Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa
File:                     34352e342e3132362e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier:          BlHsFUOuQlU2PQ7/eGDkTsIcQjLdbeIttWimmiVNS3A=
Subject key identifier:   7A:B6:F5:9B:87:ED:FC:C6:FA:07:D0:12:D9:F3:C0:F0:19:9A:F0:9B
Certificate issuer:       /CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
Certificate serial:       5BA17D8A11A1FB7D0D8E91FD58A5BE7BF8ECA91E
Authority key identifier: D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa
Signing time:             Sat 18 Nov 2023 00:20:34 +0000
ROA not before:           Sat 18 Nov 2023 00:15:34 +0000
ROA not after:            Sat 16 Nov 2024 00:20:34 +0000
asID:                     266066
IP address blocks:        45.4.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a1:7d:8a:11:a1:fb:7d:0d:8e:91:fd:58:a5:be:7b:f8:ec:a9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D976D8643DDAC04E9DF4107DC27106249788AF8F
        Validity
            Not Before: Nov 18 00:15:34 2023 GMT
            Not After : Nov 16 00:20:34 2024 GMT
        Subject: CN=7AB6F59B87EDFCC6FA07D012D9F3C0F0199AF09B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:de:45:fd:a8:1b:22:37:64:fd:f2:77:cd:
                    85:d0:c5:f0:33:9e:6f:68:87:0c:ce:d1:40:66:38:
                    68:56:2c:f0:56:3b:6c:54:b9:0f:7b:41:cc:77:c0:
                    1c:52:58:32:84:ec:ce:cd:ef:7d:6a:ba:77:c7:67:
                    04:ca:bd:24:c4:46:47:8c:f8:cc:88:ac:ea:3e:9d:
                    3b:67:0a:31:cb:cf:b9:35:69:a1:20:ef:91:62:9a:
                    23:69:36:b5:2c:b4:cd:7e:78:80:32:c6:fa:c8:44:
                    47:be:7f:dc:b5:25:9c:f6:e1:0a:d1:a8:fc:12:c3:
                    2d:90:d7:ef:5b:f0:6d:43:f3:f6:e7:16:7d:81:87:
                    3f:5b:f9:8d:14:23:cb:bc:62:47:46:0f:56:3b:64:
                    2d:09:31:fb:60:68:4a:5f:4a:0f:f7:e7:a6:3a:7a:
                    6b:39:40:d3:ed:90:d6:cb:c4:c6:d0:4b:47:c7:df:
                    21:39:fb:25:c2:83:4f:03:f3:43:76:ae:ec:3d:56:
                    b8:c9:dd:a1:8e:12:ba:79:e3:c2:27:80:94:c6:6e:
                    dd:5f:e9:c4:f7:4b:c8:1b:67:65:6b:35:8e:35:cf:
                    58:f1:57:7f:fb:a7:dc:a5:d7:1d:4f:ad:1a:35:9c:
                    d7:b6:f7:a0:6c:91:74:d4:3b:b9:b1:be:e3:8f:56:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B6:F5:9B:87:ED:FC:C6:FA:07:D0:12:D9:F3:C0:F0:19:9A:F0:9B
            X509v3 Authority Key Identifier:
                keyid:D9:76:D8:64:3D:DA:C0:4E:9D:F4:10:7D:C2:71:06:24:97:88:AF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D976D8643DDAC04E9DF4107DC27106249788AF8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132362e302f32342d3234203d3e20323636303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:83:a2:fd:ad:c2:71:b7:9f:ff:20:19:e7:39:f8:ce:9d:25:
         3e:ef:89:ea:e7:ad:fa:38:22:f0:ec:fc:ee:04:a7:43:65:f0:
         6b:b2:0f:05:40:d0:74:26:fe:84:a0:3d:9d:ad:c1:77:18:b7:
         f0:9a:36:45:7a:f5:7f:a0:18:c5:9c:ae:fe:23:be:ae:35:d7:
         93:0d:09:c3:e7:56:f7:81:02:46:d0:25:7c:44:bc:df:c4:ee:
         f7:60:d4:87:3d:69:4e:29:d9:dd:b0:e7:b8:9a:ea:c7:86:ea:
         a9:2c:0f:12:32:97:cd:2e:eb:87:1e:dc:e8:60:2a:e2:64:76:
         2d:90:77:77:6a:2f:01:71:bb:e0:7f:90:3c:39:03:7a:ae:3d:
         57:7c:32:a4:13:1e:9a:7b:9b:ba:00:16:a2:9b:50:96:14:44:
         9e:9e:0f:a5:de:0a:23:64:e9:e4:ad:c0:86:3a:4b:c1:62:be:
         f8:ce:51:fd:e4:c6:17:bd:16:a3:9f:a1:06:13:f6:8d:a4:58:
         90:93:82:dc:a5:9d:e2:93:ae:ab:67:f0:0d:11:6f:98:17:e1:
         32:60:df:c3:06:5f:ae:b6:08:70:8c:4a:00:17:c6:20:2f:6e:
         1c:06:25:ab:6c:3c:21:05:aa:9c:a4:c5:38:5d:39:8a:76:53:
         10:f3:74:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUW6F9ihGh+30NjpH9WKW+e/jsqR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk3NkQ4NjQzRERBQzA0RTlERjQxMDdEQzI3MTA2MjQ5
Nzg4QUY4RjAeFw0yMzExMTgwMDE1MzRaFw0yNDExMTYwMDIwMzRaMDMxMTAvBgNV
BAMTKDdBQjZGNTlCODdFREZDQzZGQTA3RDAxMkQ5RjNDMEYwMTk5QUYwOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9t5F/agbIjdk/fJ3zYXQxfAz
nm9ohwzO0UBmOGhWLPBWO2xUuQ97Qcx3wBxSWDKE7M7N731qunfHZwTKvSTERkeM
+MyIrOo+nTtnCjHLz7k1aaEg75FimiNpNrUstM1+eIAyxvrIREe+f9y1JZz24QrR
qPwSwy2Q1+9b8G1D8/bnFn2Bhz9b+Y0UI8u8YkdGD1Y7ZC0JMftgaEpfSg/356Y6
ems5QNPtkNbLxMbQS0fH3yE5+yXCg08D80N2ruw9VrjJ3aGOErp548IngJTGbt1f
6cT3S8gbZ2VrNY41z1jxV3/7p9yl1x1PrRo1nNe296BskXTUO7mxvuOPVogLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUerb1m4ft/Mb6B9AS2fPA8Bma8JswHwYDVR0j
BBgwFoAU2XbYZD3awE6d9BB9wnEGJJeIr48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC9EOTc2RDg2NDNEREFDMDRFOURGNDEwN0RDMjcxMDYyNDk3ODhBRjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NzZEODY0M0REQUMwNEU5
REY0MTA3REMyNzEwNjI0OTc4OEFGOEYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzQzNTJlMzQyZTMxMzIzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjMw
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0EfjANBgkqhkiG9w0BAQsFAAOCAQEAeoOi/a3Ccbef
/yAZ5zn4zp0lPu+J6uet+jgi8Oz87gSnQ2Xwa7IPBUDQdCb+hKA9na3Bdxi38Jo2
RXr1f6AYxZyu/iO+rjXXkw0Jw+dW94ECRtAlfES838Tu92DUhz1pTinZ3bDnuJrq
x4bqqSwPEjKXzS7rhx7c6GAq4mR2LZB3d2ovAXG74H+QPDkDeq49V3wypBMemnub
ugAWoptQlhREnp4Ppd4KI2Tp5K3AhjpLwWK++M5R/eTGF70Wo5+hBhP2jaRYkJOC
3KWd4pOuq2fwDRFvmBfhMmDfwwZfrrYIcIxKABfGIC9uHAYlq2w8IQWqnKTFOF05
inZTEPN0yg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org