Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/34352e3136352e34382e302f32322d3234203d3e20323638363537.roa
File:                     34352e3136352e34382e302f32322d3234203d3e20323638363537.roa (raw, json)
Hash identifier:          cYaEui7armx5bR4Vs/gols4PvCf5Yzm1rKhoI77ToeU=
Subject key identifier:   50:D5:8F:6E:83:A2:49:28:36:66:DC:52:0A:8A:72:07:AE:7C:ED:33
Certificate issuer:       /CN=19639BFB08A786F190FBE0E94689B63D40D8B8FD
Certificate serial:       26D10B4AFF0DF682A46FBE19F23A4F86B404935A
Authority key identifier: 19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/34352e3136352e34382e302f32322d3234203d3e20323638363537.roa
Signing time:             Thu 07 Dec 2023 18:03:29 +0000
ROA not before:           Thu 07 Dec 2023 17:58:29 +0000
ROA not after:            Thu 05 Dec 2024 18:03:29 +0000
asID:                     268657
IP address blocks:        45.165.48.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d1:0b:4a:ff:0d:f6:82:a4:6f:be:19:f2:3a:4f:86:b4:04:93:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19639BFB08A786F190FBE0E94689B63D40D8B8FD
        Validity
            Not Before: Dec  7 17:58:29 2023 GMT
            Not After : Dec  5 18:03:29 2024 GMT
        Subject: CN=50D58F6E83A249283666DC520A8A7207AE7CED33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ac:12:e2:75:e5:65:14:6d:63:47:ea:44:c2:
                    02:35:81:32:74:b0:37:4c:d7:9b:2b:5c:c1:57:d1:
                    53:bf:0c:f8:39:a8:2c:e0:f0:39:c9:b7:b9:cb:6f:
                    fb:24:c5:4f:d8:e5:78:18:c9:89:da:e1:6d:a8:55:
                    31:d4:1a:1e:6a:fb:7c:8f:43:61:89:91:e4:84:82:
                    7c:1d:92:90:14:ba:a6:17:e1:18:73:70:87:38:19:
                    b3:49:86:21:7d:91:4d:82:05:63:4a:f5:d9:c5:86:
                    ca:c5:b3:95:5a:9d:04:7e:c7:c9:60:1e:9d:f2:b0:
                    ae:e7:dd:e5:39:0f:f1:04:99:d0:1f:53:41:b3:7d:
                    6b:c9:1b:7a:0b:79:59:ef:12:81:8c:05:04:98:ee:
                    d2:32:a9:0d:57:c5:17:c7:f3:b9:59:7d:d1:5c:40:
                    30:f5:5e:8c:40:07:4d:7b:39:a1:27:d0:68:13:3a:
                    f3:d7:9e:6b:d9:1b:dd:76:fd:57:b7:87:9b:82:66:
                    30:d0:08:8b:9f:58:3c:04:46:0b:61:f7:f1:08:18:
                    80:97:f5:c8:1c:5b:98:99:b6:a1:93:0e:3d:61:2a:
                    d5:10:4e:8f:05:92:63:12:95:11:85:fa:79:25:de:
                    bf:7e:a9:5d:d2:38:7d:97:22:4a:77:70:5c:ad:42:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:8F:6E:83:A2:49:28:36:66:DC:52:0A:8A:72:07:AE:7C:ED:33
            X509v3 Authority Key Identifier:
                keyid:19:63:9B:FB:08:A7:86:F1:90:FB:E0:E9:46:89:B6:3D:40:D8:B8:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/19639BFB08A786F190FBE0E94689B63D40D8B8FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CT6c8sapUWKc7WxDpZdTBMMLkNyA9H3vaFdgd8td9rYP/0/34352e3136352e34382e302f32322d3234203d3e20323638363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:8b:1e:f1:3b:80:ce:fa:97:29:84:7f:4a:df:66:27:a2:
         87:73:14:77:0e:c2:d1:f1:0f:68:9a:fb:10:eb:6e:6b:2c:7a:
         47:fa:bb:a8:56:ce:8f:0b:f8:5c:f0:2d:21:64:59:81:a6:30:
         d2:f4:6d:50:e7:99:dc:b9:cd:85:04:e9:37:45:c9:79:c1:6f:
         03:0a:a5:c4:7c:18:9b:dd:ba:63:8f:a0:a5:d7:7b:f1:01:f1:
         8b:94:00:50:5c:78:ff:fc:a0:3b:dd:3b:60:2e:ef:d4:6a:8a:
         5c:94:c2:33:b3:60:93:77:4b:33:f0:4b:b7:2a:50:9d:70:3e:
         06:8f:1a:87:d1:94:32:e6:dd:93:8b:f5:3c:de:57:a4:ca:72:
         cb:44:ca:8b:8e:f7:d3:c6:b5:3d:c5:54:8e:3d:5e:9e:cc:3a:
         2e:34:19:0f:3a:04:73:04:7c:59:e7:fc:54:8a:13:60:a3:7f:
         9d:54:75:ed:6d:e7:17:72:a4:76:7f:a1:38:63:31:09:d7:95:
         db:6e:fe:0a:bc:df:05:b2:55:3e:08:96:b2:17:06:88:52:2c:
         37:37:53:87:04:53:aa:f3:5e:5d:21:a2:8b:c8:d4:24:1c:9b:
         21:7f:37:7f:69:09:d6:68:e2:87:1e:b6:f1:ed:85:d2:90:05:
         78:92:4a:4c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJtELSv8N9oKkb74Z8jpPhrQEk1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk2MzlCRkIwOEE3ODZGMTkwRkJFMEU5NDY4OUI2M0Q0
MEQ4QjhGRDAeFw0yMzEyMDcxNzU4MjlaFw0yNDEyMDUxODAzMjlaMDMxMTAvBgNV
BAMTKDUwRDU4RjZFODNBMjQ5MjgzNjY2REM1MjBBOEE3MjA3QUU3Q0VEMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2rBLideVlFG1jR+pEwgI1gTJ0
sDdM15srXMFX0VO/DPg5qCzg8DnJt7nLb/skxU/Y5XgYyYna4W2oVTHUGh5q+3yP
Q2GJkeSEgnwdkpAUuqYX4RhzcIc4GbNJhiF9kU2CBWNK9dnFhsrFs5VanQR+x8lg
Hp3ysK7n3eU5D/EEmdAfU0GzfWvJG3oLeVnvEoGMBQSY7tIyqQ1XxRfH87lZfdFc
QDD1XoxAB017OaEn0GgTOvPXnmvZG912/Ve3h5uCZjDQCIufWDwERgth9/EIGICX
9cgcW5iZtqGTDj1hKtUQTo8FkmMSlRGF+nkl3r9+qV3SOH2XIkp3cFytQh87AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUUNWPboOiSSg2ZtxSCopyB6587TMwHwYDVR0j
BBgwFoAUGWOb+winhvGQ++DpRom2PUDYuP0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1Q2YzhzYXBVV0tjN1d4RHBaZFRCTU1Ma055QTlIM3ZhRmRnZDh0ZDly
WVAvMC8xOTYzOUJGQjA4QTc4NkYxOTBGQkUwRTk0Njg5QjYzRDQwRDhCOEZELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE5NjM5QkZCMDhBNzg2RjE5
MEZCRTBFOTQ2ODlCNjNENDBEOEI4RkQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NUNmM4c2FwVVdLYzdXeERwWmRUQk1NTGtOeUE5SDN2YUZkZ2Q4dGQ5cllQLzAv
MzQzNTJlMzEzNjM1MmUzNDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzYzNTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaUwMA0GCSqGSIb3DQEBCwUAA4IBAQCorose8TuA
zvqXKYR/St9mJ6KHcxR3DsLR8Q9omvsQ625rLHpH+ruoVs6PC/hc8C0hZFmBpjDS
9G1Q55ncuc2FBOk3Rcl5wW8DCqXEfBib3bpjj6Cl13vxAfGLlABQXHj//KA73Ttg
Lu/UaopclMIzs2CTd0sz8Eu3KlCdcD4GjxqH0ZQy5t2Ti/U83lekynLLRMqLjvfT
xrU9xVSOPV6ezDouNBkPOgRzBHxZ5/xUihNgo3+dVHXtbecXcqR2f6E4YzEJ15Xb
bv4KvN8FslU+CJayFwaIUiw3N1OHBFOq815dIaKLyNQkHJshfzd/aQnWaOKHHrbx
7YXSkAV4kkpM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org