Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa
File:                     34352e37312e3136382e302f32332d3233203d3e20323637363232.roa (raw, json)
Hash identifier:          qSnaalnfN7GkW2YpvBu7pq1vuRnNzu/Ec3/IgjGKI0M=
Subject key identifier:   4D:4A:03:25:07:96:09:FC:75:C9:46:0B:0E:C7:5D:73:DD:D9:02:72
Certificate issuer:       /CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Certificate serial:       5F894D42E3CA1794B748D7988E0E88A189070E34
Authority key identifier: BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa
Signing time:             Thu 30 Nov 2023 16:18:57 +0000
ROA not before:           Thu 30 Nov 2023 16:13:57 +0000
ROA not after:            Thu 28 Nov 2024 16:18:57 +0000
asID:                     267622
IP address blocks:        45.71.168.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:89:4d:42:e3:ca:17:94:b7:48:d7:98:8e:0e:88:a1:89:07:0e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
        Validity
            Not Before: Nov 30 16:13:57 2023 GMT
            Not After : Nov 28 16:18:57 2024 GMT
        Subject: CN=4D4A0325079609FC75C9460B0EC75D73DDD90272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:bf:a8:56:ca:d2:a5:e4:00:ba:c0:d7:ea:
                    fb:58:52:4a:e1:69:ff:b6:04:4b:af:b4:c5:c1:17:
                    b1:c4:50:3f:51:18:fb:f3:60:fe:50:6c:d9:0d:5f:
                    d8:93:3c:3c:87:75:b8:04:51:1e:f1:35:3c:9f:36:
                    6e:02:21:83:6a:07:1e:fa:ec:c9:3e:42:d4:6d:44:
                    66:3e:77:15:f9:6d:6d:87:2a:10:eb:d5:09:88:82:
                    69:26:22:be:53:e8:f8:ec:e1:5b:12:41:9d:8f:0e:
                    de:11:4e:b3:ed:5c:f9:37:17:61:27:fc:3b:f1:af:
                    84:97:ee:a9:b7:82:31:f4:f3:3a:3d:c9:31:5b:98:
                    3a:22:8f:51:b1:8d:75:22:6b:0e:0c:e2:f3:e6:c2:
                    4d:4f:65:84:fd:da:83:ce:08:56:f1:04:fc:f2:0e:
                    bb:ae:0f:5e:40:45:6d:57:45:d9:c1:2b:06:59:a1:
                    c9:2b:b3:1c:bb:af:34:4f:20:08:cb:47:3b:93:27:
                    7d:7f:c9:7d:61:04:e8:d8:fa:ad:c9:e3:76:32:7f:
                    5a:13:8c:e7:06:51:87:ad:e8:91:78:2b:da:d0:a1:
                    f3:46:32:17:ae:b0:48:be:40:f3:9d:1f:94:04:44:
                    db:78:c9:eb:46:14:71:e4:56:ed:3d:ba:46:3d:a6:
                    92:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4A:03:25:07:96:09:FC:75:C9:46:0B:0E:C7:5D:73:DD:D9:02:72
            X509v3 Authority Key Identifier:
                keyid:BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3136382e302f32332d3233203d3e20323637363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:e6:f5:67:18:eb:e8:14:62:50:eb:73:18:97:77:71:0e:2b:
