Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa
File:                     34352e372e3231382e302f32342d3234203d3e20323636363139.roa (raw, json)
Hash identifier:          0SGzue1VRZRz+H5bB7PC6rCegeUQasrZtS3diJbECDU=
Subject key identifier:   D7:A5:7B:D5:6A:A8:AC:A0:6D:58:A9:AC:FF:7C:74:12:63:96:C7:55
Certificate issuer:       /CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Certificate serial:       79DC408730A6B56404AF2BEF0247311DF503C6EE
Authority key identifier: 7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa
Signing time:             Mon 30 Oct 2023 18:28:35 +0000
ROA not before:           Mon 30 Oct 2023 18:23:35 +0000
ROA not after:            Mon 28 Oct 2024 18:28:35 +0000
asID:                     266619
IP address blocks:        45.7.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:dc:40:87:30:a6:b5:64:04:af:2b:ef:02:47:31:1d:f5:03:c6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
        Validity
            Not Before: Oct 30 18:23:35 2023 GMT
            Not After : Oct 28 18:28:35 2024 GMT
        Subject: CN=D7A57BD56AA8ACA06D58A9ACFF7C74126396C755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7e:d5:3c:ad:64:07:7b:3f:cc:29:da:99:6c:
                    0c:b7:b5:57:f5:4a:a0:42:2b:48:b7:97:99:ff:df:
                    13:cf:a5:d3:6e:ba:4a:76:0a:ba:7d:f2:09:d8:6a:
                    54:9d:ab:83:37:80:ab:d7:4d:47:53:17:51:bf:54:
                    3c:f0:b2:c3:48:5b:b4:25:95:4b:d0:be:6c:db:a2:
                    9c:34:c8:4b:bf:23:38:2c:13:e6:45:56:88:52:a7:
                    64:49:53:52:98:58:fd:5b:39:ea:95:29:b8:ba:87:
                    17:91:43:e6:e6:7c:32:9a:3e:ef:cd:9c:ba:54:2e:
                    41:1d:7d:b4:bc:ab:8e:7b:f0:ab:8e:fb:7a:a3:bf:
                    33:34:8f:85:69:6e:cc:4e:6e:1e:86:41:7d:5e:1d:
                    50:3e:4b:8f:0c:16:6a:26:59:77:ea:55:42:56:36:
                    ae:f6:e1:33:0a:01:08:40:09:cd:65:7c:d4:b0:69:
                    83:cf:93:0b:80:52:bf:86:12:c5:dc:dd:d0:f7:6c:
                    f3:b2:11:44:c3:70:af:7f:dd:5a:2b:02:8c:a0:fc:
                    24:b4:c7:f9:70:4e:e5:36:8e:f8:40:9a:3b:e5:c6:
                    f7:57:bb:06:12:f4:ef:28:ee:cc:a2:30:f0:fc:2b:
                    2b:eb:71:fb:65:43:d7:ec:8d:93:ed:f3:57:82:76:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:7B:D5:6A:A8:AC:A0:6D:58:A9:AC:FF:7C:74:12:63:96:C7:55
            X509v3 Authority Key Identifier:
                keyid:7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323636363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:a0:ce:14:61:47:b5:14:86:cd:d2:18:50:14:ac:95:49:
         0b:78:e7:04:ec:80:08:81:db:28:e8:03:7a:14:14:29:cd:8a:
         50:c9:f0:34:9f:26:8b:e6:7f:86:da:1b:da:8b:1f:bc:97:09:
         32:04:f4:c4:f7:0e:38:8a:35:64:02:f1:fa:62:4e:d3:17:0e:
         2f:50:0a:7e:3b:0b:d2:28:76:14:d2:89:73:56:4a:08:ba:18:
         1d:4e:9a:bc:02:0b:5f:74:46:ee:ae:5e:5c:77:fc:9b:19:0b:
         bc:f9:00:ab:96:6a:83:3b:ae:67:b7:02:9e:68:f9:a5:d1:eb:
         a4:00:e0:0a:ca:21:86:09:50:18:2b:55:cb:12:2c:24:35:f6:
         4c:39:10:8f:09:ae:d5:7d:d3:9f:6a:82:08:bf:d8:36:1a:fb:
         a0:23:33:97:3f:ab:e9:ae:a8:f2:72:0e:ac:1f:aa:6c:80:d1:
         e8:43:3b:22:93:ce:7c:1f:05:24:0b:bc:bc:a7:ac:e9:90:77:
         fb:03:f4:a7:3b:86:a1:62:7e:57:26:15:fb:e7:51:93:65:7c:
         32:8d:75:9d:10:24:0b:d9:e8:fc:48:51:cf:b5:39:96:61:42:
         04:ed:72:65:49:05:73:ef:2a:bd:3d:98:df:0b:af:f1:08:38:
         77:71:91:87
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUedxAhzCmtWQEryvvAkcxHfUDxu4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFNTcyRTY1RjNCREMzREQ1Nzg2QkM5NjNBQUIyRTJE
MUUzNUM0NzAeFw0yMzEwMzAxODIzMzVaFw0yNDEwMjgxODI4MzVaMDMxMTAvBgNV
BAMTKEQ3QTU3QkQ1NkFBOEFDQTA2RDU4QTlBQ0ZGN0M3NDEyNjM5NkM3NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJftU8rWQHez/MKdqZbAy3tVf1
SqBCK0i3l5n/3xPPpdNuukp2Crp98gnYalSdq4M3gKvXTUdTF1G/VDzwssNIW7Ql
lUvQvmzbopw0yEu/IzgsE+ZFVohSp2RJU1KYWP1bOeqVKbi6hxeRQ+bmfDKaPu/N
nLpULkEdfbS8q4578KuO+3qjvzM0j4VpbsxObh6GQX1eHVA+S48MFmomWXfqVUJW
Nq724TMKAQhACc1lfNSwaYPPkwuAUr+GEsXc3dD3bPOyEUTDcK9/3VorAoyg/CS0
x/lwTuU2jvhAmjvlxvdXuwYS9O8o7syiMPD8KyvrcftlQ9fsjZPt81eCdj4/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU16V71WqorKBtWKms/3x0EmOWx1UwHwYDVR0j
BBgwFoAUfOVy5l873D3VeGvJY6qy4tHjXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4
MlYvMC83Q0U1NzJFNjVGM0JEQzNERDU3ODZCQzk2M0FBQjJFMkQxRTM1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDRTU3MkU2NUYzQkRDM0RE
NTc4NkJDOTYzQUFCMkUyRDFFMzVDNDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzOVl2dmNoQnRtSnpBYzNOM3lGQXhhbU5kQmVEb25yWGFrNHgycThkeDJWLzAv
MzQzNTJlMzcyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNjM2
MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0H2jANBgkqhkiG9w0BAQsFAAOCAQEAUfKgzhRhR7UU
hs3SGFAUrJVJC3jnBOyACIHbKOgDehQUKc2KUMnwNJ8mi+Z/htob2osfvJcJMgT0
xPcOOIo1ZALx+mJO0xcOL1AKfjsL0ih2FNKJc1ZKCLoYHU6avAILX3RG7q5eXHf8
mxkLvPkAq5ZqgzuuZ7cCnmj5pdHrpADgCsohhglQGCtVyxIsJDX2TDkQjwmu1X3T
n2qCCL/YNhr7oCMzlz+r6a6o8nIOrB+qbIDR6EM7IpPOfB8FJAu8vKes6ZB3+wP0
pzuGoWJ+VyYV++dRk2V8Mo11nRAkC9no/EhRz7U5lmFCBO1yZUkFc+8qvT2Y3wuv
8Qg4d3GRhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org