Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31332e302f32342d3234203d3e20323638333436.roa
File:                     34352e3233392e31332e302f32342d3234203d3e20323638333436.roa (raw, json)
Hash identifier:          udY7WiJKHDo5CABf1wCoxTK3B+Ns4g3PFgvVYhrLl3I=
Subject key identifier:   4A:6C:E9:40:DC:F0:D9:CE:3A:4F:A1:98:21:5A:54:58:33:FF:F5:09
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       11CC48EE77D209A3E25767610ADBEA2688E9B305
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31332e302f32342d3234203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:59 +0000
ROA not before:           Mon 22 May 2023 19:18:59 +0000
ROA not after:            Mon 20 May 2024 19:23:59 +0000
asID:                     268346
IP address blocks:        45.239.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cc:48:ee:77:d2:09:a3:e2:57:67:61:0a:db:ea:26:88:e9:b3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:59 2023 GMT
            Not After : May 20 19:23:59 2024 GMT
        Subject: CN=4A6CE940DCF0D9CE3A4FA198215A545833FFF509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:86:4e:df:60:24:90:b9:ce:2f:2a:86:33:
                    18:d9:09:f4:d3:41:01:3f:82:44:b7:c0:dd:b5:81:
                    9f:9e:66:ca:74:3f:e9:2e:7f:ee:cb:7f:39:cb:02:
                    a7:0b:e3:8f:ec:68:70:c7:69:3f:da:54:d6:f2:18:
                    5e:da:19:7f:f4:1f:d9:9a:bf:e1:56:55:e1:8f:1c:
                    05:fc:d0:27:3e:76:f6:ab:f6:46:2c:97:48:75:8e:
                    0d:d6:33:18:d3:28:c0:1d:89:de:23:b6:c0:aa:bd:
                    ca:c0:1e:1f:32:7d:7f:9d:ec:cc:8d:0e:38:09:06:
                    7b:16:27:b6:92:15:77:69:94:0c:bb:4d:57:6d:42:
                    57:6b:93:98:e3:75:59:a9:09:7c:56:53:36:d3:71:
                    db:d1:4f:d2:84:c6:99:33:06:1f:08:78:c6:91:bd:
                    e8:83:77:4c:ff:80:e7:87:48:43:84:97:44:22:a3:
                    bc:7a:6f:6a:b1:28:b5:b9:ef:c0:eb:b9:80:91:70:
                    07:57:b6:9f:35:b9:83:27:75:5c:35:c0:bf:56:d5:
                    3d:bb:23:a7:ed:e9:ef:7b:af:04:69:00:80:60:13:
                    96:b0:cf:f0:34:03:f2:c0:ad:81:24:b1:6c:02:ed:
                    37:cc:a8:ff:22:cc:93:40:a8:7c:26:f0:9a:a3:f0:
                    45:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6C:E9:40:DC:F0:D9:CE:3A:4F:A1:98:21:5A:54:58:33:FF:F5:09
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31332e302f32342d3234203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:5c:18:82:9d:bf:f3:4a:3f:6c:b1:8c:df:d8:c1:da:c7:dc:
         4d:f9:7d:93:30:d8:c7:6f:4c:33:11:64:24:9b:0b:c7:d1:d8:
         8b:58:a2:96:0c:63:63:c0:b2:e1:7f:2d:63:af:21:cc:0b:7c:
         5e:ae:d3:33:37:c5:3e:2f:8e:fb:c9:71:c5:9a:19:2e:e8:c1:
         9d:82:91:30:3f:d4:cf:ca:81:fb:2b:f4:60:31:6f:d2:75:b2:
         dc:57:c0:f1:a5:3e:95:67:5d:49:ba:20:a8:51:ad:f1:02:41:
         3e:a5:c4:27:42:b8:b3:1c:19:5c:03:25:e3:05:17:6e:fc:08:
         42:6d:7b:69:b7:f3:ae:24:e1:d9:92:fe:03:4a:cb:7a:6e:1d:
         6a:4c:f3:b3:dd:d1:65:b7:91:1a:80:4b:27:57:cc:84:69:d1:
         77:62:f2:de:29:ce:ca:b2:ea:a8:c9:1b:06:69:d5:18:8d:bd:
         8e:fb:1e:4e:3a:6b:af:3a:e2:5e:55:74:1e:be:be:08:2a:d0:
         6f:85:e5:8d:cc:68:05:7d:68:c6:3a:14:18:9f:b8:64:34:45:
         9a:9c:62:12:a0:5d:05:f6:5a:46:3d:6d:98:d4:4e:65:b8:0b:
         9a:bc:14:e5:e6:4b:35:60:b9:e9:bb:4e:c8:8d:e2:2b:4b:a6:
         d7:0b:0a:09
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUEcxI7nfSCaPiV2dhCtvqJojpswUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MjkwRkM5MTMwNEI1QkY4MDk5MUJFQkEwNkY5MThD
NEZBRjVBRjAeFw0yMzA1MjIxOTE4NTlaFw0yNDA1MjAxOTIzNTlaMDMxMTAvBgNV
BAMTKDRBNkNFOTQwRENGMEQ5Q0UzQTRGQTE5ODIxNUE1NDU4MzNGRkY1MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8F4ZO32AkkLnOLyqGMxjZCfTT
QQE/gkS3wN21gZ+eZsp0P+kuf+7LfznLAqcL44/saHDHaT/aVNbyGF7aGX/0H9ma
v+FWVeGPHAX80Cc+dvar9kYsl0h1jg3WMxjTKMAdid4jtsCqvcrAHh8yfX+d7MyN
DjgJBnsWJ7aSFXdplAy7TVdtQldrk5jjdVmpCXxWUzbTcdvRT9KExpkzBh8IeMaR
veiDd0z/gOeHSEOEl0Qio7x6b2qxKLW578DruYCRcAdXtp81uYMndVw1wL9W1T27
I6ft6e97rwRpAIBgE5awz/A0A/LArYEksWwC7TfMqP8izJNAqHwm8Jqj8EUpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSmzpQNzw2c46T6GYIVpUWDP/9QkwHwYDVR0j
BBgwFoAUCkKQ/JEwS1v4CZG+ugb5GMT69a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDE3WjlMR2hEd1pyam5VTFMyZUs4TExDVnN3bXM1am1nWXNENkg2ZUJM
WmgvMC8wQTQyOTBGQzkxMzA0QjVCRjgwOTkxQkVCQTA2RjkxOEM0RkFGNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBNDI5MEZDOTEzMDRCNUJG
ODA5OTFCRUJBMDZGOTE4QzRGQUY1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxN1o5TEdoRHdacmpuVUxTMmVLOExMQ1Zzd21zNWptZ1lzRDZINmVCTFpoLzAv
MzQzNTJlMzIzMzM5MmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe8NMA0GCSqGSIb3DQEBCwUAA4IBAQAKXBiCnb/z
Sj9ssYzf2MHax9xN+X2TMNjHb0wzEWQkmwvH0diLWKKWDGNjwLLhfy1jryHMC3xe
rtMzN8U+L477yXHFmhku6MGdgpEwP9TPyoH7K/RgMW/SdbLcV8DxpT6VZ11JuiCo
Ua3xAkE+pcQnQrizHBlcAyXjBRdu/AhCbXtpt/OuJOHZkv4DSst6bh1qTPOz3dFl
t5EagEsnV8yEadF3YvLeKc7KsuqoyRsGadUYjb2O+x5OOmuvOuJeVXQevr4IKtBv
heWNzGgFfWjGOhQYn7hkNEWanGISoF0F9lpGPW2Y1E5luAuavBTl5ks1YLnpu07I
jeIrS6bXCwoJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org