Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          g0oapj04sECMuJi+JdATAQC8WZYdJx5tlm7xugzyGzw=
Subject key identifier:   34:F0:C2:59:13:DB:77:0B:6E:14:5C:57:56:2F:80:3F:A1:D3:09:5E
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       4C5DE98DF242FAA9EA5A5DB26B40A5BB71C6D8D7
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa
Signing time:             Fri 02 Feb 2024 14:20:05 +0000
ROA not before:           Fri 02 Feb 2024 14:15:05 +0000
ROA not after:            Fri 31 Jan 2025 14:20:05 +0000
asID:                     267229
IP address blocks:        45.231.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5d:e9:8d:f2:42:fa:a9:ea:5a:5d:b2:6b:40:a5:bb:71:c6:d8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Feb  2 14:15:05 2024 GMT
            Not After : Jan 31 14:20:05 2025 GMT
        Subject: CN=34F0C25913DB770B6E145C57562F803FA1D3095E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:c9:58:b7:45:87:b5:49:08:a9:95:79:46:
                    a4:ea:ac:b9:be:69:9b:4e:a8:e7:f4:db:0f:ee:82:
                    9d:e4:23:8a:96:b8:1d:b0:8a:76:de:7c:2c:5e:05:
                    8b:45:47:a7:35:0a:7c:66:27:6f:49:c1:ee:ad:ab:
                    f4:06:30:a7:47:36:cb:cb:a5:db:6e:93:a1:df:cc:
                    77:06:7e:44:cf:e0:74:ba:9d:87:62:79:33:ff:21:
                    98:1a:64:c7:8d:fe:37:f4:a0:a6:66:b0:8a:75:3f:
                    52:8e:67:22:60:67:7c:99:87:1b:f5:7c:94:0f:2e:
                    6d:fb:9c:84:f0:b3:f6:ed:f6:1c:22:b3:b5:3e:a0:
                    17:67:71:6c:e1:7c:20:cc:e5:ee:21:7e:1c:5c:67:
                    bb:02:4d:93:64:6f:06:df:ad:a3:db:64:28:bc:0b:
                    15:02:ca:74:c7:1f:a4:70:a1:ed:7d:f9:3f:d0:b2:
                    19:52:98:5a:54:c9:b3:bf:df:6a:a4:cf:7d:f4:e9:
                    4c:57:1a:ee:2b:35:b5:82:bf:f6:e3:8c:42:bc:43:
                    f1:4e:eb:60:37:e9:99:4a:0f:62:82:1c:c3:5e:33:
                    48:53:08:84:02:8d:bf:41:90:ed:a7:f1:8c:8f:f8:
                    bc:70:ce:93:c8:5f:bf:05:5a:9a:eb:d5:57:7c:7a:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F0:C2:59:13:DB:77:0B:6E:14:5C:57:56:2F:80:3F:A1:D3:09:5E
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234362e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:99:35:d2:a0:5e:3c:c0:69:2e:2d:41:a3:87:6a:6e:e5:d3:
         07:9c:41:23:bf:19:32:03:c0:77:97:16:8e:15:8b:32:6c:f5:
         7f:f7:fb:90:e5:a4:2a:5f:d7:fe:c9:f1:33:07:81:6f:1f:06:
         ef:3f:d7:b9:c4:4d:fd:d9:85:dd:14:2d:f5:7d:96:df:f3:84:
         86:1d:23:5f:ed:56:61:72:a9:b4:76:cb:00:f2:bf:6e:de:77:
         2e:df:71:4e:71:17:a7:ab:00:f3:ba:e2:35:b3:69:6c:91:e9:
         64:8b:7f:8b:d6:94:4d:79:67:e2:f5:3c:e1:f6:d4:fc:e3:71:
         7c:94:04:06:8e:5e:c9:b0:67:57:8f:11:47:d8:f6:f2:34:2f:
         d9:1a:f8:02:83:8a:c6:b7:c4:45:b0:90:df:01:03:1e:b6:5e:
         18:cc:54:f3:8a:5c:70:b1:bc:87:ce:20:28:98:d5:d8:13:b0:
         f2:a6:eb:93:63:a6:d2:99:ee:8c:80:14:30:20:c8:d6:7a:7a:
         24:90:e8:4f:55:97:e0:e2:81:b6:37:5c:c4:e2:02:89:f5:b8:
         3c:87:51:36:54:b2:71:a9:62:4d:50:46:00:a4:c2:26:f7:94:
         f1:41:6a:75:2f:2e:d1:d1:52:f8:23:ee:be:a6:09:e0:06:34:
         63:b6:ae:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTF3pjfJC+qnqWl2ya0Clu3HG2NcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4OTVBRUQ4N0YzMEU2RUQ1M0RCMDFCOURDNjhDQTIz
N0I2ODdGMjAeFw0yNDAyMDIxNDE1MDVaFw0yNTAxMzExNDIwMDVaMDMxMTAvBgNV
BAMTKDM0RjBDMjU5MTNEQjc3MEI2RTE0NUM1NzU2MkY4MDNGQTFEMzA5NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnQclYt0WHtUkIqZV5RqTqrLm+
aZtOqOf02w/ugp3kI4qWuB2winbefCxeBYtFR6c1CnxmJ29Jwe6tq/QGMKdHNsvL
pdtuk6HfzHcGfkTP4HS6nYdieTP/IZgaZMeN/jf0oKZmsIp1P1KOZyJgZ3yZhxv1
fJQPLm37nITws/bt9hwis7U+oBdncWzhfCDM5e4hfhxcZ7sCTZNkbwbfraPbZCi8
CxUCynTHH6Rwoe19+T/QshlSmFpUybO/32qkz3306UxXGu4rNbWCv/bjjEK8Q/FO
62A36ZlKD2KCHMNeM0hTCIQCjb9BkO2n8YyP+LxwzpPIX78FWprr1Vd8ev+9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNPDCWRPbdwtuFFxXVi+AP6HTCV4wHwYDVR0j
BBgwFoAUU4la7YfzDm7VPbAbncaMoje2h/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMC81Mzg5NUFFRDg3RjMwRTZFRDUzREIwMUI5REM2OENBMjM3QjY4N0YyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzODk1QUVEODdGMzBFNkVE
NTNEQjAxQjlEQzY4Q0EyMzdCNjg3RjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzAv
MzQzNTJlMzIzMzMxMmUzMjM0MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5/YwDQYJKoZIhvcNAQELBQADggEBAIKZNdKg
XjzAaS4tQaOHam7l0wecQSO/GTIDwHeXFo4VizJs9X/3+5DlpCpf1/7J8TMHgW8f
Bu8/17nETf3Zhd0ULfV9lt/zhIYdI1/tVmFyqbR2ywDyv27edy7fcU5xF6erAPO6
4jWzaWyR6WSLf4vWlE15Z+L1POH21PzjcXyUBAaOXsmwZ1ePEUfY9vI0L9ka+AKD
isa3xEWwkN8BAx62XhjMVPOKXHCxvIfOICiY1dgTsPKm65NjptKZ7oyAFDAgyNZ6
eiSQ6E9Vl+DigbY3XMTiAon1uDyHUTZUsnGpYk1QRgCkwib3lPFBanUvLtHRUvgj
7r6mCeAGNGO2rsg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org