Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
File:                     34352e3138372e39362e302f32322d3234203d3e20323639343632.roa (raw, json)
Hash identifier:          znzZyL3ieuk+oebiXYVlLpopzn2YMz/PXELhpkl2gAU=
Subject key identifier:   B0:82:4C:AD:2D:F2:57:F4:25:48:E9:8C:D3:D1:5B:90:3A:EF:03:E5
Certificate issuer:       /CN=72D950483459BB286E83221CC667C2CA6132DB5C
Certificate serial:       33502A8F1A78A1A8A0D8B92FD321BFE446F40812
Authority key identifier: 72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa
Signing time:             Tue 19 Dec 2023 15:19:34 +0000
ROA not before:           Tue 19 Dec 2023 15:14:34 +0000
ROA not after:            Tue 17 Dec 2024 15:19:34 +0000
asID:                     269462
IP address blocks:        45.187.96.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:50:2a:8f:1a:78:a1:a8:a0:d8:b9:2f:d3:21:bf:e4:46:f4:08:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D950483459BB286E83221CC667C2CA6132DB5C
        Validity
            Not Before: Dec 19 15:14:34 2023 GMT
            Not After : Dec 17 15:19:34 2024 GMT
        Subject: CN=B0824CAD2DF257F42548E98CD3D15B903AEF03E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:c3:fc:ba:72:2c:25:0e:35:04:f7:a3:b7:
                    c1:74:53:06:1c:a0:0b:12:49:c1:eb:83:c8:e4:3d:
                    48:c1:ed:cb:c6:1f:ba:34:0f:ff:55:c7:1c:d1:5c:
                    3d:4d:e3:4f:8a:4c:21:de:e9:cf:33:34:14:e7:0f:
                    62:40:e4:06:88:00:5a:37:71:34:61:e3:fa:2b:59:
                    e2:c4:4f:68:ba:3a:d4:61:e1:96:07:13:d8:45:51:
                    e4:79:dc:0f:b4:9d:e7:7c:f0:26:c3:fd:cd:51:67:
                    59:53:83:3d:36:4d:b3:e0:d0:1e:42:2c:d6:de:08:
                    bd:94:49:a0:dd:b0:aa:5d:be:1a:9a:1a:5f:d2:54:
                    21:ed:89:ed:d4:9d:73:0a:35:bd:df:d8:51:43:b8:
                    f6:9e:b2:b1:32:ba:08:77:f5:66:54:ab:bd:71:f4:
                    db:cd:29:5e:bf:ad:94:ff:24:23:06:69:c5:99:41:
                    2d:81:68:af:22:b6:c1:06:17:d0:e9:91:0c:bc:5f:
                    c1:29:c6:0b:5e:fd:a0:22:38:b0:5d:90:90:cb:93:
                    e2:86:79:c4:c6:0b:f2:b9:24:67:53:e5:c7:af:5e:
                    70:f5:33:39:e7:3e:59:41:66:6c:86:04:67:d6:7b:
                    a0:d5:ac:04:e6:c7:df:cb:55:d5:bb:47:93:53:dc:
                    29:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:82:4C:AD:2D:F2:57:F4:25:48:E9:8C:D3:D1:5B:90:3A:EF:03:E5
            X509v3 Authority Key Identifier:
                keyid:72:D9:50:48:34:59:BB:28:6E:83:22:1C:C6:67:C2:CA:61:32:DB:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/72D950483459BB286E83221CC667C2CA6132DB5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72D950483459BB286E83221CC667C2CA6132DB5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BySDVgjB4YQhRaJzvyZv1JjbBhPBCngPfV1m4uv3W5m6/0/34352e3138372e39362e302f32322d3234203d3e20323639343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:4e:48:db:fb:a1:af:01:e1:f2:33:1f:63:b2:b0:a7:1a:ac:
         7f:38:15:e6:c8:3f:c6:ac:3d:6b:c1:16:79:b8:7e:a1:f2:bc:
         fd:33:81:cc:63:fb:4e:99:58:e4:0c:e1:ba:12:c5:bf:91:12:
         22:82:2e:af:a4:5b:a4:d1:e3:8d:32:4a:43:b1:45:eb:89:ce:
         f6:70:98:7d:4b:ac:11:fa:7c:e0:a2:0c:79:f2:3d:9b:f4:5a:
         1a:00:e8:ee:12:38:b3:5f:26:22:60:33:de:f4:0a:97:9f:f5:
         d5:81:fc:d8:00:6b:03:38:25:95:f2:53:38:0c:40:49:a0:7b:
         31:d0:f1:2f:cb:dc:95:93:82:d8:a6:11:8c:47:3e:dc:34:07:
         a0:a1:a3:bb:ea:fc:a1:ac:0b:07:69:69:f0:43:a4:91:4a:d7:
         1f:93:27:72:16:6b:11:9a:5b:f6:2b:e6:0c:08:64:e9:31:49:
         93:16:e8:7d:7a:0a:fb:dc:03:bd:3a:e1:98:7a:57:b6:34:d5:
         b8:92:a7:a2:75:2b:0a:4e:cb:03:ae:44:57:f1:b4:45:c0:9e:
         34:fc:5e:6e:cc:b8:84:bd:31:36:e5:49:bf:10:02:a4:25:91:
         13:ed:c9:11:fb:f4:ab:aa:08:2e:d7:ec:70:a4:a3:56:ab:b9:
         59:ae:1e:d2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM1Aqjxp4oaig2Lkv0yG/5Eb0CBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJEOTUwNDgzNDU5QkIyODZFODMyMjFDQzY2N0MyQ0E2
MTMyREI1QzAeFw0yMzEyMTkxNTE0MzRaFw0yNDEyMTcxNTE5MzRaMDMxMTAvBgNV
BAMTKEIwODI0Q0FEMkRGMjU3RjQyNTQ4RTk4Q0QzRDE1QjkwM0FFRjAzRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHM8P8unIsJQ41BPejt8F0UwYc
oAsSScHrg8jkPUjB7cvGH7o0D/9VxxzRXD1N40+KTCHe6c8zNBTnD2JA5AaIAFo3
cTRh4/orWeLET2i6OtRh4ZYHE9hFUeR53A+0ned88CbD/c1RZ1lTgz02TbPg0B5C
LNbeCL2USaDdsKpdvhqaGl/SVCHtie3UnXMKNb3f2FFDuPaesrEyugh39WZUq71x
9NvNKV6/rZT/JCMGacWZQS2BaK8itsEGF9DpkQy8X8Epxgte/aAiOLBdkJDLk+KG
ecTGC/K5JGdT5cevXnD1MznnPllBZmyGBGfWe6DVrATmx9/LVdW7R5NT3CkpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUsIJMrS3yV/QlSOmM09FbkDrvA+UwHwYDVR0j
BBgwFoAUctlQSDRZuyhugyIcxmfCymEy21wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnlTRFZnakI0WVFoUmFKenZ5WnYxSmpiQmhQQkNuZ1BmVjFtNHV2M1c1
bTYvMC83MkQ5NTA0ODM0NTlCQjI4NkU4MzIyMUNDNjY3QzJDQTYxMzJEQjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyRDk1MDQ4MzQ1OUJCMjg2
RTgzMjIxQ0M2NjdDMkNBNjEzMkRCNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J5U0RWZ2pCNFlRaFJhSnp2eVp2MUpqYkJoUEJDbmdQZlYxbTR1djNXNW02LzAv
MzQzNTJlMzEzODM3MmUzOTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzQzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbtgMA0GCSqGSIb3DQEBCwUAA4IBAQBDTkjb+6Gv
AeHyMx9jsrCnGqx/OBXmyD/GrD1rwRZ5uH6h8rz9M4HMY/tOmVjkDOG6EsW/kRIi
gi6vpFuk0eONMkpDsUXric72cJh9S6wR+nzgogx58j2b9FoaAOjuEjizXyYiYDPe
9AqXn/XVgfzYAGsDOCWV8lM4DEBJoHsx0PEvy9yVk4LYphGMRz7cNAegoaO76vyh
rAsHaWnwQ6SRStcfkydyFmsRmlv2K+YMCGTpMUmTFuh9egr73AO9OuGYele2NNW4
kqeidSsKTssDrkRX8bRFwJ40/F5uzLiEvTE25Um/EAKkJZET7ckR+/Srqggu1+xw
pKNWq7lZrh7S
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org