Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa
File:                     34352e3233352e35362e302f32322d3234203d3e20323637343131.roa (raw, json)
Hash identifier:          X3A33NIpakRL2hgRF32PLMnIZGyvYRhSwdPMUJ17NIU=
Subject key identifier:   AB:A8:9A:DA:54:17:D3:01:3F:81:85:4D:F6:A5:1F:06:F9:30:62:1D
Certificate issuer:       /CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
Certificate serial:       09780F93C2277C0D32BDE4F3669251205DE9BEF6
Authority key identifier: BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa
Signing time:             Wed 10 Apr 2024 13:17:16 +0000
ROA not before:           Wed 10 Apr 2024 13:12:16 +0000
ROA not after:            Wed 09 Apr 2025 13:17:16 +0000
asID:                     267411
IP address blocks:        45.235.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:78:0f:93:c2:27:7c:0d:32:bd:e4:f3:66:92:51:20:5d:e9:be:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B
        Validity
            Not Before: Apr 10 13:12:16 2024 GMT
            Not After : Apr  9 13:17:16 2025 GMT
        Subject: CN=ABA89ADA5417D3013F81854DF6A51F06F930621D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:e1:36:4f:7e:93:6f:f7:f9:1e:aa:6d:54:
                    00:4d:ff:af:51:95:7e:e5:e2:6f:2b:33:45:f3:9e:
                    e0:b2:d4:50:99:67:14:a2:aa:da:8e:9e:d2:f0:40:
                    26:ff:a9:3c:08:6e:11:bf:96:fb:21:43:fa:2f:33:
                    90:db:8e:a9:fc:fc:c5:54:e0:88:7b:8c:49:78:8b:
                    7e:05:ec:eb:a2:31:3b:08:44:29:ca:df:ce:3d:5b:
                    a2:04:1e:c8:69:20:1c:7f:65:6c:93:e9:99:0f:93:
                    66:3e:7d:64:41:74:c0:ab:14:b1:04:23:ea:10:a4:
                    f6:23:db:03:bc:9e:c6:6c:0c:a8:53:f1:d9:2c:c0:
                    f6:8e:6e:60:3b:5b:07:f3:07:30:43:aa:ea:71:f5:
                    4f:14:20:f2:9a:9d:b0:40:7e:84:23:e6:18:75:bd:
                    27:87:d3:6f:e8:12:f9:3f:15:eb:59:52:c1:8e:c0:
                    98:14:dd:1f:5d:b4:1e:d4:9f:f9:d0:3c:13:33:9a:
                    d8:c0:d6:cd:32:30:44:4d:cb:cd:4c:f3:7b:c4:06:
                    66:d3:f2:24:51:11:88:32:5b:58:1c:38:99:13:d9:
                    92:a4:4a:f7:90:e8:3e:03:90:06:91:ca:0c:d3:67:
                    e1:2d:8f:58:6b:ae:a3:ba:52:98:af:56:01:6a:31:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A8:9A:DA:54:17:D3:01:3F:81:85:4D:F6:A5:1F:06:F9:30:62:1D
            X509v3 Authority Key Identifier:
                keyid:BF:83:DE:84:C9:94:8A:34:1A:FB:F1:28:2E:86:6D:EA:C2:EA:9C:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF83DE84C9948A341AFBF1282E866DEAC2EA9C3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6D4Va468rQqeowxc55cwX2DC5cvYphPGn7VzHLu5W6p/0/34352e3233352e35362e302f32322d3234203d3e20323637343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:c1:82:1c:69:e5:53:ed:a5:06:8b:ad:57:7f:c6:e5:51:
