Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
File:                     34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier:          K5VeL9WZZ1qsAVusOv7/nu1QAfuwW+c9zslXeDTyT+Q=
Subject key identifier:   12:C9:13:EE:41:31:84:00:7C:33:CD:3A:18:04:4C:31:44:73:97:F3
Certificate issuer:       /CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
Certificate serial:       278B747F42C58BEC1421CED242DEE1301CBA826F
Authority key identifier: 2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa
Signing time:             Fri 08 Dec 2023 00:47:50 +0000
ROA not before:           Fri 08 Dec 2023 00:42:50 +0000
ROA not after:            Fri 06 Dec 2024 00:47:50 +0000
asID:                     268296
IP address blocks:        45.237.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8b:74:7f:42:c5:8b:ec:14:21:ce:d2:42:de:e1:30:1c:ba:82:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Validity
            Not Before: Dec  8 00:42:50 2023 GMT
            Not After : Dec  6 00:47:50 2024 GMT
        Subject: CN=12C913EE413184007C33CD3A18044C31447397F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:b9:cb:00:42:13:96:10:81:4a:b6:e8:cd:
                    4f:54:f0:4d:42:df:8a:b2:26:c7:d0:81:e2:11:8b:
                    a0:2b:18:88:d3:0c:26:e2:6a:43:46:10:e4:46:fa:
                    fe:2f:32:37:85:d4:15:bf:c2:7d:4c:73:ca:37:4b:
                    67:d4:14:9b:1d:40:20:a0:3a:89:70:55:2b:44:d5:
                    42:23:4c:f0:ae:f2:f2:d6:61:2a:67:81:1b:62:d2:
                    4e:e0:dc:69:50:ea:cb:ac:1a:e0:11:df:2e:28:4c:
                    c3:b8:f7:1e:6e:cf:9d:f0:92:28:2d:dd:9a:06:7b:
                    4d:81:8d:63:35:59:73:71:d6:fa:0e:08:62:14:e8:
                    41:00:0a:d2:8d:2d:3e:59:7f:9d:ed:5d:36:51:93:
                    ea:13:ce:22:03:b2:7a:d9:fe:28:f9:b3:c2:df:cf:
                    51:b4:0d:43:c0:19:40:17:d3:66:fa:5a:0d:26:26:
                    52:35:16:f6:00:e3:58:f6:29:59:5a:c6:cf:ce:53:
                    2e:aa:ad:17:38:e0:45:b9:20:a2:80:86:bc:71:8d:
                    32:d9:56:98:79:29:fc:51:76:b9:40:37:62:70:d4:
                    9d:19:89:cd:de:43:c0:ec:7c:ca:48:c1:e7:81:f3:
                    d6:6a:f9:c9:67:ef:cb:a0:1f:73:2c:bb:2b:71:47:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C9:13:EE:41:31:84:00:7C:33:CD:3A:18:04:4C:31:44:73:97:F3
            X509v3 Authority Key Identifier:
                keyid:2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/34352e3233372e3234352e302f32342d3234203d3e20323638323936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:af:c9:c6:16:54:6d:c1:f3:f4:97:4b:13:42:12:a6:65:3c:
         34:d1:8b:07:55:c8:5b:40:38:fe:f1:39:73:e8:3c:28:a3:d5:
         9e:5c:13:9c:3f:56:6a:06:e6:0e:94:d6:89:d1:79:06:a8:48:
         06:7d:68:ea:33:14:47:2a:fe:10:42:b5:09:3e:31:60:68:a4:
         b4:12:82:b6:57:30:dd:69:55:81:e4:5c:67:d8:5a:8d:0f:9b:
         1c:cd:1b:cd:f2:51:57:4a:b8:1c:16:33:ab:5e:5e:21:84:b0:
         2a:e0:e1:cb:77:d7:04:f4:22:36:15:ad:f2:b0:ee:1b:5f:76:
         8e:eb:aa:64:50:bc:4d:37:b3:b3:b6:83:21:80:e3:2d:10:ce:
         20:f0:a1:9e:37:7d:a5:ff:0d:55:7b:7a:b9:72:5d:0f:63:12:
         b3:68:d9:fc:f8:fc:f7:15:bb:48:a6:70:26:39:41:45:e9:da:
         f4:57:19:9c:cc:d1:b6:a0:5b:06:40:09:78:1c:74:7f:b2:67:
         27:7d:79:7c:85:5f:52:92:6a:04:38:8c:1c:c8:5b:17:d1:47:
         89:4c:a9:15:13:42:5d:58:cc:35:29:84:d1:fb:f8:15:47:30:
         b2:95:0f:a9:c0:8d:c6:9e:24:83:b0:79:16:53:43:b7:64:1c:
         19:dd:9e:48
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJ4t0f0LFi+wUIc7SQt7hMBy6gm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQ0M0NEODE1REE1OEQ4MEQ4QTRDODgwMjA1NTZDNDc0
QzE1MjBGMTAeFw0yMzEyMDgwMDQyNTBaFw0yNDEyMDYwMDQ3NTBaMDMxMTAvBgNV
BAMTKDEyQzkxM0VFNDEzMTg0MDA3QzMzQ0QzQTE4MDQ0QzMxNDQ3Mzk3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmrnLAEITlhCBSrbozU9U8E1C
34qyJsfQgeIRi6ArGIjTDCbiakNGEORG+v4vMjeF1BW/wn1Mc8o3S2fUFJsdQCCg
OolwVStE1UIjTPCu8vLWYSpngRti0k7g3GlQ6susGuAR3y4oTMO49x5uz53wkigt
3ZoGe02BjWM1WXNx1voOCGIU6EEACtKNLT5Zf53tXTZRk+oTziIDsnrZ/ij5s8Lf
z1G0DUPAGUAX02b6Wg0mJlI1FvYA41j2KVlaxs/OUy6qrRc44EW5IKKAhrxxjTLZ
Vph5KfxRdrlAN2Jw1J0Zic3eQ8DsfMpIweeB89Zq+cln78ugH3MsuytxR6AdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEskT7kExhAB8M806GARMMURzl/MwHwYDVR0j
BBgwFoAULUPNgV2ljYDYpMiAIFVsR0wVIPEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMC8yRDQzQ0Q4MTVEQTU4RDgwRDhBNEM4ODAyMDU1NkM0NzRDMTUyMEYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJENDNDRDgxNURBNThEODBE
OEE0Qzg4MDIwNTU2QzQ3NEMxNTIwRjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7fUwDQYJKoZIhvcNAQELBQADggEBAFyvycYW
VG3B8/SXSxNCEqZlPDTRiwdVyFtAOP7xOXPoPCij1Z5cE5w/VmoG5g6U1onReQao
SAZ9aOozFEcq/hBCtQk+MWBopLQSgrZXMN1pVYHkXGfYWo0PmxzNG83yUVdKuBwW
M6teXiGEsCrg4ct31wT0IjYVrfKw7htfdo7rqmRQvE03s7O2gyGA4y0QziDwoZ43
faX/DVV7erlyXQ9jErNo2fz4/PcVu0imcCY5QUXp2vRXGZzM0bagWwZACXgcdH+y
Zyd9eXyFX1KSagQ4jBzIWxfRR4lMqRUTQl1YzDUphNH7+BVHMLKVD6nAjcaeJIOw
eRZTQ7dkHBndnkg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org