Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33362e302f32322d3232203d3e20323636313532.roa
File:                     34352e362e33362e302f32322d3232203d3e20323636313532.roa (raw, json)
Hash identifier:          0m42WXqqotWaeoPq7RzYNtoV5RkW+3//DKGOpR9ujHs=
Subject key identifier:   BD:11:4C:1E:05:AF:DB:66:EB:C9:79:CA:1E:98:7E:BC:F6:A8:8A:ED
Certificate issuer:       /CN=9D791F907273BED543508E5D9D56A36372EEB006
Certificate serial:       205EC02AE40D995CA7EA3C619EF2F638176B0977
Authority key identifier: 9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33362e302f32322d3232203d3e20323636313532.roa
Signing time:             Mon 04 Mar 2024 19:09:06 +0000
ROA not before:           Mon 04 Mar 2024 19:04:06 +0000
ROA not after:            Mon 03 Mar 2025 19:09:06 +0000
asID:                     266152
IP address blocks:        45.6.36.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5e:c0:2a:e4:0d:99:5c:a7:ea:3c:61:9e:f2:f6:38:17:6b:09:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D791F907273BED543508E5D9D56A36372EEB006
        Validity
            Not Before: Mar  4 19:04:06 2024 GMT
            Not After : Mar  3 19:09:06 2025 GMT
        Subject: CN=BD114C1E05AFDB66EBC979CA1E987EBCF6A88AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:3a:b2:45:83:2e:ee:35:9c:cf:d0:1a:3f:
                    31:e7:36:ee:b2:5a:52:d2:8a:51:bd:c7:57:5c:27:
                    30:32:04:68:25:22:85:0d:f8:df:89:27:77:02:13:
                    4b:24:0b:bd:a3:60:ff:29:18:fd:a7:e0:2d:91:60:
                    03:5a:a1:32:2a:1d:4e:91:1c:4d:2f:40:e0:2e:d2:
                    4a:c4:92:17:11:32:2f:9a:68:f3:87:14:b1:ae:9f:
                    f4:63:28:93:e1:11:ad:49:a3:f6:ac:3b:13:a6:2e:
                    85:b4:e7:32:28:b6:58:4a:5a:b3:e5:86:94:7f:21:
                    18:ea:62:14:8a:f0:17:16:ca:17:88:2d:79:a5:5c:
                    46:c3:e7:5f:bf:f0:68:0a:d2:91:dc:5d:1d:0b:3e:
                    57:34:49:63:78:a7:c1:27:00:b6:7d:3a:1f:08:43:
                    52:6e:60:79:48:1d:31:40:08:ee:06:8f:6a:14:eb:
                    2f:6f:cb:53:d9:f1:31:93:08:87:c1:c6:fa:eb:44:
                    1d:47:0e:f3:48:56:50:f3:c1:6b:8c:80:d3:3e:7a:
                    bf:56:bf:76:51:26:ee:28:e7:b5:67:e3:5a:9e:0b:
                    2f:64:91:93:9d:f0:98:f5:14:1e:a7:ee:12:1e:6a:
                    67:3a:08:19:d1:f1:3c:9e:82:4d:30:08:4b:50:07:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:11:4C:1E:05:AF:DB:66:EB:C9:79:CA:1E:98:7E:BC:F6:A8:8A:ED
            X509v3 Authority Key Identifier:
                keyid:9D:79:1F:90:72:73:BE:D5:43:50:8E:5D:9D:56:A3:63:72:EE:B0:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/9D791F907273BED543508E5D9D56A36372EEB006.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D791F907273BED543508E5D9D56A36372EEB006.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXCsHmJG4ataNHXnS3XCXMhjnvGLGAgZFhiQuGwBVXFf/0/34352e362e33362e302f32322d3232203d3e20323636313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:5c:de:8e:ab:a2:fb:64:ee:a0:f0:36:15:09:32:b4:62:e7:
