Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa
File:                     34352e3138362e35322e302f32322d3332203d3e20323639343131.roa (raw, json)
Hash identifier:          2O6yz26RaDqo2+I8e31auTqexW6vBqh0s3yzfMllUQU=
Subject key identifier:   10:69:26:FA:95:22:10:FD:85:56:89:15:29:F7:65:03:C3:42:33:BF
Certificate issuer:       /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial:       1099ADCFCF3715D6918DD20D3EB3C3146172CDCF
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa
Signing time:             Thu 04 Apr 2024 19:37:34 +0000
ROA not before:           Thu 04 Apr 2024 19:32:34 +0000
ROA not after:            Thu 03 Apr 2025 19:37:34 +0000
asID:                     269411
IP address blocks:        45.186.52.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:99:ad:cf:cf:37:15:d6:91:8d:d2:0d:3e:b3:c3:14:61:72:cd:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
        Validity
            Not Before: Apr  4 19:32:34 2024 GMT
            Not After : Apr  3 19:37:34 2025 GMT
        Subject: CN=106926FA952210FD8556891529F76503C34233BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:83:d6:70:5b:50:18:b7:4a:8e:2d:4e:3a:e6:
                    90:8d:90:a9:14:f1:6d:a5:80:b5:1b:0c:c3:f5:f4:
                    20:cf:62:20:77:73:cc:1c:8b:0b:f1:da:2d:22:86:
                    0f:8f:dd:fd:e1:2a:8b:3c:9c:e7:c2:1b:f2:1d:21:
                    26:62:e4:08:0c:34:95:7f:94:fc:ff:6f:d9:6c:fe:
                    d8:f3:72:88:b1:9e:e1:e3:4c:3f:6d:00:74:36:a5:
                    d8:05:9d:ea:ef:b0:e4:db:2c:e9:5c:14:32:c3:bc:
                    f8:b8:21:7a:6d:58:d5:7d:44:6b:4e:85:fa:4f:33:
                    b0:03:96:8c:9c:0a:f1:29:6d:25:29:b7:b3:44:0b:
                    ad:3f:fb:77:62:8a:a5:a3:32:90:83:aa:ec:6a:56:
                    b5:e4:82:40:e8:3d:8e:45:e3:6b:21:0e:d2:07:2d:
                    12:cc:19:1d:e8:e6:40:45:05:6c:fd:8b:33:ae:61:
                    d7:7d:32:ab:3f:77:cf:ef:2b:0e:71:cd:07:c8:91:
                    2d:3b:f0:ed:e0:41:88:a8:09:10:61:b6:37:94:46:
                    f3:0e:5d:cb:f6:eb:73:0d:98:03:8c:f3:65:46:05:
                    10:5d:59:9e:75:25:ff:13:7d:0e:15:49:e9:68:4d:
                    56:c5:ee:d8:70:a7:81:47:65:bb:3d:18:34:14:df:
                    b3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:69:26:FA:95:22:10:FD:85:56:89:15:29:F7:65:03:C3:42:33:BF
            X509v3 Authority Key Identifier:
                keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3332203d3e20323639343131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:24:64:5b:4f:f2:84:09:df:29:e7:71:b6:0c:9f:95:d5:dd:
         23:7a:4b:e1:a9:ca:92:84:d1:96:64:e1:c9:98:81:d0:2f:e7:
         1b:84:94:9e:7c:c7:ee:08:7a:be:d2:d4:2d:32:be:43:2d:94:
         57:73:0a:f6:3d:a2:90:1a:fc:ec:53:bd:b2:9c:5e:ca:bc:da:
         12:e9:2c:fd:e6:73:1f:aa:ba:7e:c4:77:09:b8:f6:46:65:bb:
         08:b7:dd:ec:e4:be:af:ae:34:2f:aa:58:ce:f2:b0:20:59:05:
         71:72:bc:ee:70:be:f0:92:47:52:fe:f8:4d:5f:ee:b0:fb:f5:
         b0:66:f1:c9:45:20:77:4c:3f:7d:b7:7e:7e:45:12:03:22:a7:
         ca:f8:82:72:67:3d:76:82:2c:3a:2b:95:22:7b:ca:4e:54:77:
         98:54:34:15:06:02:47:1e:0c:b7:48:7d:00:f6:92:f9:19:44:
         ba:41:42:c1:9a:36:82:5a:9d:63:e8:07:06:71:5b:e7:e0:b2:
         3c:de:f3:4d:4d:17:be:9b:ad:c4:70:a0:b2:ba:0c:df:e0:80:
         6c:95:4a:5a:80:36:2f:38:28:ef:71:1e:91:61:a4:d7:ab:62:
         e8:dc:ca:7f:e6:02:1e:c4:48:bd:18:cb:9f:f9:52:b6:ab:d9:
         a0:f9:37:d6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEJmtz883FdaRjdINPrPDFGFyzc8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTAwQkEwMTM0Qzc4NUQ4NEE5MTNFRjY1Qjg1QThCNDk3
M0QwQjJDNTAeFw0yNDA0MDQxOTMyMzRaFw0yNTA0MDMxOTM3MzRaMDMxMTAvBgNV
BAMTKDEwNjkyNkZBOTUyMjEwRkQ4NTU2ODkxNTI5Rjc2NTAzQzM0MjMzQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcg9ZwW1AYt0qOLU465pCNkKkU
8W2lgLUbDMP19CDPYiB3c8wciwvx2i0ihg+P3f3hKos8nOfCG/IdISZi5AgMNJV/
lPz/b9ls/tjzcoixnuHjTD9tAHQ2pdgFnervsOTbLOlcFDLDvPi4IXptWNV9RGtO
hfpPM7ADloycCvEpbSUpt7NEC60/+3diiqWjMpCDquxqVrXkgkDoPY5F42shDtIH
LRLMGR3o5kBFBWz9izOuYdd9Mqs/d8/vKw5xzQfIkS078O3gQYioCRBhtjeURvMO
Xcv263MNmAOM82VGBRBdWZ51Jf8TfQ4VSeloTVbF7thwp4FHZbs9GDQU37PtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEGkm+pUiEP2FVokVKfdlA8NCM78wHwYDVR0j
BBgwFoAUEAugE0x4XYSpE+9luFqLSXPQssUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC8xMDBCQTAxMzRDNzg1RDg0QTkxM0VGNjVCODVBOEI0OTczRDBCMkM1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwMEJBMDEzNEM3ODVEODRB
OTEzRUY2NUI4NUE4QjQ5NzNEMEIyQzUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbo0MA0GCSqGSIb3DQEBCwUAA4IBAQCDJGRbT/KE
Cd8p53G2DJ+V1d0jekvhqcqShNGWZOHJmIHQL+cbhJSefMfuCHq+0tQtMr5DLZRX
cwr2PaKQGvzsU72ynF7KvNoS6Sz95nMfqrp+xHcJuPZGZbsIt93s5L6vrjQvqljO
8rAgWQVxcrzucL7wkkdS/vhNX+6w+/WwZvHJRSB3TD99t35+RRIDIqfK+IJyZz12
giw6K5Uie8pOVHeYVDQVBgJHHgy3SH0A9pL5GUS6QULBmjaCWp1j6AcGcVvn4LI8
3vNNTRe+m63EcKCyugzf4IBslUpagDYvOCjvcR6RYaTXq2Lo3Mp/5gIexEi9GMuf
+VK2q9mg+TfW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org