Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa
File:                     34352e36352e3233302e302f32332d3233203d3e20323632363137.roa (raw, json)
Hash identifier:          pK71ukshxZ3OmWjCl832PS3BGb88czipAtw7imCZyjE=
Subject key identifier:   96:E7:40:E4:DC:4A:F1:22:FA:EF:DC:0E:4C:F3:31:0C:8F:6B:E5:E7
Certificate issuer:       /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial:       6CDA41538457177FF3CEEB5D57D2A88693933ECC
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa
Signing time:             Tue 13 Feb 2024 11:55:50 +0000
ROA not before:           Tue 13 Feb 2024 11:50:50 +0000
ROA not after:            Tue 11 Feb 2025 11:55:50 +0000
asID:                     262617
IP address blocks:        45.65.230.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:da:41:53:84:57:17:7f:f3:ce:eb:5d:57:d2:a8:86:93:93:3e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
        Validity
            Not Before: Feb 13 11:50:50 2024 GMT
            Not After : Feb 11 11:55:50 2025 GMT
        Subject: CN=96E740E4DC4AF122FAEFDC0E4CF3310C8F6BE5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c3:aa:79:ee:34:f2:95:39:eb:0b:c9:72:80:
                    d3:9c:a0:16:54:76:1e:e6:4f:4b:22:c6:14:af:26:
                    e5:0b:54:cc:d8:18:78:36:92:c1:d7:1e:f8:a4:ed:
                    29:ca:02:a1:7b:84:b8:41:a5:67:c5:c0:1b:f2:df:
                    3e:e1:c8:1b:a9:92:67:b6:61:81:3e:d5:67:39:df:
                    71:23:af:9e:29:d0:29:4b:34:6b:19:2c:51:77:9e:
                    b0:48:14:02:82:11:1e:4d:bb:10:96:9c:4a:1b:42:
                    b0:1b:37:e8:ae:fc:47:1c:5f:ce:d4:4f:b8:47:70:
                    9c:93:f1:14:3c:65:01:38:cc:69:a3:c8:0f:00:db:
                    3d:39:45:41:61:56:17:1a:8c:49:d8:a0:9a:1c:d6:
                    c8:41:8c:f7:7e:3f:2c:87:16:6d:72:19:69:fb:c3:
                    ea:55:fe:a8:4d:b6:2b:7a:3b:70:09:a1:52:28:87:
                    0f:ed:bf:fd:fb:01:38:57:31:b7:29:fb:73:24:e6:
                    c5:fa:37:28:6f:b6:ee:5e:9c:ff:cc:92:62:de:d7:
                    7a:8b:e6:28:ca:86:57:68:13:e9:51:73:a8:cc:64:
                    2b:d0:bc:83:d4:10:1c:87:ec:b1:d1:8c:e6:70:05:
                    2a:d8:0a:9a:fb:5d:a5:98:72:0f:78:95:3e:3e:13:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:40:E4:DC:4A:F1:22:FA:EF:DC:0E:4C:F3:31:0C:8F:6B:E5:E7
            X509v3 Authority Key Identifier:
                keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3233302e302f32332d3233203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:44:da:fe:b4:32:54:f1:bf:92:98:26:07:b3:94:5e:df:
