Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/34352e3232392e3232302e302f32322d3234203d3e20323637313334.roa
File:                     34352e3232392e3232302e302f32322d3234203d3e20323637313334.roa (raw, json)
Hash identifier:          QacTKaZwQ/mhggjH2x1Dw6lVlvOg6fAVe+X5s0qWvi8=
Subject key identifier:   D6:81:DA:34:6C:BA:3E:75:26:75:A4:49:CE:A9:45:32:8B:25:E3:33
Certificate issuer:       /CN=66775EAB8F67655AD1B053DCA28B715E914840DB
Certificate serial:       205D7AAB101D3F5DD2A313A2CA90AE54F40433C8
Authority key identifier: 66:77:5E:AB:8F:67:65:5A:D1:B0:53:DC:A2:8B:71:5E:91:48:40:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66775EAB8F67655AD1B053DCA28B715E914840DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/34352e3232392e3232302e302f32322d3234203d3e20323637313334.roa
Signing time:             Fri 29 Dec 2023 17:00:00 +0000
ROA not before:           Fri 29 Dec 2023 16:55:00 +0000
ROA not after:            Fri 27 Dec 2024 17:00:00 +0000
asID:                     267134
IP address blocks:        45.229.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5d:7a:ab:10:1d:3f:5d:d2:a3:13:a2:ca:90:ae:54:f4:04:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66775EAB8F67655AD1B053DCA28B715E914840DB
        Validity
            Not Before: Dec 29 16:55:00 2023 GMT
            Not After : Dec 27 17:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:32:86:a0:33:74:0d:32:b6:dc:3f:9f:aa:
                    a8:85:84:d0:c2:2f:48:16:ac:59:f7:cc:a7:20:30:
                    e7:f7:da:25:4d:71:f0:2c:35:76:04:b7:17:41:14:
                    35:5b:74:ca:02:84:0b:37:1a:15:a5:25:7b:70:e8:
                    5b:da:8b:4f:5f:5b:5b:c8:16:6c:ae:e0:d7:85:ef:
                    8b:2f:a5:49:20:5b:22:b5:47:6b:b8:a2:8b:ed:dd:
                    0f:3e:93:6c:77:53:7c:f5:22:8f:59:a8:5b:ad:05:
                    75:50:1c:b4:fe:78:47:a2:c2:68:80:43:d7:e4:a1:
                    d6:5d:03:6b:89:3c:88:62:ac:07:0c:9a:33:39:8e:
                    9c:8f:ca:89:d1:ff:23:7d:86:35:2a:52:2d:d1:f5:
                    b2:bc:d2:00:88:73:d6:12:e3:76:17:a9:69:05:88:
                    33:a5:b4:f2:3f:ab:2a:07:6a:43:58:d8:ad:02:80:
                    e2:68:2c:54:4c:05:da:df:57:36:65:3b:f6:dc:21:
                    93:de:17:c0:2d:aa:10:ac:10:ca:56:8d:db:0f:da:
                    78:5b:0c:a9:b5:1e:55:09:75:bd:a0:97:00:8c:64:
                    91:96:15:dc:86:47:56:e3:c4:ef:28:07:36:96:fa:
                    c7:60:cf:57:0a:8f:83:27:0a:7e:04:2e:09:71:5c:
                    3b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:81:DA:34:6C:BA:3E:75:26:75:A4:49:CE:A9:45:32:8B:25:E3:33
            X509v3 Authority Key Identifier:
                keyid:66:77:5E:AB:8F:67:65:5A:D1:B0:53:DC:A2:8B:71:5E:91:48:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/66775EAB8F67655AD1B053DCA28B715E914840DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66775EAB8F67655AD1B053DCA28B715E914840DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9oV3uvReVxtqSEKudAwKVMKYABjc3Ckq68cx1SU1ZPz2/0/34352e3232392e3232302e302f32322d3234203d3e20323637313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:95:0d:aa:91:42:24:60:f7:e3:1f:a0:20:7a:ad:5e:00:32:
         f4:ea:22:6e:4c:f9:c0:ed:ad:a6:26:60:4e:0e:2e:11:19:5c:
