Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e203532383538.roa
File:                     34352e3233392e302e302f32322d3234203d3e203532383538.roa (raw, json)
Hash identifier:          Vv9LfmvoNCoBMmNk59lSwyPTDVrTOlVkWde7i8hCSQo=
Subject key identifier:   CE:ED:09:79:9E:04:1A:08:72:37:10:F4:76:32:B4:A1:7D:82:D8:A9
Certificate issuer:       /CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
Certificate serial:       4D1E601CEF387A22585851BE4C57A953964A36B0
Authority key identifier: C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e203532383538.roa
Signing time:             Thu 14 Dec 2023 11:30:55 +0000
ROA not before:           Thu 14 Dec 2023 11:25:55 +0000
ROA not after:            Thu 12 Dec 2024 11:30:55 +0000
asID:                     52858
IP address blocks:        45.239.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1e:60:1c:ef:38:7a:22:58:58:51:be:4c:57:a9:53:96:4a:36:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4
        Validity
            Not Before: Dec 14 11:25:55 2023 GMT
            Not After : Dec 12 11:30:55 2024 GMT
        Subject: CN=CEED09799E041A08723710F47632B4A17D82D8A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:03:4d:83:be:d4:83:0f:c3:26:29:ee:89:
                    5d:fd:98:bf:9e:03:e7:e4:2b:30:4e:f8:50:d0:7c:
                    31:7f:0b:ca:bd:c7:8a:8e:93:a3:bd:1a:bd:5c:99:
                    d6:79:ca:08:4f:47:c6:3a:c9:3c:1e:cd:69:43:36:
                    c7:d1:84:d1:8c:39:a1:6a:65:c0:77:3a:b2:bd:19:
                    16:1c:fe:60:1a:be:57:a4:cc:cd:50:0d:1f:e7:6f:
                    3c:0d:9b:f6:21:1a:be:c1:88:b7:b6:2c:c5:9a:e8:
                    97:96:93:40:c8:4e:21:d0:e2:c2:af:fa:33:f0:54:
                    07:a0:3a:11:2d:d7:29:53:c3:27:bd:8f:13:87:08:
                    4c:68:e4:ec:8d:80:ec:b1:12:fa:d4:54:15:78:6d:
                    85:e6:04:c5:44:23:c8:08:39:ab:0c:8c:05:62:b6:
                    26:26:b5:c0:8b:b8:0c:ef:24:07:b8:3e:2a:70:2c:
                    ea:cc:08:53:73:37:af:2c:70:4b:04:6c:2d:48:46:
                    dd:05:63:7c:88:90:05:3d:2e:c5:96:3c:59:93:35:
                    a7:f1:66:10:e8:a3:fb:b2:4c:5d:01:fc:0b:14:ea:
                    fd:cf:cf:46:f1:5c:09:58:33:18:d5:f6:1b:df:4e:
                    e2:e4:83:47:1e:48:e6:ad:a3:d0:50:3a:58:38:8d:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:09:79:9E:04:1A:08:72:37:10:F4:76:32:B4:A1:7D:82:D8:A9
            X509v3 Authority Key Identifier:
                keyid:C5:22:49:F9:D4:3C:52:D0:B5:EC:A6:B4:1B:52:90:8B:B9:4A:C9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C52249F9D43C52D0B5ECA6B41B52908BB94AC9D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SWqSYYAsFksNpcrhgDDt5o9c2iY8joe5iGTup7CMUxT/0/34352e3233392e302e302f32322d3234203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:84:3f:74:8b:8b:fb:aa:a1:8c:e2:02:33:19:34:b0:8d:dc:
         91:f6:4a:e2:5a:a7:ac:7e:d9:1b:ea:3d:5e:64:e9:82:1d:d6:
         cd:fe:fd:2b:2e:4b:2f:b5:05:c8:42:e2:9b:37:80:d4:b6:03:
         43:b3:5a:1a:91:f5:82:f5:bf:74:ad:e9:d4:7f:f7:25:04:b0:
         fc:8c:04:13:12:a2:aa:3b:9b:86:23:34:c8:c0:ea:70:8d:03:
         bb:7a:dd:6f:6d:58:70:56:63:b4:5f:d9:e6:a2:5f:f6:8b:a0:
         0c:5c:47:53:d6:b7:de:53:44:14:9c:4a:8d:4d:58:46:16:ad:
         99:8a:cd:a5:d8:79:86:5d:5f:6a:54:2b:8d:f6:61:30:65:d7:
         2e:d0:d9:32:cd:c5:ec:3b:aa:d2:67:30:8d:50:28:5c:5b:67:
         50:71:3b:47:98:90:1d:d1:d8:ed:dd:9b:97:b2:ee:47:13:2f:
         9e:e6:c9:a5:a6:b9:60:d6:0b:de:f8:d6:8f:67:92:a1:e9:e9:
         4b:d4:5e:62:a0:fc:81:34:eb:a6:f4:c8:99:86:3f:74:60:1c:
         76:94:3a:f0:44:ee:7c:8e:01:3f:11:71:fd:99:18:92:7f:21:
         2e:47:1c:21:a1:49:57:41:b2:5c:b2:27:a1:df:dc:23:49:9c:
         f3:04:80:c6
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUTR5gHO84eiJYWFG+TFepU5ZKNrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzUyMjQ5RjlENDNDNTJEMEI1RUNBNkI0MUI1MjkwOEJC
OTRBQzlENDAeFw0yMzEyMTQxMTI1NTVaFw0yNDEyMTIxMTMwNTVaMDMxMTAvBgNV
BAMTKENFRUQwOTc5OUUwNDFBMDg3MjM3MTBGNDc2MzJCNEExN0Q4MkQ4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwQNNg77Ugw/DJinuiV39mL+e
A+fkKzBO+FDQfDF/C8q9x4qOk6O9Gr1cmdZ5yghPR8Y6yTwezWlDNsfRhNGMOaFq
ZcB3OrK9GRYc/mAavlekzM1QDR/nbzwNm/YhGr7BiLe2LMWa6JeWk0DITiHQ4sKv
+jPwVAegOhEt1ylTwye9jxOHCExo5OyNgOyxEvrUVBV4bYXmBMVEI8gIOasMjAVi
tiYmtcCLuAzvJAe4PipwLOrMCFNzN68scEsEbC1IRt0FY3yIkAU9LsWWPFmTNafx
ZhDoo/uyTF0B/AsU6v3Pz0bxXAlYMxjV9hvfTuLkg0ceSOato9BQOlg4jaaZAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUzu0JeZ4EGghyNxD0djK0oX2C2KkwHwYDVR0j
BBgwFoAUxSJJ+dQ8UtC17Ka0G1KQi7lKydQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVNXcVNZWUFzRmtzTnBjcmhnRER0NW85YzJpWThqb2U1aUdUdXA3Q01V
eFQvMC9DNTIyNDlGOUQ0M0M1MkQwQjVFQ0E2QjQxQjUyOTA4QkI5NEFDOUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M1MjI0OUY5RDQzQzUyRDBC
NUVDQTZCNDFCNTI5MDhCQjk0QUM5RDQuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlTV3FTWVlBc0Zrc05wY3JoZ0REdDVvOWMyaVk4am9lNWlHVHVwN0NNVXhULzAv
MzQzNTJlMzIzMzM5MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzIzODM1
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAIt7wAwDQYJKoZIhvcNAQELBQADggEBADKEP3SLi/uqoYzi
AjMZNLCN3JH2SuJap6x+2RvqPV5k6YId1s3+/SsuSy+1BchC4ps3gNS2A0OzWhqR
9YL1v3St6dR/9yUEsPyMBBMSoqo7m4YjNMjA6nCNA7t63W9tWHBWY7Rf2eaiX/aL
oAxcR1PWt95TRBScSo1NWEYWrZmKzaXYeYZdX2pUK432YTBl1y7Q2TLNxew7qtJn
MI1QKFxbZ1BxO0eYkB3R2O3dm5ey7kcTL57myaWmuWDWC9741o9nkqHp6UvUXmKg
/IE066b0yJmGP3RgHHaUOvBE7nyOAT8Rcf2ZGJJ/IS5HHCGhSVdBslyyJ6Hf3CNJ
nPMEgMY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org