Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32322d3232203d3e20323638333033.roa
File:                     34352e3233372e3231322e302f32322d3232203d3e20323638333033.roa (raw, json)
Hash identifier:          h7AJ4SwwXtQXn16qykj5utF1yfbY1y+vh7TEq7rzGvI=
Subject key identifier:   F8:17:DB:CA:AD:D1:8A:6E:72:41:61:80:4A:DC:1E:98:CB:6D:46:4E
Certificate issuer:       /CN=32CDBF70992C95E39533AD8FC1EC9439AD7E5182
Certificate serial:       2E7FD0581DF93934515D4C2D2FA5E2A0E7287183
Authority key identifier: 32:CD:BF:70:99:2C:95:E3:95:33:AD:8F:C1:EC:94:39:AD:7E:51:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32322d3232203d3e20323638333033.roa
Signing time:             Mon 12 Jun 2023 20:14:09 +0000
ROA not before:           Mon 12 Jun 2023 20:09:09 +0000
ROA not after:            Mon 10 Jun 2024 20:14:09 +0000
asID:                     268303
IP address blocks:        45.237.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:7f:d0:58:1d:f9:39:34:51:5d:4c:2d:2f:a5:e2:a0:e7:28:71:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32CDBF70992C95E39533AD8FC1EC9439AD7E5182
        Validity
            Not Before: Jun 12 20:09:09 2023 GMT
            Not After : Jun 10 20:14:09 2024 GMT
        Subject: CN=F817DBCAADD18A6E724161804ADC1E98CB6D464E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:83:6d:49:fc:66:60:39:f3:13:1e:c7:03:ef:
                    c1:f0:35:9f:87:ec:32:23:9b:cb:f3:68:86:5d:82:
                    c1:cf:56:fc:df:4f:f3:01:f6:82:d0:28:1f:c1:e9:
                    0f:6c:26:6b:e6:73:dc:81:78:89:14:ed:53:24:1d:
                    e9:6a:9c:c6:8c:2c:2b:a4:95:9e:34:a7:27:34:86:
                    83:f7:74:07:42:e5:c1:af:ba:4f:e1:da:2e:c0:f1:
                    99:d1:9b:d3:af:85:49:49:6d:bb:89:3c:87:fd:03:
                    e5:4c:fd:9b:b1:ac:80:d1:46:e5:e2:02:0c:db:e7:
                    f0:e3:ca:21:a6:86:49:70:19:af:42:10:7f:5b:7f:
                    3f:d0:97:dd:1b:a3:da:ee:c6:31:f1:cc:56:aa:9b:
                    cf:42:be:58:9a:71:45:c1:84:d5:3b:d6:2c:f7:bf:
                    3f:67:dd:a4:50:b2:64:4d:bf:7a:cc:5f:eb:5e:ff:
                    32:39:31:34:dc:2e:a4:aa:95:84:20:99:13:09:14:
                    cb:26:48:75:b7:9f:9e:00:f8:83:08:4e:12:3b:60:
                    ca:8e:7e:94:cd:f6:51:83:20:cd:da:ce:04:9e:6a:
                    b7:02:03:42:a6:1e:db:05:53:75:5f:e6:46:63:80:
                    4a:0a:f7:f5:2a:4f:7d:87:94:6a:53:d9:d9:3f:fe:
                    4f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:17:DB:CA:AD:D1:8A:6E:72:41:61:80:4A:DC:1E:98:CB:6D:46:4E
            X509v3 Authority Key Identifier:
                keyid:32:CD:BF:70:99:2C:95:E3:95:33:AD:8F:C1:EC:94:39:AD:7E:51:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32CDBF70992C95E39533AD8FC1EC9439AD7E5182.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/34352e3233372e3231322e302f32322d3232203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:99:aa:6e:62:78:a0:1a:2b:f9:c8:7a:0e:6f:68:1a:ba:
         d8:88:f3:7e:3d:df:b9:fe:e0:d8:f6:97:20:6c:db:25:59:06:
         9f:ff:fc:a5:67:7e:81:d5:ef:52:29:35:48:61:da:66:2e:6a:
         63:c6:38:38:cf:86:84:51:ec:fb:09:d0:ec:f1:45:05:ac:70:
         d1:2e:0a:51:30:94:c0:31:a2:e1:40:4e:f3:d8:88:8c:3c:7c:
         cb:86:b7:ac:c1:7e:91:d3:b0:9c:2d:41:be:60:a8:b4:f0:37:
         ea:c4:a3:ae:14:e6:d9:fa:b0:ab:0d:92:64:7a:a2:9c:dd:56:
         7a:10:e2:82:89:73:cb:d7:e9:14:46:b6:d6:dc:27:0d:ac:57:
         c0:c4:c5:0e:6c:ea:4e:61:42:ed:ed:4f:a1:af:df:42:29:de:
         b0:0a:a9:0a:03:ce:78:dd:8b:2f:5f:49:cf:22:88:61:c6:51:
         7e:90:ee:81:20:69:c4:84:7b:37:d3:bb:17:4a:57:71:5f:6b:
         48:a5:b2:ef:d5:f7:2f:89:97:cb:62:d9:86:39:9f:70:c7:c8:
         4a:8c:c5:c9:eb:99:53:7c:af:e8:f9:87:51:ab:5a:fa:4b:0c:
         5c:2f:4a:ff:b6:ff:ab:a8:3f:79:34:f4:96:31:47:f6:d9:89:
         cf:fd:de:76
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULn/QWB35OTRRXUwtL6XioOcocYMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzJDREJGNzA5OTJDOTVFMzk1MzNBRDhGQzFFQzk0MzlB
RDdFNTE4MjAeFw0yMzA2MTIyMDA5MDlaFw0yNDA2MTAyMDE0MDlaMDMxMTAvBgNV
BAMTKEY4MTdEQkNBQUREMThBNkU3MjQxNjE4MDRBREMxRTk4Q0I2RDQ2NEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkg21J/GZgOfMTHscD78HwNZ+H
7DIjm8vzaIZdgsHPVvzfT/MB9oLQKB/B6Q9sJmvmc9yBeIkU7VMkHelqnMaMLCuk
lZ40pyc0hoP3dAdC5cGvuk/h2i7A8ZnRm9OvhUlJbbuJPIf9A+VM/ZuxrIDRRuXi
Agzb5/DjyiGmhklwGa9CEH9bfz/Ql90bo9ruxjHxzFaqm89CvliacUXBhNU71iz3
vz9n3aRQsmRNv3rMX+te/zI5MTTcLqSqlYQgmRMJFMsmSHW3n54A+IMIThI7YMqO
fpTN9lGDIM3azgSearcCA0KmHtsFU3Vf5kZjgEoK9/UqT32HlGpT2dk//k/1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+Bfbyq3Rim5yQWGAStwemMttRk4wHwYDVR0j
BBgwFoAUMs2/cJksleOVM62PweyUOa1+UYIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhHNU5laFNBV1F5a1NDc2Z0THpqaEdlY24xbXdrMUJqa3VFSnJqWmdQ
a2IvMC8zMkNEQkY3MDk5MkM5NUUzOTUzM0FEOEZDMUVDOTQzOUFEN0U1MTgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyQ0RCRjcwOTkyQzk1RTM5
NTMzQUQ4RkMxRUM5NDM5QUQ3RTUxODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIRzVOZWhTQVdReWtTQ3NmdEx6amhHZWNuMW13azFCamt1RUpyalpnUGtiLzAv
MzQzNTJlMzIzMzM3MmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMzMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7dQwDQYJKoZIhvcNAQELBQADggEBAB2lmapu
YnigGiv5yHoOb2gautiI834937n+4Nj2lyBs2yVZBp///KVnfoHV71IpNUhh2mYu
amPGODjPhoRR7PsJ0OzxRQWscNEuClEwlMAxouFATvPYiIw8fMuGt6zBfpHTsJwt
Qb5gqLTwN+rEo64U5tn6sKsNkmR6opzdVnoQ4oKJc8vX6RRGttbcJw2sV8DExQ5s
6k5hQu3tT6Gv30Ip3rAKqQoDznjdiy9fSc8iiGHGUX6Q7oEgacSEezfTuxdKV3Ff
a0ilsu/V9y+Jl8ti2YY5n3DHyEqMxcnrmVN8r+j5h1GrWvpLDFwvSv+2/6uoP3k0
9JYxR/bZic/93nY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org