         e7:23:9f:9f:2b:1e:ab:d3:e5:19:ae:3c:75:52:cc:45:0f:81:
         9b:a2:b7:0a:31:25:26:00:9f:84:1d:a6:29:f1:96:6a:49:85:
         23:e1:d2:85:e1:9b:61:ad:20:21:07:cd:e1:80:dd:a7:86:f0:
         f6:72:76:88:12:67:24:0a:67:72:48:04:e5:96:61:60:0b:ef:
         d5:71:36:85:66:b0:3b:91:0a:86:d7:8e:91:d9:c2:4e:c3:ad:
         b9:ab:fa:6e:0a:1c:11:8c:bd:9e:dc:7a:66:d4:74:a9:7b:5c:
         dd:6e:ad:34:ff:6f:c3:34:e6:5e:ed:b5:41:91:52:8a:76:4e:
         68:69:67:ff:46:cd:60:1b:87:e2:e4:f9:65:b1:bf:df:12:aa:
         f1:28:02:83:2e:8e:1e:b8:f0:be:63:ee:a6:ff:80:cf:64:77:
         be:f9:5b:fb:c4:37:e3:d4:2b:c0:0c:76:f3:d6:71:bb:cf:c3:
         b6:a5:f0:e6:67:b8:64:43:62:e7:71:87:c9:5a:35:06:ea:da:
         56:0b:48:82:df:30:0a:0f:ac:33:bf:50:6e:2c:e3:a4:c0:84:
         42:2a:94:96:77:ec:45:4c:99:a6:ef:13:cf:a9:0c:f1:c6:4e:
         ff:9e:23:a7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUbNpBU4RXF3/zzutdV9KohpOTPswwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwNUE1NDM3NUJEQjNGNUU2MzFGQjgyNzRCNTYxQUIy
NTExQjkwQTAeFw0yNDAyMTMxMTUwNTBaFw0yNTAyMTExMTU1NTBaMDMxMTAvBgNV
BAMTKDk2RTc0MEU0REM0QUYxMjJGQUVGREMwRTRDRjMzMTBDOEY2QkU1RTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkw6p57jTylTnrC8lygNOcoBZU
dh7mT0sixhSvJuULVMzYGHg2ksHXHvik7SnKAqF7hLhBpWfFwBvy3z7hyBupkme2
YYE+1Wc533Ejr54p0ClLNGsZLFF3nrBIFAKCER5NuxCWnEobQrAbN+iu/EccX87U
T7hHcJyT8RQ8ZQE4zGmjyA8A2z05RUFhVhcajEnYoJoc1shBjPd+PyyHFm1yGWn7
w+pV/qhNtit6O3AJoVIohw/tv/37AThXMbcp+3Mk5sX6Nyhvtu5enP/MkmLe13qL
5ijKhldoE+lRc6jMZCvQvIPUEByH7LHRjOZwBSrYCpr7XaWYcg94lT4+E7LtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUludA5NxK8SL679wOTPMxDI9r5ecwHwYDVR0j
BBgwFoAUAwWlQ3W9s/XmMfuCdLVhqyURuQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOWJodzNGSzNXUlJZTUF6cW56S2ZZUnNQY2pBWXI1dTNtalA0TnpuNkp2
dEwvMC8wMzA1QTU0Mzc1QkRCM0Y1RTYzMUZCODI3NEI1NjFBQjI1MTFCOTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzMDVBNTQzNzVCREIzRjVF
NjMxRkI4Mjc0QjU2MUFCMjUxMUI5MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzliaHczRkszV1JSWU1BenFuektmWVJzUGNqQVlyNXUzbWpQNE56bjZKdnRMLzAv
MzQzNTJlMzYzNTJlMzIzMzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMy
MzYzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUHmMA0GCSqGSIb3DQEBCwUAA4IBAQCKLETa/rQy
VPG/kpgmB7OUXt/nI5+fKx6r0+UZrjx1UsxFD4GborcKMSUmAJ+EHaYp8ZZqSYUj
4dKF4ZthrSAhB83hgN2nhvD2cnaIEmckCmdySATllmFgC+/VcTaFZrA7kQqG146R
2cJOw625q/puChwRjL2e3Hpm1HSpe1zdbq00/2/DNOZe7bVBkVKKdk5oaWf/Rs1g
G4fi5Pllsb/fEqrxKAKDLo4euPC+Y+6m/4DPZHe++Vv7xDfj1CvADHbz1nG7z8O2
pfDmZ7hkQ2LncYfJWjUG6tpWC0iC3zAKD6wzv1BuLOOkwIRCKpSWd+xFTJmm7xPP
qQzxxk7/niOn
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org