Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa
File:                     34352e3137352e37392e302f32342d3234203d3e20323638383930.roa (raw, json)
Hash identifier:          b+F7JMuWDzcDq3vMGCG23+nsVDeK9JxaTYGgGuTunqg=
Subject key identifier:   B5:D5:1F:71:14:83:81:04:D1:71:ED:BC:1F:4F:57:8D:0F:91:55:98
Certificate issuer:       /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial:       26FDC4C56322EB35EB08C52A15B5B273CC852042
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa
Signing time:             Tue 09 Apr 2024 19:50:14 +0000
ROA not before:           Tue 09 Apr 2024 19:45:14 +0000
ROA not after:            Tue 08 Apr 2025 19:50:14 +0000
asID:                     268890
IP address blocks:        45.175.79.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fd:c4:c5:63:22:eb:35:eb:08:c5:2a:15:b5:b2:73:cc:85:20:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
        Validity
            Not Before: Apr  9 19:45:14 2024 GMT
            Not After : Apr  8 19:50:14 2025 GMT
        Subject: CN=B5D51F7114838104D171EDBC1F4F578D0F915598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:2d:dc:4e:92:53:2e:5c:56:9f:d5:00:60:
                    82:e5:7d:5d:a3:42:34:22:35:be:b5:92:c7:e0:44:
                    c4:90:85:6e:36:b9:27:84:63:51:57:cb:a0:3e:68:
                    19:ea:94:6a:10:0b:53:de:08:23:ce:55:a6:24:ae:
                    74:84:68:84:fc:0d:6e:da:c8:1f:56:04:ab:d8:af:
                    58:2a:51:19:f8:3e:f7:7a:1b:3f:ad:8c:e4:6b:9d:
                    12:63:51:74:1b:ae:de:a2:5e:c0:4a:92:40:dd:d5:
                    fb:9f:56:41:3e:5b:a8:02:87:61:d4:d3:65:fe:de:
                    64:fb:10:8e:1d:93:b3:f1:32:8f:f9:86:2f:fa:10:
                    2c:32:d7:97:d7:db:12:8a:7d:71:b2:3b:c4:df:ea:
                    a8:1e:af:24:9b:90:26:45:77:04:ea:77:3a:f7:ad:
                    3e:9d:ce:02:ec:96:ce:74:dc:37:a3:a9:d9:51:b2:
                    84:4e:e6:80:a5:91:be:c6:5b:0b:22:74:d7:e4:d8:
                    f8:ae:43:de:43:27:dc:32:60:0c:5f:6c:52:41:f7:
                    98:91:82:e7:b4:03:55:66:c0:12:7e:04:55:64:17:
                    28:86:aa:b9:73:61:53:12:4b:68:c8:96:ad:15:c5:
                    78:c6:ca:86:cf:d4:dd:6a:a1:0f:22:ed:89:63:ec:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:1F:71:14:83:81:04:D1:71:ED:BC:1F:4F:57:8D:0F:91:55:98
            X509v3 Authority Key Identifier:
                keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37392e302f32342d3234203d3e20323638383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:44:3c:4c:c3:2d:a6:43:16:2e:82:96:6a:a0:df:c7:80:
         e5:a7:6f:2e:39:e3:aa:e0:0f:1f:0a:a7:46:35:be:70:5a:dc:
         7e:94:29:c5:d0:5e:5e:6c:75:15:cb:26:fd:ac:79:ea:ca:2c:
         23:1c:d1:51:49:b7:33:88:ba:2b:2c:d2:5c:52:66:1f:c9:0f:
         84:8c:ae:00:bb:7a:d5:9d:b9:d1:ec:5c:34:d0:89:44:39:e8:
         0b:35:7a:11:bf:95:8f:12:77:c2:fe:38:fd:78:47:57:f6:8f:
         de:8b:3d:e2:50:a5:4c:03:c9:fd:4b:69:60:b2:cf:25:49:bf:
         0e:ad:b0:71:94:42:8b:d6:bf:f4:16:15:21:28:6e:2b:d2:97:
         cd:aa:b3:25:97:77:65:65:c1:7d:60:c1:a1:98:64:96:22:34:
         66:13:7a:0f:1c:13:09:01:d9:25:8e:54:3c:f5:fd:7f:e3:86:
         6e:ed:39:cf:31:58:ac:68:9b:79:3a:8f:be:4a:0f:44:08:3d:
         a4:64:08:1e:f2:35:53:ab:c8:0a:f5:99:d6:7e:78:cd:70:2f:
         6d:94:88:40:61:58:21:16:98:7b:67:58:f2:46:ea:1a:5e:5d:
         9f:a2:46:a6:e2:70:40:b8:e6:83:1b:7f:1a:e8:5b:8f:3c:60:
         2b:fa:f1:05
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJv3ExWMi6zXrCMUqFbWyc8yFIEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdEMDdCRkRCQTA0MEE2NDAwNkVGNDRERTZGNzE3NkI4
MUUxQUU1NjAeFw0yNDA0MDkxOTQ1MTRaFw0yNTA0MDgxOTUwMTRaMDMxMTAvBgNV
BAMTKEI1RDUxRjcxMTQ4MzgxMDREMTcxRURCQzFGNEY1NzhEMEY5MTU1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfkS3cTpJTLlxWn9UAYILlfV2j
QjQiNb61ksfgRMSQhW42uSeEY1FXy6A+aBnqlGoQC1PeCCPOVaYkrnSEaIT8DW7a
yB9WBKvYr1gqURn4Pvd6Gz+tjORrnRJjUXQbrt6iXsBKkkDd1fufVkE+W6gCh2HU
02X+3mT7EI4dk7PxMo/5hi/6ECwy15fX2xKKfXGyO8Tf6qgerySbkCZFdwTqdzr3
rT6dzgLsls503DejqdlRsoRO5oClkb7GWwsidNfk2PiuQ95DJ9wyYAxfbFJB95iR
gue0A1VmwBJ+BFVkFyiGqrlzYVMSS2jIlq0VxXjGyobP1N1qoQ8i7Ylj7DqBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtdUfcRSDgQTRce28H09XjQ+RVZgwHwYDVR0j
BBgwFoAUZ9B7/boECmQAbvRN5vcXa4HhrlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMS82N0QwN0JGREJBMDQwQTY0MDA2RUY0NERFNkY3MTc2QjgxRTFBRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RDA3QkZEQkEwNDBBNjQw
MDZFRjQ0REU2RjcxNzZCODFFMUFFNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzEv
MzQzNTJlMzEzNzM1MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa9PMA0GCSqGSIb3DQEBCwUAA4IBAQA7M0Q8TMMt
pkMWLoKWaqDfx4Dlp28uOeOq4A8fCqdGNb5wWtx+lCnF0F5ebHUVyyb9rHnqyiwj
HNFRSbcziLorLNJcUmYfyQ+EjK4Au3rVnbnR7Fw00IlEOegLNXoRv5WPEnfC/jj9
eEdX9o/eiz3iUKVMA8n9S2lgss8lSb8OrbBxlEKL1r/0FhUhKG4r0pfNqrMll3dl
ZcF9YMGhmGSWIjRmE3oPHBMJAdkljlQ89f1/44Zu7TnPMVisaJt5Oo++Sg9ECD2k
ZAge8jVTq8gK9ZnWfnjNcC9tlIhAYVghFph7Z1jyRuoaXl2fokam4nBAuOaDG38a
6FuPPGAr+vEF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org