Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/34352e3233372e302e302f32322d3234203d3e20323638333330.roa
File:                     34352e3233372e302e302f32322d3234203d3e20323638333330.roa (raw, json)
Hash identifier:          p8pINdJbMX/oidwPitkoqG1uPSY+Szosj/bC0Owk6KQ=
Subject key identifier:   33:B1:81:64:BE:DA:FB:DD:77:00:99:2B:11:06:56:1B:BB:39:72:ED
Certificate issuer:       /CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
Certificate serial:       5D1F7DB25420DF8945B686574CE44747B3B49F32
Authority key identifier: 4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/34352e3233372e302e302f32322d3234203d3e20323638333330.roa
Signing time:             Mon 30 Oct 2023 14:43:23 +0000
ROA not before:           Mon 30 Oct 2023 14:38:23 +0000
ROA not after:            Mon 28 Oct 2024 14:43:23 +0000
asID:                     268330
IP address blocks:        45.237.0.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1f:7d:b2:54:20:df:89:45:b6:86:57:4c:e4:47:47:b3:b4:9f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FDD68DAA96562ED008416263830E4D1A7EC8827
        Validity
            Not Before: Oct 30 14:38:23 2023 GMT
            Not After : Oct 28 14:43:23 2024 GMT
        Subject: CN=33B18164BEDAFBDD7700992B1106561BBB3972ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:8b:30:d3:e1:c8:c3:70:98:f4:cb:de:e0:
                    74:c0:2f:67:ea:69:22:eb:e4:7d:9a:aa:6c:f7:9a:
                    1e:f5:1c:b8:d6:8f:2e:5d:56:ab:51:8a:b4:50:ed:
                    9d:35:ce:34:cb:7e:8a:5e:24:23:39:0d:84:19:89:
                    f2:40:ab:b9:e0:cd:b4:40:3d:3c:59:78:7d:25:7c:
                    8b:53:78:55:a1:bb:34:be:d5:93:c9:c5:8a:9a:f7:
                    5e:f3:71:c1:e5:40:7a:fa:f7:a6:28:d7:da:6e:ba:
                    30:f9:44:84:f8:86:3c:86:10:21:b2:c6:f4:33:48:
                    82:f6:83:7b:48:99:dd:29:12:d1:6a:22:6a:70:8a:
                    7f:aa:a7:5c:fd:a2:8f:d7:b4:be:f1:36:23:6e:94:
                    47:73:4a:a4:1c:59:7b:78:7d:7e:56:03:2c:26:fd:
                    63:11:92:65:19:49:6a:bc:33:56:81:f3:3d:08:29:
                    fb:ac:87:d3:26:a0:dc:9d:df:cd:1c:9f:d4:3e:b2:
                    77:8b:f5:d5:55:88:62:f5:18:d4:25:c0:68:15:b6:
                    a8:59:7b:cc:ac:6e:53:21:7e:a1:05:25:55:f2:c7:
                    e3:0e:eb:fa:87:a9:cf:fe:20:f3:22:ee:c3:62:0c:
                    80:e8:43:5f:d2:e8:fa:ef:9a:0c:ba:92:3f:3e:2c:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B1:81:64:BE:DA:FB:DD:77:00:99:2B:11:06:56:1B:BB:39:72:ED
            X509v3 Authority Key Identifier:
                keyid:4F:DD:68:DA:A9:65:62:ED:00:84:16:26:38:30:E4:D1:A7:EC:88:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4FDD68DAA96562ED008416263830E4D1A7EC8827.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsutsWiAoGRtUfcjEG8g23NcLKjbMPVrRdxbGksjxGMK/0/34352e3233372e302e302f32322d3234203d3e20323638333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:51:d2:62:62:04:e2:2e:cd:d0:b0:27:dd:a1:33:7e:40:a7:
         ac:fe:91:4f:88:9f:7e:f5:d2:1b:78:7e:d4:af:2d:de:1a:a9:
         40:94:29:80:49:63:ee:ae:b0:9c:5a:2c:14:80:e1:21:39:b2:
         57:c0:7e:5e:93:a0:cb:5e:b8:c6:00:a1:16:04:16:2c:f3:07:
         f0:5a:51:c9:44:6c:03:cc:78:5b:06:90:f6:ca:b8:25:86:66:
         3e:68:35:da:6e:f6:84:16:ff:bd:27:ab:f8:23:62:47:8d:3c:
         50:f6:00:00:25:77:76:1f:f9:22:cf:38:4b:4a:a8:05:cb:14:
         53:23:3d:66:f7:4a:4a:12:32:64:8e:cd:be:3b:34:c6:3b:d0:
         87:ed:56:62:a6:b6:99:fb:c3:7d:11:7a:93:61:e8:3f:be:42:
         e9:92:38:0a:b1:2a:78:de:3f:31:3e:96:7d:65:5d:d6:e1:ad:
         f5:0a:28:6a:f8:c8:db:45:da:ae:f0:32:26:b9:19:bd:9a:e3:
         cb:b1:6c:37:32:d8:88:19:80:a0:4c:aa:07:ef:99:40:d5:e4:
         21:3b:2f:9f:a1:ec:0b:d4:c4:9a:dd:d6:3c:f9:6f:8c:5c:10:
         e4:a6:68:59:cf:62:bb:6c:c6:a4:62:60:97:ae:b5:05:2c:93:
         63:a1:46:9a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUXR99slQg34lFtoZXTORHR7O0nzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZERDY4REFBOTY1NjJFRDAwODQxNjI2MzgzMEU0RDFB
N0VDODgyNzAeFw0yMzEwMzAxNDM4MjNaFw0yNDEwMjgxNDQzMjNaMDMxMTAvBgNV
BAMTKDMzQjE4MTY0QkVEQUZCREQ3NzAwOTkyQjExMDY1NjFCQkIzOTcyRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkYsw0+HIw3CY9Mve4HTAL2fq
aSLr5H2aqmz3mh71HLjWjy5dVqtRirRQ7Z01zjTLfopeJCM5DYQZifJAq7ngzbRA
PTxZeH0lfItTeFWhuzS+1ZPJxYqa917zccHlQHr696Yo19puujD5RIT4hjyGECGy
xvQzSIL2g3tImd0pEtFqImpwin+qp1z9oo/XtL7xNiNulEdzSqQcWXt4fX5WAywm
/WMRkmUZSWq8M1aB8z0IKfush9MmoNyd380cn9Q+sneL9dVViGL1GNQlwGgVtqhZ
e8ysblMhfqEFJVXyx+MO6/qHqc/+IPMi7sNiDIDoQ1/S6Prvmgy6kj8+LLuBAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUM7GBZL7a+913AJkrEQZWG7s5cu0wHwYDVR0j
BBgwFoAUT91o2qllYu0AhBYmODDk0afsiCcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnN1dHNXaUFvR1J0VWZjakVHOGcyM05jTEtqYk1QVnJSZHhiR2tzanhH
TUsvMC80RkRENjhEQUE5NjU2MkVEMDA4NDE2MjYzODMwRTREMUE3RUM4ODI3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRGREQ2OERBQTk2NTYyRUQw
MDg0MTYyNjM4MzBFNEQxQTdFQzg4MjcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JzdXRzV2lBb0dSdFVmY2pFRzhnMjNOY0xLamJNUFZyUmR4Ykdrc2p4R01LLzAv
MzQzNTJlMzIzMzM3MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3tADANBgkqhkiG9w0BAQsFAAOCAQEAN1HSYmIE4i7N
0LAn3aEzfkCnrP6RT4iffvXSG3h+1K8t3hqpQJQpgElj7q6wnFosFIDhITmyV8B+
XpOgy164xgChFgQWLPMH8FpRyURsA8x4WwaQ9sq4JYZmPmg12m72hBb/vSer+CNi
R408UPYAACV3dh/5Is84S0qoBcsUUyM9ZvdKShIyZI7Nvjs0xjvQh+1WYqa2mfvD
fRF6k2HoP75C6ZI4CrEqeN4/MT6WfWVd1uGt9QooavjI20XarvAyJrkZvZrjy7Fs
NzLYiBmAoEyqB++ZQNXkITsvn6HsC9TEmt3WPPlvjFwQ5KZoWc9iu2zGpGJgl661
BSyTY6FGmg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org