Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32342d3234203d3e20323731343337.roa
File:                     34352e3232352e38302e302f32342d3234203d3e20323731343337.roa (raw, json)
Hash identifier:          taj3ZuxKSxYQntdaEahlT0IuNTJ4OTrGtL51j937qXg=
Subject key identifier:   9A:6C:EA:84:EC:7E:C9:FD:2B:CB:5F:1A:9E:E7:5F:8B:AF:B5:FD:C2
Certificate issuer:       /CN=254D3F5CC2B8E5B651F6F590A793628658044C55
Certificate serial:       0BCF9CEE79CC4199216779AEDEC842187B9F8DFC
Authority key identifier: 25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32342d3234203d3e20323731343337.roa
Signing time:             Tue 03 Oct 2023 00:24:13 +0000
ROA not before:           Tue 03 Oct 2023 00:19:13 +0000
ROA not after:            Tue 01 Oct 2024 00:24:13 +0000
asID:                     271437
IP address blocks:        45.225.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cf:9c:ee:79:cc:41:99:21:67:79:ae:de:c8:42:18:7b:9f:8d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=254D3F5CC2B8E5B651F6F590A793628658044C55
        Validity
            Not Before: Oct  3 00:19:13 2023 GMT
            Not After : Oct  1 00:24:13 2024 GMT
        Subject: CN=9A6CEA84EC7EC9FD2BCB5F1A9EE75F8BAFB5FDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e1:13:70:53:80:d9:2e:6f:46:f8:55:13:44:
                    ed:91:c9:36:a7:00:e3:f9:25:44:93:f9:88:8c:78:
                    56:91:f4:6c:e9:94:31:99:ff:62:d8:9e:d0:17:d0:
                    9f:e2:91:c1:3c:2c:b0:4e:5c:8b:32:4d:da:1c:01:
                    66:4b:67:f4:8b:f9:91:59:90:d6:52:67:d1:aa:48:
                    28:30:26:1a:fd:3c:d2:39:85:35:26:80:2d:42:2f:
                    3a:9d:15:ee:c4:de:1f:c5:43:6a:49:6b:7a:88:dd:
                    3a:6c:bf:c4:3d:a3:bd:49:ee:bb:c6:a7:27:0b:9a:
                    f2:53:b9:e4:f9:a9:99:16:7f:b6:a4:22:fa:8d:63:
                    0b:e6:2b:92:48:b4:d6:37:6d:6a:d9:cf:6d:98:2e:
                    ee:79:aa:88:fd:8c:0b:50:b8:00:86:9c:8d:4c:6d:
                    23:e6:b0:08:c8:19:fe:ba:ea:6d:94:5e:40:42:17:
                    d1:48:4b:c7:e9:ec:4d:c1:65:8a:21:a7:0b:06:ec:
                    65:6f:cc:36:af:bf:da:f0:14:3d:7c:88:e8:98:da:
                    50:5c:4a:1f:43:c2:5e:03:ad:3e:c2:c3:3b:62:5b:
                    6f:5f:f7:d2:b1:f4:df:d8:62:6d:fc:11:db:12:ac:
                    0d:bd:c5:f8:2f:a5:5a:40:59:7a:37:07:7c:f4:fc:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:6C:EA:84:EC:7E:C9:FD:2B:CB:5F:1A:9E:E7:5F:8B:AF:B5:FD:C2
            X509v3 Authority Key Identifier:
                keyid:25:4D:3F:5C:C2:B8:E5:B6:51:F6:F5:90:A7:93:62:86:58:04:4C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/254D3F5CC2B8E5B651F6F590A793628658044C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/254D3F5CC2B8E5B651F6F590A793628658044C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVMgLYCQxhHAtvni6NXsBnbS6PkQpQ7oZHaaC9wr1Yy/0/34352e3232352e38302e302f32342d3234203d3e20323731343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:de:dd:70:f2:c6:ac:a3:3b:12:3b:45:68:2a:e4:7d:0e:
         b6:83:6c:97:70:5b:e4:11:19:53:76:e4:1d:40:d5:12:23:2c:
         24:4a:f9:e9:45:49:58:b2:5b:36:34:3d:39:a7:7e:60:26:3f:
         b5:c2:f7:8e:c5:e0:f3:24:44:71:87:8a:ad:55:87:35:51:8f:
         89:7a:fc:15:9d:db:e9:9b:9c:c2:58:41:5f:99:82:84:6c:cf:
         60:7e:55:35:02:30:ea:5c:48:bf:e1:44:98:b9:50:af:13:66:
         12:2d:1f:8b:fe:04:be:27:95:ae:f6:62:5d:88:0a:1d:25:5f:
         0f:4c:54:a8:27:0c:cc:4b:8a:4b:51:b8:7e:8c:81:44:72:1a:
         4b:23:b1:0f:1b:69:1f:12:97:67:f5:86:07:bc:fb:82:07:03:
         b5:50:26:80:4b:a1:28:4e:3b:73:e8:be:2e:9e:0c:db:54:76:
         81:c4:37:be:3d:42:e1:03:bd:3d:c0:5c:08:04:eb:89:44:39:
         02:46:8b:0f:e5:f9:2f:d2:c1:33:8c:98:42:11:ef:e2:19:ef:
         65:95:09:00:53:79:08:ca:6f:57:68:b0:1d:84:96:42:e5:64:
         75:72:29:48:c2:16:87:db:a4:c0:6a:dc:1b:e6:30:15:a7:9b:
         09:f4:c8:dc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUC8+c7nnMQZkhZ3mu3shCGHufjfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjU0RDNGNUNDMkI4RTVCNjUxRjZGNTkwQTc5MzYyODY1
ODA0NEM1NTAeFw0yMzEwMDMwMDE5MTNaFw0yNDEwMDEwMDI0MTNaMDMxMTAvBgNV
BAMTKDlBNkNFQTg0RUM3RUM5RkQyQkNCNUYxQTlFRTc1RjhCQUZCNUZEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv4RNwU4DZLm9G+FUTRO2RyTan
AOP5JUST+YiMeFaR9GzplDGZ/2LYntAX0J/ikcE8LLBOXIsyTdocAWZLZ/SL+ZFZ
kNZSZ9GqSCgwJhr9PNI5hTUmgC1CLzqdFe7E3h/FQ2pJa3qI3Tpsv8Q9o71J7rvG
pycLmvJTueT5qZkWf7akIvqNYwvmK5JItNY3bWrZz22YLu55qoj9jAtQuACGnI1M
bSPmsAjIGf666m2UXkBCF9FIS8fp7E3BZYohpwsG7GVvzDavv9rwFD18iOiY2lBc
Sh9Dwl4DrT7CwztiW29f99Kx9N/YYm38EdsSrA29xfgvpVpAWXo3B3z0/P7ZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmmzqhOx+yf0ry18anudfi6+1/cIwHwYDVR0j
BBgwFoAUJU0/XMK45bZR9vWQp5NihlgETFUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdWTWdMWUNReGhIQXR2bmk2TlhzQm5iUzZQa1FwUTdvWkhhYUM5d3Ix
WXkvMC8yNTREM0Y1Q0MyQjhFNUI2NTFGNkY1OTBBNzkzNjI4NjU4MDQ0QzU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI1NEQzRjVDQzJCOEU1QjY1
MUY2RjU5MEE3OTM2Mjg2NTgwNDRDNTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3Vk1nTFlDUXhoSEF0dm5pNk5Yc0JuYlM2UGtRcFE3b1pIYWFDOXdyMVl5LzAv
MzQzNTJlMzIzMjM1MmUzODMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzQzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeFQMA0GCSqGSIb3DQEBCwUAA4IBAQA3s97dcPLG
rKM7EjtFaCrkfQ62g2yXcFvkERlTduQdQNUSIywkSvnpRUlYsls2ND05p35gJj+1
wveOxeDzJERxh4qtVYc1UY+JevwVndvpm5zCWEFfmYKEbM9gflU1AjDqXEi/4USY
uVCvE2YSLR+L/gS+J5Wu9mJdiAodJV8PTFSoJwzMS4pLUbh+jIFEchpLI7EPG2kf
Epdn9YYHvPuCBwO1UCaAS6EoTjtz6L4ungzbVHaBxDe+PULhA709wFwIBOuJRDkC
RosP5fkv0sEzjJhCEe/iGe9llQkAU3kIym9XaLAdhJZC5WR1cilIwhaH26TAatwb
5jAVp5sJ9Mjc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org