Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa
File:                     34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa (raw, json)
Hash identifier:          /ewr+qMxuio6JXI+8t8szmd1GoHq7W15hir3fbWEeqs=
Subject key identifier:   C5:4D:EE:D2:33:37:64:0D:3F:AA:44:75:A0:97:87:41:6D:20:C1:98
Certificate issuer:       /CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
Certificate serial:       1D64606B9E1AE61695C5BE005BC2355EF05B513D
Authority key identifier: 53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa
Signing time:             Fri 02 Feb 2024 14:20:05 +0000
ROA not before:           Fri 02 Feb 2024 14:15:05 +0000
ROA not after:            Fri 31 Jan 2025 14:20:05 +0000
asID:                     267229
IP address blocks:        45.231.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:64:60:6b:9e:1a:e6:16:95:c5:be:00:5b:c2:35:5e:f0:5b:51:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53895AED87F30E6ED53DB01B9DC68CA237B687F2
        Validity
            Not Before: Feb  2 14:15:05 2024 GMT
            Not After : Jan 31 14:20:05 2025 GMT
        Subject: CN=C54DEED23337640D3FAA4475A09787416D20C198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:69:85:b0:b5:b1:86:a3:14:29:7f:5a:80:
                    69:8b:4a:26:73:7d:ba:21:8f:e9:f6:99:0f:ae:fc:
                    2a:da:dc:e8:3d:b4:d1:ba:10:16:ce:4e:86:a9:68:
                    72:e3:83:4c:20:fa:8a:63:25:7a:e9:e2:0c:00:4d:
                    0e:4e:50:b5:9f:a8:dc:15:02:bd:ca:d2:f1:4d:91:
                    cb:81:fa:24:4c:aa:e5:be:fc:89:9f:2a:06:d0:c1:
                    c4:69:34:10:ca:4b:3a:cf:64:7f:4d:0f:46:61:f6:
                    48:f7:c6:a5:97:89:0a:2c:fe:db:df:e8:07:1c:92:
                    dc:0a:2a:74:a7:e1:7c:05:2f:10:3c:41:91:7a:eb:
                    f7:66:b6:8c:c2:60:e0:c8:e6:4f:80:b9:a0:d9:7a:
                    9b:57:6d:3e:50:ab:5e:91:88:c4:88:c6:d9:6a:5a:
                    4b:fe:fe:7c:aa:0a:ed:c9:69:04:dc:d0:2d:2c:4e:
                    01:66:f0:73:47:4d:43:7f:84:0b:16:2b:28:0a:2e:
                    da:a0:b0:f0:31:25:38:e3:d6:a2:13:d2:3b:6f:74:
                    9d:d2:5b:76:35:2a:aa:49:22:dc:a6:3e:e2:8b:84:
                    e3:60:c2:90:c6:1d:0e:3b:09:df:49:c2:9d:26:2d:
                    dc:0b:c2:f1:e2:ba:fd:d5:e8:3c:e6:b8:28:27:90:
                    bd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:4D:EE:D2:33:37:64:0D:3F:AA:44:75:A0:97:87:41:6D:20:C1:98
            X509v3 Authority Key Identifier:
                keyid:53:89:5A:ED:87:F3:0E:6E:D5:3D:B0:1B:9D:C6:8C:A2:37:B6:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53895AED87F30E6ED53DB01B9DC68CA237B687F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKZpT4mAJ6B2ztjyWUk3jgQnY4FNixzSGoLWGzfuNaew/0/34352e3233312e3234372e302f32342d3234203d3e20323637323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d5:21:b6:31:7d:87:18:b3:b0:f9:4c:69:bc:cc:86:d6:dc:
         b6:c4:67:69:17:4f:64:55:ba:3e:15:ab:20:82:03:65:b6:62:
         d9:71:9e:28:04:a1:62:f3:4a:c4:c3:41:ad:ff:c1:5b:37:17:
         4a:56:4e:19:de:ec:fe:05:a3:af:e6:5c:b7:ad:eb:a1:ea:f9:
         99:08:0a:4d:4f:1e:c9:8f:c4:d9:1a:1e:e7:eb:08:49:08:e5:
         99:71:f7:4c:66:e1:e3:b2:fe:e0:f9:2a:1a:a3:95:08:30:1f:
         33:fa:e3:28:64:05:b6:54:c0:01:23:1d:50:83:7a:84:0a:c3:
         e2:f9:40:88:39:3c:c8:d7:41:17:1b:45:3f:ed:41:67:8e:ed:
         e6:97:6a:72:b4:f8:95:f3:8f:c2:a3:30:64:95:21:1f:d1:2a:
         6a:6a:75:41:8e:e7:9a:fd:a2:cb:8b:67:1e:7e:8f:a5:8f:ca:
         a7:4c:81:64:14:6a:5f:e1:ad:44:3b:0d:56:b8:cf:c6:1b:2e:
         62:be:2c:d1:39:fd:46:ba:68:90:9b:07:24:35:6a:35:d7:bf:
         fb:6c:e2:03:b5:65:ec:c4:f0:5d:b1:6a:fe:dc:ab:01:f2:9b:
         af:8b:c9:51:60:92:4f:a7:ac:cf:b8:0a:c0:6c:d5:d8:ef:86:
         5b:d7:6d:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHWRga54a5haVxb4AW8I1XvBbUT0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4OTVBRUQ4N0YzMEU2RUQ1M0RCMDFCOURDNjhDQTIz
N0I2ODdGMjAeFw0yNDAyMDIxNDE1MDVaFw0yNTAxMzExNDIwMDVaMDMxMTAvBgNV
BAMTKEM1NERFRUQyMzMzNzY0MEQzRkFBNDQ3NUEwOTc4NzQxNkQyMEMxOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR62mFsLWxhqMUKX9agGmLSiZz
fbohj+n2mQ+u/Cra3Og9tNG6EBbOToapaHLjg0wg+opjJXrp4gwATQ5OULWfqNwV
Ar3K0vFNkcuB+iRMquW+/ImfKgbQwcRpNBDKSzrPZH9ND0Zh9kj3xqWXiQos/tvf
6AccktwKKnSn4XwFLxA8QZF66/dmtozCYODI5k+AuaDZeptXbT5Qq16RiMSIxtlq
Wkv+/nyqCu3JaQTc0C0sTgFm8HNHTUN/hAsWKygKLtqgsPAxJTjj1qIT0jtvdJ3S
W3Y1KqpJItymPuKLhONgwpDGHQ47Cd9Jwp0mLdwLwvHiuv3V6DzmuCgnkL3HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxU3u0jM3ZA0/qkR1oJeHQW0gwZgwHwYDVR0j
BBgwFoAUU4la7YfzDm7VPbAbncaMoje2h/IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQktacFQ0bUFKNkIyenRqeVdVazNqZ1FuWTRGTml4elNHb0xXR3pmdU5h
ZXcvMC81Mzg5NUFFRDg3RjMwRTZFRDUzREIwMUI5REM2OENBMjM3QjY4N0YyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzUzODk1QUVEODdGMzBFNkVE
NTNEQjAxQjlEQzY4Q0EyMzdCNjg3RjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLWnBUNG1BSjZCMnp0anlXVWszamdRblk0Rk5peHpTR29MV0d6ZnVOYWV3LzAv
MzQzNTJlMzIzMzMxMmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMjMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5/cwDQYJKoZIhvcNAQELBQADggEBAGLVIbYx
fYcYs7D5TGm8zIbW3LbEZ2kXT2RVuj4VqyCCA2W2YtlxnigEoWLzSsTDQa3/wVs3
F0pWThne7P4Fo6/mXLet66Hq+ZkICk1PHsmPxNkaHufrCEkI5Zlx90xm4eOy/uD5
KhqjlQgwHzP64yhkBbZUwAEjHVCDeoQKw+L5QIg5PMjXQRcbRT/tQWeO7eaXanK0
+JXzj8KjMGSVIR/RKmpqdUGO55r9osuLZx5+j6WPyqdMgWQUal/hrUQ7DVa4z8Yb
LmK+LNE5/Ua6aJCbByQ1ajXXv/ts4gO1ZezE8F2xav7cqwHym6+LyVFgkk+nrM+4
CsBs1djvhlvXbcs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org