Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32342d3234203d3e20323638373836.roa
File:                     34352e3137322e3136382e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier:          XsAZRG8kwfobdp5wcC+cbL7aplNs2k5Zdw+NBRJzsS4=
Subject key identifier:   B8:C2:58:33:65:83:3D:D2:25:E0:2F:B1:D0:2F:C2:FF:C3:65:AA:A3
Certificate issuer:       /CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
Certificate serial:       5663D76336DE6BDADF77C58BD555063E401B3688
Authority key identifier: A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32342d3234203d3e20323638373836.roa
Signing time:             Thu 18 Apr 2024 13:29:54 +0000
ROA not before:           Thu 18 Apr 2024 13:24:54 +0000
ROA not after:            Thu 17 Apr 2025 13:29:54 +0000
asID:                     268786
IP address blocks:        45.172.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:63:d7:63:36:de:6b:da:df:77:c5:8b:d5:55:06:3e:40:1b:36:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A68038F934F5E622FA09D5ED3CCBF64D92391162
        Validity
            Not Before: Apr 18 13:24:54 2024 GMT
            Not After : Apr 17 13:29:54 2025 GMT
        Subject: CN=B8C2583365833DD225E02FB1D02FC2FFC365AAA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:b3:88:c7:d9:4e:a6:b4:cc:39:a3:9b:e9:
                    0d:ce:10:cf:2a:07:bd:35:41:3e:fe:1f:58:a0:0c:
                    d5:b4:6c:08:c0:6d:23:05:74:57:ce:0c:2d:a4:5f:
                    4a:92:55:51:cc:2e:d4:ff:72:10:d3:90:0c:82:45:
                    01:cd:7b:a7:db:2d:a1:af:06:dd:25:89:71:a8:01:
                    3a:5f:34:ef:dd:ca:a2:3a:ef:d0:bc:cc:ea:cd:9c:
                    0b:d6:66:77:9b:3f:34:17:04:5a:3f:ec:68:85:c9:
                    2d:cc:ba:1a:0b:51:4c:d1:a4:1f:a0:41:56:13:07:
                    fe:3e:58:2e:a4:70:ff:03:79:98:57:77:17:a9:31:
                    0a:f6:f0:0b:75:a2:4d:be:0f:dc:9e:eb:32:31:62:
                    b2:44:17:87:76:43:f6:cf:f2:52:99:71:f4:44:98:
                    67:56:5e:43:b5:af:98:54:31:8b:0f:aa:90:cf:69:
                    01:64:04:e2:ba:5a:22:6d:04:10:3c:1f:16:9f:c4:
                    3f:fa:05:78:4b:8d:6e:bd:4d:ae:d7:55:8a:c4:d7:
                    4e:50:a0:9f:1b:f8:40:ef:89:65:4b:14:96:f8:bd:
                    b6:0f:3f:fb:09:51:19:c3:2a:3f:7b:74:58:e7:38:
                    cd:3f:3d:bc:04:c1:dd:9d:43:5f:8b:c3:c1:12:4b:
                    d3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C2:58:33:65:83:3D:D2:25:E0:2F:B1:D0:2F:C2:FF:C3:65:AA:A3
            X509v3 Authority Key Identifier:
                keyid:A6:80:38:F9:34:F5:E6:22:FA:09:D5:ED:3C:CB:F6:4D:92:39:11:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A68038F934F5E622FA09D5ED3CCBF64D92391162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/1/34352e3137322e3136382e302f32342d3234203d3e20323638373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:86:a7:cb:b0:c3:61:ff:ae:53:88:4b:60:31:ab:61:de:
         a1:2a:e6:e1:af:c2:fd:59:5e:51:28:eb:52:d2:f3:93:d6:15:
         dc:49:0f:39:c0:a2:2e:4d:be:66:e3:ab:f8:bb:c9:8e:5d:e2:
         e9:8b:ac:00:69:cd:42:ea:0d:33:37:31:b7:1e:78:77:3b:fd:
         23:a0:c9:fc:d4:46:49:93:42:c5:2e:90:94:9c:89:20:e9:ff:
         cd:70:36:a5:d4:32:63:5e:85:42:a0:1b:0d:14:1e:98:0a:8b:
         9a:45:a9:e5:58:33:0b:21:27:08:90:f2:d2:eb:17:21:6d:f5:
         72:58:73:2e:89:f3:43:77:58:30:4d:af:db:b2:89:5a:a4:74:
         35:dd:75:1e:c7:d2:7c:76:6e:25:31:6c:b6:d8:04:50:df:ef:
         e1:42:fa:c9:30:94:e5:a5:81:3b:47:00:42:92:31:31:92:67:
         86:c2:8c:35:1c:e6:ce:33:f1:9a:7f:da:6d:36:d7:72:13:cb:
         5d:4d:d1:5d:7f:89:53:c0:da:d5:39:73:13:e1:55:99:b0:1e:
         6a:1f:e2:bf:7a:2f:f8:75:76:e0:a8:85:28:df:d3:72:9e:35:
         fe:06:a3:2c:5c:db:55:3e:19:d4:72:90:d6:21:fd:06:22:a2:
         ca:0b:ff:12
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVmPXYzbea9rfd8WL1VUGPkAbNogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY4MDM4RjkzNEY1RTYyMkZBMDlENUVEM0NDQkY2NEQ5
MjM5MTE2MjAeFw0yNDA0MTgxMzI0NTRaFw0yNTA0MTcxMzI5NTRaMDMxMTAvBgNV
BAMTKEI4QzI1ODMzNjU4MzNERDIyNUUwMkZCMUQwMkZDMkZGQzM2NUFBQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTbOIx9lOprTMOaOb6Q3OEM8q
B701QT7+H1igDNW0bAjAbSMFdFfODC2kX0qSVVHMLtT/chDTkAyCRQHNe6fbLaGv
Bt0liXGoATpfNO/dyqI679C8zOrNnAvWZnebPzQXBFo/7GiFyS3MuhoLUUzRpB+g
QVYTB/4+WC6kcP8DeZhXdxepMQr28At1ok2+D9ye6zIxYrJEF4d2Q/bP8lKZcfRE
mGdWXkO1r5hUMYsPqpDPaQFkBOK6WiJtBBA8HxafxD/6BXhLjW69Ta7XVYrE105Q
oJ8b+EDviWVLFJb4vbYPP/sJURnDKj97dFjnOM0/PbwEwd2dQ1+Lw8ESS9PrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUuMJYM2WDPdIl4C+x0C/C/8NlqqMwHwYDVR0j
BBgwFoAUpoA4+TT15iL6CdXtPMv2TZI5EWIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHgzcXh3N0NoUnJlcERFN1hFVEtTd1cxa1FSZFlmTXZVckp4VmZ4U1Z3
aDEvMS9BNjgwMzhGOTM0RjVFNjIyRkEwOUQ1RUQzQ0NCRjY0RDkyMzkxMTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E2ODAzOEY5MzRGNUU2MjJG
QTA5RDVFRDNDQ0JGNjREOTIzOTExNjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh4M3F4dzdDaFJyZXBERTdYRVRLU3dXMWtRUmRZZk12VXJKeFZmeFNWd2gxLzEv
MzQzNTJlMzEzNzMyMmUzMTM2MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtrKgwDQYJKoZIhvcNAQELBQADggEBACQvhqfL
sMNh/65TiEtgMath3qEq5uGvwv1ZXlEo61LS85PWFdxJDznAoi5Nvmbjq/i7yY5d
4umLrABpzULqDTM3MbceeHc7/SOgyfzURkmTQsUukJSciSDp/81wNqXUMmNehUKg
Gw0UHpgKi5pFqeVYMwshJwiQ8tLrFyFt9XJYcy6J80N3WDBNr9uyiVqkdDXddR7H
0nx2biUxbLbYBFDf7+FC+skwlOWlgTtHAEKSMTGSZ4bCjDUc5s4z8Zp/2m0213IT
y11N0V1/iVPA2tU5cxPhVZmwHmof4r96L/h1duCohSjf03KeNf4Goyxc21U+GdRy
kNYh/QYiosoL/xI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org