         8a:71:d8:b8:fc:46:fc:8e:54:b1:81:9f:b4:c3:b6:4f:01:fb:
         b3:15:75:7a:4d:ed:87:e2:17:b5:0a:71:80:7d:0d:6a:02:98:
         c3:f1:2a:58:6f:54:a2:5b:15:a6:7d:7b:b3:3f:1b:dc:f6:d4:
         b6:d4:ea:8d:de:80:db:d6:d1:e8:38:7f:d0:f9:db:3b:39:df:
         e7:58:78:54:e1:bb:19:70:e5:cf:de:ba:7a:bc:f6:40:c1:ba:
         b8:4a:6d:af:da:56:32:13:ff:b1:17:a1:b1:f5:e5:6e:d1:4d:
         f7:80:50:a1:ce:cd:a1:8b:c4:d4:08:d2:2f:f5:17:9a:ad:a3:
         c3:e2:9f:2f:37:c7:66:1e:69:69:3b:e4:2a:88:67:88:34:86:
         ae:b1:12:07:f6:78:3c:25:81:23:88:fa:e2:3e:c8:a4:ca:4e:
         0c:95:a2:d5:4a:e7:52:98:d5:f5:b0:6a:e6:f9:dc:55:e0:9d:
         94:84:75:d9:1f:1b:f9:d7:6f:14:f0:a5:0d:50:d9:76:ae:da:
         c8:0f:b2:e6:f0:b4:5e:2e:67:af:39:9e:95:0b:96:ff:4a:f1:
         9e:e6:ac:c4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUIF16qxAdP13SoxOiypCuVPQEM8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY3NzVFQUI4RjY3NjU1QUQxQjA1M0RDQTI4QjcxNUU5
MTQ4NDBEQjAeFw0yMzEyMjkxNjU1MDBaFw0yNDEyMjcxNzAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E1MTMyODZBMDMzNzQwRDMy
QjZEQzNGOUZBQUE4ODU4NEQwQzIyRjQ4MTZBQzU5RjdDQ0E3MjAzMEU3RjdEQTI1
NEQ3MUYwMkMzNTc2MDRCNzE3NDExNDM1NUI3NENBMDI4NDBCMzcxQTE1QTUyNTdC
NzBFODVCREE4QjRGNUY1QjVCQzgxNjZDQUVFMEQ3ODVFRjhCMkZBNTQ5MjA1QjIy
QjU0NzZCQjhBMjhCRURERDBGM0U5MzZDNzc1MzdDRjUyMjhGNTlBODVCQUQwNTc1
NTAxQ0I0RkU3ODQ3QTJDMjY4ODA0M0Q3RTRBMUQ2NUQwMzZCODkzQzg4NjJBQzA3
MEM5QTMzMzk4RTlDOEZDQTg5RDFGRjIzN0Q4NjM1MkE1MjJERDFGNUIyQkNEMjAw
ODg3M0Q2MTJFMzc2MTdBOTY5MDU4ODMzQTVCNEYyM0ZBQjJBMDc2QTQzNThEOEFE
MDI4MEUyNjgyQzU0NEMwNURBREY1NzM2NjUzQkY2REMyMTkzREUxN0MwMkRBQTEw
QUMxMENBNTY4RERCMEZEQTc4NUIwQ0E5QjUxRTU1MDk3NUJEQTA5NzAwOEM2NDkx
OTYxNURDODY0NzU2RTNDNEVGMjgwNzM2OTZGQUM3NjBDRjU3MEE4RjgzMjcwQTdF
MDQyRTA5NzE1QzNCNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAylEyhqAzdA0yttw/n6qohYTQwi9IFqxZ98ynIDDn99olTXHwLDV2
BLcXQRQ1W3TKAoQLNxoVpSV7cOhb2otPX1tbyBZsruDXhe+LL6VJIFsitUdruKKL
7d0PPpNsd1N89SKPWahbrQV1UBy0/nhHosJogEPX5KHWXQNriTyIYqwHDJozOY6c
j8qJ0f8jfYY1KlIt0fWyvNIAiHPWEuN2F6lpBYgzpbTyP6sqB2pDWNitAoDiaCxU
TAXa31c2ZTv23CGT3hfALaoQrBDKVo3bD9p4WwyptR5VCXW9oJcAjGSRlhXchkdW
48TvKAc2lvrHYM9XCo+DJwp+BC4JcVw7QwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FNaB2jRsuj51JnWkSc6pRTKLJeMzMB8GA1UdIwQYMBaAFGZ3XquPZ2Va0bBT3KKL
cV6RSEDbMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzlvVjN1dlJlVnh0cVNF
S3VkQXdLVk1LWUFCamMzQ2txNjhjeDFTVTFaUHoyLzAvNjY3NzVFQUI4RjY3NjU1
QUQxQjA1M0RDQTI4QjcxNUU5MTQ4NDBEQi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC82Njc3NUVBQjhGNjc2NTVBRDFCMDUzRENBMjhCNzE1RTkxNDg0
MERCLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85b1YzdXZSZVZ4dHFTRUt1ZEF3
S1ZNS1lBQmpjM0NrcTY4Y3gxU1UxWlB6Mi8wLzM0MzUyZTMyMzIzOTJlMzIzMjMw
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzEzMzM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LeXcMA0GCSqGSIb3DQEBCwUAA4IBAQABlQ2qkUIkYPfjH6Ageq1eADL06iJuTPnA
7a2mJmBODi4RGVyKcdi4/Eb8jlSxgZ+0w7ZPAfuzFXV6Te2H4he1CnGAfQ1qApjD
8SpYb1SiWxWmfXuzPxvc9tS21OqN3oDb1tHoOH/Q+ds7Od/nWHhU4bsZcOXP3rp6
vPZAwbq4Sm2v2lYyE/+xF6Gx9eVu0U33gFChzs2hi8TUCNIv9RearaPD4p8vN8dm
HmlpO+QqiGeINIausRIH9ng8JYEjiPriPsikyk4MlaLVSudSmNX1sGrm+dxV4J2U
hHXZHxv5128U8KUNUNl2rtrID7Lm8LReLmevOZ6VC5b/SvGe5qzE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org