         f6:02:80:78:8e:5a:02:21:71:69:b8:a6:ff:44:5f:3e:d7:ab:
         ed:bd:6a:1a:77:ab:f9:e6:9b:4d:64:73:79:04:1d:bb:81:70:
         37:48:43:e6:a3:9c:f8:91:c0:bc:ce:1e:59:0f:b5:7e:0c:7f:
         54:90:2a:1c:01:2c:75:c9:61:a3:e0:cd:57:7f:06:ed:f4:68:
         0a:c6:d2:af:99:f4:5a:cb:e9:89:eb:71:97:83:c9:16:13:e3:
         b5:aa:07:6d:fc:a1:49:7f:14:23:1e:08:66:fe:e7:8a:2d:45:
         fc:a3:f2:b4:8b:4f:0e:07:dd:8e:bf:4b:d1:79:90:fe:f9:95:
         7b:68:7d:ca:f9:eb:7c:fd:4b:86:7a:0f:88:c9:a0:fb:42:a7:
         f3:88:63:8a:04:4d:ef:bb:61:bd:bb:0b:1e:1b:71:b1:8e:08:
         cc:44:f6:46:6f:37:5b:7a:d1:35:73:a0:23:b8:e1:aa:c3:e3:
         ef:b3:8d:67:cc:a0:9f:78:5c:e0:ce:3c:90:09:74:04:0b:43:
         f1:8e:de:ce:a5:6a:65:7e:08:b2:37:06:60:f5:f4:95:28:01:
         2f:a7:b4:b8:ba:56:d8:9a:ce:74:45:d3:1b:38:bb:68:4f:51:
         e5:53:ab:49
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCXgPk8InfA0yveTzZpJRIF3pvvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY4M0RFODRDOTk0OEEzNDFBRkJGMTI4MkU4NjZERUFD
MkVBOUMzQjAeFw0yNDA0MTAxMzEyMTZaFw0yNTA0MDkxMzE3MTZaMDMxMTAvBgNV
BAMTKEFCQTg5QURBNTQxN0QzMDEzRjgxODU0REY2QTUxRjA2RjkzMDYyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJuE2T36Tb/f5HqptVABN/69R
lX7l4m8rM0XznuCy1FCZZxSiqtqOntLwQCb/qTwIbhG/lvshQ/ovM5Dbjqn8/MVU
4Ih7jEl4i34F7OuiMTsIRCnK3849W6IEHshpIBx/ZWyT6ZkPk2Y+fWRBdMCrFLEE
I+oQpPYj2wO8nsZsDKhT8dkswPaObmA7WwfzBzBDqupx9U8UIPKanbBAfoQj5hh1
vSeH02/oEvk/FetZUsGOwJgU3R9dtB7Un/nQPBMzmtjA1s0yMERNy81M83vEBmbT
8iRREYgyW1gcOJkT2ZKkSveQ6D4DkAaRygzTZ+Etj1hrrqO6UpivVgFqMbatAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUq6ia2lQX0wE/gYVN9qUfBvkwYh0wHwYDVR0j
BBgwFoAUv4PehMmUijQa+/EoLoZt6sLqnDswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZENFZhNDY4clFxZW93eGM1NWN3WDJEQzVjdllwaFBHbjdWekhMdTVX
NnAvMC9CRjgzREU4NEM5OTQ4QTM0MUFGQkYxMjgyRTg2NkRFQUMyRUE5QzNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGODNERTg0Qzk5NDhBMzQx
QUZCRjEyODJFODY2REVBQzJFQTlDM0IuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2RDRWYTQ2OHJRcWVvd3hjNTVjd1gyREM1Y3ZZcGhQR243VnpITHU1VzZwLzAv
MzQzNTJlMzIzMzM1MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLes4MA0GCSqGSIb3DQEBCwUAA4IBAQADb8GCHGnl
U+2lBoutV3/G5VH2AoB4jloCIXFpuKb/RF8+16vtvWoad6v55ptNZHN5BB27gXA3
SEPmo5z4kcC8zh5ZD7V+DH9UkCocASx1yWGj4M1Xfwbt9GgKxtKvmfRay+mJ63GX
g8kWE+O1qgdt/KFJfxQjHghm/ueKLUX8o/K0i08OB92Ov0vReZD++ZV7aH3K+et8
/UuGeg+IyaD7QqfziGOKBE3vu2G9uwseG3GxjgjMRPZGbzdbetE1c6AjuOGqw+Pv
s41nzKCfeFzgzjyQCXQEC0Pxjt7OpWplfgiyNwZg9fSVKAEvp7S4ulbYms50RdMb
OLtoT1HlU6tJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org