Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131382e302f32342d3234203d3e20323731353131.roa
File:                     34352e3138352e3131382e302f32342d3234203d3e20323731353131.roa (raw, json)
Hash identifier:          1A3G7jExEOaGH+tu+3hhYpACub57dh5H4CqKc0YS8Ps=
Subject key identifier:   7F:55:53:CF:7C:A4:87:85:F2:14:AB:15:BF:00:A9:4B:BA:65:43:69
Certificate issuer:       /CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
Certificate serial:       24DF955C220579DB5ED13A07C80F609CD1FE3204
Authority key identifier: 5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131382e302f32342d3234203d3e20323731353131.roa
Signing time:             Thu 16 Nov 2023 22:24:00 +0000
ROA not before:           Thu 16 Nov 2023 22:19:00 +0000
ROA not after:            Thu 14 Nov 2024 22:24:00 +0000
asID:                     271511
IP address blocks:        45.185.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:df:95:5c:22:05:79:db:5e:d1:3a:07:c8:0f:60:9c:d1:fe:32:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B40140D65BF3DE552FD89CF040B98EFA6400070
        Validity
            Not Before: Nov 16 22:19:00 2023 GMT
            Not After : Nov 14 22:24:00 2024 GMT
        Subject: CN=7F5553CF7CA48785F214AB15BF00A94BBA654369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:9b:cd:51:34:78:46:99:41:b2:ee:d6:74:
                    0c:60:3d:8d:58:4a:66:de:95:18:72:c3:49:f5:93:
                    4f:b1:f3:10:39:b2:29:05:5b:94:4c:cf:ef:12:e8:
                    c8:ca:e1:44:c7:91:61:d8:24:b9:91:4d:2b:73:52:
                    0e:10:2f:8a:1a:8a:89:eb:4d:03:35:1f:3b:14:11:
                    55:0a:0b:10:b9:38:2b:7d:10:6a:a5:ac:e9:6d:1d:
                    3c:1b:a6:45:7e:ff:5d:da:48:8f:5e:19:04:dc:df:
                    7e:c9:ac:69:9a:c0:4e:3b:57:fa:32:da:4a:b9:b8:
                    1d:04:40:cf:a2:6c:36:a5:37:52:ef:80:1e:20:b0:
                    54:01:be:12:62:d8:a6:d0:4e:c6:77:6a:80:26:89:
                    c2:45:de:de:b1:25:43:88:35:08:93:4c:ce:90:6e:
                    da:55:f5:86:15:54:74:d7:a4:69:7e:f9:25:fa:b2:
                    87:11:dc:50:f1:28:c8:93:87:f7:93:af:b6:b3:d9:
                    91:5a:98:0c:c5:dc:a8:31:de:58:36:67:6c:92:dd:
                    fb:44:d5:e3:72:b7:44:cd:0e:24:02:dc:72:e0:0c:
                    d7:c9:39:61:d3:88:bf:b3:87:5c:0f:f4:26:1b:1e:
                    af:bd:aa:44:44:04:e4:58:f3:a1:a8:e8:3e:97:66:
                    7d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:53:CF:7C:A4:87:85:F2:14:AB:15:BF:00:A9:4B:BA:65:43:69
            X509v3 Authority Key Identifier:
                keyid:5B:40:14:0D:65:BF:3D:E5:52:FD:89:CF:04:0B:98:EF:A6:40:00:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B40140D65BF3DE552FD89CF040B98EFA6400070.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BnqJf3PDT4bqiPsnLh2piFZSQJrGUbXRF7Ymu5Mu1m1s/0/34352e3138352e3131382e302f32342d3234203d3e20323731353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c9:df:44:7c:0c:6d:e0:71:a5:a2:b4:b5:25:8e:10:88:37:
         e0:50:ed:eb:14:2e:ae:79:4d:fa:43:85:fe:c0:f0:84:fe:0b:
         8f:fc:ec:33:03:63:05:fb:58:e5:2f:b0:4d:08:c9:98:6c:4b:
         b0:3c:a4:64:eb:87:11:59:09:e9:51:41:d3:29:0f:dc:d7:ad:
         81:11:df:a6:ae:3f:60:ab:02:9c:d2:ff:2f:a2:87:81:07:15:
         1f:8b:dc:2a:30:c5:cf:71:d7:f6:56:3c:25:7f:44:fc:23:19:
         64:49:fc:18:8a:94:46:be:e9:38:54:53:19:0a:30:4a:39:62:
         2f:f9:54:46:cd:e3:b5:35:87:20:61:de:f9:fc:cb:f0:04:ed:
         fc:49:65:00:f2:d3:fd:11:8a:db:b5:f3:67:06:03:0c:e9:b6:
         31:a0:ef:40:8f:94:61:2c:17:51:a1:92:cb:d3:5d:01:41:2f:
         33:0b:4d:bc:1f:54:e5:90:d4:20:ce:6a:79:42:a9:6b:63:e5:
         84:c9:27:d4:16:35:40:48:d1:a7:3f:53:7f:4b:17:08:3c:3e:
         2a:2d:ca:57:1d:84:a7:0d:aa:2d:a6:0a:e4:d2:5d:09:92:38:
         7c:b2:39:85:59:a0:27:f3:c5:52:e9:72:0e:90:42:fb:7c:9e:
         c8:9d:d7:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJN+VXCIFedte0ToHyA9gnNH+MgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI0MDE0MEQ2NUJGM0RFNTUyRkQ4OUNGMDQwQjk4RUZB
NjQwMDA3MDAeFw0yMzExMTYyMjE5MDBaFw0yNDExMTQyMjI0MDBaMDMxMTAvBgNV
BAMTKDdGNTU1M0NGN0NBNDg3ODVGMjE0QUIxNUJGMDBBOTRCQkE2NTQzNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtAZvNUTR4RplBsu7WdAxgPY1Y
SmbelRhyw0n1k0+x8xA5sikFW5RMz+8S6MjK4UTHkWHYJLmRTStzUg4QL4oaionr
TQM1HzsUEVUKCxC5OCt9EGqlrOltHTwbpkV+/13aSI9eGQTc337JrGmawE47V/oy
2kq5uB0EQM+ibDalN1LvgB4gsFQBvhJi2KbQTsZ3aoAmicJF3t6xJUOINQiTTM6Q
btpV9YYVVHTXpGl++SX6socR3FDxKMiTh/eTr7az2ZFamAzF3Kgx3lg2Z2yS3ftE
1eNyt0TNDiQC3HLgDNfJOWHTiL+zh1wP9CYbHq+9qkREBORY86Go6D6XZn2fAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf1VTz3ykh4XyFKsVvwCpS7plQ2kwHwYDVR0j
BBgwFoAUW0AUDWW/PeVS/YnPBAuY76ZAAHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQm5xSmYzUERUNGJxaVBzbkxoMnBpRlpTUUpyR1ViWFJGN1ltdTVNdTFt
MXMvMC81QjQwMTQwRDY1QkYzREU1NTJGRDg5Q0YwNDBCOThFRkE2NDAwMDcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVCNDAxNDBENjVCRjNERTU1
MkZEODlDRjA0MEI5OEVGQTY0MDAwNzAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JucUpmM1BEVDRicWlQc25MaDJwaUZaU1FKckdVYlhSRjdZbXU1TXUxbTFzLzAv
MzQzNTJlMzEzODM1MmUzMTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzNTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtuXYwDQYJKoZIhvcNAQELBQADggEBAEjJ30R8
DG3gcaWitLUljhCIN+BQ7esULq55TfpDhf7A8IT+C4/87DMDYwX7WOUvsE0IyZhs
S7A8pGTrhxFZCelRQdMpD9zXrYER36auP2CrApzS/y+ih4EHFR+L3Cowxc9x1/ZW
PCV/RPwjGWRJ/BiKlEa+6ThUUxkKMEo5Yi/5VEbN47U1hyBh3vn8y/AE7fxJZQDy
0/0Ritu182cGAwzptjGg70CPlGEsF1GhksvTXQFBLzMLTbwfVOWQ1CDOanlCqWtj
5YTJJ9QWNUBI0ac/U39LFwg8PiotylcdhKcNqi2mCuTSXQmSOHyyOYVZoCfzxVLp
cg6QQvt8nsid1wY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org