Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32332d3233203d3e20323637393838.roa
File:                     34352e3136362e3139382e302f32332d3233203d3e20323637393838.roa (raw, json)
Hash identifier:          ioGZaMW10R5WoGrQrMZR3KXYJATa5LDUcelgqtm5Un0=
Subject key identifier:   DF:F4:80:66:DF:09:27:C9:A0:78:FC:C5:53:52:DF:EA:B5:0C:8E:C3
Certificate issuer:       /CN=B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64
Certificate serial:       5D289FDAA3C56338982F24A0E4B43A0544E7D0B7
Authority key identifier: B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32332d3233203d3e20323637393838.roa
Signing time:             Wed 11 Aug 2021 13:00:01 +0000
ROA not before:           Wed 11 Aug 2021 12:55:01 +0000
ROA not after:            Thu 11 Aug 2022 13:00:01 +0000
asID:                     267988
IP address blocks:        45.166.198.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:28:9f:da:a3:c5:63:38:98:2f:24:a0:e4:b4:3a:05:44:e7:d0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64
        Validity
            Not Before: Aug 11 12:55:01 2021 GMT
            Not After : Aug 11 13:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:54:c6:40:06:00:8e:a2:5b:5b:76:42:0b:
                    e9:34:e9:f7:7f:8d:41:d6:0c:5e:f2:30:94:99:8b:
                    df:97:2e:93:45:7e:b6:cc:c9:3f:77:1f:1f:ca:70:
                    dd:b4:60:7c:40:c8:6a:84:a8:7d:5a:9b:46:2d:e3:
                    b7:c8:dd:e3:20:21:ea:36:0b:13:79:f1:eb:55:91:
                    e4:07:83:f9:71:08:d6:f7:70:77:cb:62:60:46:30:
                    21:06:1f:eb:c0:6f:b2:11:53:7b:48:6a:55:6e:d2:
                    ea:92:f1:1c:ab:0e:3a:04:3f:7f:0e:53:db:06:fe:
                    ec:1f:27:8c:50:fa:70:ab:c9:37:b4:70:31:19:5e:
                    6e:6e:40:91:38:48:98:0f:bc:03:96:36:d8:24:f5:
                    fa:5d:1c:f5:44:f4:db:cf:0c:84:37:26:80:ba:91:
                    d8:07:0c:8c:a6:0a:72:06:c6:73:fb:24:36:c2:74:
                    9c:28:68:ec:fe:34:81:a6:0f:f1:ba:c8:65:54:30:
                    c6:24:cc:0f:e9:f5:66:55:4d:6f:6b:1e:55:04:3a:
                    bf:53:5a:ba:80:e0:f0:f0:02:b5:52:4d:b8:33:1c:
                    f1:5d:8f:6b:9d:cf:6d:a7:63:3b:07:80:89:39:b8:
                    c6:23:95:61:8b:fe:7a:45:7a:17:3f:95:85:ce:90:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:80:66:DF:09:27:C9:A0:78:FC:C5:53:52:DF:EA:B5:0C:8E:C3
            X509v3 Authority Key Identifier:
                keyid:B9:E1:CA:F4:DA:2C:CD:BE:E0:92:35:BF:DF:A9:00:FB:6D:8E:4F:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9E1CAF4DA2CCDBEE09235BFDFA900FB6D8E4F64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J1R71WVD1whgDhWqzMLmJYoweZWjrSL39LuYv86KdCP/0/34352e3136362e3139382e302f32332d3233203d3e20323637393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:50:6e:8a:38:dd:af:0c:fb:4d:c2:d3:cb:c2:d4:4a:d3:c6:
         5a:33:76:d7:2e:22:cc:6e:87:d9:3f:12:ff:ef:9b:d7:6f:5e:
         46:5d:1b:8a:ae:bb:4a:ba:83:79:a3:57:35:4c:69:83:9a:7e:
         58:27:82:c8:0e:b1:9b:ac:8f:2e:61:cb:de:12:34:00:78:b6:
         dd:cd:8e:fc:c3:f8:0e:53:a3:d3:83:5f:e6:88:68:59:45:bd:
         86:73:d8:65:85:21:2e:9c:11:27:92:c1:0f:9a:f7:4b:c5:61:
         1a:b0:65:97:cf:fc:27:6d:80:db:6b:72:8d:c7:ac:45:d9:3f:
         a0:17:d7:05:f1:25:14:3b:c3:76:98:d5:42:a6:7e:90:d5:97:
         7c:1e:c7:f5:a3:96:6d:48:b6:bb:90:de:69:d4:da:f0:e6:3e:
         15:3e:80:d7:70:be:30:23:1a:c6:ca:6b:87:0c:14:11:59:0a:
         f5:bc:a1:9c:9a:36:c1:dc:5e:4d:82:01:74:eb:e6:99:17:76:
         10:8f:ee:72:67:22:9a:a9:e9:97:ff:06:26:4c:db:42:81:19:
         c1:37:1e:4b:46:5f:74:e0:ec:ef:7b:46:a4:58:d0:01:f9:1b:
         3c:ea:ef:3b:86:45:7c:a3:1f:c8:12:01:31:39:b3:7a:b8:3b:
         b3:bf:a1:7f
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUXSif2qPFYziYLySg5LQ6BUTn0LcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjlFMUNBRjREQTJDQ0RCRUUwOTIzNUJGREZBOTAwRkI2
RDhFNEY2NDAeFw0yMTA4MTExMjU1MDFaFw0yMjA4MTExMzAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzA4QjU0QzY0MDA2MDA4RUEy
NUI1Qjc2NDIwQkU5MzRFOUY3N0Y4RDQxRDYwQzVFRjIzMDk0OTk4QkRGOTcyRTkz
NDU3RUI2Q0NDOTNGNzcxRjFGQ0E3MEREQjQ2MDdDNDBDODZBODRBODdENUE5QjQ2
MkRFM0I3QzhEREUzMjAyMUVBMzYwQjEzNzlGMUVCNTU5MUU0MDc4M0Y5NzEwOEQ2
Rjc3MDc3Q0I2MjYwNDYzMDIxMDYxRkVCQzA2RkIyMTE1MzdCNDg2QTU1NkVEMkVB
OTJGMTFDQUIwRTNBMDQzRjdGMEU1M0RCMDZGRUVDMUYyNzhDNTBGQTcwQUJDOTM3
QjQ3MDMxMTk1RTZFNkU0MDkxMzg0ODk4MEZCQzAzOTYzNkQ4MjRGNUZBNUQxQ0Y1
NDRGNERCQ0YwQzg0MzcyNjgwQkE5MUQ4MDcwQzhDQTYwQTcyMDZDNjczRkIyNDM2
QzI3NDlDMjg2OEVDRkUzNDgxQTYwRkYxQkFDODY1NTQzMEM2MjRDQzBGRTlGNTY2
NTU0RDZGNkIxRTU1MDQzQUJGNTM1QUJBODBFMEYwRjAwMkI1NTI0REI4MzMxQ0Yx
NUQ4RjZCOURDRjZEQTc2MzNCMDc4MDg5MzlCOEM2MjM5NTYxOEJGRTdBNDU3QTE3
M0Y5NTg1Q0U5MDg4NDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwItUxkAGAI6iW1t2QgvpNOn3f41B1gxe8jCUmYvfly6TRX62zMk/
dx8fynDdtGB8QMhqhKh9WptGLeO3yN3jICHqNgsTefHrVZHkB4P5cQjW93B3y2Jg
RjAhBh/rwG+yEVN7SGpVbtLqkvEcqw46BD9/DlPbBv7sHyeMUPpwq8k3tHAxGV5u
bkCROEiYD7wDljbYJPX6XRz1RPTbzwyENyaAupHYBwyMpgpyBsZz+yQ2wnScKGjs
/jSBpg/xushlVDDGJMwP6fVmVU1vax5VBDq/U1q6gODw8AK1Uk24MxzxXY9rnc9t
p2M7B4CJObjGI5Vhi/56RXoXP5WFzpCIQQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FN/0gGbfCSfJoHj8xVNS3+q1DI7DMB8GA1UdIwQYMBaAFLnhyvTaLM2+4JI1v9+p
APttjk9kMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlKMVI3MVdWRDF3aGdE
aFdxek1MbUpZb3dlWldqclNMMzlMdVl2ODZLZENQLzAvQjlFMUNBRjREQTJDQ0RC
RUUwOTIzNUJGREZBOTAwRkI2RDhFNEY2NC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9COUUxQ0FGNERBMkNDREJFRTA5MjM1QkZERkE5MDBGQjZEOEU0
RjY0LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85SjFSNzFXVkQxd2hnRGhXcXpN
TG1KWW93ZVpXanJTTDM5THVZdjg2S2RDUC8wLzM0MzUyZTMxMzYzNjJlMzEzOTM4
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3MzkzODM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
LabGMA0GCSqGSIb3DQEBCwUAA4IBAQBOUG6KON2vDPtNwtPLwtRK08ZaM3bXLiLM
bofZPxL/75vXb15GXRuKrrtKuoN5o1c1TGmDmn5YJ4LIDrGbrI8uYcveEjQAeLbd
zY78w/gOU6PTg1/miGhZRb2Gc9hlhSEunBEnksEPmvdLxWEasGWXz/wnbYDba3KN
x6xF2T+gF9cF8SUUO8N2mNVCpn6Q1Zd8Hsf1o5ZtSLa7kN5p1Nrw5j4VPoDXcL4w
IxrGymuHDBQRWQr1vKGcmjbB3F5NggF06+aZF3YQj+5yZyKaqemX/wYmTNtCgRnB
Nx5LRl904Ozve0akWNAB+Rs86u87hkV8ox/IEgExObN6uDuzv6F/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org