Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32332d3233203d3e20323639343937.roa
File:                     34352e3138372e3230362e302f32332d3233203d3e20323639343937.roa (raw, json)
Hash identifier:          zPKvGLLiALQLovuCEchclmT5CvoND64WZyXgzicVClI=
Subject key identifier:   29:4A:DA:26:7C:B9:23:E9:03:FB:3A:93:D6:68:C0:E3:10:3F:F3:80
Certificate issuer:       /CN=9705DAF862839CC953B88777D3FF774FCD7CFC22
Certificate serial:       2ACB1A1F44A40222399EAAC2FFDF77A89DBAA6B0
Authority key identifier: 97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32332d3233203d3e20323639343937.roa
Signing time:             Sat 09 Dec 2023 14:42:24 +0000
ROA not before:           Sat 09 Dec 2023 14:37:24 +0000
ROA not after:            Sat 07 Dec 2024 14:42:24 +0000
asID:                     269497
IP address blocks:        45.187.206.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cb:1a:1f:44:a4:02:22:39:9e:aa:c2:ff:df:77:a8:9d:ba:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9705DAF862839CC953B88777D3FF774FCD7CFC22
        Validity
            Not Before: Dec  9 14:37:24 2023 GMT
            Not After : Dec  7 14:42:24 2024 GMT
        Subject: CN=294ADA267CB923E903FB3A93D668C0E3103FF380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:44:c4:8c:e9:d4:90:8b:23:a6:ae:8b:9d:
                    c2:ae:05:b1:33:80:1a:b0:cb:e5:2f:10:ad:fd:66:
                    22:74:22:4f:b4:91:85:46:21:4b:74:49:40:2b:48:
                    79:48:c3:35:80:e2:f1:5a:18:85:17:76:97:61:bc:
                    39:4f:6d:88:77:86:c3:25:ae:f3:d9:5e:ea:17:65:
                    a6:b8:05:64:bd:f1:8d:ca:13:26:5c:a6:da:4a:d6:
                    d2:8f:1e:fb:45:60:da:b3:ec:41:19:b0:4b:80:78:
                    a9:52:22:c9:8b:bf:7c:d3:7a:73:f8:59:86:87:44:
                    ca:b9:cb:96:cb:3b:47:f3:01:1b:92:d1:98:0e:11:
                    34:50:9e:ec:c1:bc:22:08:03:43:70:69:eb:dc:72:
                    49:91:51:61:9a:a2:f4:a8:8b:86:42:ff:a3:c1:ae:
                    dd:63:61:e4:c3:b8:4f:0d:37:e1:0f:63:f1:3d:a7:
                    ef:91:85:ce:1c:6f:97:64:7b:0d:4d:e3:9c:c9:cd:
                    6b:c4:3d:f8:dd:e5:5c:a2:24:9d:ab:19:b7:dd:c5:
                    a7:05:84:e8:8d:58:13:8b:d2:ac:18:f9:95:06:01:
                    6e:7a:93:e2:6c:a6:38:e5:7f:57:69:e5:78:af:9e:
                    78:ee:34:f0:2c:b9:7a:e2:bd:e9:8b:00:14:a4:1c:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4A:DA:26:7C:B9:23:E9:03:FB:3A:93:D6:68:C0:E3:10:3F:F3:80
            X509v3 Authority Key Identifier:
                keyid:97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/34352e3138372e3230362e302f32332d3233203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:6d:39:05:4c:b9:ad:2e:df:87:10:23:2c:e7:15:60:cb:69:
         9e:62:32:d7:e2:20:23:e2:36:83:fe:ef:3e:28:67:8a:f3:64:
         3c:6d:37:c9:9e:7c:11:8f:6b:55:cd:0e:1f:6b:6f:9f:88:fa:
         d4:3f:67:2f:3f:07:e8:02:00:ea:da:5d:a1:cf:3d:17:d4:6a:
         29:0b:5d:78:84:09:d3:18:0b:a6:f4:c5:12:05:a5:e4:31:63:
         49:54:93:8a:16:65:40:31:de:49:65:bd:7e:e5:cf:7e:dc:9a:
         e0:d4:67:78:15:de:b0:e6:42:a1:9e:7f:c5:bf:5a:27:1e:70:
         b6:2e:c4:53:1c:b3:da:4c:f4:5a:f3:a4:2d:9f:4d:db:c4:d0:
         5b:b9:96:a1:0c:0d:e5:57:48:a4:4e:1c:0f:40:52:54:c3:b6:
         a9:b3:2a:83:7a:82:47:a5:34:0a:da:92:cd:26:df:2a:54:4e:
         09:09:2f:c3:51:a7:ef:08:cd:f7:ec:24:05:0d:85:21:02:c6:
         3a:60:17:81:ac:9c:17:1c:e5:bf:d4:19:92:c6:35:39:f1:b6:
         d5:45:c2:34:df:82:64:dd:bd:cc:03:51:04:76:0e:2a:a7:f6:
         07:28:68:d1:8c:f5:ac:68:3c:76:aa:4f:95:5b:ed:9e:8a:ff:
         18:aa:74:ef
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKssaH0SkAiI5nqrC/993qJ26prAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwNURBRjg2MjgzOUNDOTUzQjg4Nzc3RDNGRjc3NEZD
RDdDRkMyMjAeFw0yMzEyMDkxNDM3MjRaFw0yNDEyMDcxNDQyMjRaMDMxMTAvBgNV
BAMTKDI5NEFEQTI2N0NCOTIzRTkwM0ZCM0E5M0Q2NjhDMEUzMTAzRkYzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA0TEjOnUkIsjpq6LncKuBbEz
gBqwy+UvEK39ZiJ0Ik+0kYVGIUt0SUArSHlIwzWA4vFaGIUXdpdhvDlPbYh3hsMl
rvPZXuoXZaa4BWS98Y3KEyZcptpK1tKPHvtFYNqz7EEZsEuAeKlSIsmLv3zTenP4
WYaHRMq5y5bLO0fzARuS0ZgOETRQnuzBvCIIA0NwaevcckmRUWGaovSoi4ZC/6PB
rt1jYeTDuE8NN+EPY/E9p++Rhc4cb5dkew1N45zJzWvEPfjd5VyiJJ2rGbfdxacF
hOiNWBOL0qwY+ZUGAW56k+Jspjjlf1dp5XivnnjuNPAsuXrivemLABSkHBV9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKUraJny5I+kD+zqT1mjA4xA/84AwHwYDVR0j
BBgwFoAUlwXa+GKDnMlTuId30/93T818/CIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnNRSFJxcEs1cFpjRFZZdXEzdUh0MkVIZ2FpZlRUemMyNGdvcml0M1Zq
ZWcvMC85NzA1REFGODYyODM5Q0M5NTNCODg3NzdEM0ZGNzc0RkNEN0NGQzIyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MDVEQUY4NjI4MzlDQzk1
M0I4ODc3N0QzRkY3NzRGQ0Q3Q0ZDMjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JzUUhScXBLNXBaY0RWWXVxM3VIdDJFSGdhaWZUVHpjMjRnb3JpdDNWamVnLzAv
MzQzNTJlMzEzODM3MmUzMjMwMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtu84wDQYJKoZIhvcNAQELBQADggEBADttOQVM
ua0u34cQIyznFWDLaZ5iMtfiICPiNoP+7z4oZ4rzZDxtN8mefBGPa1XNDh9rb5+I
+tQ/Zy8/B+gCAOraXaHPPRfUaikLXXiECdMYC6b0xRIFpeQxY0lUk4oWZUAx3kll
vX7lz37cmuDUZ3gV3rDmQqGef8W/WicecLYuxFMcs9pM9FrzpC2fTdvE0Fu5lqEM
DeVXSKROHA9AUlTDtqmzKoN6gkelNAraks0m3ypUTgkJL8NRp+8IzffsJAUNhSEC
xjpgF4GsnBcc5b/UGZLGNTnxttVFwjTfgmTdvcwDUQR2Diqn9gcoaNGM9axoPHaq
T5Vb7Z6K/xiqdO8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:58 2024 by rpki-client on console-ams.rpki-client.org