Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yVTgTqTXDYzHv2wyAM3pwA9qaRWE6pBqaCpRQSAmnHU/0/34352e3138302e302e302f32322d3232203d3e20323639313233.roa
File:                     34352e3138302e302e302f32322d3232203d3e20323639313233.roa (raw, json)
Hash identifier:          iWm8uurmLkLq5fefDwwn0TCBer+L9NZb/HPvYxQkJLo=
Subject key identifier:   D6:DF:C8:DA:29:51:9A:47:83:86:7C:90:28:82:94:8B:10:6C:BF:94
Certificate issuer:       /CN=769C7F962A86907B7A4B58E95F88B9914E8104E6
Certificate serial:       505347174FAAA3ACC2A2FE07E4A373CE1EDE46B6
Authority key identifier: 76:9C:7F:96:2A:86:90:7B:7A:4B:58:E9:5F:88:B9:91:4E:81:04:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/769C7F962A86907B7A4B58E95F88B9914E8104E6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yVTgTqTXDYzHv2wyAM3pwA9qaRWE6pBqaCpRQSAmnHU/0/34352e3138302e302e302f32322d3232203d3e20323639313233.roa
Signing time:             Sat 28 Jan 2023 02:55:48 +0000
ROA not before:           Sat 28 Jan 2023 02:50:48 +0000
ROA not after:            Sat 27 Jan 2024 02:55:48 +0000
asID:                     269123
IP address blocks:        45.180.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:53:47:17:4f:aa:a3:ac:c2:a2:fe:07:e4:a3:73:ce:1e:de:46:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769C7F962A86907B7A4B58E95F88B9914E8104E6
        Validity
            Not Before: Jan 28 02:50:48 2023 GMT
            Not After : Jan 27 02:55:48 2024 GMT
        Subject: CN=D6DFC8DA29519A4783867C902882948B106CBF94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:41:c5:6a:f2:c6:3f:67:d1:b5:20:95:20:
                    11:83:0a:4c:83:27:f0:a8:2b:50:bf:ae:df:1a:02:
                    39:0c:59:50:39:6d:e0:d9:64:1f:45:61:c1:5f:79:
                    a2:b8:ac:e6:0d:9f:be:e6:16:a4:6e:e0:7a:73:2d:
                    4d:6a:3f:b1:81:da:ee:d5:dd:c1:a6:92:14:e2:a2:
                    44:93:31:b0:7f:ab:68:b3:f0:6a:b7:da:0b:c0:9e:
                    93:e8:83:5e:63:78:c6:b4:b3:8e:d4:81:c7:8f:9d:
                    6d:ff:27:ee:d4:4e:b0:c5:8c:b0:bc:46:5f:cb:cc:
                    6d:ce:e9:99:df:99:39:bc:91:35:75:93:be:5e:5d:
                    ba:37:a4:b9:65:73:60:06:5b:bf:77:3a:42:8c:6e:
                    3a:25:df:c5:fc:39:1e:2e:7d:38:92:5f:57:f0:71:
                    99:a5:f3:63:93:c2:d2:91:e3:64:d7:c1:44:ca:91:
                    9f:dd:06:cd:8d:fa:f1:73:09:72:25:00:da:c0:3c:
                    2e:10:8c:32:d0:f8:e5:cd:5d:4a:34:f8:24:41:eb:
                    7a:d1:39:7b:41:fd:ff:f9:aa:15:6d:67:da:50:da:
                    49:64:e3:aa:dd:14:a8:6f:5d:d5:69:a3:59:5e:af:
                    33:b4:21:cc:b1:e7:7a:1a:58:fd:56:c4:0a:13:fb:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DF:C8:DA:29:51:9A:47:83:86:7C:90:28:82:94:8B:10:6C:BF:94
            X509v3 Authority Key Identifier:
                keyid:76:9C:7F:96:2A:86:90:7B:7A:4B:58:E9:5F:88:B9:91:4E:81:04:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yVTgTqTXDYzHv2wyAM3pwA9qaRWE6pBqaCpRQSAmnHU/0/769C7F962A86907B7A4B58E95F88B9914E8104E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/769C7F962A86907B7A4B58E95F88B9914E8104E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yVTgTqTXDYzHv2wyAM3pwA9qaRWE6pBqaCpRQSAmnHU/0/34352e3138302e302e302f32322d3232203d3e20323639313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:66:f7:ac:2d:59:f5:73:26:44:0b:3b:14:34:29:db:5a:
         96:5e:e3:23:59:f7:33:d3:b9:41:e2:f4:c6:e1:e2:45:73:c8:
         2f:52:89:02:16:7a:8b:cf:04:32:43:01:92:5f:65:cc:f2:28:
         a7:85:9c:0c:75:1d:18:4a:19:50:39:ac:f8:c5:e8:6f:0a:66:
         c5:51:a3:25:a1:8b:8f:ed:82:98:11:ab:9c:7d:12:dd:48:3b:
         a5:09:fc:17:b1:28:24:23:0f:7a:c8:a2:f3:a2:e0:ba:2e:17:
         35:68:c8:4d:c7:11:6a:62:cd:d3:b5:05:5a:d4:2f:5a:d9:8d:
         1c:d6:37:40:1e:bb:d1:76:14:33:32:8c:50:98:70:8d:ab:38:
         a3:aa:8a:88:ee:2d:89:51:3e:aa:30:4f:b5:42:39:66:b2:2d:
         cb:49:64:03:34:e0:aa:ac:ff:07:45:ca:31:99:15:18:e5:08:
         c1:f5:05:d0:a0:4c:e5:fc:b5:30:6d:60:91:c2:9a:d5:01:d9:
         26:e1:7a:65:ce:16:22:63:3d:f2:23:c7:57:cc:5b:65:11:60:
         c8:d2:d4:d0:4e:34:01:8b:b0:12:bc:2f:48:ee:5d:88:d9:c5:
         d6:6c:aa:b0:e7:3e:52:f2:b2:68:b2:f8:3a:13:ec:58:23:e2:
         23:41:9e:d1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUFNHF0+qo6zCov4H5KNzzh7eRrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY5QzdGOTYyQTg2OTA3QjdBNEI1OEU5NUY4OEI5OTE0
RTgxMDRFNjAeFw0yMzAxMjgwMjUwNDhaFw0yNDAxMjcwMjU1NDhaMDMxMTAvBgNV
BAMTKEQ2REZDOERBMjk1MTlBNDc4Mzg2N0M5MDI4ODI5NDhCMTA2Q0JGOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqEHFavLGP2fRtSCVIBGDCkyD
J/CoK1C/rt8aAjkMWVA5beDZZB9FYcFfeaK4rOYNn77mFqRu4HpzLU1qP7GB2u7V
3cGmkhTiokSTMbB/q2iz8Gq32gvAnpPog15jeMa0s47UgcePnW3/J+7UTrDFjLC8
Rl/LzG3O6ZnfmTm8kTV1k75eXbo3pLllc2AGW793OkKMbjol38X8OR4ufTiSX1fw
cZml82OTwtKR42TXwUTKkZ/dBs2N+vFzCXIlANrAPC4QjDLQ+OXNXUo0+CRB63rR
OXtB/f/5qhVtZ9pQ2klk46rdFKhvXdVpo1lerzO0Icyx53oaWP1WxAoT+/FZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU1t/I2ilRmkeDhnyQKIKUixBsv5QwHwYDVR0j
BBgwFoAUdpx/liqGkHt6S1jpX4i5kU6BBOYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXlWVGdUcVRYRFl6SHYyd3lBTTNwd0E5cWFSV0U2cEJxYUNwUlFTQW1u
SFUvMC83NjlDN0Y5NjJBODY5MDdCN0E0QjU4RTk1Rjg4Qjk5MTRFODEwNEU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzc2OUM3Rjk2MkE4NjkwN0I3
QTRCNThFOTVGODhCOTkxNEU4MTA0RTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzl5VlRnVHFUWERZekh2Mnd5QU0zcHdBOXFhUldFNnBCcWFDcFJRU0FtbkhVLzAv
MzQzNTJlMzEzODMwMmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzOTMx
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi20ADANBgkqhkiG9w0BAQsFAAOCAQEAfuJm96wtWfVz
JkQLOxQ0Kdtall7jI1n3M9O5QeL0xuHiRXPIL1KJAhZ6i88EMkMBkl9lzPIop4Wc
DHUdGEoZUDms+MXobwpmxVGjJaGLj+2CmBGrnH0S3Ug7pQn8F7EoJCMPesii86Lg
ui4XNWjITccRamLN07UFWtQvWtmNHNY3QB670XYUMzKMUJhwjas4o6qKiO4tiVE+
qjBPtUI5ZrIty0lkAzTgqqz/B0XKMZkVGOUIwfUF0KBM5fy1MG1gkcKa1QHZJuF6
Zc4WImM98iPHV8xbZRFgyNLU0E40AYuwErwvSO5diNnF1myqsOc+UvKyaLL4OhPs
WCPiI0Ge0Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org