Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/34352e3233302e35362e302f32322d3234203d3e20323637313530.roa
File:                     34352e3233302e35362e302f32322d3234203d3e20323637313530.roa (raw, json)
Hash identifier:          KQ52k+4q5hGcK1fB1yNK0+21LkCzxTJkilyWhYQvTkU=
Subject key identifier:   01:53:D8:67:44:8C:4E:FF:45:D4:17:45:AE:E3:C5:B1:6D:13:9E:1E
Certificate issuer:       /CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
Certificate serial:       5983DDA4C98CD35B3D72377350606084353DDDA5
Authority key identifier: D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/34352e3233302e35362e302f32322d3234203d3e20323637313530.roa
Signing time:             Thu 14 Sep 2023 20:56:33 +0000
ROA not before:           Thu 14 Sep 2023 20:51:33 +0000
ROA not after:            Thu 12 Sep 2024 20:56:33 +0000
asID:                     267150
IP address blocks:        45.230.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:83:dd:a4:c9:8c:d3:5b:3d:72:37:73:50:60:60:84:35:3d:dd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9CFC9D41E81C6EA15959CAC80AA25673676AEDD
        Validity
            Not Before: Sep 14 20:51:33 2023 GMT
            Not After : Sep 12 20:56:33 2024 GMT
        Subject: CN=0153D867448C4EFF45D41745AEE3C5B16D139E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:8c:45:a1:cd:29:61:a7:15:dc:c2:12:05:
                    df:8b:05:66:b2:fd:85:77:29:25:cb:06:ce:3b:77:
                    98:95:8b:ce:d0:0e:e3:2e:eb:fa:ba:74:e6:49:d7:
                    0c:ad:81:67:99:52:d5:5c:17:64:4f:1d:4e:de:f4:
                    49:7e:64:02:75:00:6b:05:8c:35:68:80:0a:82:f2:
                    e6:e5:f9:3e:28:fa:db:71:d4:7e:30:db:99:b9:33:
                    1b:cc:21:25:58:b4:18:be:84:68:3b:27:c1:7a:82:
                    2d:3b:15:8a:77:7e:ce:3f:32:ce:cd:db:4d:d0:03:
                    9a:51:9c:bd:9f:d0:5d:30:f8:bb:5b:e0:8e:16:6f:
                    86:96:4e:2d:12:91:75:9a:8d:13:fd:9f:44:49:e2:
                    f9:9d:97:a1:14:86:2a:c4:ca:61:8c:a9:7e:dc:bc:
                    30:ce:39:3d:22:74:1c:ad:3f:5b:ca:b8:0a:c7:9b:
                    d0:bd:92:80:da:f6:5b:d9:e2:bf:28:5c:16:12:72:
                    74:82:8e:42:0f:38:17:0f:88:0a:69:7b:d1:c2:b1:
                    55:6c:6d:0d:3d:44:f2:ef:23:f1:e1:fd:b6:72:cc:
                    f8:30:a6:55:a8:50:b4:1b:f2:bb:34:3e:9e:fd:08:
                    ed:74:d6:a0:da:18:65:ca:d1:6b:f8:5a:6d:77:f3:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:53:D8:67:44:8C:4E:FF:45:D4:17:45:AE:E3:C5:B1:6D:13:9E:1E
            X509v3 Authority Key Identifier:
                keyid:D9:CF:C9:D4:1E:81:C6:EA:15:95:9C:AC:80:AA:25:67:36:76:AE:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9CFC9D41E81C6EA15959CAC80AA25673676AEDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BD4mdRQCQoWtfVgfTnowtuv255XNxdnXzrL1tAXUmSZc/0/34352e3233302e35362e302f32322d3234203d3e20323637313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:fa:73:d6:a3:fc:f1:8c:c1:f8:da:97:38:7b:8d:81:4e:
         a3:d2:1c:ba:2d:eb:09:fe:85:0e:9a:c0:82:24:2a:de:3c:38:
         8e:83:0a:76:bf:7e:da:77:ca:98:d7:35:76:26:dd:a9:77:4c:
         58:f4:a7:bc:da:b4:3e:0d:b5:5e:bf:18:8a:a4:8d:51:a3:f0:
         fe:79:c7:2a:20:1d:2e:dc:16:be:14:3b:e5:19:ca:87:37:82:
         bb:fc:dd:ba:72:f3:dc:0b:81:e8:b6:74:d6:a9:e1:2e:9d:d8:
         69:51:8c:4a:8d:ee:08:90:64:8a:94:4a:eb:8c:22:24:94:8c:
         0b:ff:ef:28:0f:9a:da:d0:36:f7:8d:a3:76:29:e6:eb:3b:82:
         91:79:a9:23:7c:62:eb:c8:59:28:ae:1a:0c:24:c1:05:34:06:
         b0:75:61:ff:90:d3:b7:7f:77:8e:f2:7c:e7:a9:55:19:ee:5f:
         01:b1:9a:93:e7:77:3d:51:9f:34:fa:89:35:0d:10:a1:39:bf:
         97:fb:3a:1e:81:80:d1:ae:07:11:0c:38:cd:a7:16:18:b1:9f:
         68:29:a5:8c:1e:fd:6a:cf:0d:c5:09:9f:4f:79:b1:7f:9e:be:
         1d:62:16:ac:6e:8e:cf:2d:65:c5:08:65:19:8d:fe:f8:50:c1:
         84:b3:af:97
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWYPdpMmM01s9cjdzUGBghDU93aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDlDRkM5RDQxRTgxQzZFQTE1OTU5Q0FDODBBQTI1Njcz
Njc2QUVERDAeFw0yMzA5MTQyMDUxMzNaFw0yNDA5MTIyMDU2MzNaMDMxMTAvBgNV
BAMTKDAxNTNEODY3NDQ4QzRFRkY0NUQ0MTc0NUFFRTNDNUIxNkQxMzlFMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiBIxFoc0pYacV3MISBd+LBWay
/YV3KSXLBs47d5iVi87QDuMu6/q6dOZJ1wytgWeZUtVcF2RPHU7e9El+ZAJ1AGsF
jDVogAqC8ubl+T4o+ttx1H4w25m5MxvMISVYtBi+hGg7J8F6gi07FYp3fs4/Ms7N
203QA5pRnL2f0F0w+Ltb4I4Wb4aWTi0SkXWajRP9n0RJ4vmdl6EUhirEymGMqX7c
vDDOOT0idBytP1vKuArHm9C9koDa9lvZ4r8oXBYScnSCjkIPOBcPiAppe9HCsVVs
bQ09RPLvI/Hh/bZyzPgwplWoULQb8rs0Pp79CO101qDaGGXK0Wv4Wm1383stAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAVPYZ0SMTv9F1BdFruPFsW0Tnh4wHwYDVR0j
BBgwFoAU2c/J1B6BxuoVlZysgKolZzZ2rt0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkQ0bWRSUUNRb1d0ZlZnZlRub3d0dXYyNTVYTnhkblh6ckwxdEFYVW1T
WmMvMC9EOUNGQzlENDFFODFDNkVBMTU5NTlDQUM4MEFBMjU2NzM2NzZBRURELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5Q0ZDOUQ0MUU4MUM2RUEx
NTk1OUNBQzgwQUEyNTY3MzY3NkFFREQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JENG1kUlFDUW9XdGZWZ2ZUbm93dHV2MjU1WE54ZG5YenJMMXRBWFVtU1pjLzAv
MzQzNTJlMzIzMzMwMmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeY4MA0GCSqGSIb3DQEBCwUAA4IBAQCX6fpz1qP8
8YzB+NqXOHuNgU6j0hy6LesJ/oUOmsCCJCrePDiOgwp2v37ad8qY1zV2Jt2pd0xY
9Ke82rQ+DbVevxiKpI1Ro/D+eccqIB0u3Ba+FDvlGcqHN4K7/N26cvPcC4HotnTW
qeEundhpUYxKje4IkGSKlErrjCIklIwL/+8oD5ra0Db3jaN2KebrO4KReakjfGLr
yFkorhoMJMEFNAawdWH/kNO3f3eO8nznqVUZ7l8BsZqT53c9UZ80+ok1DRChOb+X
+zoegYDRrgcRDDjNpxYYsZ9oKaWMHv1qzw3FCZ9PebF/nr4dYhasbo7PLWXFCGUZ
jf74UMGEs6+X
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org