Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa
File:                     34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa (raw, json)
Hash identifier:          xcNMi8yFrb0+6big7v99LhDQLHD+gi8CzVzZJ2S2mwE=
Subject key identifier:   A3:5C:66:89:D6:0D:27:A6:19:E1:E1:A4:A7:C3:5E:18:80:FA:8F:56
Certificate issuer:       /CN=6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD
Certificate serial:       640B2661A013BBAD35152B04D2833DB14004E9E8
Authority key identifier: 6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa
Signing time:             Thu 11 Apr 2024 13:21:51 +0000
ROA not before:           Thu 11 Apr 2024 13:16:51 +0000
ROA not after:            Thu 10 Apr 2025 13:21:51 +0000
asID:                     268623
IP address blocks:        45.164.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0b:26:61:a0:13:bb:ad:35:15:2b:04:d2:83:3d:b1:40:04:e9:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD
        Validity
            Not Before: Apr 11 13:16:51 2024 GMT
            Not After : Apr 10 13:21:51 2025 GMT
        Subject: CN=A35C6689D60D27A619E1E1A4A7C35E1880FA8F56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6b:42:d3:11:cc:75:20:63:7c:11:95:79:75:
                    92:4e:db:78:c5:13:cf:4a:3a:62:5d:a2:36:6b:03:
                    e2:7c:be:eb:43:1b:4e:48:94:14:03:cc:dc:6e:91:
                    8c:1a:b0:68:cc:eb:ed:d3:82:2d:bb:1f:47:d1:45:
                    ca:9e:99:59:66:4f:a4:d3:3c:a7:ef:ce:78:11:9f:
                    2b:bc:6a:fe:80:f6:c7:f7:4d:f1:cb:7d:b1:c6:01:
                    15:c4:ca:80:4e:5b:55:9d:f9:3d:aa:9b:95:a9:17:
                    1a:96:5b:20:da:e5:fd:be:b6:61:77:ce:a8:bf:f9:
                    e6:60:b2:70:46:15:be:14:9b:e3:59:a9:5b:ea:8a:
                    ab:65:e6:29:33:1e:4a:18:eb:4e:9a:08:7d:3b:7d:
                    4e:1b:9a:11:ed:2b:f9:8c:e8:0c:f4:42:ff:5d:e0:
                    e2:c4:08:6a:0e:60:2b:ca:28:4c:7d:c6:7e:08:3d:
                    ad:b6:a4:ff:c9:3f:68:99:91:31:c9:3a:4c:e4:68:
                    aa:e9:ba:b2:1f:8d:d3:47:f5:4c:05:39:0d:5d:94:
                    83:26:84:2d:98:00:54:fd:d3:29:c0:39:de:8e:76:
                    05:58:6e:e5:08:48:65:59:e9:f2:42:fa:e9:5e:19:
                    5b:cd:3a:20:17:4a:df:09:65:b7:46:db:92:9b:a8:
                    ac:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:66:89:D6:0D:27:A6:19:E1:E1:A4:A7:C3:5E:18:80:FA:8F:56
            X509v3 Authority Key Identifier:
                keyid:6E:2F:9A:88:29:C8:EA:ED:36:9C:A9:36:BE:10:A0:36:D3:EC:EF:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E2F9A8829C8EAED369CA936BE10A036D3ECEFBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/1/34352e3136342e3132302e302f32322d3234203d3e20323638363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:54:78:bb:78:13:b8:72:4e:1b:f5:e5:23:d6:10:4b:8f:
         df:60:ed:5b:b8:af:af:be:d8:ff:b1:4d:58:fe:db:e4:64:c3:
         85:9c:c0:a6:fa:8e:13:f4:4c:05:b9:dc:5a:84:6a:b1:70:2d:
         c8:90:61:8e:e4:be:05:3e:a0:1f:a7:f0:9a:b8:52:a2:cb:fc:
         48:10:70:b2:b0:fe:f8:6b:7f:f5:1f:a2:7f:82:01:7a:1d:8e:
         ab:ac:f7:8e:84:76:b8:35:e3:9b:b0:26:37:23:31:e4:4f:6f:
         eb:50:22:65:1e:8b:99:ff:b8:61:f2:b0:13:68:e9:19:e6:54:
         d2:68:14:04:ae:ea:a9:b7:bc:52:f4:c7:97:dc:ff:e0:3e:96:
         28:71:e9:50:e1:c0:f4:73:61:4f:08:c9:d6:9d:3d:1d:b1:5d:
         5f:be:c0:d5:04:ac:da:84:7b:88:7b:f1:ba:31:ab:c9:6f:1d:
         d8:a8:1b:c2:99:9c:b7:2d:3a:d2:ac:34:d8:44:56:d7:15:f0:
         69:e0:15:bc:e2:e7:cd:da:ee:7a:5c:d0:d0:50:12:5e:1a:49:
         f4:2e:fe:1b:5d:e8:fc:d5:29:d0:5f:79:fb:13:11:c0:07:41:
         d1:04:a3:6a:11:ec:fc:19:d5:7c:04:64:b2:8b:fd:54:7e:ca:
         e3:0f:23:6b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZAsmYaATu601FSsE0oM9sUAE6egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkUyRjlBODgyOUM4RUFFRDM2OUNBOTM2QkUxMEEwMzZE
M0VDRUZCRDAeFw0yNDA0MTExMzE2NTFaFw0yNTA0MTAxMzIxNTFaMDMxMTAvBgNV
BAMTKEEzNUM2Njg5RDYwRDI3QTYxOUUxRTFBNEE3QzM1RTE4ODBGQThGNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9a0LTEcx1IGN8EZV5dZJO23jF
E89KOmJdojZrA+J8vutDG05IlBQDzNxukYwasGjM6+3Tgi27H0fRRcqemVlmT6TT
PKfvzngRnyu8av6A9sf3TfHLfbHGARXEyoBOW1Wd+T2qm5WpFxqWWyDa5f2+tmF3
zqi/+eZgsnBGFb4Um+NZqVvqiqtl5ikzHkoY606aCH07fU4bmhHtK/mM6Az0Qv9d
4OLECGoOYCvKKEx9xn4IPa22pP/JP2iZkTHJOkzkaKrpurIfjdNH9UwFOQ1dlIMm
hC2YAFT90ynAOd6OdgVYbuUISGVZ6fJC+uleGVvNOiAXSt8JZbdG25KbqKyPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo1xmidYNJ6YZ4eGkp8NeGID6j1YwHwYDVR0j
BBgwFoAUbi+aiCnI6u02nKk2vhCgNtPs770wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpQNHpLYXdINGdrbW93NDRrdWlvRnBocVZBSjM2MUxRcDZqeXljdkxG
Y28vMS82RTJGOUE4ODI5QzhFQUVEMzY5Q0E5MzZCRTEwQTAzNkQzRUNFRkJELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZFMkY5QTg4MjlDOEVBRUQz
NjlDQTkzNkJFMTBBMDM2RDNFQ0VGQkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqUDR6S2F3SDRna21vdzQ0a3Vpb0ZwaHFWQUozNjFMUXA2anl5Y3ZMRmNvLzEv
MzQzNTJlMzEzNjM0MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpHgwDQYJKoZIhvcNAQELBQADggEBAA0eVHi7
eBO4ck4b9eUj1hBLj99g7Vu4r6++2P+xTVj+2+Rkw4WcwKb6jhP0TAW53FqEarFw
LciQYY7kvgU+oB+n8Jq4UqLL/EgQcLKw/vhrf/Ufon+CAXodjqus946Edrg145uw
JjcjMeRPb+tQImUei5n/uGHysBNo6RnmVNJoFASu6qm3vFL0x5fc/+A+lihx6VDh
wPRzYU8IydadPR2xXV++wNUErNqEe4h78boxq8lvHdioG8KZnLctOtKsNNhEVtcV
8GngFbzi583a7npc0NBQEl4aSfQu/htd6PzVKdBfefsTEcAHQdEEo2oR7PwZ1XwE
ZLKL/VR+yuMPI2s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org