Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32322d3234203d3e20323638383630.roa
File:                     34352e3137332e38342e302f32322d3234203d3e20323638383630.roa (raw, json)
Hash identifier:          DX+S7kPzqOW0hiHTMUPQaT9rVvsZjYpTINVfy7pDcCw=
Subject key identifier:   C6:1E:20:51:21:7E:C8:E5:84:79:6F:A6:7D:57:43:3F:E6:97:70:FD
Certificate issuer:       /CN=174404233E84848BC98C79A3014FF75B28A8090C
Certificate serial:       4E2E1446F3917CADFA88976F3A13E71118AF5175
Authority key identifier: 17:44:04:23:3E:84:84:8B:C9:8C:79:A3:01:4F:F7:5B:28:A8:09:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/174404233E84848BC98C79A3014FF75B28A8090C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32322d3234203d3e20323638383630.roa
Signing time:             Fri 20 Oct 2023 19:27:24 +0000
ROA not before:           Fri 20 Oct 2023 19:22:24 +0000
ROA not after:            Fri 18 Oct 2024 19:27:24 +0000
asID:                     268860
IP address blocks:        45.173.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:2e:14:46:f3:91:7c:ad:fa:88:97:6f:3a:13:e7:11:18:af:51:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174404233E84848BC98C79A3014FF75B28A8090C
        Validity
            Not Before: Oct 20 19:22:24 2023 GMT
            Not After : Oct 18 19:27:24 2024 GMT
        Subject: CN=C61E2051217EC8E584796FA67D57433FE69770FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:c0:77:38:d3:19:89:84:cc:35:74:3f:25:
                    21:9b:43:17:47:ec:09:b2:ce:08:18:09:ac:04:c8:
                    69:80:72:06:dc:e0:d5:1c:00:14:51:a2:bd:ec:73:
                    48:e7:97:95:6e:3e:4f:88:36:12:4c:32:98:4e:63:
                    4c:8d:47:55:20:cc:b2:cc:cf:9d:5e:c6:4e:0d:60:
                    7a:ba:9a:9c:f3:ad:5d:00:21:26:fc:9f:7f:48:5f:
                    f4:d6:7e:43:b5:f4:ce:33:44:6c:cb:c4:f1:ea:e5:
                    ca:37:1d:d5:42:11:48:10:3c:cf:c2:5f:0c:4e:c4:
                    37:a8:6b:45:c2:8b:60:e9:3f:9a:80:9a:14:1a:d1:
                    2b:a8:e6:04:98:7b:17:fb:74:19:52:ea:05:b1:1d:
                    b3:c2:1c:c3:fe:63:4f:37:9f:c9:36:56:4f:14:59:
                    92:32:5b:72:38:c5:fc:b0:c1:ec:58:85:db:7f:4f:
                    f2:83:27:75:10:84:d4:69:7c:0b:ad:30:d6:cd:ae:
                    6b:fc:23:b6:9d:c3:0a:2d:4b:94:78:ef:8a:21:54:
                    41:e2:3b:99:ca:53:86:d2:9b:5d:52:0e:28:c6:02:
                    1f:62:3e:7b:19:3a:7e:3f:73:6e:30:94:a9:9f:04:
                    a3:05:fb:f8:f8:7a:51:d1:b7:2e:76:1d:93:6c:f4:
                    51:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:20:51:21:7E:C8:E5:84:79:6F:A6:7D:57:43:3F:E6:97:70:FD
            X509v3 Authority Key Identifier:
                keyid:17:44:04:23:3E:84:84:8B:C9:8C:79:A3:01:4F:F7:5B:28:A8:09:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/174404233E84848BC98C79A3014FF75B28A8090C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/174404233E84848BC98C79A3014FF75B28A8090C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AyxALNZ8XwNPn54gzDxFJpCwh22EKUEGecGhf6uRDzcY/0/34352e3137332e38342e302f32322d3234203d3e20323638383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:91:71:32:ad:15:10:d7:0c:5c:77:d8:46:ff:a4:b1:e0:da:
         c5:86:64:e4:9b:05:32:1b:10:8b:8a:ba:40:ce:f8:e9:fe:ba:
         07:5d:30:cc:73:e4:55:d0:fc:64:40:e0:56:8e:aa:91:5e:0a:
         36:34:4f:2f:6a:bf:40:b9:22:d0:d5:89:97:d2:8c:95:dc:17:
         bf:01:ac:6f:66:0e:a8:22:c9:38:1f:26:be:cd:51:20:14:86:
         85:69:34:00:f8:40:82:94:a0:55:aa:2b:18:f1:a1:87:cf:24:
         6b:df:fc:ff:48:5b:94:e7:14:d3:f7:4f:3e:ae:1c:5a:f1:76:
         1c:38:23:ba:cf:23:1b:10:4d:db:21:64:59:4a:d3:84:e1:6f:
         6f:9f:c2:a2:07:73:c3:e5:10:a4:df:13:13:61:08:bc:5e:7d:
         41:ad:1e:f2:79:e5:36:92:d3:f9:3d:34:78:00:25:27:1c:26:
         6e:3c:3a:f9:58:66:d2:72:a0:bd:bf:ac:13:b0:1d:75:b2:d7:
         35:de:4e:22:ba:5e:09:b9:0c:c7:46:53:6f:44:9e:65:99:a1:
         9e:5a:0b:de:ed:69:5d:ee:a2:c3:9d:be:fb:1a:a4:1c:26:51:
         9d:22:78:92:01:a9:bb:65:7f:c8:63:c5:83:7e:9c:b6:a0:6e:
         84:01:9d:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTi4URvORfK36iJdvOhPnERivUXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc0NDA0MjMzRTg0ODQ4QkM5OEM3OUEzMDE0RkY3NUIy
OEE4MDkwQzAeFw0yMzEwMjAxOTIyMjRaFw0yNDEwMTgxOTI3MjRaMDMxMTAvBgNV
BAMTKEM2MUUyMDUxMjE3RUM4RTU4NDc5NkZBNjdENTc0MzNGRTY5NzcwRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLsB3ONMZiYTMNXQ/JSGbQxdH
7AmyzggYCawEyGmAcgbc4NUcABRRor3sc0jnl5VuPk+INhJMMphOY0yNR1UgzLLM
z51exk4NYHq6mpzzrV0AISb8n39IX/TWfkO19M4zRGzLxPHq5co3HdVCEUgQPM/C
XwxOxDeoa0XCi2DpP5qAmhQa0Suo5gSYexf7dBlS6gWxHbPCHMP+Y083n8k2Vk8U
WZIyW3I4xfywwexYhdt/T/KDJ3UQhNRpfAutMNbNrmv8I7adwwotS5R474ohVEHi
O5nKU4bSm11SDijGAh9iPnsZOn4/c24wlKmfBKMF+/j4elHRty52HZNs9FGbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxh4gUSF+yOWEeW+mfVdDP+aXcP0wHwYDVR0j
BBgwFoAUF0QEIz6EhIvJjHmjAU/3WyioCQwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXl4QUxOWjhYd05QbjU0Z3pEeEZKcEN3aDIyRUtVRUdlY0doZjZ1UkR6
Y1kvMC8xNzQ0MDQyMzNFODQ4NDhCQzk4Qzc5QTMwMTRGRjc1QjI4QTgwOTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3NDQwNDIzM0U4NDg0OEJD
OThDNzlBMzAxNEZGNzVCMjhBODA5MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F5eEFMTlo4WHdOUG41NGd6RHhGSnBDd2gyMkVLVUVHZWNHaGY2dVJEemNZLzAv
MzQzNTJlMzEzNzMzMmUzODM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa1UMA0GCSqGSIb3DQEBCwUAA4IBAQDMkXEyrRUQ
1wxcd9hG/6Sx4NrFhmTkmwUyGxCLirpAzvjp/roHXTDMc+RV0PxkQOBWjqqRXgo2
NE8var9AuSLQ1YmX0oyV3Be/AaxvZg6oIsk4Hya+zVEgFIaFaTQA+ECClKBVqisY
8aGHzyRr3/z/SFuU5xTT908+rhxa8XYcOCO6zyMbEE3bIWRZStOE4W9vn8KiB3PD
5RCk3xMTYQi8Xn1BrR7yeeU2ktP5PTR4ACUnHCZuPDr5WGbScqC9v6wTsB11stc1
3k4iul4JuQzHRlNvRJ5lmaGeWgve7Wld7qLDnb77GqQcJlGdIniSAam7ZX/IY8WD
fpy2oG6EAZ09
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:14 2024 by rpki-client on console-ams.rpki-client.org