Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39372e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          Z0PP9zYHR2gtWtk7mcgC0qC7I2+Yc1QiB0p/roV02L4=
Subject key identifier:   68:87:67:A9:90:4D:80:64:91:AC:D7:24:AF:AC:66:19:F1:E1:CE:2C
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       41ECD0646572629771EC5818395E730BD12443B5
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:56 +0000
ROA not before:           Tue 16 May 2023 02:13:56 +0000
ROA not after:            Tue 14 May 2024 02:18:56 +0000
asID:                     269128
IP address blocks:        45.180.97.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ec:d0:64:65:72:62:97:71:ec:58:18:39:5e:73:0b:d1:24:43:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:56 2023 GMT
            Not After : May 14 02:18:56 2024 GMT
        Subject: CN=688767A9904D806491ACD724AFAC6619F1E1CE2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:f6:7a:38:3e:03:7a:7d:3d:18:44:db:1d:
                    d3:5d:bc:52:65:a7:38:77:1d:cd:77:a5:6e:a9:33:
                    02:ba:80:2b:f9:c9:17:63:49:29:4a:aa:04:f7:86:
                    a2:75:1f:6b:1f:7d:b4:2d:2e:3a:8c:85:85:f4:8d:
                    1a:e9:ec:d9:3e:5d:6c:34:b2:8f:08:6b:77:81:06:
                    4f:53:e2:3d:45:2f:f9:6b:24:b4:f6:34:0a:cf:39:
                    6b:c8:35:6e:84:da:43:06:a3:94:99:b8:1d:90:8e:
                    f5:38:16:8d:ac:99:45:13:64:e2:f0:5b:9e:8c:e7:
                    89:16:66:55:85:b8:b2:16:fe:75:ba:e7:9c:08:72:
                    24:bc:fd:00:22:3f:5c:81:80:d3:d2:48:0b:02:b3:
                    60:34:71:3f:38:d9:7c:0a:ec:be:5c:d8:85:da:05:
                    23:4f:2f:33:80:38:90:9d:fd:7d:5c:14:ee:b9:ff:
                    ca:5b:19:ef:6c:c9:ca:53:6b:67:4e:d6:b6:b0:ff:
                    d3:c8:ba:58:91:f3:c8:70:97:a5:d0:ac:b3:19:39:
                    ce:eb:ce:e2:eb:2f:89:b7:82:07:b4:a5:7f:5b:37:
                    52:31:8c:1e:57:e7:04:53:2b:db:ca:2c:4c:5c:92:
                    75:c9:23:2a:9e:53:9f:88:61:9f:90:39:2c:87:25:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:87:67:A9:90:4D:80:64:91:AC:D7:24:AF:AC:66:19:F1:E1:CE:2C
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/34352e3138302e39372e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:5d:87:93:48:9f:79:21:40:09:9a:05:b6:36:4d:7e:75:
         70:cf:99:92:5d:a0:bc:27:de:8d:ff:35:18:a3:b4:d3:4b:ad:
         2f:19:f3:34:14:1b:a3:e7:e4:28:f9:c9:66:39:24:ac:ff:55:
         39:b8:5a:7c:14:26:22:b3:1f:e3:59:9e:8a:2b:a7:b3:a6:87:
         39:db:23:d4:6d:b5:39:3b:1b:ba:86:de:ae:ac:66:de:4c:ff:
         03:92:dc:78:bf:b6:a8:d6:6e:bd:cf:8c:d2:6a:e1:4e:85:cd:
         0b:34:6a:a7:a4:ba:a1:10:8d:72:91:8b:af:cf:e8:dd:9e:cc:
         52:ec:be:fa:3b:13:cc:8c:83:a4:74:50:63:2c:bb:75:a9:1d:
         d8:68:86:2e:94:a7:d2:33:76:62:58:92:c6:04:86:00:10:dc:
         30:b8:f6:69:e1:49:0a:a6:12:1e:b0:dd:e5:af:e2:c5:e6:9f:
         ae:88:08:88:63:4d:02:0c:d3:c8:70:65:21:d8:02:93:aa:af:
         d5:e7:11:77:e3:79:dd:d1:db:21:5d:1d:16:2b:5c:ff:2c:ef:
         bc:4f:ea:ff:ec:49:9a:28:12:1f:0e:89:6a:a4:dc:9a:01:4a:
         8f:58:ac:31:db:9a:f4:d1:dd:94:f0:ae:4f:50:7c:c8:cd:80:
         ec:77:98:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQezQZGVyYpdx7FgYOV5zC9EkQ7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY3QTU4QTY0OUZENDMyMURBN0FEQUE2M0UyQ0ZDRTdB
MzEzMDJDQzAeFw0yMzA1MTYwMjEzNTZaFw0yNDA1MTQwMjE4NTZaMDMxMTAvBgNV
BAMTKDY4ODc2N0E5OTA0RDgwNjQ5MUFDRDcyNEFGQUM2NjE5RjFFMUNFMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2HfZ6OD4Den09GETbHdNdvFJl
pzh3Hc13pW6pMwK6gCv5yRdjSSlKqgT3hqJ1H2sffbQtLjqMhYX0jRrp7Nk+XWw0
so8Ia3eBBk9T4j1FL/lrJLT2NArPOWvINW6E2kMGo5SZuB2QjvU4Fo2smUUTZOLw
W56M54kWZlWFuLIW/nW655wIciS8/QAiP1yBgNPSSAsCs2A0cT842XwK7L5c2IXa
BSNPLzOAOJCd/X1cFO65/8pbGe9sycpTa2dO1raw/9PIuliR88hwl6XQrLMZOc7r
zuLrL4m3gge0pX9bN1IxjB5X5wRTK9vKLExcknXJIyqeU5+IYZ+QOSyHJeHpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUaIdnqZBNgGSRrNckr6xmGfHhziwwHwYDVR0j
BBgwFoAUv3pYpkn9QyHaetqmPiz856MTAswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWR2amg3YVhGM1ZMbjY4NHByWHhaRzFjcTRnUXc2Skpwc2FndXdLMUdq
a3EvMC9CRjdBNThBNjQ5RkQ0MzIxREE3QURBQTYzRTJDRkNFN0EzMTMwMkNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGN0E1OEE2NDlGRDQzMjFE
QTdBREFBNjNFMkNGQ0U3QTMxMzAyQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FkdmpoN2FYRjNWTG42ODRwclh4WkcxY3E0Z1F3NkpKcHNhZ3V3SzFHamtxLzAv
MzQzNTJlMzEzODMwMmUzOTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbRhMA0GCSqGSIb3DQEBCwUAA4IBAQA7lV2Hk0if
eSFACZoFtjZNfnVwz5mSXaC8J96N/zUYo7TTS60vGfM0FBuj5+Qo+clmOSSs/1U5
uFp8FCYisx/jWZ6KK6ezpoc52yPUbbU5Oxu6ht6urGbeTP8Dktx4v7ao1m69z4zS
auFOhc0LNGqnpLqhEI1ykYuvz+jdnsxS7L76OxPMjIOkdFBjLLt1qR3YaIYulKfS
M3ZiWJLGBIYAENwwuPZp4UkKphIesN3lr+LF5p+uiAiIY00CDNPIcGUh2AKTqq/V
5xF343nd0dshXR0WK1z/LO+8T+r/7EmaKBIfDolqpNyaAUqPWKwx25r00d2U8K5P
UHzIzYDsd5gV
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org