Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/34352e3138382e36342e302f32332d3233203d3e20323639353232.roa
File:                     34352e3138382e36342e302f32332d3233203d3e20323639353232.roa (raw, json)
Hash identifier:          l5aOzxM07ePXr1JAQBvn5Efh0zjMLs5RILzYviup+Ic=
Subject key identifier:   78:A5:28:34:1C:A9:76:43:DC:E0:74:D7:DF:E5:D6:35:93:2B:01:33
Certificate issuer:       /CN=56039EB82C5411D70FD18734B264EEAA57F519F5
Certificate serial:       25FC2A55739613EA72AB8B2D9680AA3369730373
Authority key identifier: 56:03:9E:B8:2C:54:11:D7:0F:D1:87:34:B2:64:EE:AA:57:F5:19:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56039EB82C5411D70FD18734B264EEAA57F519F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/34352e3138382e36342e302f32332d3233203d3e20323639353232.roa
Signing time:             Wed 24 May 2023 20:11:17 +0000
ROA not before:           Wed 24 May 2023 20:06:17 +0000
ROA not after:            Wed 22 May 2024 20:11:17 +0000
asID:                     269522
IP address blocks:        45.188.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fc:2a:55:73:96:13:ea:72:ab:8b:2d:96:80:aa:33:69:73:03:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56039EB82C5411D70FD18734B264EEAA57F519F5
        Validity
            Not Before: May 24 20:06:17 2023 GMT
            Not After : May 22 20:11:17 2024 GMT
        Subject: CN=78A528341CA97643DCE074D7DFE5D635932B0133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b8:48:47:d1:7a:0a:8f:2d:85:31:38:44:7a:
                    1a:49:14:a5:83:43:b5:d2:5d:ad:d9:c0:50:35:a0:
                    57:4b:7b:7a:46:94:e2:b0:35:3e:19:3a:e3:43:dd:
                    3f:02:8f:76:bd:33:cf:c9:20:24:80:4b:0b:be:6e:
                    a9:54:46:60:bd:3c:16:dd:ae:0c:8c:20:24:1a:2c:
                    cf:0b:ac:bc:2f:c7:0c:43:8b:a3:dc:c1:88:7a:a1:
                    67:ec:7c:f7:43:e6:72:d1:72:6e:b0:44:b9:84:18:
                    4d:88:7a:00:79:0f:41:88:6b:ee:38:a1:ac:f5:f7:
                    31:e6:da:10:45:e5:47:8b:da:46:b7:80:2b:b5:6f:
                    6b:85:12:bc:b8:6a:fb:55:cd:0a:b9:d4:1c:b0:8e:
                    97:b5:6a:e6:c4:13:65:f4:b4:12:36:cf:1d:6e:95:
                    28:f9:98:fd:1c:b7:77:19:45:6c:34:72:10:9b:3c:
                    18:b7:fd:08:ce:be:64:40:a9:ea:80:cd:f4:c7:ab:
                    c4:9e:5b:0b:6d:8e:42:12:93:3b:e7:72:c1:04:8c:
                    1b:48:dd:cd:3d:88:67:b0:89:d1:32:3f:89:21:be:
                    57:16:1e:bd:a4:a2:5d:2a:8f:33:ca:f8:6e:83:2e:
                    b2:3c:72:50:ea:c7:35:4c:aa:5b:05:30:f2:ea:fc:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:28:34:1C:A9:76:43:DC:E0:74:D7:DF:E5:D6:35:93:2B:01:33
            X509v3 Authority Key Identifier:
