Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa
File:                     34352e3233302e39322e302f32322d3234203d3e20323637313734.roa (raw, json)
Hash identifier:          27EUWivP28UFDV/YUG2XvnKKUzLzsMOyDVNNlduMW8E=
Subject key identifier:   65:C2:14:1C:76:A0:4C:F4:74:76:ED:EB:CF:91:5A:E0:B9:6F:19:E8
Certificate issuer:       /CN=CF9E64A37B75832A1D72910183E2819D9C10D585
Certificate serial:       4E152CD360CF6C5AFCFCCBDEF041B87DA1FC6779
Authority key identifier: CF:9E:64:A3:7B:75:83:2A:1D:72:91:01:83:E2:81:9D:9C:10:D5:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF9E64A37B75832A1D72910183E2819D9C10D585.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa
Signing time:             Tue 20 Feb 2024 19:03:30 +0000
ROA not before:           Tue 20 Feb 2024 18:58:30 +0000
ROA not after:            Tue 18 Feb 2025 19:03:30 +0000
asID:                     267174
IP address blocks:        45.230.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:15:2c:d3:60:cf:6c:5a:fc:fc:cb:de:f0:41:b8:7d:a1:fc:67:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF9E64A37B75832A1D72910183E2819D9C10D585
        Validity
            Not Before: Feb 20 18:58:30 2024 GMT
            Not After : Feb 18 19:03:30 2025 GMT
        Subject: CN=65C2141C76A04CF47476EDEBCF915AE0B96F19E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:8d:cd:10:be:a3:61:24:db:fd:cf:06:9c:
                    e7:a7:ab:d0:5f:74:4a:7b:5e:ea:86:e8:86:14:d2:
                    dc:5e:44:5d:4d:3d:8e:42:0b:53:c6:7c:26:63:d9:
                    30:5c:af:37:6d:a1:ad:89:c2:12:58:55:0a:3d:dc:
                    d7:fd:f9:4e:89:4d:61:6e:36:0f:42:d7:f0:f2:f9:
                    b4:d1:eb:b8:df:50:15:71:71:c2:51:9e:0f:ba:cb:
                    32:91:9f:b3:69:66:70:de:3f:73:32:9b:5c:65:dd:
                    ae:d6:f1:e5:20:aa:62:ef:fb:62:11:ef:b4:ff:ef:
                    5d:5e:97:e5:03:73:d9:6a:c2:ea:17:d2:c4:c2:5d:
                    89:a2:a6:d7:86:31:c5:6a:ea:1a:7e:5b:6c:76:fa:
                    86:ab:f7:44:bc:f0:b9:ca:08:80:d3:33:bd:98:c2:
                    1d:f6:7b:e3:b3:f0:6d:79:39:2d:b5:fe:79:1f:07:
                    0b:5f:7f:cd:7e:91:5f:97:df:6f:36:29:34:9c:0a:
                    24:8c:82:2d:53:02:6e:8b:6b:59:3b:82:ef:45:9f:
                    46:06:d1:2e:33:18:9a:f9:c4:ee:ea:d2:77:9d:48:
                    0c:bf:3e:03:21:03:41:b9:64:3b:0f:b6:34:13:e8:
                    5b:36:b4:81:58:bf:f4:35:7c:c6:e4:c7:73:c4:db:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C2:14:1C:76:A0:4C:F4:74:76:ED:EB:CF:91:5A:E0:B9:6F:19:E8
            X509v3 Authority Key Identifier:
