Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32322d3234203d3e20323636393839.roa
File:                     34352e3232362e38302e302f32322d3234203d3e20323636393839.roa (raw, json)
Hash identifier:          ORPlW8ELPHldm2ER0x7tD1sKJ/oWBQq8wj0hljOHU3E=
Subject key identifier:   4C:7A:D7:D1:1C:8F:B1:09:80:19:91:A4:86:0A:AF:57:08:5E:17:02
Certificate issuer:       /CN=11E1368454EE4321A3D47283E551C91FAE044C9F
Certificate serial:       2A45498F86A09E7FA49023EA0477940CA4871829
Authority key identifier: 11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32322d3234203d3e20323636393839.roa
Signing time:             Tue 02 May 2023 15:43:03 +0000
ROA not before:           Tue 02 May 2023 15:38:03 +0000
ROA not after:            Tue 30 Apr 2024 15:43:03 +0000
asID:                     266989
IP address blocks:        45.226.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:45:49:8f:86:a0:9e:7f:a4:90:23:ea:04:77:94:0c:a4:87:18:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11E1368454EE4321A3D47283E551C91FAE044C9F
        Validity
            Not Before: May  2 15:38:03 2023 GMT
            Not After : Apr 30 15:43:03 2024 GMT
        Subject: CN=4C7AD7D11C8FB109801991A4860AAF57085E1702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:bf:00:94:10:3d:5a:25:95:72:dc:1d:17:
                    59:a3:d7:85:10:c5:ed:4d:ed:ee:bd:a4:82:37:68:
                    f6:75:17:6b:87:95:a4:95:22:2d:9a:1a:49:75:a6:
                    48:a0:88:60:62:5f:8c:d5:b2:dd:a3:3b:43:0f:23:
                    5d:d5:09:8e:7d:90:d0:01:37:cf:ff:66:c5:a8:29:
                    70:8d:cd:cc:e0:3a:8f:26:a2:a8:2b:34:3c:ce:46:
                    38:01:cb:e6:da:f1:5a:0d:09:99:49:22:dd:1d:b0:
                    1c:ca:ab:e9:3b:5d:24:6c:a5:7a:f6:7f:5c:b3:c4:
                    74:97:d1:df:74:e3:35:6e:95:22:6f:56:74:4c:55:
                    9e:50:9d:90:f3:e8:c6:31:84:09:72:47:81:f2:bb:
                    d7:e4:4f:cf:08:ec:5d:53:73:bf:60:be:b9:a0:ee:
                    b5:a7:fe:d1:7b:77:d4:ef:79:62:dd:7b:c3:fe:c0:
                    ad:ec:d4:21:7b:21:ac:f4:96:da:9a:8f:79:8b:5b:
                    a9:4e:ac:82:b5:69:17:54:6a:31:a6:ff:7e:e8:68:
                    7c:f3:40:f4:4e:c8:36:e2:bb:2b:1c:99:22:22:1d:
                    17:c4:c9:ea:45:71:3a:78:0c:67:4d:2f:89:ad:18:
                    c0:73:f0:cf:2d:11:f2:5e:43:08:2c:0d:f7:fb:2a:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:D7:D1:1C:8F:B1:09:80:19:91:A4:86:0A:AF:57:08:5E:17:02
            X509v3 Authority Key Identifier:
                keyid:11:E1:36:84:54:EE:43:21:A3:D4:72:83:E5:51:C9:1F:AE:04:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/11E1368454EE4321A3D47283E551C91FAE044C9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11E1368454EE4321A3D47283E551C91FAE044C9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4hbYKyyMRS12RURTGbLAgZfqminRnSWkdyKq6kowQva/0/34352e3232362e38302e302f32322d3234203d3e20323636393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:00:d1:88:13:12:99:3b:ad:5f:be:03:44:6b:97:89:6f:18:
         43:9b:ee:c0:de:ec:05:22:a8:d8:25:b6:b0:96:af:51:7a:c8:
         85:a3:5b:58:6e:6c:c8:e1:81:53:75:e0:13:b7:c6:9a:90:44:
         1e:49:d5:a8:10:46:e6:bb:27:8d:18:49:df:5f:0d:71:86:3a:
         60:43:6d:0b:95:8d:ff:21:9e:de:8b:f6:cb:37:3b:fc:05:01:
         34:e1:48:7c:55:3f:0a:8f:93:fb:40:39:36:92:c0:f2:b3:ae:
         fb:a4:c2:13:8c:d9:d8:a4:90:0e:7c:15:5a:4e:43:79:22:09:
         5f:8d:43:13:f8:c8:6b:d5:16:86:06:ba:9e:df:c6:65:5f:25:
         e9:4c:38:6f:6b:05:0f:30:01:7c:65:06:fa:e6:dc:85:4b:44:
         f8:68:e9:f2:c6:d9:39:48:c1:9b:48:f4:b1:be:e5:a6:03:e0:
         d9:33:fc:b2:c9:30:90:6d:f7:d3:bd:9b:b6:53:6d:82:f5:4c:
         bd:89:a7:a6:6c:b8:d1:30:2c:12:db:ba:0f:8e:c9:71:df:69:
         2e:16:5e:65:21:be:6d:a1:90:28:9b:cb:37:3f:3a:e4:4f:af:
         0f:0f:60:4c:ca:e5:74:a3:77:89:ab:d4:b2:09:73:dd:cc:20:
         d9:0a:58:22
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKkVJj4agnn+kkCPqBHeUDKSHGCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFFMTM2ODQ1NEVFNDMyMUEzRDQ3MjgzRTU1MUM5MUZB
RTA0NEM5RjAeFw0yMzA1MDIxNTM4MDNaFw0yNDA0MzAxNTQzMDNaMDMxMTAvBgNV
BAMTKDRDN0FEN0QxMUM4RkIxMDk4MDE5OTFBNDg2MEFBRjU3MDg1RTE3MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxbb8AlBA9WiWVctwdF1mj14UQ
xe1N7e69pII3aPZ1F2uHlaSVIi2aGkl1pkigiGBiX4zVst2jO0MPI13VCY59kNAB
N8//ZsWoKXCNzczgOo8moqgrNDzORjgBy+ba8VoNCZlJIt0dsBzKq+k7XSRspXr2
f1yzxHSX0d904zVulSJvVnRMVZ5QnZDz6MYxhAlyR4Hyu9fkT88I7F1Tc79gvrmg
7rWn/tF7d9TveWLde8P+wK3s1CF7Iaz0ltqaj3mLW6lOrIK1aRdUajGm/37oaHzz
QPROyDbiuyscmSIiHRfEyepFcTp4DGdNL4mtGMBz8M8tEfJeQwgsDff7KhrpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTHrX0RyPsQmAGZGkhgqvVwheFwIwHwYDVR0j
BBgwFoAUEeE2hFTuQyGj1HKD5VHJH64ETJ8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzRoYllLeXlNUlMxMlJVUlRHYkxBZ1pmcW1pblJuU1drZHlLcTZrb3dR
dmEvMC8xMUUxMzY4NDU0RUU0MzIxQTNENDcyODNFNTUxQzkxRkFFMDQ0QzlGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzExRTEzNjg0NTRFRTQzMjFB
M0Q0NzI4M0U1NTFDOTFGQUUwNDRDOUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M0aGJZS3l5TVJTMTJSVVJUR2JMQWdaZnFtaW5SblNXa2R5S3E2a293UXZhLzAv
MzQzNTJlMzIzMjM2MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM2
MzkzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeJQMA0GCSqGSIb3DQEBCwUAA4IBAQCCANGIExKZ
O61fvgNEa5eJbxhDm+7A3uwFIqjYJbawlq9ResiFo1tYbmzI4YFTdeATt8aakEQe
SdWoEEbmuyeNGEnfXw1xhjpgQ20LlY3/IZ7ei/bLNzv8BQE04Uh8VT8Kj5P7QDk2
ksDys677pMITjNnYpJAOfBVaTkN5IglfjUMT+Mhr1RaGBrqe38ZlXyXpTDhvawUP
MAF8ZQb65tyFS0T4aOnyxtk5SMGbSPSxvuWmA+DZM/yyyTCQbffTvZu2U22C9Uy9
iaembLjRMCwS27oPjslx32kuFl5lIb5toZAom8s3PzrkT68PD2BMyuV0o3eJq9Sy
CXPdzCDZClgi
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org