Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa
File:                     34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa (raw, json)
Hash identifier:          9UZM9yHneP6I15llN40zlRiAIZYpMxTwODabXz8LEno=
Subject key identifier:   57:95:3D:9F:36:FC:5E:DC:E3:BE:D0:7A:D5:CA:C8:32:9E:F3:2F:42
Certificate issuer:       /CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
Certificate serial:       3F50F6D3E8C3217C4440D2BA5198AF381072AAB7
Authority key identifier: 96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa
Signing time:             Thu 21 Mar 2024 18:39:10 +0000
ROA not before:           Thu 21 Mar 2024 18:34:10 +0000
ROA not after:            Thu 20 Mar 2025 18:39:10 +0000
asID:                     271609
IP address blocks:        45.183.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:50:f6:d3:e8:c3:21:7c:44:40:d2:ba:51:98:af:38:10:72:aa:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965D526D55CF1330C0467770A5A4FAB58CB79FEC
        Validity
            Not Before: Mar 21 18:34:10 2024 GMT
            Not After : Mar 20 18:39:10 2025 GMT
        Subject: CN=57953D9F36FC5EDCE3BED07AD5CAC8329EF32F42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a6:95:c1:42:d6:be:00:f4:6e:0c:0e:4f:e1:
                    12:1a:c3:0a:8d:d3:f9:c6:6b:d7:83:47:73:5e:94:
                    47:5e:2f:12:a2:c9:89:e1:e8:d8:a2:91:d5:e9:11:
                    d0:3f:42:0e:ba:64:49:3e:a0:b6:38:e7:79:55:ce:
                    6c:29:e4:1c:3f:36:f9:e9:6b:c1:2e:fd:b6:9c:b9:
                    48:07:04:1b:bd:21:ce:e4:f4:7c:1b:ad:57:01:53:
                    cd:55:a6:74:fd:5d:2c:7c:0e:6d:b2:22:09:c8:1d:
                    68:62:49:e6:f3:ee:c2:35:2f:cc:9d:c7:4a:e7:40:
                    53:72:e4:de:8b:11:fc:34:09:80:c6:16:16:a4:21:
                    8e:04:b0:32:8f:36:55:60:75:e5:98:8d:3d:4b:b9:
                    8f:65:d6:a6:27:ec:9f:15:f5:54:a6:c0:ef:fa:cf:
                    9d:5b:c2:87:2a:6f:81:41:ab:2f:b3:38:ff:22:01:
                    95:ed:ab:94:ed:46:bf:3a:47:05:98:b0:f5:1f:6b:
                    ef:b2:4d:f5:90:8d:0e:30:eb:36:5b:a6:67:d2:63:
                    67:d1:a8:ce:a4:64:7a:20:8b:96:e2:1f:99:94:62:
                    71:08:de:98:a7:df:c0:46:16:5c:19:ca:94:4e:7a:
                    79:ff:0f:f5:cc:26:5a:0a:35:ec:55:7a:dc:6d:e2:
                    3f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:95:3D:9F:36:FC:5E:DC:E3:BE:D0:7A:D5:CA:C8:32:9E:F3:2F:42
            X509v3 Authority Key Identifier:
                keyid:96:5D:52:6D:55:CF:13:30:C0:46:77:70:A5:A4:FA:B5:8C:B7:9F:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/965D526D55CF1330C0467770A5A4FAB58CB79FEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/34352e3138332e3137362e302f32342d3234203d3e20323731363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:24:6a:14:94:b1:7b:91:4c:f0:42:9d:18:ff:90:f6:06:5f:
         f0:5b:4f:0c:44:77:db:ad:95:fc:9e:5a:b1:3b:fb:1b:16:29:
         2e:da:d7:72:0c:d9:92:7c:1f:8a:27:fe:1d:78:02:de:ad:c8:
         e6:79:d9:45:f3:19:b1:66:a0:e9:d9:7d:c9:cc:a3:88:47:12:
         ec:f4:61:69:ad:81:b3:7c:75:8e:97:0c:d4:24:b4:54:a6:b1:
         5b:81:2b:8f:4e:2d:20:3a:88:c7:49:67:92:f5:59:c6:8c:27:
         de:7d:61:43:29:9c:37:87:99:86:b3:2c:54:d4:43:38:ab:6b:
         2d:e7:67:21:49:8c:2b:9a:b9:ce:fa:c4:3c:4c:bf:97:b9:3f:
         62:3c:14:e1:cc:7c:3c:ca:52:c0:14:a7:fb:39:4b:f9:78:f4:
         58:61:e2:20:4e:33:3b:72:e1:8a:e2:a6:b4:33:6c:01:ac:23:
         ca:42:78:1f:b8:14:80:1b:88:6f:c4:e8:d8:95:c9:4b:29:cc:
         74:cc:f9:a1:b5:34:cd:0b:a9:9b:2d:d2:51:f4:73:98:ef:76:
         5a:d9:55:fe:71:28:cf:24:b3:5d:09:75:05:4f:7f:b4:8d:ec:
         9d:dd:96:d3:9a:aa:c5:7c:26:56:6c:1c:9a:76:80:e7:c5:ae:
         ae:e1:b7:df
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP1D20+jDIXxEQNK6UZivOBByqrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1RDUyNkQ1NUNGMTMzMEMwNDY3NzcwQTVBNEZBQjU4
Q0I3OUZFQzAeFw0yNDAzMjExODM0MTBaFw0yNTAzMjAxODM5MTBaMDMxMTAvBgNV
BAMTKDU3OTUzRDlGMzZGQzVFRENFM0JFRDA3QUQ1Q0FDODMyOUVGMzJGNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSppXBQta+APRuDA5P4RIawwqN
0/nGa9eDR3NelEdeLxKiyYnh6NiikdXpEdA/Qg66ZEk+oLY453lVzmwp5Bw/Nvnp
a8Eu/bacuUgHBBu9Ic7k9HwbrVcBU81VpnT9XSx8Dm2yIgnIHWhiSebz7sI1L8yd
x0rnQFNy5N6LEfw0CYDGFhakIY4EsDKPNlVgdeWYjT1LuY9l1qYn7J8V9VSmwO/6
z51bwocqb4FBqy+zOP8iAZXtq5TtRr86RwWYsPUfa++yTfWQjQ4w6zZbpmfSY2fR
qM6kZHogi5biH5mUYnEI3pin38BGFlwZypROenn/D/XMJloKNexVetxt4j8fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUV5U9nzb8XtzjvtB61crIMp7zL0IwHwYDVR0j
BBgwFoAUll1SbVXPEzDARndwpaT6tYy3n+wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHoyNUI2MUtva1MxZVZXVU1UeEJIRlB1NWU0c055QWdBTkRiZmd1VXVL
dGovMC85NjVENTI2RDU1Q0YxMzMwQzA0Njc3NzBBNUE0RkFCNThDQjc5RkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk2NUQ1MjZENTVDRjEzMzBD
MDQ2Nzc3MEE1QTRGQUI1OENCNzlGRUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh6MjVCNjFLb2tTMWVWV1VNVHhCSEZQdTVlNHNOeUFnQU5EYmZndVV1S3RqLzAv
MzQzNTJlMzEzODMzMmUzMTM3MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNjMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtt7AwDQYJKoZIhvcNAQELBQADggEBAB4kahSU
sXuRTPBCnRj/kPYGX/BbTwxEd9utlfyeWrE7+xsWKS7a13IM2ZJ8H4on/h14At6t
yOZ52UXzGbFmoOnZfcnMo4hHEuz0YWmtgbN8dY6XDNQktFSmsVuBK49OLSA6iMdJ
Z5L1WcaMJ959YUMpnDeHmYazLFTUQziray3nZyFJjCuauc76xDxMv5e5P2I8FOHM
fDzKUsAUp/s5S/l49Fhh4iBOMzty4YriprQzbAGsI8pCeB+4FIAbiG/E6NiVyUsp
zHTM+aG1NM0LqZst0lH0c5jvdlrZVf5xKM8ks10JdQVPf7SN7J3dltOaqsV8JlZs
HJp2gOfFrq7ht98=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:52 2024 by rpki-client on console-fra.rpki-client.org