         d7:10:e8:19:b4:04:7e:8b:88:f3:2d:0b:4b:0c:92:3d:d5:e7:
         69:e0:c2:b7:fc:d5:40:d2:df:7f:34:ef:6c:3f:76:f3:e7:ac:
         e6:fd:75:45:62:b4:66:7b:17:53:3b:d8:64:30:ca:dc:20:fa:
         e1:b3:f7:7f:81:a2:9d:4a:07:26:ac:91:15:e7:a4:32:16:7f:
         30:77:e2:ef:4c:f9:09:c8:9f:de:f9:2d:d3:b4:48:42:78:20:
         c6:8c:fb:16:ce:58:85:4a:6f:f6:bd:cd:11:63:d4:a6:6b:b5:
         2e:0f:4c:75:1b:d8:42:62:87:9c:75:90:64:95:c2:bc:10:0e:
         8a:01:e8:73:17:19:9d:ac:79:7f:54:46:18:7b:0f:cd:ec:66:
         78:90:fa:13:e5:56:74:a0:4c:a3:31:30:21:e6:17:4b:3b:b8:
         50:97:e8:2f:65:7d:e9:aa:c4:4d:c3:9d:5d:86:13:9d:9e:9e:
         ce:92:b9:e1:6b:33:4a:cc:75:9e:23:9f:97:03:1c:cf:67:a8:
         b8:f6:fa:0c:57:19:e7:30:a5:17:d8:4c:6d:7e:3f:fb:ed:73:
         7d:05:f8:64:7c:50:58:4c:bc:6e:b1:fe:cd:f3:0c:a3:e3:68:
         1f:03:4c:db
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX4lNQuPKF5S3SNeYjg6IoYkHDjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYxMUExMDFENkIzNkVGMkNFRUMyOTFBMUUzODkwMDcy
MDI0MEZGMDAeFw0yMzExMzAxNjEzNTdaFw0yNDExMjgxNjE4NTdaMDMxMTAvBgNV
BAMTKDRENEEwMzI1MDc5NjA5RkM3NUM5NDYwQjBFQzc1RDczREREOTAyNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+DL+oVsrSpeQAusDX6vtYUkrh
af+2BEuvtMXBF7HEUD9RGPvzYP5QbNkNX9iTPDyHdbgEUR7xNTyfNm4CIYNqBx76
7Mk+QtRtRGY+dxX5bW2HKhDr1QmIgmkmIr5T6Pjs4VsSQZ2PDt4RTrPtXPk3F2En
/Dvxr4SX7qm3gjH08zo9yTFbmDoij1GxjXUiaw4M4vPmwk1PZYT92oPOCFbxBPzy
DruuD15ARW1XRdnBKwZZockrsxy7rzRPIAjLRzuTJ31/yX1hBOjY+q3J43Yyf1oT
jOcGUYet6JF4K9rQofNGMheusEi+QPOdH5QERNt4yetGFHHkVu09ukY9ppL9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTUoDJQeWCfx1yUYLDsddc93ZAnIwHwYDVR0j
BBgwFoAUvxGhAdazbvLO7CkaHjiQByAkD/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW1pUFNZRzRxcXdhRW9UV0J1NmFzcVNMRkFDcTFuVFF3MXJLNEJRemtD
R2YvMC9CRjExQTEwMUQ2QjM2RUYyQ0VFQzI5MUExRTM4OTAwNzIwMjQwRkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGMTFBMTAxRDZCMzZFRjJD
RUVDMjkxQTFFMzg5MDA3MjAyNDBGRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzltaVBTWUc0cXF3YUVvVFdCdTZhc3FTTEZBQ3ExblRRdzFySzRCUXprQ0dmLzAv
MzQzNTJlMzczMTJlMzEzNjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUeoMA0GCSqGSIb3DQEBCwUAA4IBAQCl5vVnGOvo
FGJQ63MYl3dxDivXEOgZtAR+i4jzLQtLDJI91edp4MK3/NVA0t9/NO9sP3bz56zm
/XVFYrRmexdTO9hkMMrcIPrhs/d/gaKdSgcmrJEV56QyFn8wd+LvTPkJyJ/e+S3T
tEhCeCDGjPsWzliFSm/2vc0RY9Sma7UuD0x1G9hCYoecdZBklcK8EA6KAehzFxmd
rHl/VEYYew/N7GZ4kPoT5VZ0oEyjMTAh5hdLO7hQl+gvZX3pqsRNw51dhhOdnp7O
krnhazNKzHWeI5+XAxzPZ6i49voMVxnnMKUX2Extfj/77XN9BfhkfFBYTLxusf7N
8wyj42gfA0zb
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org