Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131372e302f32342d3234203d3e20323731353131.roa
File:                     34352e3138352e3131372e302f32342d3234203d3e20323731353131.roa (raw, json)
Hash identifier:          LLkxr26206dxEFn1OqynblkhRmwP4UgrpLuNPwk70yA=
Subject key identifier:   49:5E:82:91:B2:D3:7C:A2:57:E3:2A:72:F7:74:49:5F:8D:81:49:A1
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       0A3A324A46B60A4B0BEDA60944C4DBA4BC61FAA3
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131372e302f32342d3234203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:01 +0000
ROA not before:           Thu 16 Nov 2023 22:19:01 +0000
ROA not after:            Thu 14 Nov 2024 22:24:01 +0000
asID:                     271511
IP address blocks:        45.185.117.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3a:32:4a:46:b6:0a:4b:0b:ed:a6:09:44:c4:db:a4:bc:61:fa:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:01 2023 GMT
            Not After : Nov 14 22:24:01 2024 GMT
        Subject: CN=495E8291B2D37CA257E32A72F774495F8D8149A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7a:34:cc:0e:64:4c:a5:8b:c0:88:50:26:55:
                    d5:78:b4:54:0e:bd:9e:4f:7d:c0:0c:87:a8:b1:c4:
                    af:d2:a1:f4:7e:21:56:49:bf:c9:15:e1:df:1b:15:
                    6f:c1:3c:eb:10:4e:04:39:90:19:9b:f8:00:00:5d:
                    fa:ec:99:59:37:23:b9:eb:c0:5f:1b:ba:7d:4d:c5:
                    e3:9d:d7:85:36:5b:03:1f:b4:57:f8:ec:03:50:00:
                    1f:8a:4d:ab:79:c1:45:fa:4e:58:ff:de:a7:50:37:
                    99:cb:6d:59:fc:93:66:f6:3b:68:61:76:12:e2:02:
                    72:65:7e:ce:e8:cf:d5:76:7f:54:4c:8c:60:12:99:
                    34:af:da:83:df:fe:86:71:09:ac:ab:83:b7:52:01:
                    79:fb:a2:ab:46:d6:13:be:0f:02:61:fc:94:e8:ea:
                    d0:84:67:eb:c7:00:04:ba:db:b6:0d:90:36:92:57:
                    a2:67:c9:87:2d:6e:02:df:ac:74:04:13:82:06:ae:
                    47:3b:f1:6c:24:98:26:52:2b:f3:ad:75:1c:f6:6f:
                    5f:c7:cf:81:b6:e3:62:9b:7d:4b:d5:d6:ec:e8:f4:
                    7c:41:20:71:da:16:fd:ae:3c:ea:2d:97:7b:bc:a4:
                    c2:9b:0a:ba:bc:b2:fa:a1:6e:be:01:a6:c3:d7:00:
                    16:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:82:91:B2:D3:7C:A2:57:E3:2A:72:F7:74:49:5F:8D:81:49:A1
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131372e302f32342d3234203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:81:c8:a0:59:d1:01:05:c6:74:7d:e4:d1:e0:3a:83:1c:
         d8:b9:fa:7a:3a:e7:be:d6:24:29:9d:53:25:d3:d4:aa:15:1f:
         45:fb:8d:65:ea:3f:08:78:47:55:d7:70:ad:9d:1c:3f:91:f4:
         8e:37:b6:5e:d1:70:87:48:20:f8:ab:14:cb:57:7e:92:83:67:
         ea:28:d9:d7:b2:2c:80:92:e4:38:5d:35:00:89:e6:f5:5a:3d:
         02:75:76:29:e0:1e:88:4c:08:1b:43:9f:fc:d4:e9:c2:0e:54:
         01:0d:41:4e:eb:6d:99:65:64:85:37:73:69:57:b8:88:cc:2b:
         fe:67:ac:cd:c3:30:d7:9e:82:ed:0e:fe:67:a0:af:83:38:77:
         dd:52:f0:15:94:ed:f0:c3:5f:50:52:66:73:04:3c:c9:19:82:
         18:5f:ca:61:3a:af:9d:70:44:e4:be:a4:01:a4:b9:ee:c5:78:
         5c:7e:56:d4:8b:e5:ba:1b:cd:d2:62:95:13:43:68:ff:0b:48:
         6d:10:79:36:98:6b:93:f8:9e:4d:ab:57:86:e4:e3:59:dd:e3:
         1e:eb:0f:84:e9:04:97:a5:f7:78:83:2d:15:c3:c3:b9:be:a6:
         50:be:70:ca:a1:76:29:c1:99:49:08:c1:75:9f:97:ac:c4:17:
         d7:cd:6b:05
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCjoySka2CksL7aYJRMTbpLxh+qMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI0MDE0MEQ2NUJGM0RFNTUyRkQ4OUNGMDQwQjk4RUZB
NjQwMDA3MDAeFw0yMzExMTYyMjE5MDFaFw0yNDExMTQyMjI0MDFaMDMxMTAvBgNV
BAMTKDQ5NUU4MjkxQjJEMzdDQTI1N0UzMkE3MkY3NzQ0OTVGOEQ4MTQ5QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeejTMDmRMpYvAiFAmVdV4tFQO
vZ5PfcAMh6ixxK/SofR+IVZJv8kV4d8bFW/BPOsQTgQ5kBmb+AAAXfrsmVk3I7nr
wF8bun1NxeOd14U2WwMftFf47ANQAB+KTat5wUX6Tlj/3qdQN5nLbVn8k2b2O2hh
dhLiAnJlfs7oz9V2f1RMjGASmTSv2oPf/oZxCayrg7dSAXn7oqtG1hO+DwJh/JTo
6tCEZ+vHAAS627YNkDaSV6JnyYctbgLfrHQEE4IGrkc78WwkmCZSK/OtdRz2b1/H
z4G242KbfUvV1uzo9HxBIHHaFv2uPOotl3u8pMKbCrq8svqhbr4BpsPXABYPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSV6CkbLTfKJX4ypy93RJX42BSaEwHwYDVR0j
BBgwFoAUW0AUDWW/PeVS/YnPBAuY76ZAAHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm5xSmYzUERUNGJxaVBzbkxoMnBpRlpTUUpyR1ViWFJGN1ltdTVNdTFt
MXMvMC81QjQwMTQwRDY1QkYzREU1NTJGRDg5Q0YwNDBCOThFRkE2NDAwMDcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNDAxNDBENjVCRjNERTU1
MkZEODlDRjA0MEI5OEVGQTY0MDAwNzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JucUpmM1BEVDRicWlQc25MaDJwaUZaU1FKckdVYlhSRjdZbXU1TXUxbTFzLzAv
MzQzNTJlMzEzODM1MmUzMTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuXUwDQYJKoZIhvcNAQELBQADggEBAF6Vgcig
WdEBBcZ0feTR4DqDHNi5+no6577WJCmdUyXT1KoVH0X7jWXqPwh4R1XXcK2dHD+R
9I43tl7RcIdIIPirFMtXfpKDZ+oo2deyLICS5DhdNQCJ5vVaPQJ1dingHohMCBtD
n/zU6cIOVAENQU7rbZllZIU3c2lXuIjMK/5nrM3DMNeegu0O/megr4M4d91S8BWU
7fDDX1BSZnMEPMkZghhfymE6r51wROS+pAGkue7FeFx+VtSL5bobzdJilRNDaP8L
SG0QeTaYa5P4nk2rV4bk41nd4x7rD4TpBJel93iDLRXDw7m+plC+cMqhdinBmUkI
wXWfl6zEF9fNawU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org