Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa
File:                     34352e3137332e32382e302f32342d3234203d3e20323638373839.roa (raw, json)
Hash identifier:          UTNMddDt5HVvibzpANPmZj14TwnhRzoIi3xYy1zZZV8=
Subject key identifier:   81:FF:D5:02:C0:69:23:6B:AA:8F:CC:85:23:B1:B6:24:06:C5:F2:9F
Certificate issuer:       /CN=9836DDAF4A063B35C599D8E74240140479434CEE
Certificate serial:       552171219FECF63849DCDD6A881549C25E4C2C46
Authority key identifier: 98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa
Signing time:             Mon 11 Mar 2024 19:31:05 +0000
ROA not before:           Mon 11 Mar 2024 19:26:05 +0000
ROA not after:            Mon 10 Mar 2025 19:31:05 +0000
asID:                     268789
IP address blocks:        45.173.28.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:21:71:21:9f:ec:f6:38:49:dc:dd:6a:88:15:49:c2:5e:4c:2c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9836DDAF4A063B35C599D8E74240140479434CEE
        Validity
            Not Before: Mar 11 19:26:05 2024 GMT
            Not After : Mar 10 19:31:05 2025 GMT
        Subject: CN=81FFD502C069236BAA8FCC8523B1B62406C5F29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:06:4e:b0:57:ef:39:27:af:2f:30:15:4b:
                    ea:5a:3a:12:e7:fb:e3:69:bc:ab:27:79:bd:78:0d:
                    21:b7:5f:46:e1:d2:f2:ed:55:3f:8a:2c:43:ab:8f:
                    74:73:eb:86:2a:ce:7d:ff:a4:b0:ac:fc:b2:68:2d:
                    ea:1d:8f:e3:26:7f:1c:0d:60:c6:0d:38:1f:40:e3:
                    89:8c:73:2d:b8:2f:1f:cf:17:c3:87:cd:e0:51:16:
                    db:17:5e:ae:d4:fb:00:b4:7a:8f:4d:58:ce:f2:45:
                    e5:f3:3f:a4:25:d5:04:da:c9:49:f5:58:12:70:6b:
                    b8:da:14:73:29:b3:6a:b2:a3:29:69:cc:d1:61:fc:
                    37:5d:40:64:96:63:70:ee:8b:70:e6:7d:7b:93:1d:
                    0c:85:63:41:23:92:2f:4b:58:c6:36:e0:6a:26:6a:
                    8c:a1:d9:5a:b8:07:2c:0b:e2:d1:74:2a:30:4b:c0:
                    86:07:ad:7c:02:23:ca:bb:58:72:ad:e1:22:b1:c8:
                    60:d5:87:90:16:f9:ce:ac:2a:4c:24:24:6b:9a:04:
                    0e:10:b9:32:6b:18:79:f1:47:38:73:d1:da:ed:68:
                    31:a2:ab:9d:b8:a6:58:0d:25:35:45:9e:48:48:99:
                    b2:80:63:5f:bf:38:66:cd:62:e1:73:e4:84:5f:e8:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:D5:02:C0:69:23:6B:AA:8F:CC:85:23:B1:B6:24:06:C5:F2:9F
            X509v3 Authority Key Identifier:
                keyid:98:36:DD:AF:4A:06:3B:35:C5:99:D8:E7:42:40:14:04:79:43:4C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/9836DDAF4A063B35C599D8E74240140479434CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9836DDAF4A063B35C599D8E74240140479434CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94seHuSZdCHRiN4ijPpGKFezRL8nBDTZncq6DRhTWW7R/0/34352e3137332e32382e302f32342d3234203d3e20323638373839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:23:0c:95:b6:f5:21:50:f1:b0:6e:96:59:d5:9b:d6:87:11:
         57:ce:4a:e2:92:ca:7d:a6:0b:26:f2:71:ad:d0:54:3a:f4:b6:
         23:86:78:b9:ea:93:d4:ed:29:3f:12:0c:4b:8d:ec:90:7a:2d:
         9f:8a:9e:8d:9c:b9:ad:45:d8:09:a4:e0:cb:0a:99:c4:4f:0d:
         6e:57:53:06:03:7d:7f:b3:a4:e5:b2:02:df:ef:ad:90:c8:b6:
         4b:0a:18:10:34:eb:31:1d:b3:a7:56:aa:9b:44:6f:e3:b6:5f:
         7c:04:96:7a:ae:f0:08:26:26:d8:55:14:30:8a:47:c1:a0:32:
         7b:a7:04:8c:c4:36:2b:84:d9:0b:aa:d1:ae:04:4e:47:d5:3f:
         dc:e6:34:a1:47:e3:78:53:27:08:57:69:20:30:31:92:81:ad:
         aa:00:77:72:f4:8f:74:58:3c:4c:08:e9:9a:7f:2b:6e:fc:ae:
         fb:57:c4:e3:b8:1f:50:6f:95:aa:5b:19:13:ea:e1:b5:20:cd:
         8e:9c:91:bd:a4:c4:31:2d:b8:0d:68:df:8a:cd:da:56:98:1a:
         6a:79:5e:52:5a:c7:1e:ed:2d:dd:de:75:b0:93:85:4e:64:f0:
         70:cc:0b:27:63:21:2c:43:af:32:d4:70:8c:5e:2a:7b:21:32:
         7c:99:ac:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVSFxIZ/s9jhJ3N1qiBVJwl5MLEYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzNkREQUY0QTA2M0IzNUM1OTlEOEU3NDI0MDE0MDQ3
OTQzNENFRTAeFw0yNDAzMTExOTI2MDVaFw0yNTAzMTAxOTMxMDVaMDMxMTAvBgNV
BAMTKDgxRkZENTAyQzA2OTIzNkJBQThGQ0M4NTIzQjFCNjI0MDZDNUYyOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRvAZOsFfvOSevLzAVS+paOhLn
++NpvKsneb14DSG3X0bh0vLtVT+KLEOrj3Rz64Yqzn3/pLCs/LJoLeodj+MmfxwN
YMYNOB9A44mMcy24Lx/PF8OHzeBRFtsXXq7U+wC0eo9NWM7yReXzP6Ql1QTayUn1
WBJwa7jaFHMps2qyoylpzNFh/DddQGSWY3Dui3DmfXuTHQyFY0Ejki9LWMY24Gom
aoyh2Vq4BywL4tF0KjBLwIYHrXwCI8q7WHKt4SKxyGDVh5AW+c6sKkwkJGuaBA4Q
uTJrGHnxRzhz0drtaDGiq524plgNJTVFnkhImbKAY1+/OGbNYuFz5IRf6B4xAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgf/VAsBpI2uqj8yFI7G2JAbF8p8wHwYDVR0j
BBgwFoAUmDbdr0oGOzXFmdjnQkAUBHlDTO4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTRzZUh1U1pkQ0hSaU40aWpQcEdLRmV6Ukw4bkJEVFpuY3E2RFJoVFdX
N1IvMC85ODM2RERBRjRBMDYzQjM1QzU5OUQ4RTc0MjQwMTQwNDc5NDM0Q0VFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4MzZEREFGNEEwNjNCMzVD
NTk5RDhFNzQyNDAxNDA0Nzk0MzRDRUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzk0c2VIdVNaZENIUmlONGlqUHBHS0ZlelJMOG5CRFRabmNxNkRSaFRXVzdSLzAv
MzQzNTJlMzEzNzMzMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzczODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa0cMA0GCSqGSIb3DQEBCwUAA4IBAQByIwyVtvUh
UPGwbpZZ1ZvWhxFXzkriksp9pgsm8nGt0FQ69LYjhni56pPU7Sk/EgxLjeyQei2f
ip6NnLmtRdgJpODLCpnETw1uV1MGA31/s6TlsgLf762QyLZLChgQNOsxHbOnVqqb
RG/jtl98BJZ6rvAIJibYVRQwikfBoDJ7pwSMxDYrhNkLqtGuBE5H1T/c5jShR+N4
UycIV2kgMDGSga2qAHdy9I90WDxMCOmafytu/K77V8TjuB9Qb5WqWxkT6uG1IM2O
nJG9pMQxLbgNaN+KzdpWmBpqeV5SWsce7S3d3nWwk4VOZPBwzAsnYyEsQ68y1HCM
Xip7ITJ8maw9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org