJBNzIzMEZE
MUYzNDJCNDAeFw0yMzEyMjAxNDA5MjdaFw0yNDEyMTgxNDE0MjdaMDMxMTAvBgNV
BAMTKDdDQjI2MzQ0RjMxMkM2RURENTVBOUNDRjY5QjI3OUJDQjdFOTAwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXCseHPGinQxdo1DtgwRunKBk5
wPrZGKm0MhqNFVMGSrbuDa9+rsK08RnCuZPWHgFCP7Ww9a+3nzQb/TASWJqqCpHv
tcnJnm8xfn52k0t8CM45bY88pJEkmAwt0BVYnJn5JPPH3eHYJyFF2FH1hPA0e6jd
7ZrTTSVre3P8PDfjZy7/FXl/+Q+ploA95oFZo2Xjk+jcINhiRxMSHi65X7Kcz9hm
7hDKeuMEVCQsPHHUlCXcYD0wJaJ6+01iRJeLCfmTvrOKQxKs40VW/dU8+ZBs2SLi
EcGCdSv3JT96cR9DvXTZb8uQdA4e3TntorzLuZ5PZHSvcC6YrPQOIbYkPFijAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUfLJjRPMSxu3VWpzPabJ5vLfpAHUwHwYDVR0j
BBgwFoAUh+70WZyPXgMMA7Bpq6cjD9HzQrQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGd6ejVUS0tOcG4zNTU0R29nNlVhbWthYllMcmc4UEFwVFc5dWNLaW5k
OFgvMC84N0VFRjQ1OTlDOEY1RTAzMEMwM0IwNjlBQkE3MjMwRkQxRjM0MkI0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg3RUVGNDU5OUM4RjVFMDMw
QzAzQjA2OUFCQTcyMzBGRDFGMzQyQjQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhneno1VEtLTnBuMzU1NEdvZzZVYW1rYWJZTHJnOFBBcFRXOXVjS2luZDhYLzAv
MzQzNTJlMzEzNjM1MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzODM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpYIwDQYJKoZIhvcNAQELBQADggEBACv7yvqs
S44r+Mlgs7p8ga2lTCvTvD8qkEXUz7mmtmISJtYtVTzOz9T8rxbUPD+IZh+IAJ0c
IzfY2EBlYSTPoWnln5lDxGZQOeq979oMgXAayRzriB980gPDpBT3MYzI5JEpsZu1
Sj8EcD60MHT79DI8obURJwKhWbTiHX58vxy3FsDfrXFEXkPD7xAiC0taEMhDwk9/
DKPLISaogFotxxlwS6yJQAwoV0+irGdAvtPFEX2XDP3h+tCy7j7Utw+n1QTupPNj
AIDTqus/1TwEPyuE4/0/KD0XxB5lnE1uRt4guu1cAunEX8VRa0X2KfDRI90Nlslt
xljWz0sv59KIFY4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org