Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa
File:                     34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa (raw, json)
Hash identifier:          JhM4tL34nMrEBWucSSOPQlkKNXlO2vl6adhGGLxD7Fc=
Subject key identifier:   D0:99:DE:21:75:39:37:20:2C:F2:1E:08:56:7C:63:B8:7C:CE:D7:E2
Certificate issuer:       /CN=056CF883ECA7596A363591A0D2B27D76A10D3CDD
Certificate serial:       7A7EA127CBDA26E50A251C283F0A96B7B2FBD1F5
Authority key identifier: 05:6C:F8:83:EC:A7:59:6A:36:35:91:A0:D2:B2:7D:76:A1:0D:3C:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/056CF883ECA7596A363591A0D2B27D76A10D3CDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa
Signing time:             Fri 10 May 2024 20:33:27 +0000
ROA not before:           Fri 10 May 2024 20:28:27 +0000
ROA not after:            Fri 09 May 2025 20:33:27 +0000
asID:                     267347
IP address blocks:        45.233.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7e:a1:27:cb:da:26:e5:0a:25:1c:28:3f:0a:96:b7:b2:fb:d1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056CF883ECA7596A363591A0D2B27D76A10D3CDD
        Validity
            Not Before: May 10 20:28:27 2024 GMT
            Not After : May  9 20:33:27 2025 GMT
        Subject: CN=D099DE21753937202CF21E08567C63B87CCED7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:0d:87:ed:3e:06:d5:5c:f3:08:64:71:95:
                    63:1c:46:35:4a:db:ed:87:99:53:2d:20:54:54:76:
                    35:5c:3e:ec:c9:8e:44:f6:75:b1:8d:1b:e8:ed:50:
                    07:47:ec:ae:5c:a9:a9:e3:55:14:21:d2:f6:24:fb:
                    ca:74:05:83:4e:5a:ae:a4:39:20:47:f2:38:8b:db:
                    6b:97:0e:54:83:d0:9c:47:ec:c6:d0:4f:09:70:5d:
                    1d:62:da:91:e8:c3:2a:5f:55:00:48:0d:d2:ec:3c:
                    65:0d:6d:a6:bd:b0:ec:f8:1a:e3:94:53:53:bf:dc:
                    a8:35:6a:c5:a1:03:8d:2c:54:b6:4b:4e:17:2d:df:
                    44:c3:f5:75:04:a9:ce:91:f2:1f:3e:26:04:7c:7d:
                    8f:fb:9b:e1:69:3e:91:4a:c4:e8:81:b1:10:1c:75:
                    9c:d8:ea:f8:14:1a:d9:16:f2:c7:ba:88:0c:b0:e6:
                    d9:05:5d:54:0a:73:05:b2:87:89:c7:89:d0:95:c9:
                    7a:18:19:d1:f9:3d:4f:41:cd:25:85:f7:03:51:b4:
                    7e:49:92:29:96:49:84:60:22:d0:d3:7b:03:27:94:
                    0c:e5:f1:a9:79:98:5f:1c:08:6a:7c:17:0a:5f:e6:
                    1f:ca:41:e8:60:e1:44:18:4b:d5:08:27:ea:c4:2a:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:99:DE:21:75:39:37:20:2C:F2:1E:08:56:7C:63:B8:7C:CE:D7:E2
            X509v3 Authority Key Identifier:
