Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323733303037.roa
File:                     34352e3138362e322e302f32342d3234203d3e20323733303037.roa (raw, json)
Hash identifier:          ordlQa/RPwG5hvqSK3Cmd4necMTQug/NFOC1FT9H5uI=
Subject key identifier:   59:8A:2E:B7:1F:5B:F7:23:02:EC:46:72:63:D6:3F:6A:B8:1C:36:93
Certificate issuer:       /CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
Certificate serial:       0365AC7F32100F4E9D77FB7DA725C3EC013B0042
Authority key identifier: FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323733303037.roa
Signing time:             Fri 23 Jun 2023 16:33:47 +0000
ROA not before:           Fri 23 Jun 2023 16:28:47 +0000
ROA not after:            Fri 21 Jun 2024 16:33:47 +0000
asID:                     273007
IP address blocks:        45.186.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:65:ac:7f:32:10:0f:4e:9d:77:fb:7d:a7:25:c3:ec:01:3b:00:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B
        Validity
            Not Before: Jun 23 16:28:47 2023 GMT
            Not After : Jun 21 16:33:47 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:cc:89:8f:ff:3c:9a:88:91:54:de:7b:44:
                    df:1a:86:2b:7c:96:6f:a5:15:09:3b:97:53:5c:d9:
                    7d:dd:20:d4:2a:b4:21:e0:04:aa:28:6a:4e:f4:5b:
                    4e:13:59:7c:f3:ed:d0:6d:7c:fa:f1:3a:4d:f0:5e:
                    f8:95:db:d4:9f:db:b8:1d:81:1b:6b:cd:7a:14:b4:
                    a6:4c:b9:5d:cf:66:86:04:dd:f9:a2:01:11:0a:84:
                    28:d5:08:a1:1c:89:ee:40:ae:f3:af:b7:ef:9e:d8:
                    24:1c:28:97:5e:ab:29:4d:59:4a:22:58:6a:c6:a0:
                    37:e6:50:00:e5:6b:91:25:45:13:81:74:e6:d6:a5:
                    25:a4:57:74:12:c4:36:bc:00:17:f3:2f:ba:75:83:
                    dc:cb:61:9d:7c:33:72:cd:36:92:65:93:4a:fd:c5:
                    e0:aa:f0:f8:dc:8a:49:a3:98:b1:a2:c0:12:31:c1:
                    e7:ca:93:28:b0:42:8d:0d:61:dc:e9:3b:e5:25:ce:
                    9f:33:4e:64:1c:0e:a8:4d:68:e0:ab:8c:2b:d4:2a:
                    1c:03:e2:1c:01:44:29:95:b9:2e:17:6e:9a:15:64:
                    3e:5d:f6:97:7d:ce:bc:7a:78:ab:6a:fd:4f:51:4f:
                    1e:8b:28:25:54:bf:e8:79:eb:45:fe:7d:3d:23:a5:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8A:2E:B7:1F:5B:F7:23:02:EC:46:72:63:D6:3F:6A:B8:1C:36:93
            X509v3 Authority Key Identifier:
                keyid:FF:F7:2C:B5:4D:12:CB:8D:1A:15:3A:24:43:C3:64:EC:A1:5C:BD:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF72CB54D12CB8D1A153A2443C364ECA15CBD8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRr9HKT8EE9JTZLjRiUBqSFF9gMWTaedArnSyDAq5bJk/0/34352e3138362e322e302f32342d3234203d3e20323733303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:53:4a:bf:50:9a:6d:ac:53:74:ee:49:f7:08:a2:14:0e:5c:
         85:6b:9a:4a:14:2d:06:0f:a0:ec:88:11:2a:22:33:65:c4:24:
         8d:b7:9a:5e:07:9f:52:5e:3e:e7:8e:b5:42:1e:49:6e:4a:c7:
         00:ed:d0:26:0c:79:ae:95:6a:de:24:67:83:e9:76:02:9f:d7:
         11:51:91:bc:2f:da:c9:f1:e1:18:f5:27:5a:38:84:1a:d5:d8:
         7b:ac:11:09:b7:d9:fc:04:33:0b:2d:11:bb:51:f6:be:24:b3:
         4b:00:39:c5:10:d9:7f:62:28:f7:fc:ca:4e:cf:23:1e:89:12:
         71:16:d2:39:57:65:7b:98:f2:e7:f5:71:eb:9b:be:8e:23:d8:
         7b:18:8d:a2:18:51:fc:86:d8:b7:71:ba:70:eb:86:30:50:f7:
         31:34:54:5e:16:50:bc:98:b6:3d:72:1f:ad:b9:3e:b5:c9:5f:
         a0:be:fb:16:71:80:b0:af:62:78:e5:c3:f3:70:d5:f7:53:ea:
         42:83:ee:08:ac:5b:f8:4b:dd:1b:94:0a:fb:92:42:d8:7a:fe:
         05:ee:6c:33:c6:2a:50:be:c3:ea:ff:2e:3c:62:ed:55:2b:4f:
         50:11:17:d1:4f:cf:f5:5d:06:73:a0:e4:fb:20:91:4d:c5:3c:
         c3:0b:77:b0
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUA2WsfzIQD06dd/t9pyXD7AE7AEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZGNzJDQjU0RDEyQ0I4RDFBMTUzQTI0NDNDMzY0RUNB
MTVDQkQ4QjAeFw0yMzA2MjMxNjI4NDdaFw0yNDA2MjExNjMzNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzcxMUNDODk4RkZGM0M5QTg4
OTE1NERFN0I0NERGMUE4NjJCN0M5NjZGQTUxNTA5M0I5NzUzNUNEOTdEREQyMEQ0
MkFCNDIxRTAwNEFBMjg2QTRFRjQ1QjRFMTM1OTdDRjNFREQwNkQ3Q0ZBRjEzQTRE
RjA1RUY4OTVEQkQ0OUZEQkI4MUQ4MTFCNkJDRDdBMTRCNEE2NENCOTVEQ0Y2Njg2
MDREREY5QTIwMTExMEE4NDI4RDUwOEExMUM4OUVFNDBBRUYzQUZCN0VGOUVEODI0
MUMyODk3NUVBQjI5NEQ1OTRBMjI1ODZBQzZBMDM3RTY1MDAwRTU2QjkxMjU0NTEz
ODE3NEU2RDZBNTI1QTQ1Nzc0MTJDNDM2QkMwMDE3RjMyRkJBNzU4M0RDQ0I2MTlE
N0MzMzcyQ0QzNjkyNjU5MzRBRkRDNUUwQUFGMEY4REM4QTQ5QTM5OEIxQTJDMDEy
MzFDMUU3Q0E5MzI4QjA0MjhEMEQ2MURDRTkzQkU1MjVDRTlGMzM0RTY0MUMwRUE4
NEQ2OEUwQUI4QzJCRDQyQTFDMDNFMjFDMDE0NDI5OTVCOTJFMTc2RTlBMTU2NDNF
NURGNjk3N0RDRUJDN0E3OEFCNkFGRDRGNTE0RjFFOEIyODI1NTRCRkU4NzlFQjQ1
RkU3RDNEMjNBNUY2MTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxxHMiY//PJqIkVTee0TfGoYrfJZvpRUJO5dTXNl93SDUKrQh4ASq
KGpO9FtOE1l88+3QbXz68TpN8F74ldvUn9u4HYEba816FLSmTLldz2aGBN35ogER
CoQo1QihHInuQK7zr7fvntgkHCiXXqspTVlKIlhqxqA35lAA5WuRJUUTgXTm1qUl
pFd0EsQ2vAAX8y+6dYPcy2GdfDNyzTaSZZNK/cXgqvD43IpJo5ixosASMcHnypMo
sEKNDWHc6TvlJc6fM05kHA6oTWjgq4wr1CocA+IcAUQplbkuF26aFWQ+XfaXfc68
enirav1PUU8eiyglVL/oeetF/n09I6X2GQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FFmKLrcfW/cjAuxGcmPWP2q4HDaTMB8GA1UdIwQYMBaAFP/3LLVNEsuNGhU6JEPD
ZOyhXL2LMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0JScjlIS1Q4RUU5SlRa
TGpSaVVCcVNGRjlnTVdUYWVkQXJuU3lEQXE1YkprLzAvRkZGNzJDQjU0RDEyQ0I4
RDFBMTUzQTI0NDNDMzY0RUNBMTVDQkQ4Qi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9GRkY3MkNCNTREMTJDQjhEMUExNTNBMjQ0M0MzNjRFQ0ExNUNC
RDhCLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9CUnI5SEtUOEVFOUpUWkxqUmlV
QnFTRkY5Z01XVGFlZEFyblN5REFxNWJKay8wLzM0MzUyZTMxMzgzNjJlMzIyZTMw
MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzMzMDMwMzcucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtugIw
DQYJKoZIhvcNAQELBQADggEBAHhTSr9Qmm2sU3TuSfcIohQOXIVrmkoULQYPoOyI
ESoiM2XEJI23ml4Hn1JePueOtUIeSW5KxwDt0CYMea6Vat4kZ4PpdgKf1xFRkbwv
2snx4Rj1J1o4hBrV2HusEQm32fwEMwstEbtR9r4ks0sAOcUQ2X9iKPf8yk7PIx6J
EnEW0jlXZXuY8uf1ceubvo4j2HsYjaIYUfyG2LdxunDrhjBQ9zE0VF4WULyYtj1y
H625PrXJX6C++xZxgLCvYnjlw/Nw1fdT6kKD7gisW/hL3RuUCvuSQth6/gXubDPG
KlC+w+r/Ljxi7VUrT1ARF9FPz/VdBnOg5PsgkU3FPMMLd7A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org