Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
File:                     34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (raw, json)
Hash identifier:          fM/aVzK5wiQxB70SuZWap19iMJdXbx/MIDvhsHx+ndc=
Subject key identifier:   44:7C:EA:71:1C:54:59:40:9D:A8:1B:DD:22:AD:CC:6E:C1:1C:2A:C6
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       735315BD35A9DAFF6C7AC298A5F0DA6689DAC791
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:49:52 +0000
ROA not before:           Tue 09 Apr 2024 19:44:52 +0000
ROA not after:            Tue 08 Apr 2025 19:49:52 +0000
asID:                     268890
IP address blocks:        45.175.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:53:15:bd:35:a9:da:ff:6c:7a:c2:98:a5:f0:da:66:89:da:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:44:52 2024 GMT
            Not After : Apr  8 19:49:52 2025 GMT
        Subject: CN=447CEA711C5459409DA81BDD22ADCC6EC11C2AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:70:8d:d1:96:12:f3:8d:d8:80:47:76:9a:d0:
                    dc:8f:e5:bf:fc:36:51:88:71:ea:34:9a:31:77:e5:
                    d7:65:0a:f2:1e:c0:af:a7:9a:39:b5:02:fa:24:ba:
                    fb:d9:c9:0c:98:b9:75:9e:04:12:7c:b6:1a:7b:07:
                    1b:38:e2:5b:92:d2:93:23:35:93:46:a6:83:3a:e9:
                    a8:7a:42:bc:c0:aa:48:80:f6:3d:46:92:7c:71:4f:
                    b4:91:bc:2d:47:6d:79:b8:d7:cb:8f:b3:75:13:19:
                    0d:31:93:01:23:75:cf:b4:ba:f1:64:2c:7d:6f:98:
                    1b:35:69:62:76:19:c5:ff:94:07:37:d7:fa:45:ca:
                    b1:20:09:a6:39:ed:bb:a8:7f:b1:6d:df:52:47:a9:
                    ab:3c:31:3e:84:9e:90:3c:a8:b5:06:8d:92:5c:6a:
                    bb:9c:79:b0:d8:9a:78:c7:92:a8:15:84:50:3c:ea:
                    04:86:ad:05:a6:0a:74:9d:75:e0:74:b1:85:eb:04:
                    a7:9a:ac:a7:8a:c5:e2:34:54:c3:19:9f:86:9f:42:
                    5d:51:9c:90:87:21:ac:af:8c:6f:31:b0:00:2f:53:
                    28:bc:74:29:d9:f1:5e:2b:e9:c5:de:7d:84:fc:cc:
                    99:d2:22:53:12:67:ac:88:8f:0a:f4:7c:bf:78:0e:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:EA:71:1C:54:59:40:9D:A8:1B:DD:22:AD:CC:6E:C1:1C:2A:C6
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:96:c7:f7:df:35:e3:30:e5:ec:66:7d:73:c4:0f:43:bf:33:
         2a:fb:a2:3c:6d:52:03:07:3c:5f:b2:ed:27:4e:db:30:9c:e0:
         4c:5a:2f:32:2b:a2:4f:26:f3:8a:66:ca:16:96:50:05:a1:d9:
         2c:24:75:47:29:19:ac:00:de:9f:aa:bc:2f:f6:eb:ed:1b:a6:
         bc:26:18:b4:e8:c1:97:68:61:16:23:22:17:5b:f0:48:0f:d9:
         0e:c8:11:99:23:03:96:9e:b9:c0:cc:27:f6:ae:20:13:43:d2:
         fa:3d:35:a2:91:41:17:ab:fd:ce:f6:d9:40:49:62:28:c5:9b:
         e5:29:64:f6:0a:f2:dc:af:17:99:99:84:bc:f0:9f:f1:fa:bc:
         a9:9b:47:64:e5:e7:23:b1:e5:79:9a:24:26:b5:cd:1a:be:0c:
         f2:d4:86:a7:81:60:71:f2:f4:f9:c0:5e:1e:89:b2:c5:6d:58:
         a6:be:23:43:fb:9a:b1:5a:a8:4c:f3:c8:08:20:5d:b9:30:35:
         64:e7:0c:83:c1:79:50:f1:cc:64:ef:e8:11:68:05:c9:c0:8f:
         72:ac:18:5f:fd:78:98:15:92:ae:c3:36:41:9d:ad:9a:ba:0e:
         45:10:cb:08:2e:3a:9d:d4:01:36:f3:20:73:82:ce:f2:53:08:
         30:6b:a0:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc1MVvTWp2v9sesKYpfDaZonax5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdEMDdCRkRCQTA0MEE2NDAwNkVGNDRERTZGNzE3NkI4
MUUxQUU1NjAeFw0yNDA0MDkxOTQ0NTJaFw0yNTA0MDgxOTQ5NTJaMDMxMTAvBgNV
BAMTKDQ0N0NFQTcxMUM1NDU5NDA5REE4MUJERDIyQURDQzZFQzExQzJBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcI3RlhLzjdiAR3aa0NyP5b/8
NlGIceo0mjF35ddlCvIewK+nmjm1AvokuvvZyQyYuXWeBBJ8thp7Bxs44luS0pMj
NZNGpoM66ah6QrzAqkiA9j1GknxxT7SRvC1HbXm418uPs3UTGQ0xkwEjdc+0uvFk
LH1vmBs1aWJ2GcX/lAc31/pFyrEgCaY57buof7Ft31JHqas8MT6EnpA8qLUGjZJc
arucebDYmnjHkqgVhFA86gSGrQWmCnSddeB0sYXrBKearKeKxeI0VMMZn4afQl1R
nJCHIayvjG8xsAAvUyi8dCnZ8V4r6cXefYT8zJnSIlMSZ6yIjwr0fL94DnzjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURHzqcRxUWUCdqBvdIq3MbsEcKsYwHwYDVR0j
BBgwFoAUZ9B7/boECmQAbvRN5vcXa4HhrlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMS82N0QwN0JGREJBMDQwQTY0MDA2RUY0NERFNkY3MTc2QjgxRTFBRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RDA3QkZEQkEwNDBBNjQw
MDZFRjQ0REU2RjcxNzZCODFFMUFFNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzEv
MzQzNTJlMzEzNzM1MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa9MMA0GCSqGSIb3DQEBCwUAA4IBAQCDlsf33zXj
MOXsZn1zxA9DvzMq+6I8bVIDBzxfsu0nTtswnOBMWi8yK6JPJvOKZsoWllAFodks
JHVHKRmsAN6fqrwv9uvtG6a8Jhi06MGXaGEWIyIXW/BID9kOyBGZIwOWnrnAzCf2
riATQ9L6PTWikUEXq/3O9tlASWIoxZvlKWT2CvLcrxeZmYS88J/x+rypm0dk5ecj
seV5miQmtc0avgzy1IangWBx8vT5wF4eibLFbVimviND+5qxWqhM88gIIF25MDVk
5wyDwXlQ8cxk7+gRaAXJwI9yrBhf/XiYFZKuwzZBna2aug5FEMsILjqd1AE28yBz
gs7yUwgwa6Ak
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org