Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa
File:                     34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa (raw, json)
Hash identifier:          E7u5Zv/O71KfjKWONcVRvtzP0FxbLhx/QMV46Ka0kdQ=
Subject key identifier:   67:F2:E2:AB:9B:B0:AD:D1:40:85:82:C9:4F:C8:56:DD:B6:42:C4:EA
Certificate issuer:       /CN=98886E660C218FD13E82E809EF5CD801BC0310E5
Certificate serial:       7F46CFDC56F340D9401D50B6AD0213E4E355DA11
Authority key identifier: 98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa
Signing time:             Thu 11 Apr 2024 19:00:35 +0000
ROA not before:           Thu 11 Apr 2024 18:55:35 +0000
ROA not after:            Thu 10 Apr 2025 19:00:35 +0000
asID:                     266520
IP address blocks:        45.177.140.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:46:cf:dc:56:f3:40:d9:40:1d:50:b6:ad:02:13:e4:e3:55:da:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98886E660C218FD13E82E809EF5CD801BC0310E5
        Validity
            Not Before: Apr 11 18:55:35 2024 GMT
            Not After : Apr 10 19:00:35 2025 GMT
        Subject: CN=67F2E2AB9BB0ADD1408582C94FC856DDB642C4EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:5e:7c:a9:a9:fe:9a:22:2f:9c:6e:8f:60:
                    ec:77:a2:c0:28:a8:85:13:dd:c8:97:79:22:a4:22:
                    5e:89:af:c9:92:2c:e1:49:f1:ef:3e:92:3a:68:9b:
                    31:44:6b:d2:3a:8e:36:c6:99:63:43:d4:7c:fe:7a:
                    5e:3e:70:52:e8:81:3c:f6:99:d0:13:31:e5:25:9e:
                    20:2f:2e:a8:f7:c7:82:1d:66:31:81:1b:ff:d4:44:
                    58:2a:11:a2:35:ff:a1:f3:ac:83:71:ee:50:1f:1d:
                    f3:a4:b7:3a:fe:29:03:1a:b2:e0:ea:e4:b5:d5:ec:
                    aa:11:9f:6d:a7:a8:e5:5d:6a:b1:1b:e2:bb:86:b0:
                    8b:f3:20:29:cc:be:49:69:f1:b1:3f:47:34:a4:22:
                    b4:77:b2:07:b5:da:55:f7:be:cc:c7:ec:c6:fc:93:
                    12:e3:fd:38:13:b3:1f:8a:4d:a4:82:b9:3d:2f:16:
                    91:6a:1e:1e:d9:61:a1:85:11:5d:45:57:ca:d7:0d:
                    04:1e:a0:f0:09:21:37:c9:56:63:37:f6:a2:21:00:
                    3d:1b:00:50:b6:46:b7:e4:0f:be:be:67:8d:b2:60:
                    ea:6c:2b:35:5e:4f:86:51:04:50:ef:da:3a:bc:0e:
                    82:58:51:bb:02:f4:9c:a6:bd:75:36:4b:23:f8:98:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F2:E2:AB:9B:B0:AD:D1:40:85:82:C9:4F:C8:56:DD:B6:42:C4:EA
            X509v3 Authority Key Identifier:
                keyid:98:88:6E:66:0C:21:8F:D1:3E:82:E8:09:EF:5C:D8:01:BC:03:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/98886E660C218FD13E82E809EF5CD801BC0310E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98886E660C218FD13E82E809EF5CD801BC0310E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BgyNYWN9r8fPWM7wCfdpz3RNhHwhAZyCkBHcqXu9iBUm/0/34352e3137372e3134302e302f32322d3234203d3e20323636353230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:80:17:e5:2e:7a:4e:fc:0c:c2:91:30:36:61:48:92:ce:96:
         35:53:12:1e:46:00:46:e8:af:b3:1e:e5:d5:9d:5b:1b:23:ec:
         ef:03:39:f2:fe:78:cd:f0:4b:ed:95:dd:67:1f:57:68:27:fe:
         e7:e8:3f:b2:00:67:75:d0:fb:2f:74:f5:b4:af:42:de:4c:2b:
         c7:55:54:a6:b7:47:ec:33:40:11:ec:b3:19:b8:7f:fc:ac:80:
         c1:db:84:a2:4b:3f:51:79:a6:a0:4e:00:0b:93:55:54:ce:a1:
         52:74:a1:e8:12:de:fa:5b:e3:cc:b2:c6:30:46:dc:69:50:91:
         21:4e:af:fc:4d:b3:41:01:8f:2d:f1:fd:ac:69:84:a8:a5:55:
         29:14:3a:6f:95:95:77:1d:be:e0:73:87:8a:82:05:6c:7b:4f:
         c8:35:7c:9a:33:a2:97:e8:45:89:08:0e:83:ec:e8:09:64:71:
         c5:36:da:cb:d0:1f:00:e4:3e:fa:09:99:7e:5a:d4:2b:18:03:
         cc:50:a5:78:59:0f:d4:43:04:12:b3:85:7c:aa:71:ca:57:c1:
         29:54:5e:aa:4a:f9:4d:8d:ae:c2:ae:46:88:83:6a:2a:59:5c:
         55:ac:c2:56:19:8e:f5:07:e5:0b:c4:ef:ae:a0:c8:0b:57:b0:
         71:8d:98:a7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf0bP3FbzQNlAHVC2rQIT5ONV2hEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg4ODZFNjYwQzIxOEZEMTNFODJFODA5RUY1Q0Q4MDFC
QzAzMTBFNTAeFw0yNDA0MTExODU1MzVaFw0yNTA0MTAxOTAwMzVaMDMxMTAvBgNV
BAMTKDY3RjJFMkFCOUJCMEFERDE0MDg1ODJDOTRGQzg1NkREQjY0MkM0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HF58qan+miIvnG6PYOx3osAo
qIUT3ciXeSKkIl6Jr8mSLOFJ8e8+kjpomzFEa9I6jjbGmWND1Hz+el4+cFLogTz2
mdATMeUlniAvLqj3x4IdZjGBG//URFgqEaI1/6HzrINx7lAfHfOktzr+KQMasuDq
5LXV7KoRn22nqOVdarEb4ruGsIvzICnMvklp8bE/RzSkIrR3sge12lX3vszH7Mb8
kxLj/TgTsx+KTaSCuT0vFpFqHh7ZYaGFEV1FV8rXDQQeoPAJITfJVmM39qIhAD0b
AFC2RrfkD76+Z42yYOpsKzVeT4ZRBFDv2jq8DoJYUbsC9JymvXU2SyP4mGWtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ/Liq5uwrdFAhYLJT8hW3bZCxOowHwYDVR0j
BBgwFoAUmIhuZgwhj9E+gugJ71zYAbwDEOUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmd5TllXTjlyOGZQV003d0NmZHB6M1JOaEh3aEFaeUNrQkhjcVh1OWlC
VW0vMC85ODg4NkU2NjBDMjE4RkQxM0U4MkU4MDlFRjVDRDgwMUJDMDMxMEU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk4ODg2RTY2MEMyMThGRDEz
RTgyRTgwOUVGNUNEODAxQkMwMzEwRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JneU5ZV045cjhmUFdNN3dDZmRwejNSTmhId2hBWnlDa0JIY3FYdTlpQlVtLzAv
MzQzNTJlMzEzNzM3MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzNTMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItsYwwDQYJKoZIhvcNAQELBQADggEBAGmAF+Uu
ek78DMKRMDZhSJLOljVTEh5GAEbor7Me5dWdWxsj7O8DOfL+eM3wS+2V3WcfV2gn
/ufoP7IAZ3XQ+y909bSvQt5MK8dVVKa3R+wzQBHssxm4f/ysgMHbhKJLP1F5pqBO
AAuTVVTOoVJ0oegS3vpb48yyxjBG3GlQkSFOr/xNs0EBjy3x/axphKilVSkUOm+V
lXcdvuBzh4qCBWx7T8g1fJozopfoRYkIDoPs6AlkccU22svQHwDkPvoJmX5a1CsY
A8xQpXhZD9RDBBKzhXyqccpXwSlUXqpK+U2NrsKuRoiDaipZXFWswlYZjvUH5QvE
766gyAtXsHGNmKc=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org