                keyid:CF:9E:64:A3:7B:75:83:2A:1D:72:91:01:83:E2:81:9D:9C:10:D5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/CF9E64A37B75832A1D72910183E2819D9C10D585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF9E64A37B75832A1D72910183E2819D9C10D585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/0/34352e3233302e39322e302f32322d3234203d3e20323637313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:6a:4f:ef:06:76:46:77:b1:6c:3d:e3:3c:1d:3e:4b:bb:ea:
         d3:b1:34:bc:c3:bd:44:ff:68:76:40:f5:c1:ca:a6:2f:0c:1f:
         3e:cf:19:5b:39:4e:38:9b:c2:fd:18:b0:6e:4e:e6:23:dd:d8:
         3e:05:0f:9e:88:62:5e:aa:e3:78:2a:20:3e:c1:38:1b:fe:d0:
         28:f2:bf:e1:99:b1:0f:36:f7:b3:e4:dc:8d:d1:92:08:bc:b1:
         30:52:55:67:0d:28:b1:5b:c8:16:74:86:38:d0:b0:cd:6e:9d:
         c8:96:5b:bb:83:a5:93:41:d0:51:e9:9c:80:82:56:0f:c7:92:
         bb:09:6b:cf:dc:b8:03:6a:7c:07:35:92:fd:ca:10:94:c7:e6:
         c5:2c:ac:46:a0:6b:50:9c:9b:2f:5d:09:a5:63:de:18:44:98:
         a9:0b:80:b8:6f:c8:2a:7a:f5:e4:5d:0f:e3:c7:ab:38:48:6a:
         f5:a2:b4:2c:15:ea:f7:9c:bf:c5:c4:d3:24:b8:40:f4:b8:04:
         61:96:a4:20:4b:c0:9c:14:c6:b7:2f:b8:e3:54:f6:76:5d:8a:
         3b:8b:73:64:1d:96:bc:e4:17:d3:29:53:90:14:e4:15:91:38:
         fe:80:1a:27:33:4e:bf:d2:1e:48:84:0f:9c:07:7c:09:d5:a1:
         da:38:14:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUThUs02DPbFr8/Mve8EG4faH8Z3kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Y5RTY0QTM3Qjc1ODMyQTFENzI5MTAxODNFMjgxOUQ5
QzEwRDU4NTAeFw0yNDAyMjAxODU4MzBaFw0yNTAyMTgxOTAzMzBaMDMxMTAvBgNV
BAMTKDY1QzIxNDFDNzZBMDRDRjQ3NDc2RURFQkNGOTE1QUUwQjk2RjE5RTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIY3NEL6jYSTb/c8GnOenq9Bf
dEp7XuqG6IYU0txeRF1NPY5CC1PGfCZj2TBcrzdtoa2JwhJYVQo93Nf9+U6JTWFu
Ng9C1/Dy+bTR67jfUBVxccJRng+6yzKRn7NpZnDeP3Mym1xl3a7W8eUgqmLv+2IR
77T/711el+UDc9lqwuoX0sTCXYmipteGMcVq6hp+W2x2+oar90S88LnKCIDTM72Y
wh32e+Oz8G15OS21/nkfBwtff81+kV+X3282KTScCiSMgi1TAm6La1k7gu9Fn0YG
0S4zGJr5xO7q0nedSAy/PgMhA0G5ZDsPtjQT6Fs2tIFYv/Q1fMbkx3PE28BVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUZcIUHHagTPR0du3rz5Fa4LlvGegwHwYDVR0j
BBgwFoAUz55ko3t1gyodcpEBg+KBnZwQ1YUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVhKTEJhbXZ5c2h6WVBnQkVzeXdwUnJHNUZvRWVaTm12Z0FEYzZleDg4
bmUvMC9DRjlFNjRBMzdCNzU4MzJBMUQ3MjkxMDE4M0UyODE5RDlDMTBENTg1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NGOUU2NEEzN0I3NTgzMkEx
RDcyOTEwMTgzRTI4MTlEOUMxMEQ1ODUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlYSkxCYW12eXNoellQZ0JFc3l3cFJyRzVGb0VlWk5tdmdBRGM2ZXg4OG5lLzAv
MzQzNTJlMzIzMzMwMmUzOTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeZcMA0GCSqGSIb3DQEBCwUAA4IBAQApak/vBnZG
d7FsPeM8HT5Lu+rTsTS8w71E/2h2QPXByqYvDB8+zxlbOU44m8L9GLBuTuYj3dg+
BQ+eiGJequN4KiA+wTgb/tAo8r/hmbEPNvez5NyN0ZIIvLEwUlVnDSixW8gWdIY4
0LDNbp3Illu7g6WTQdBR6ZyAglYPx5K7CWvP3LgDanwHNZL9yhCUx+bFLKxGoGtQ
nJsvXQmlY94YRJipC4C4b8gqevXkXQ/jx6s4SGr1orQsFer3nL/FxNMkuED0uARh
lqQgS8CcFMa3L7jjVPZ2XYo7i3NkHZa85BfTKVOQFOQVkTj+gBonM06/0h5IhA+c
B3wJ1aHaOBRH
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org