                keyid:56:03:9E:B8:2C:54:11:D7:0F:D1:87:34:B2:64:EE:AA:57:F5:19:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/56039EB82C5411D70FD18734B264EEAA57F519F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/56039EB82C5411D70FD18734B264EEAA57F519F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1ZvgSRvnxcRVR1g8gJTeBu4GsVgkXT38exEufhx5Pgf/0/34352e3138382e36342e302f32332d3233203d3e20323639353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:25:de:53:78:6c:3f:70:a4:11:eb:6b:0b:9f:4b:37:f0:cd:
         4e:44:70:cf:5d:fc:32:70:c8:65:ab:ff:49:9f:af:eb:ac:b2:
         8c:67:d3:6c:df:6e:3d:e8:b4:ba:8d:32:df:11:f2:1f:5e:f9:
         8f:d3:cc:12:6b:4c:98:53:0a:de:c5:1f:4e:30:e5:97:3e:94:
         6a:d5:ba:ee:7e:d4:f0:63:60:0d:b1:61:c0:b4:f1:6c:f2:4c:
         9d:60:2b:e3:87:70:66:b0:fb:3d:af:ef:b4:28:97:b7:9b:68:
         39:dd:7f:5d:25:35:5e:72:cf:d5:22:20:bc:3b:61:bb:92:82:
         db:e6:19:b5:1c:84:f6:5c:ab:fd:d5:8c:76:90:2e:47:37:da:
         22:f0:b5:14:4a:cc:51:92:ce:36:cf:95:be:e8:b3:41:89:3d:
         ad:d5:c6:2f:56:43:85:26:d8:e6:20:95:8b:24:61:9b:e9:fa:
         b3:4d:b5:ea:cb:19:7b:83:4b:a0:a2:ee:cd:49:1b:f9:27:90:
         c1:93:2f:15:1a:a9:a6:d5:08:f2:a6:b9:46:a5:4c:7d:12:a6:
         41:a5:59:df:44:76:d8:38:cd:9f:4a:5a:d5:9d:04:53:17:7a:
         b2:cb:4c:41:50:ca:91:48:98:dd:0d:cd:b2:d9:9c:b3:cb:a7:
         db:86:ce:b5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJfwqVXOWE+pyq4stloCqM2lzA3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwMzlFQjgyQzU0MTFENzBGRDE4NzM0QjI2NEVFQUE1
N0Y1MTlGNTAeFw0yMzA1MjQyMDA2MTdaFw0yNDA1MjIyMDExMTdaMDMxMTAvBgNV
BAMTKDc4QTUyODM0MUNBOTc2NDNEQ0UwNzREN0RGRTVENjM1OTMyQjAxMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYuEhH0XoKjy2FMThEehpJFKWD
Q7XSXa3ZwFA1oFdLe3pGlOKwNT4ZOuND3T8Cj3a9M8/JICSASwu+bqlURmC9PBbd
rgyMICQaLM8LrLwvxwxDi6PcwYh6oWfsfPdD5nLRcm6wRLmEGE2IegB5D0GIa+44
oaz19zHm2hBF5UeL2ka3gCu1b2uFEry4avtVzQq51Bywjpe1aubEE2X0tBI2zx1u
lSj5mP0ct3cZRWw0chCbPBi3/QjOvmRAqeqAzfTHq8SeWwttjkISkzvncsEEjBtI
3c09iGewidEyP4khvlcWHr2kol0qjzPK+G6DLrI8clDqxzVMqlsFMPLq/DOJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUeKUoNBypdkPc4HTX3+XWNZMrATMwHwYDVR0j
BBgwFoAUVgOeuCxUEdcP0Yc0smTuqlf1GfUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDFadmdTUnZueGNSVlIxZzhnSlRlQnU0R3NWZ2tYVDM4ZXhFdWZoeDVQ
Z2YvMC81NjAzOUVCODJDNTQxMUQ3MEZEMTg3MzRCMjY0RUVBQTU3RjUxOUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzU2MDM5RUI4MkM1NDExRDcw
RkQxODczNEIyNjRFRUFBNTdGNTE5RjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxWnZnU1J2bnhjUlZSMWc4Z0pUZUJ1NEdzVmdrWFQzOGV4RXVmaHg1UGdmLzAv
MzQzNTJlMzEzODM4MmUzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzUzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbxAMA0GCSqGSIb3DQEBCwUAA4IBAQAAJd5TeGw/
cKQR62sLn0s38M1ORHDPXfwycMhlq/9Jn6/rrLKMZ9Ns32496LS6jTLfEfIfXvmP
08wSa0yYUwrexR9OMOWXPpRq1bruftTwY2ANsWHAtPFs8kydYCvjh3BmsPs9r++0
KJe3m2g53X9dJTVecs/VIiC8O2G7koLb5hm1HIT2XKv91Yx2kC5HN9oi8LUUSsxR
ks42z5W+6LNBiT2t1cYvVkOFJtjmIJWLJGGb6fqzTbXqyxl7g0ugou7NSRv5J5DB
ky8VGqmm1QjyprlGpUx9EqZBpVnfRHbYOM2fSlrVnQRTF3qyy0xBUMqRSJjdDc2y
2Zyzy6fbhs61
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org