Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
File:                     34352e3138362e302e302f32342d3234203d3e20323639353032.roa (raw, json)
Hash identifier:          wuXPpMxplL80exBnfI+m7f4BWUTiraHNdAQvvWIHytk=
Subject key identifier:   76:E2:53:9F:15:8F:8E:9D:2C:52:8C:02:43:6C:8F:58:2E:A1:42:54
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       6499BD949576F083807C8B1CFBEEE1853394B6BF
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32342d3234203d3e20323639353032.roa
Signing time:             Fri 08 Mar 2024 16:00:00 +0000
ROA not before:           Fri 08 Mar 2024 15:55:00 +0000
ROA not after:            Fri 07 Mar 2025 16:00:00 +0000
asID:                     269502
IP address blocks:        45.186.0.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:99:bd:94:95:76:f0:83:80:7c:8b:1c:fb:ee:e1:85:33:94:b6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Mar  8 15:55:00 2024 GMT
            Not After : Mar  7 16:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:41:4b:6d:9b:2e:23:ae:ec:b2:d7:32:f4:96:
                    d4:b5:31:ab:75:c4:3f:0a:69:6f:78:cf:e2:db:ed:
                    f9:49:f0:a6:d9:1d:51:d2:1b:7b:33:8f:49:b1:ce:
                    f5:08:43:15:d7:de:e4:b6:63:ab:4b:4e:6b:ac:1b:
                    d1:43:dd:8e:e2:08:dc:d2:45:a2:d3:07:36:d6:0e:
                    66:e0:d8:6f:f6:bc:65:97:d1:a8:e7:14:cd:0e:71:
                    76:29:b8:9d:08:25:b8:d4:d4:08:fd:de:60:9f:09:
                    f8:4f:14:d9:fd:59:6d:91:98:a8:cd:26:58:76:be:
                    81:70:4e:39:d7:06:e7:b0:43:08:a5:9b:58:be:6f:
                    fa:94:a7:6a:af:ae:b5:b8:73:e8:0a:18:e4:ee:55:
                    91:31:ce:80:8b:75:c3:f4:44:56:0c:32:79:b0:05:
                    12:42:e3:71:bf:05:64:8d:58:7b:d4:cf:13:88:59:
                    e8:46:a5:2c:05:82:0c:0f:4e:99:ff:50:77:ad:b0:
                    7c:7f:35:a2:a6:e3:6b:74:d7:4e:99:f7:d8:e3:46:
                    6f:ff:f7:c7:62:07:89:f0:e7:2f:1a:ef:be:17:f8:
                    e0:ed:9f:1b:cf:b3:de:b2:55:2b:2d:86:01:75:e9:
                    84:6d:1d:77:48:05:ad:83:cf:78:81:7b:d8:cb:1c:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:53:9F:15:8F:8E:9D:2C:52:8C:02:43:6C:8F:58:2E:A1:42:54
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e302e302f32342d3234203d3e20323639353032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:cf:4f:b2:12:f0:21:4f:43:d3:37:37:54:d9:9f:61:36:92:
         4c:0e:5d:7a:c2:00:90:81:fc:36:61:1d:46:d0:d9:84:85:a7:
         3a:11:74:ee:2c:0b:ff:f3:19:e5:04:dc:7d:fa:17:17:0a:cf:
         42:97:19:09:be:d9:32:df:97:46:fb:da:16:5a:50:7e:a8:ac:
         3f:9d:bc:c4:44:6b:aa:1e:b0:d9:ae:09:f2:3e:f5:1b:60:56:
         a9:ae:93:4f:ac:7d:ea:84:d0:40:d4:43:6b:69:c5:8f:a3:f2:
         43:1e:85:d1:86:9e:65:e5:92:21:5f:a2:9c:4d:64:15:10:02:
         0f:34:bb:9a:da:17:43:53:d7:9a:42:cb:4a:fa:21:2b:96:55:
         17:6c:27:ef:6a:46:cf:d0:83:4f:80:18:14:54:45:c0:c1:6a:
         8b:48:c8:78:17:d0:80:07:99:35:88:ca:6d:b2:d3:de:cc:3a:
         e0:2c:dc:4c:c8:4a:5a:6f:30:6b:9c:a8:ff:3e:3e:35:92:a5:
         0c:d1:ae:5b:c2:70:4e:b1:35:a5:64:fb:57:2f:8e:9b:f3:72:
         68:78:96:5c:f4:7a:bb:16:ba:1a:e0:a8:b1:81:f0:9d:6d:16:
         97:4c:66:b4:b5:b6:15:5d:21:ad:8e:42:d9:bf:10:4a:0e:52:
         3f:86:39:c5
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUZJm9lJV28IOAfIsc++7hhTOUtr8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGNzJDQjU0RDEyQ0I4RDFBMTUzQTI0NDNDMzY0RUNB
MTVDQkQ4QjAeFw0yNDAzMDgxNTU1MDBaFw0yNTAzMDcxNjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU0MTRCNkQ5QjJFMjNBRUVD
QjJENzMyRjQ5NkQ0QjUzMUFCNzVDNDNGMEE2OTZGNzhDRkUyREJFREY5NDlGMEE2
RDkxRDUxRDIxQjdCMzM4RjQ5QjFDRUY1MDg0MzE1RDdERUU0QjY2M0FCNEI0RTZC
QUMxQkQxNDNERDhFRTIwOERDRDI0NUEyRDMwNzM2RDYwRTY2RTBEODZGRjZCQzY1
OTdEMUE4RTcxNENEMEU3MTc2MjlCODlEMDgyNUI4RDRENDA4RkRERTYwOUYwOUY4
NEYxNEQ5RkQ1OTZEOTE5OEE4Q0QyNjU4NzZCRTgxNzA0RTM5RDcwNkU3QjA0MzA4
QTU5QjU4QkU2RkZBOTRBNzZBQUZBRUI1Qjg3M0U4MEExOEU0RUU1NTkxMzFDRTgw
OEI3NUMzRjQ0NDU2MEMzMjc5QjAwNTEyNDJFMzcxQkYwNTY0OEQ1ODdCRDRDRjEz
ODg1OUU4NDZBNTJDMDU4MjBDMEY0RTk5RkY1MDc3QURCMDdDN0YzNUEyQTZFMzZC
NzRENzRFOTlGN0Q4RTM0NjZGRkZGN0M3NjIwNzg5RjBFNzJGMUFFRkJFMTdGOEUw
RUQ5RjFCQ0ZCM0RFQjI1NTJCMkQ4NjAxNzVFOTg0NkQxRDc3NDgwNUFEODNDRjc4
ODE3QkQ4Q0IxQzdEQTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3kFLbZsuI67sstcy9JbUtTGrdcQ/CmlveM/i2+35SfCm2R1R0ht7
M49Jsc71CEMV197ktmOrS05rrBvRQ92O4gjc0kWi0wc21g5m4Nhv9rxll9Go5xTN
DnF2KbidCCW41NQI/d5gnwn4TxTZ/VltkZiozSZYdr6BcE451wbnsEMIpZtYvm/6
lKdqr661uHPoChjk7lWRMc6Ai3XD9ERWDDJ5sAUSQuNxvwVkjVh71M8TiFnoRqUs
BYIMD06Z/1B3rbB8fzWipuNrdNdOmffY40Zv//fHYgeJ8OcvGu++F/jg7Z8bz7Pe
slUrLYYBdemEbR13SAWtg894gXvYyxx9qQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FHbiU58Vj46dLFKMAkNsj1guoUJUMB8GA1UdIwQYMBaAFP/3LLVNEsuNGhU6JEPD
ZOyhXL2LMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JScjlIS1Q4RUU5SlRa
TGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzAvRkZGNzJDQjU0RDEyQ0I4
RDFBMTUzQTI0NDNDMzY0RUNBMTVDQkQ4Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRkY3MkNCNTREMTJDQjhEMUExNTNBMjQ0M0MzNjRFQ0ExNUNC
RDhCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CUnI5SEtUOEVFOUpUWkxqUmlV
QnFTRkY5Z01XVGFlZEFyblN5REFxNWJKay8wLzM0MzUyZTMxMzgzNjJlMzAyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzNTMwMzIucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtugAw
DQYJKoZIhvcNAQELBQADggEBAEvPT7IS8CFPQ9M3N1TZn2E2kkwOXXrCAJCB/DZh
HUbQ2YSFpzoRdO4sC//zGeUE3H36FxcKz0KXGQm+2TLfl0b72hZaUH6orD+dvMRE
a6oesNmuCfI+9RtgVqmuk0+sfeqE0EDUQ2tpxY+j8kMehdGGnmXlkiFfopxNZBUQ
Ag80u5raF0NT15pCy0r6ISuWVRdsJ+9qRs/Qg0+AGBRURcDBaotIyHgX0IAHmTWI
ym2y097MOuAs3EzISlpvMGucqP8+PjWSpQzRrlvCcE6xNaVk+1cvjpvzcmh4llz0
ersWuhrgqLGB8J1tFpdMZrS1thVdIa2OQtm/EEoOUj+GOcU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org