Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
File:                     34352e3137352e38302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier:          xJjrZTMh0YbKaErsjkkE0KYtKefHvfDEf53FC3/gJxk=
Subject key identifier:   D1:CB:7D:38:87:FC:FE:E4:F5:CB:BD:2E:8D:4B:E2:0F:AB:39:52:E1
Certificate issuer:       /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial:       6C137440A3DC3F562E3DB3EF2750BF8AD9FD1BA4
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
Signing time:             Fri 09 Dec 2022 11:53:27 +0000
ROA not before:           Fri 09 Dec 2022 11:48:27 +0000
ROA not after:            Fri 08 Dec 2023 11:53:27 +0000
asID:                     53080
IP address blocks:        45.175.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:13:74:40:a3:dc:3f:56:2e:3d:b3:ef:27:50:bf:8a:d9:fd:1b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
        Validity
            Not Before: Dec  9 11:48:27 2022 GMT
            Not After : Dec  8 11:53:27 2023 GMT
        Subject: CN=D1CB7D3887FCFEE4F5CBBD2E8D4BE20FAB3952E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:d1:28:76:cc:b9:f2:d3:85:9e:96:b6:7c:
                    77:80:df:ec:60:bc:c5:be:5c:89:1a:39:0c:0b:70:
                    5e:42:72:2c:44:8e:71:ca:9e:16:71:8c:04:d0:a5:
                    d2:b8:da:55:e2:c5:ab:36:de:c3:e6:1a:b0:93:92:
                    cb:d4:b6:76:cf:4f:d9:9b:d1:2d:41:3b:68:02:60:
                    20:66:a8:27:7a:6b:94:bd:b9:75:fb:61:55:78:63:
                    e6:76:24:1d:08:1a:2d:b8:23:a3:c4:84:de:8a:fe:
                    eb:68:d8:64:35:d9:26:24:70:76:9f:64:b0:57:de:
                    6b:49:0f:56:ca:38:8a:80:3c:18:77:b5:49:68:4c:
                    3c:d0:51:8b:b2:6d:e4:c3:b1:48:1a:ff:1e:ca:f5:
                    42:dc:1e:2a:71:fb:af:cb:6b:4c:ef:71:29:1e:ec:
                    5c:ac:78:2f:6a:38:2a:00:b0:ab:9b:10:bb:75:77:
                    4b:f4:e5:d4:51:a7:ac:0c:75:4a:82:f0:ae:89:6f:
                    df:32:ea:b2:b6:0a:3e:29:ce:24:ab:16:d7:20:b8:
                    18:c3:4c:37:8b:f4:39:f8:5f:c8:82:18:9b:49:2d:
                    20:fa:c0:9f:cf:0b:52:b1:2e:3e:2e:a4:12:07:dd:
                    7c:12:0d:6f:54:2a:8e:d4:c7:c5:65:52:13:f7:05:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:7D:38:87:FC:FE:E4:F5:CB:BD:2E:8D:4B:E2:0F:AB:39:52:E1
            X509v3 Authority Key Identifier:
                keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/34352e3137352e38302e302f32322d3234203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:a7:fb:43:4b:fe:a2:87:0c:9a:6b:5e:15:fb:ff:4e:78:
         e2:00:93:09:6b:86:db:80:cd:6d:e3:4c:67:cd:29:fa:b9:a1:
         18:4b:76:be:0e:1b:36:1b:38:56:13:0f:84:e8:b5:c6:6c:59:
         02:a0:c0:7a:06:e6:83:86:94:e5:fb:23:47:55:a0:05:2a:f7:
         c7:03:83:fd:37:33:32:3e:03:f5:db:6e:62:eb:33:52:9e:82:
         46:00:ec:25:92:ea:a5:44:c7:a4:4e:6a:82:fd:db:5b:56:24:
         0e:ea:3c:ff:82:24:ee:38:ed:a1:4e:a2:fe:d7:8d:dc:a7:c0:
         43:d8:e1:00:43:ae:20:d7:9c:12:23:33:a9:1b:c2:af:52:b1:
         27:c7:7b:52:98:54:a1:7f:76:d5:bf:07:da:7d:0b:13:22:05:
         81:bf:cd:28:a5:a7:4f:44:57:b3:f2:5e:c5:f7:ce:57:a2:c8:
         8b:93:ef:15:87:f2:97:4b:0f:de:45:c1:19:de:28:e1:6c:dd:
         f2:21:81:9f:04:f2:7c:a2:02:ff:77:fc:91:3a:7a:db:47:55:
         7a:b2:cf:be:55:1d:38:a5:62:12:3e:d4:42:40:fb:9f:9d:8d:
         84:7a:de:16:5a:d7:0e:b6:00:85:de:3b:a7:e9:07:c3:0f:a8:
         19:82:04:90
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbBN0QKPcP1YuPbPvJ1C/itn9G6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5NEQ4MjI2RDhERTM4ODg3ODEyRDM5MTAzQUUxRkE3
RjMwNTE3MzAeFw0yMjEyMDkxMTQ4MjdaFw0yMzEyMDgxMTUzMjdaMDMxMTAvBgNV
BAMTKEQxQ0I3RDM4ODdGQ0ZFRTRGNUNCQkQyRThENEJFMjBGQUIzOTUyRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG6NEodsy58tOFnpa2fHeA3+xg
vMW+XIkaOQwLcF5CcixEjnHKnhZxjATQpdK42lXixas23sPmGrCTksvUtnbPT9mb
0S1BO2gCYCBmqCd6a5S9uXX7YVV4Y+Z2JB0IGi24I6PEhN6K/uto2GQ12SYkcHaf
ZLBX3mtJD1bKOIqAPBh3tUloTDzQUYuybeTDsUga/x7K9ULcHipx+6/La0zvcSke
7FyseC9qOCoAsKubELt1d0v05dRRp6wMdUqC8K6Jb98y6rK2Cj4pziSrFtcguBjD
TDeL9Dn4X8iCGJtJLSD6wJ/PC1KxLj4upBIH3XwSDW9UKo7Ux8VlUhP3Baa7AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0ct9OIf8/uT1y70ujUviD6s5UuEwHwYDVR0j
BBgwFoAUOJTYIm2N44iHgS05EDrh+n8wUXMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk43cUp4bW83ZUdDMWozNThROFJCM25YQ0pYMzJFWU00Qng0Q2E2Qkt5
cFUvMC8zODk0RDgyMjZEOERFMzg4ODc4MTJEMzkxMDNBRTFGQTdGMzA1MTczLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM4OTREODIyNkQ4REUzODg4
NzgxMkQzOTEwM0FFMUZBN0YzMDUxNzMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JON3FKeG1vN2VHQzFqMzU4UThSQjNuWENKWDMyRVlNNEJ4NENhNkJLeXBVLzAv
MzQzNTJlMzEzNzM1MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2vUDANBgkqhkiG9w0BAQsFAAOCAQEAX/Kn+0NL/qKH
DJprXhX7/0544gCTCWuG24DNbeNMZ80p+rmhGEt2vg4bNhs4VhMPhOi1xmxZAqDA
egbmg4aU5fsjR1WgBSr3xwOD/TczMj4D9dtuYuszUp6CRgDsJZLqpUTHpE5qgv3b
W1YkDuo8/4Ik7jjtoU6i/teN3KfAQ9jhAEOuINecEiMzqRvCr1KxJ8d7UphUoX92
1b8H2n0LEyIFgb/NKKWnT0RXs/JexffOV6LIi5PvFYfyl0sP3kXBGd4o4Wzd8iGB
nwTyfKIC/3f8kTp620dVerLPvlUdOKViEj7UQkD7n52NhHreFlrXDrYAhd47p+kH
ww+oGYIEkA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org