Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
File:                     34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa (raw, json)
Hash identifier:          Tk4jM/bWN9Hyyn4mdUB2KDxozRu4mz4b7RIJvKRsrj8=
Subject key identifier:   0E:8D:E1:EB:BD:C7:B8:33:99:0A:C2:E2:BA:93:19:2F:88:7B:CC:0D
Certificate issuer:       /CN=D01091DE5882CE0E4BA5DA7DFEC094B514608A6D
Certificate serial:       7773EFD60C1E9716748D62471923161BE4A3F6C7
Authority key identifier: D0:10:91:DE:58:82:CE:0E:4B:A5:DA:7D:FE:C0:94:B5:14:60:8A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa
Signing time:             Wed 12 Jul 2023 12:27:59 +0000
ROA not before:           Wed 12 Jul 2023 12:22:59 +0000
ROA not after:            Wed 10 Jul 2024 12:27:59 +0000
asID:                     268465
IP address blocks:        45.161.124.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:73:ef:d6:0c:1e:97:16:74:8d:62:47:19:23:16:1b:e4:a3:f6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D01091DE5882CE0E4BA5DA7DFEC094B514608A6D
        Validity
            Not Before: Jul 12 12:22:59 2023 GMT
            Not After : Jul 10 12:27:59 2024 GMT
        Subject: CN=0E8DE1EBBDC7B833990AC2E2BA93192F887BCC0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:d3:f4:29:07:27:4a:10:a2:87:cf:09:4b:
                    6e:f7:4f:b5:ee:32:c3:6b:e3:10:b8:bd:10:a1:bf:
                    3a:65:72:3f:24:93:bf:4c:5d:c5:59:f5:db:60:b4:
                    52:94:aa:d9:24:ed:3a:51:b3:63:98:84:b4:84:db:
                    18:09:6f:84:ae:ce:96:77:7b:0a:be:ae:4d:f1:a9:
                    4e:6d:30:2b:5d:66:28:37:c5:19:b7:75:77:a8:bb:
                    84:30:a6:72:aa:81:a4:18:a2:37:cd:e1:63:d9:b5:
                    8e:db:f8:a6:74:4b:fe:2f:15:4a:d0:32:f2:78:55:
                    1d:a3:d5:7f:07:db:67:ca:77:1f:c7:cc:5b:8b:54:
                    72:76:cd:ce:78:ca:c2:a0:1b:64:1c:68:3e:81:be:
                    48:62:5b:42:d4:45:fb:54:da:d0:b7:f5:6f:c0:1d:
                    52:5d:ea:cc:7b:fe:a6:16:5c:29:ba:c8:97:7a:8a:
                    94:52:b6:0b:d6:3f:fd:4d:c2:dd:ac:f9:37:1c:fe:
                    7e:b4:95:ad:bc:a1:36:90:e3:10:63:28:d3:06:9c:
                    58:50:54:8b:49:ed:3b:ce:ed:92:29:6b:8b:74:3d:
                    79:11:92:6a:0d:6c:c1:fd:9f:38:b9:c1:7f:04:2c:
                    fd:e3:a4:47:e5:e9:8b:30:9c:ec:c6:9e:25:8d:8c:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8D:E1:EB:BD:C7:B8:33:99:0A:C2:E2:BA:93:19:2F:88:7B:CC:0D
            X509v3 Authority Key Identifier:
                keyid:D0:10:91:DE:58:82:CE:0E:4B:A5:DA:7D:FE:C0:94:B5:14:60:8A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D01091DE5882CE0E4BA5DA7DFEC094B514608A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HjNudPfCuBLwUs4YKPRX25n7NqGWzjFXdZcwwhiZ8ev/0/34352e3136312e3132342e302f32322d3332203d3e20323638343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:20:2d:b9:3f:fc:23:6a:3e:62:ec:5a:7c:34:e5:ad:99:24:
         3a:01:d6:cd:3e:e1:a1:4f:45:38:cd:df:3a:88:79:64:04:33:
         e2:c1:52:09:d9:de:d9:48:ca:54:e0:b9:03:99:3e:91:af:f9:
         fc:8d:bd:0a:3a:ca:58:6b:d9:a6:2e:77:b1:f0:7a:8c:22:63:
         52:05:f3:e1:f4:df:25:5a:05:ee:a9:dd:c0:39:18:03:25:7c:
         09:f8:58:43:5e:e5:39:e5:5b:d5:0b:5a:0c:92:0a:dd:07:eb:
         05:6f:de:70:62:0e:2a:e8:6b:dc:bd:dd:ba:32:a2:86:bf:d0:
         35:71:0b:f9:79:4e:58:b0:11:a2:40:c1:f2:e7:8a:f6:54:c5:
         f2:29:77:77:9d:b9:69:20:7a:b8:46:29:0f:65:5f:75:90:96:
         8c:5d:63:ea:97:f4:43:dd:98:89:66:a2:b4:46:95:7e:df:8d:
         11:59:aa:6b:fa:6b:31:23:05:dd:c0:c4:7f:0d:35:7a:74:47:
         fd:a2:c5:9f:a3:4b:5e:21:05:2a:a3:9b:d7:09:87:f5:c3:65:
         e4:86:eb:99:7b:11:da:91:c6:69:21:31:50:8c:66:cd:6e:9b:
         54:43:a5:be:46:97:e5:0c:ca:29:18:b1:c2:91:c7:42:3c:96:
         e6:30:ab:86
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUd3Pv1gwelxZ0jWJHGSMWG+Sj9scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDAxMDkxREU1ODgyQ0UwRTRCQTVEQTdERkVDMDk0QjUx
NDYwOEE2RDAeFw0yMzA3MTIxMjIyNTlaFw0yNDA3MTAxMjI3NTlaMDMxMTAvBgNV
BAMTKDBFOERFMUVCQkRDN0I4MzM5OTBBQzJFMkJBOTMxOTJGODg3QkNDMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSQtP0KQcnShCih88JS273T7Xu
MsNr4xC4vRChvzplcj8kk79MXcVZ9dtgtFKUqtkk7TpRs2OYhLSE2xgJb4SuzpZ3
ewq+rk3xqU5tMCtdZig3xRm3dXeou4QwpnKqgaQYojfN4WPZtY7b+KZ0S/4vFUrQ
MvJ4VR2j1X8H22fKdx/HzFuLVHJ2zc54ysKgG2QcaD6BvkhiW0LURftU2tC39W/A
HVJd6sx7/qYWXCm6yJd6ipRStgvWP/1Nwt2s+Tcc/n60la28oTaQ4xBjKNMGnFhQ
VItJ7TvO7ZIpa4t0PXkRkmoNbMH9nzi5wX8ELP3jpEfl6YswnOzGniWNjE6/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDo3h673HuDOZCsLiupMZL4h7zA0wHwYDVR0j
BBgwFoAU0BCR3liCzg5Lpdp9/sCUtRRgim0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUhqTnVkUGZDdUJMd1VzNFlLUFJYMjVuN05xR1d6akZYZFpjd3doaVo4
ZXYvMC9EMDEwOTFERTU4ODJDRTBFNEJBNURBN0RGRUMwOTRCNTE0NjA4QTZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0QwMTA5MURFNTg4MkNFMEU0
QkE1REE3REZFQzA5NEI1MTQ2MDhBNkQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlIak51ZFBmQ3VCTHdVczRZS1BSWDI1bjdOcUdXempGWGRaY3d3aGlaOGV2LzAv
MzQzNTJlMzEzNjMxMmUzMTMyMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItoXwwDQYJKoZIhvcNAQELBQADggEBAFIgLbk/
/CNqPmLsWnw05a2ZJDoB1s0+4aFPRTjN3zqIeWQEM+LBUgnZ3tlIylTguQOZPpGv
+fyNvQo6ylhr2aYud7HweowiY1IF8+H03yVaBe6p3cA5GAMlfAn4WENe5TnlW9UL
WgySCt0H6wVv3nBiDiroa9y93boyooa/0DVxC/l5TliwEaJAwfLnivZUxfIpd3ed
uWkgerhGKQ9lX3WQloxdY+qX9EPdmIlmorRGlX7fjRFZqmv6azEjBd3AxH8NNXp0
R/2ixZ+jS14hBSqjm9cJh/XDZeSG65l7EdqRxmkhMVCMZs1um1RDpb5Gl+UMyikY
scKRx0I8luYwq4Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org