                keyid:05:6C:F8:83:EC:A7:59:6A:36:35:91:A0:D2:B2:7D:76:A1:0D:3C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/056CF883ECA7596A363591A0D2B27D76A10D3CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/056CF883ECA7596A363591A0D2B27D76A10D3CDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaPKJsoCUE8W8ytaFvFapTursT3cF3JbLw6v4YM51Bi6/0/34352e3233332e3138322e302f32332d3233203d3e20323637333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:46:8b:54:ff:27:dd:ac:dc:e2:4c:9e:b7:36:f7:d6:77:ac:
         35:76:93:dd:42:91:85:5c:dc:48:ed:16:06:f0:a0:6b:cb:92:
         2c:87:12:1a:7d:c1:67:26:2d:15:ca:4e:ec:ed:c5:14:27:e4:
         ac:a1:a1:dd:7c:6f:42:31:ec:97:eb:3b:e4:08:fd:fa:e9:ab:
         7a:79:5f:0e:3b:1d:7b:63:f4:d7:53:b8:de:0f:49:eb:32:35:
         d6:40:87:7c:1e:12:d2:51:b9:a1:9c:3f:11:ec:86:60:05:a3:
         02:4d:55:fe:22:a8:73:9b:a0:c7:75:d7:ae:9c:5b:33:3c:7c:
         0a:43:7f:19:4f:ae:cf:83:98:4d:e5:6c:2c:b0:09:c2:ed:76:
         db:1e:a9:1d:d5:21:ca:d9:0e:88:de:8b:fd:f7:21:2e:e4:76:
         de:f2:c5:d6:ac:a2:83:06:04:cc:4a:5c:80:e8:23:e3:0a:37:
         39:70:a8:fa:de:95:a7:8e:81:d7:1c:3a:03:5b:9a:42:aa:a3:
         aa:09:85:e9:1c:db:58:e1:7e:36:b9:3c:93:29:8b:c0:07:27:
         c9:18:57:97:ff:3f:82:a0:8e:9d:ee:4b:cf:32:81:57:b7:74:
         96:23:f9:bd:a6:75:5b:ac:a8:33:8e:9a:f5:de:2a:4d:c4:fe:
         96:f1:44:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUen6hJ8vaJuUKJRwoPwqWt7L70fUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDU2Q0Y4ODNFQ0E3NTk2QTM2MzU5MUEwRDJCMjdENzZB
MTBEM0NERDAeFw0yNDA1MTAyMDI4MjdaFw0yNTA1MDkyMDMzMjdaMDMxMTAvBgNV
BAMTKEQwOTlERTIxNzUzOTM3MjAyQ0YyMUUwODU2N0M2M0I4N0NDRUQ3RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1rA2H7T4G1VzzCGRxlWMcRjVK
2+2HmVMtIFRUdjVcPuzJjkT2dbGNG+jtUAdH7K5cqanjVRQh0vYk+8p0BYNOWq6k
OSBH8jiL22uXDlSD0JxH7MbQTwlwXR1i2pHowypfVQBIDdLsPGUNbaa9sOz4GuOU
U1O/3Kg1asWhA40sVLZLThct30TD9XUEqc6R8h8+JgR8fY/7m+FpPpFKxOiBsRAc
dZzY6vgUGtkW8se6iAyw5tkFXVQKcwWyh4nHidCVyXoYGdH5PU9BzSWF9wNRtH5J
kimWSYRgItDTewMnlAzl8al5mF8cCGp8Fwpf5h/KQehg4UQYS9UIJ+rEKqf7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0JneIXU5NyAs8h4IVnxjuHzO1+IwHwYDVR0j
BBgwFoAUBWz4g+ynWWo2NZGg0rJ9dqENPN0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2FQS0pzb0NVRThXOHl0YUZ2RmFwVHVyc1QzY0YzSmJMdzZ2NFlNNTFC
aTYvMC8wNTZDRjg4M0VDQTc1OTZBMzYzNTkxQTBEMkIyN0Q3NkExMEQzQ0RELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA1NkNGODgzRUNBNzU5NkEz
NjM1OTFBMEQyQjI3RDc2QTEwRDNDREQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NhUEtKc29DVUU4Vzh5dGFGdkZhcFR1cnNUM2NGM0piTHc2djRZTTUxQmk2LzAv
MzQzNTJlMzIzMzMzMmUzMTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6bYwDQYJKoZIhvcNAQELBQADggEBALJGi1T/
J92s3OJMnrc299Z3rDV2k91CkYVc3EjtFgbwoGvLkiyHEhp9wWcmLRXKTuztxRQn
5Kyhod18b0Ix7JfrO+QI/frpq3p5Xw47HXtj9NdTuN4PSesyNdZAh3weEtJRuaGc
PxHshmAFowJNVf4iqHOboMd1166cWzM8fApDfxlPrs+DmE3lbCywCcLtdtseqR3V
IcrZDojei/33IS7kdt7yxdasooMGBMxKXIDoI+MKNzlwqPrelaeOgdccOgNbmkKq
o6oJhekc21jhfja5PJMpi8AHJ8kYV5f/P4Kgjp3uS88ygVe3dJYj+b2mdVusqDOO
mvXeKk3E/pbxRHM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org