Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32342d3234203d3e20323637333339.roa
File:                     34352e3233332e3230382e302f32342d3234203d3e20323637333339.roa (raw, json)
Hash identifier:          aUNdNywNaeVCrmKKeLOsPDiKn9doRYiNVrlqJf8vtCA=
Subject key identifier:   85:FA:63:2D:FE:2C:1D:0E:1F:02:1F:86:F4:E0:77:78:4F:31:53:2C
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       4C02D177C62FBB49507FB67FEC09CE7F4FCDCDC6
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32342d3234203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:39 +0000
ROA not before:           Sun 09 Jul 2023 04:03:39 +0000
ROA not after:            Sun 07 Jul 2024 04:08:39 +0000
asID:                     267339
IP address blocks:        45.233.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:02:d1:77:c6:2f:bb:49:50:7f:b6:7f:ec:09:ce:7f:4f:cd:cd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:39 2023 GMT
            Not After : Jul  7 04:08:39 2024 GMT
        Subject: CN=85FA632DFE2C1D0E1F021F86F4E077784F31532C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9e:dd:d3:47:27:df:6d:84:9c:3e:e3:63:a6:
                    ec:34:13:1b:eb:26:f9:93:56:6e:f4:07:2d:5d:f4:
                    07:f3:03:d1:b0:08:cf:47:3a:63:c2:f1:bc:7e:d7:
                    01:b5:3f:a7:0d:93:fc:2b:03:8d:af:79:0a:a3:38:
                    00:14:f3:a9:0e:ca:a3:a5:f0:1d:56:ef:67:2f:40:
                    3d:5a:ad:08:c3:26:ae:95:e1:00:03:21:e4:7b:8b:
                    c9:05:99:59:72:68:20:b4:8b:e1:e0:a7:09:bc:ed:
                    a6:5d:78:14:14:5f:5d:11:5f:d0:b4:bf:cb:f9:21:
                    3d:65:1e:c3:1d:ef:f2:68:b2:20:60:99:44:09:41:
                    96:25:aa:75:47:37:80:c5:80:bf:d0:54:db:da:fc:
                    ba:54:24:79:5f:9b:8c:79:ad:87:7c:cb:b8:f2:48:
                    2d:f1:af:09:6b:8e:cb:bf:9d:7c:9e:f8:9f:cc:98:
                    67:35:72:de:79:91:bc:f5:ee:98:01:e0:1f:1c:38:
                    94:e0:1e:00:47:8d:89:6a:08:8f:8e:f7:46:08:a9:
                    a1:36:74:b9:dd:d1:ad:29:59:15:9b:74:09:a6:a1:
                    49:7d:87:71:ab:b7:65:82:a0:d1:79:8d:8f:50:f1:
                    b9:9a:30:fd:71:ef:f7:4b:92:e7:e1:a8:ad:15:38:
                    69:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FA:63:2D:FE:2C:1D:0E:1F:02:1F:86:F4:E0:77:78:4F:31:53:2C
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32342d3234203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:0e:af:9f:93:bf:40:4b:49:13:d8:7f:ae:4d:2d:1a:11:
         e8:10:fe:4f:10:9f:62:d4:02:ee:10:e2:f5:ca:a4:23:1c:1a:
         a0:23:c7:1a:d7:bf:46:f2:c1:bd:c6:3f:92:67:81:cd:6c:f5:
         39:1b:bc:70:6a:4e:3c:97:92:2f:ce:22:62:41:7f:2b:44:df:
         e4:22:4c:62:18:b2:16:3f:6d:99:16:0e:ba:4f:d3:eb:49:27:
         1c:60:b1:38:8e:16:6c:b8:b5:09:51:14:a1:e1:af:83:dd:cc:
         76:43:9f:e9:98:61:e7:69:07:57:63:b6:e3:7c:83:28:21:92:
         5d:12:95:f6:e6:dd:d9:70:65:46:c4:09:43:73:98:90:6b:79:
         e3:56:93:fa:2d:a2:5f:91:6a:bc:c4:6f:1e:28:6a:3d:cf:bc:
         61:71:00:44:c1:c9:4b:b3:c7:9b:6e:c3:3a:28:3e:76:9e:f1:
         f3:e7:61:c5:b5:1b:47:f6:fc:97:ce:8a:c7:40:9a:ab:6a:1d:
         22:57:cd:ba:cb:fa:4c:51:67:6a:09:4e:3d:00:a2:d6:51:3a:
         4f:32:ae:8b:85:74:a8:5e:e3:a7:22:21:6f:eb:a4:2b:03:03:
         6f:4b:17:08:5f:53:a8:fe:c3:b5:3a:33:ba:12:92:06:33:b1:
         68:38:9e:3e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTALRd8Yvu0lQf7Z/7AnOf0/NzcYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5MDg3RTU1ODQ2Mjc0NDc3QUIwRTQ1OTdGRDc1NERC
MDUwOTIwMzAeFw0yMzA3MDkwNDAzMzlaFw0yNDA3MDcwNDA4MzlaMDMxMTAvBgNV
BAMTKDg1RkE2MzJERkUyQzFEMEUxRjAyMUY4NkY0RTA3Nzc4NEYzMTUzMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLnt3TRyffbYScPuNjpuw0Exvr
JvmTVm70By1d9AfzA9GwCM9HOmPC8bx+1wG1P6cNk/wrA42veQqjOAAU86kOyqOl
8B1W72cvQD1arQjDJq6V4QADIeR7i8kFmVlyaCC0i+Hgpwm87aZdeBQUX10RX9C0
v8v5IT1lHsMd7/JosiBgmUQJQZYlqnVHN4DFgL/QVNva/LpUJHlfm4x5rYd8y7jy
SC3xrwlrjsu/nXye+J/MmGc1ct55kbz17pgB4B8cOJTgHgBHjYlqCI+O90YIqaE2
dLnd0a0pWRWbdAmmoUl9h3Grt2WCoNF5jY9Q8bmaMP1x7/dLkufhqK0VOGlZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhfpjLf4sHQ4fAh+G9OB3eE8xUywwHwYDVR0j
BBgwFoAUoJCH5VhGJ0R3qw5Fl/11TbBQkgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E
WVcvMC9BMDkwODdFNTU4NDYyNzQ0NzdBQjBFNDU5N0ZENzU0REIwNTA5MjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOTA4N0U1NTg0NjI3NDQ3
N0FCMEU0NTk3RkQ3NTREQjA1MDkyMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv
MzQzNTJlMzIzMzMzMmUzMjMwMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt6dAwDQYJKoZIhvcNAQELBQADggEBAC9JDq+f
k79AS0kT2H+uTS0aEegQ/k8Qn2LUAu4Q4vXKpCMcGqAjxxrXv0bywb3GP5Jngc1s
9TkbvHBqTjyXki/OImJBfytE3+QiTGIYshY/bZkWDrpP0+tJJxxgsTiOFmy4tQlR
FKHhr4PdzHZDn+mYYedpB1djtuN8gyghkl0Slfbm3dlwZUbECUNzmJBreeNWk/ot
ol+RarzEbx4oaj3PvGFxAETByUuzx5tuwzooPnae8fPnYcW1G0f2/JfOisdAmqtq
HSJXzbrL+kxRZ2oJTj0AotZROk8yrouFdKhe46ciIW/rpCsDA29LFwhfU6j+w7U6
M7oSkgYzsWg4nj4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org