         6d:af:5f:eb:4e:4b:d1:33:a0:25:a3:4f:57:94:f1:f6:27:99:
         07:a9:0e:a6:0e:4e:e8:11:12:a3:65:40:38:7b:a4:b6:17:34:
         a1:01:c6:06:a8:61:83:6c:fb:b4:e2:d1:b6:80:99:a0:81:fe:
         87:d1:b8:06:cd:bb:c5:96:ab:50:bf:f5:38:e2:26:f2:30:db:
         de:ba:28:ad:61:0d:8a:48:97:d9:3c:bc:e0:da:bf:65:1a:71:
         58:40:d7:0a:f7:9c:29:97:b8:cb:32:5e:56:8c:4e:1c:02:b9:
         8f:e7:3c:48:ca:d7:88:04:79:10:e7:bd:2b:7c:75:00:88:68:
         fb:31:86:ff:e1:3b:12:83:08:02:85:32:af:3d:2b:88:21:76:
         5c:c7:f2:fe:a6:d5:d1:ab:3a:83:78:0f:c5:41:87:46:b7:f2:
         20:a5:2f:65:31:16:b9:b1:ed:16:6a:ec:0c:68:40:6d:64:2d:
         29:ad:54:56:8c:09:e1:6a:20:47:57:94:24:b7:a1:27:2a:fb:
         95:3b:ed:09:d6:e8:04:9b:ca:ad:ff:34:51:a9:7a:e1:22:32:
         f1:c4:5c:64:15:0c:15:3f:81:25:20:69:9f:f2:5c:9e:6b:1a:
         ee:c6:2d:44
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUIF7AKuQNmVyn6jxhnvL2OBdrCXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ3OTFGOTA3MjczQkVENTQzNTA4RTVEOUQ1NkEzNjM3
MkVFQjAwNjAeFw0yNDAzMDQxOTA0MDZaFw0yNTAzMDMxOTA5MDZaMDMxMTAvBgNV
BAMTKEJEMTE0QzFFMDVBRkRCNjZFQkM5NzlDQTFFOTg3RUJDRjZBODhBRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1DqyRYMu7jWcz9AaPzHnNu6y
WlLSilG9x1dcJzAyBGglIoUN+N+JJ3cCE0skC72jYP8pGP2n4C2RYANaoTIqHU6R
HE0vQOAu0krEkhcRMi+aaPOHFLGun/RjKJPhEa1Jo/asOxOmLoW05zIotlhKWrPl
hpR/IRjqYhSK8BcWyheILXmlXEbD51+/8GgK0pHcXR0LPlc0SWN4p8EnALZ9Oh8I
Q1JuYHlIHTFACO4Gj2oU6y9vy1PZ8TGTCIfBxvrrRB1HDvNIVlDzwWuMgNM+er9W
v3ZRJu4o57Vn41qeCy9kkZOd8Jj1FB6n7hIeamc6CBnR8Tyegk0wCEtQBxftAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUvRFMHgWv22bryXnKHph+vPaoiu0wHwYDVR0j
BBgwFoAUnXkfkHJzvtVDUI5dnVajY3LusAYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQVhDc0htSkc0YXRhTkhYblMzWENYTWhqbnZHTEdBZ1pGaGlRdUd3QlZY
RmYvMC85RDc5MUY5MDcyNzNCRUQ1NDM1MDhFNUQ5RDU2QTM2MzcyRUVCMDA2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlENzkxRjkwNzI3M0JFRDU0
MzUwOEU1RDlENTZBMzYzNzJFRUIwMDYuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FYQ3NIbUpHNGF0YU5IWG5TM1hDWE1oam52R0xHQWdaRmhpUXVHd0JWWEZmLzAv
MzQzNTJlMzYyZTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzYzMTM1
MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAItBiQwDQYJKoZIhvcNAQELBQADggEBAE1c3o6rovtk7qDw
NhUJMrRi522vX+tOS9EzoCWjT1eU8fYnmQepDqYOTugREqNlQDh7pLYXNKEBxgao
YYNs+7Ti0baAmaCB/ofRuAbNu8WWq1C/9TjiJvIw2966KK1hDYpIl9k8vODav2Ua
cVhA1wr3nCmXuMsyXlaMThwCuY/nPEjK14gEeRDnvSt8dQCIaPsxhv/hOxKDCAKF
Mq89K4ghdlzH8v6m1dGrOoN4D8VBh0a38iClL2UxFrmx7RZq7AxoQG1kLSmtVFaM
CeFqIEdXlCS3oScq+5U77QnW6ASbyq3/NFGpeuEiMvHEXGQVDBU/gSUgaZ/yXJ5r
Gu7GLUQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org