Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa
File:                     34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa (raw, json)
Hash identifier:          bRwhbPLNbeghVxmwN+Etobf+owA6K/udFjM2GrX9xq8=
Subject key identifier:   10:F6:71:99:6C:71:FA:3B:43:CB:50:0B:E8:D2:0E:71:AD:75:52:BE
Certificate issuer:       /CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
Certificate serial:       1D75E299B1F029715FCDCA6C53F387E8EFF928E9
Authority key identifier: 2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa
Signing time:             Fri 05 Jan 2024 19:00:00 +0000
ROA not before:           Fri 05 Jan 2024 18:55:00 +0000
ROA not after:            Fri 03 Jan 2025 19:00:00 +0000
asID:                     267175
IP address blocks:        45.230.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:e2:99:b1:f0:29:71:5f:cd:ca:6c:53:f3:87:e8:ef:f9:28:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D
        Validity
            Not Before: Jan  5 18:55:00 2024 GMT
            Not After : Jan  3 19:00:00 2025 GMT
        Subject: CN=10F671996C71FA3B43CB500BE8D20E71AD7552BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:17:ce:c0:2c:55:50:46:8d:ab:6e:a4:01:ce:
                    53:9b:65:a8:20:61:89:d2:fd:1c:f7:7d:88:34:2d:
                    cf:b2:06:f3:2b:8e:ad:d9:17:25:cb:48:e8:f7:66:
                    42:11:dc:41:6d:27:69:7f:b4:33:ba:9c:98:c1:49:
                    7a:67:3c:33:50:3c:50:ed:35:22:f3:ca:99:40:f1:
                    2e:6b:3d:ba:b9:81:b5:29:0c:9d:a0:3b:dd:55:12:
                    5a:de:f6:9e:08:8b:0d:7d:32:e8:cb:c7:10:c6:50:
                    ac:2a:36:98:91:80:d5:b9:51:20:d1:cf:57:8d:c1:
                    5f:43:e4:d6:8a:8d:89:69:a5:bc:0a:64:61:ad:dc:
                    6b:b7:a0:5b:fd:5a:ce:c3:17:f7:19:e7:6d:19:59:
                    71:af:eb:82:25:87:e1:6f:75:6d:f4:3e:33:b4:39:
                    4a:d0:4d:66:07:ee:c3:bb:ac:67:28:c4:ae:46:61:
                    2f:a1:16:3f:f5:72:93:bf:75:e0:da:1c:a6:95:f4:
                    0f:db:5f:6d:a9:63:43:24:04:0e:d7:3c:05:df:56:
                    28:71:16:f4:a1:c1:ee:41:49:da:56:9f:6e:54:70:
                    e9:e4:88:63:ac:20:e2:7a:ec:5f:2d:0c:96:c8:7f:
                    97:57:d1:6b:6c:88:e4:23:7f:04:a3:89:5c:e7:db:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F6:71:99:6C:71:FA:3B:43:CB:50:0B:E8:D2:0E:71:AD:75:52:BE
            X509v3 Authority Key Identifier:
                keyid:2C:D0:D4:F4:D7:34:A5:C1:F4:29:F8:1A:BF:20:7B:8F:5D:59:F2:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CD0D4F4D734A5C1F429F81ABF207B8F5D59F23D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AmHEBJWRzBNocVQWSBVrhDAEyxavX3ySUqJvYENtWXKy/0/34352e3233302e3231322e302f32322d3234203d3e20323637313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:ee:ea:61:a6:76:17:1d:0b:f3:b0:b6:ec:1a:28:e4:9f:e3:
         1b:ff:41:f0:22:17:27:5c:f6:c3:f4:e5:3a:3a:f0:5b:4c:74:
         70:ca:1c:38:6a:3b:98:ca:75:ce:02:47:d4:a9:c0:ca:94:98:
         e1:06:56:9c:db:7e:ae:b8:17:ee:c3:cf:a5:8c:a5:d0:dc:ae:
         55:40:c4:83:cd:6c:b3:47:a1:ac:7a:b3:70:d5:4d:7f:21:e4:
         a4:9c:35:fc:b6:09:a9:97:3e:7c:23:8a:1a:8e:8f:85:3d:74:
         fb:20:c7:ef:c2:36:ce:80:b9:61:09:df:a6:66:fa:e1:a4:3b:
         88:ee:2b:e2:ca:fd:70:d0:9a:bd:11:4b:77:77:88:f0:75:39:
         2f:29:67:4f:96:1f:83:b6:d4:50:8b:fc:2b:0b:9b:21:18:9b:
         fe:56:2b:85:b5:d2:02:3f:db:72:22:68:86:b3:20:6d:73:1f:
         3a:52:77:75:12:93:d9:b7:94:e1:9b:d3:c7:88:db:a1:80:dd:
         be:c5:c3:e8:5c:12:a4:b0:1a:73:da:2b:6a:5d:df:c6:93:dc:
         20:57:3a:d8:86:d0:13:11:fb:4c:7e:92:ed:18:2b:b9:fd:ac:
         ad:e8:b5:e2:36:82:38:c6:52:db:52:51:fa:5b:2f:ed:cc:be:
         7e:98:8b:dc
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHXXimbHwKXFfzcpsU/OH6O/5KOkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNEMEQ0RjRENzM0QTVDMUY0MjlGODFBQkYyMDdCOEY1
RDU5RjIzRDAeFw0yNDAxMDUxODU1MDBaFw0yNTAxMDMxOTAwMDBaMDMxMTAvBgNV
BAMTKDEwRjY3MTk5NkM3MUZBM0I0M0NCNTAwQkU4RDIwRTcxQUQ3NTUyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVF87ALFVQRo2rbqQBzlObZagg
YYnS/Rz3fYg0Lc+yBvMrjq3ZFyXLSOj3ZkIR3EFtJ2l/tDO6nJjBSXpnPDNQPFDt
NSLzyplA8S5rPbq5gbUpDJ2gO91VElre9p4Iiw19MujLxxDGUKwqNpiRgNW5USDR
z1eNwV9D5NaKjYlppbwKZGGt3Gu3oFv9Ws7DF/cZ520ZWXGv64Ilh+FvdW30PjO0
OUrQTWYH7sO7rGcoxK5GYS+hFj/1cpO/deDaHKaV9A/bX22pY0MkBA7XPAXfVihx
FvShwe5BSdpWn25UcOnkiGOsIOJ67F8tDJbIf5dX0WtsiOQjfwSjiVzn24HfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUEPZxmWxx+jtDy1AL6NIOca11Ur4wHwYDVR0j
BBgwFoAULNDU9Nc0pcH0KfgavyB7j11Z8j0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW1IRUJKV1J6Qk5vY1ZRV1NCVnJoREFFeXhhdlgzeVNVcUp2WUVOdFdY
S3kvMC8yQ0QwRDRGNEQ3MzRBNUMxRjQyOUY4MUFCRjIwN0I4RjVENTlGMjNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJDRDBENEY0RDczNEE1QzFG
NDI5RjgxQUJGMjA3QjhGNUQ1OUYyM0QuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FtSEVCSldSekJOb2NWUVdTQlZyaERBRXl4YXZYM3lTVXFKdllFTnRXWEt5LzAv
MzQzNTJlMzIzMzMwMmUzMjMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM3MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt5tQwDQYJKoZIhvcNAQELBQADggEBAKju6mGm
dhcdC/OwtuwaKOSf4xv/QfAiFydc9sP05To68FtMdHDKHDhqO5jKdc4CR9SpwMqU
mOEGVpzbfq64F+7Dz6WMpdDcrlVAxIPNbLNHoax6s3DVTX8h5KScNfy2CamXPnwj
ihqOj4U9dPsgx+/CNs6AuWEJ36Zm+uGkO4juK+LK/XDQmr0RS3d3iPB1OS8pZ0+W
H4O21FCL/CsLmyEYm/5WK4W10gI/23IiaIazIG1zHzpSd3USk9m3lOGb08eI26GA
3b7Fw+hcEqSwGnPaK2pd38aT3CBXOtiG0BMR+0x+ku0YK7n9rK3oteI2gjjGUttS
UfpbL+3Mvn6Yi9w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org