Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
File:                     34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa (raw, json)
Hash identifier:          ti+AHS0APHxgepxLnp5ZWPrzzXdOTGKCSm5ic0SazBs=
Subject key identifier:   F0:4F:14:97:67:2D:F2:A9:4F:39:F9:5A:DD:C5:A3:2C:1B:4A:8F:AB
Certificate issuer:       /CN=549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7
Certificate serial:       38EC2FEAC8F11226D68B1CC59706B4BFD1F5778B
Authority key identifier: 54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa
Signing time:             Tue 02 Jan 2024 20:00:00 +0000
ROA not before:           Tue 02 Jan 2024 19:55:00 +0000
ROA not after:            Tue 31 Dec 2024 20:00:00 +0000
asID:                     266211
IP address blocks:        45.229.164.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:2f:ea:c8:f1:12:26:d6:8b:1c:c5:97:06:b4:bf:d1:f5:77:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7
        Validity
            Not Before: Jan  2 19:55:00 2024 GMT
            Not After : Dec 31 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:3e:ec:7c:bd:99:5a:0c:f3:44:f7:a8:36:96:
                    50:86:1e:48:01:88:09:b4:10:35:38:ab:09:34:b5:
                    ba:fd:8d:a2:3f:ec:91:2a:9c:9f:32:43:4a:26:b8:
                    6c:30:8d:17:e1:98:51:05:93:66:e7:72:6b:f0:f1:
                    94:c6:01:65:a2:3c:3a:ee:6a:97:fc:fe:ff:b5:06:
                    6e:16:4d:93:71:1b:37:d0:54:01:3c:bd:0f:6a:0f:
                    6d:7b:ee:50:7a:f4:6f:c0:32:d8:bb:2c:4e:65:d5:
                    1e:10:99:a6:03:ba:28:1b:a1:58:f7:f6:74:d4:e1:
                    b0:df:28:c0:97:e0:20:8a:a3:ab:0b:50:b8:e0:41:
                    3a:4b:e7:bf:e2:6a:64:5b:2d:74:88:d2:ef:7b:99:
                    0e:42:f1:9a:70:fa:12:80:62:46:3f:cc:b8:20:81:
                    9e:f8:ea:3f:03:15:f6:9a:7b:8a:45:2d:e7:66:73:
                    92:74:45:6b:bd:32:21:3d:c2:76:b0:95:c0:99:53:
                    f2:c5:6a:24:f9:96:69:24:4c:07:15:4f:cb:48:27:
                    bc:62:10:15:cd:91:86:24:b7:41:83:a0:05:b3:b1:
                    29:a0:fa:31:fc:90:50:1e:7e:ff:29:87:cc:f2:96:
                    5a:af:2c:ec:47:df:ec:cb:e0:32:22:bc:20:0b:1f:
                    54:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4F:14:97:67:2D:F2:A9:4F:39:F9:5A:DD:C5:A3:2C:1B:4A:8F:AB
            X509v3 Authority Key Identifier:
                keyid:54:9A:A4:43:20:EE:70:FF:5F:8C:4D:71:3A:4C:EA:37:28:E4:CC:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/549AA44320EE70FF5F8C4D713A4CEA3728E4CCE7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AVGHv3gfRyBrrqsFYHZWkenHj6YpmwW2ZcUYSSdcU9xw/0/34352e3232392e3136342e302f32322d3234203d3e20323636323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:73:fe:dd:5e:17:9a:97:43:5e:ba:32:70:53:46:0b:4d:
         ea:21:08:4e:ad:cd:f6:ce:8e:d2:4b:4a:a6:11:86:e7:01:94:
         d3:3c:cb:4e:71:e3:56:86:6c:18:3e:43:5b:41:3d:26:4f:17:
         cd:ec:9e:97:87:9d:db:77:d8:c7:cd:a0:50:d9:fb:81:28:50:
         e2:e5:2c:21:a4:59:53:21:61:97:7e:ce:9f:d6:89:a6:e5:a2:
         95:08:84:1e:4d:dc:41:1e:84:7e:43:4e:74:d9:7f:95:2a:fb:
         9e:54:f2:d3:5e:0b:44:e0:8d:c0:ef:8f:ff:b2:40:62:57:05:
         2b:d2:e1:fc:3e:4f:7d:74:c0:9b:27:18:f0:a3:d7:a8:43:43:
         14:40:23:00:10:ed:74:81:76:a2:55:c8:22:2e:a0:e5:31:f0:
         b2:0e:71:f0:7f:80:58:43:29:86:c7:d7:0c:cf:d1:31:f6:fc:
         2d:30:d3:d2:77:23:cf:84:25:d3:e5:56:7a:29:5b:60:7a:e1:
         91:c1:87:5d:78:d9:98:ad:3d:80:1c:a2:ea:bc:5e:ae:8f:80:
         09:dc:ef:15:9c:37:fd:14:a3:4d:81:ed:69:0e:65:66:9a:9c:
         bf:98:c6:9a:4a:06:b5:39:9e:31:d7:8a:6b:fd:59:a2:be:70:
         96:ae:f9:ee
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUOOwv6sjxEibWixzFlwa0v9H1d4swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTQ5QUE0NDMyMEVFNzBGRjVGOEM0RDcxM0E0Q0VBMzcy
OEU0Q0NFNzAeFw0yNDAxMDIxOTU1MDBaFw0yNDEyMzEyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjUzRUVDN0NCRDk5NUEwQ0Yz
NDRGN0E4MzY5NjUwODYxRTQ4MDE4ODA5QjQxMDM1MzhBQjA5MzRCNUJBRkQ4REEy
M0ZFQzkxMkE5QzlGMzI0MzRBMjZCODZDMzA4RDE3RTE5ODUxMDU5MzY2RTc3MjZC
RjBGMTk0QzYwMTY1QTIzQzNBRUU2QTk3RkNGRUZGQjUwNjZFMTY0RDkzNzExQjM3
RDA1NDAxM0NCRDBGNkEwRjZEN0JFRTUwN0FGNDZGQzAzMkQ4QkIyQzRFNjVENTFF
MTA5OUE2MDNCQTI4MUJBMTU4RjdGNjc0RDRFMUIwREYyOEMwOTdFMDIwOEFBM0FC
MEI1MEI4RTA0MTNBNEJFN0JGRTI2QTY0NUIyRDc0ODhEMkVGN0I5OTBFNDJGMTlB
NzBGQTEyODA2MjQ2M0ZDQ0I4MjA4MTlFRjhFQTNGMDMxNUY2OUE3QjhBNDUyREU3
NjY3MzkyNzQ0NTZCQkQzMjIxM0RDMjc2QjA5NUMwOTk1M0YyQzU2QTI0Rjk5NjY5
MjQ0QzA3MTU0RkNCNDgyN0JDNjIxMDE1Q0Q5MTg2MjRCNzQxODNBMDA1QjNCMTI5
QTBGQTMxRkM5MDUwMUU3RUZGMjk4N0NDRjI5NjVBQUYyQ0VDNDdERkVDQ0JFMDMy
MjJCQzIwMEIxRjU0RTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA9T7sfL2ZWgzzRPeoNpZQhh5IAYgJtBA1OKsJNLW6/Y2iP+yRKpyf
MkNKJrhsMI0X4ZhRBZNm53Jr8PGUxgFlojw67mqX/P7/tQZuFk2TcRs30FQBPL0P
ag9te+5QevRvwDLYuyxOZdUeEJmmA7ooG6FY9/Z01OGw3yjAl+AgiqOrC1C44EE6
S+e/4mpkWy10iNLve5kOQvGacPoSgGJGP8y4IIGe+Oo/AxX2mnuKRS3nZnOSdEVr
vTIhPcJ2sJXAmVPyxWok+ZZpJEwHFU/LSCe8YhAVzZGGJLdBg6AFs7EpoPox/JBQ
Hn7/KYfM8pZaryzsR9/sy+AyIrwgCx9U4QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FPBPFJdnLfKpTzn5Wt3FoywbSo+rMB8GA1UdIwQYMBaAFFSapEMg7nD/X4xNcTpM
6jco5MznMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FWR0h2M2dmUnlCcnJx
c0ZZSFpXa2VuSGo2WXBtd1cyWmNVWVNTZGNVOXh3LzAvNTQ5QUE0NDMyMEVFNzBG
RjVGOEM0RDcxM0E0Q0VBMzcyOEU0Q0NFNy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC81NDlBQTQ0MzIwRUU3MEZGNUY4QzRENzEzQTRDRUEzNzI4RTRD
Q0U3LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BVkdIdjNnZlJ5QnJycXNGWUha
V2tlbkhqNllwbXdXMlpjVVlTU2RjVTl4dy8wLzM0MzUyZTMyMzIzOTJlMzEzNjM0
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2MzIzMTMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
LeWkMA0GCSqGSIb3DQEBCwUAA4IBAQAejXP+3V4XmpdDXroycFNGC03qIQhOrc32
zo7SS0qmEYbnAZTTPMtOceNWhmwYPkNbQT0mTxfN7J6Xh53bd9jHzaBQ2fuBKFDi
5SwhpFlTIWGXfs6f1omm5aKVCIQeTdxBHoR+Q0502X+VKvueVPLTXgtE4I3A74//
skBiVwUr0uH8Pk99dMCbJxjwo9eoQ0MUQCMAEO10gXaiVcgiLqDlMfCyDnHwf4BY
QymGx9cMz9Ex9vwtMNPSdyPPhCXT5VZ6KVtgeuGRwYddeNmYrT2AHKLqvF6uj4AJ
3O8VnDf9FKNNge1pDmVmmpy/mMaaSga1OZ4x14pr/VmivnCWrvnu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org