Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
File:                     34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa (raw, json)
Hash identifier:          vvaoSa5TEoiMnFyqdJ8yw/ce3yxUGY8MoTTaTTexelk=
Subject key identifier:   C8:F0:41:D1:FD:DD:43:A6:8B:EE:5E:4B:E1:6F:93:76:83:CE:D6:FE
Certificate issuer:       /CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
Certificate serial:       080554A226107317AE9ADCC8C29594752255D770
Authority key identifier: 72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa
Signing time:             Mon 11 Mar 2024 12:19:40 +0000
ROA not before:           Mon 11 Mar 2024 12:14:40 +0000
ROA not after:            Mon 10 Mar 2025 12:19:40 +0000
asID:                     268297
IP address blocks:        45.237.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:05:54:a2:26:10:73:17:ae:9a:dc:c8:c2:95:94:75:22:55:d7:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
        Validity
            Not Before: Mar 11 12:14:40 2024 GMT
            Not After : Mar 10 12:19:40 2025 GMT
        Subject: CN=C8F041D1FDDD43A68BEE5E4BE16F937683CED6FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:c8:23:8d:b4:23:0d:8a:e4:f5:8d:26:3b:
                    5e:6d:a0:ec:03:d1:87:9f:af:2c:8f:5f:da:81:0e:
                    51:cc:64:54:32:2a:db:1a:f4:59:ff:29:be:fc:57:
                    92:ce:77:43:38:b9:3b:44:30:64:6b:64:45:56:5b:
                    fd:3b:68:97:37:c0:9a:ea:21:18:ac:90:d9:24:de:
                    3f:dd:aa:6c:a8:84:5b:a7:0b:87:d9:10:d9:dc:74:
                    7c:a5:52:0a:eb:16:cd:59:76:0e:d7:6f:16:4d:8c:
                    29:24:8c:e7:c7:46:50:23:5b:ac:06:c1:da:87:7d:
                    af:94:cb:47:74:96:e1:e9:ab:3b:88:b6:2e:e6:d0:
                    6a:16:2e:70:4e:b0:38:b3:72:e0:30:8a:23:28:e1:
                    05:01:79:22:03:66:ad:76:ef:f4:db:4a:ff:7f:e3:
                    34:ee:bd:85:8e:26:e6:96:74:b0:d7:6e:64:72:33:
                    45:0c:9b:ee:eb:55:39:e5:61:52:52:e1:bf:bc:6f:
                    6a:93:b5:af:c7:f8:80:d0:e7:54:36:59:f8:3c:a9:
                    43:22:c8:0d:d2:9e:d8:5a:fd:1e:16:1d:8f:62:1d:
                    70:22:25:2b:02:7d:fe:3c:48:16:1b:c3:9b:61:c1:
                    41:2f:0a:12:6b:a1:f1:97:d7:60:5c:49:97:8d:66:
                    15:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F0:41:D1:FD:DD:43:A6:8B:EE:5E:4B:E1:6F:93:76:83:CE:D6:FE
            X509v3 Authority Key Identifier:
                keyid:72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32332d3233203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:b6:68:9f:e7:ec:53:40:7b:70:2e:1a:b6:df:06:b9:5b:96:
         87:d7:36:ca:d2:5c:76:20:01:63:36:d7:df:50:c5:64:9f:3b:
         83:91:28:03:82:36:95:12:7e:44:f5:8e:18:59:cc:eb:e4:a6:
         b8:cb:f2:e4:89:68:68:54:52:ee:cd:99:76:67:3a:f4:26:92:
         76:fa:7b:08:21:5b:6b:c9:60:31:35:31:78:fc:41:93:b5:85:
         4c:12:47:b4:ad:39:67:89:0b:01:86:21:e8:79:0b:de:20:c1:
         5a:5a:ab:82:af:6c:53:9b:ab:1a:d0:b1:78:d1:8a:e2:ab:5e:
         e7:f6:43:5f:6e:55:6b:ec:f7:56:4d:87:11:44:e3:f1:15:27:
         0c:02:d7:44:70:1a:13:73:23:4f:fb:ad:bb:b6:cf:f1:c5:9b:
         a0:b4:b5:6b:f2:ae:00:68:6b:5d:86:00:fd:14:ca:ed:cb:cd:
         7b:b8:a2:a6:40:de:a4:02:25:a4:0c:11:a8:c8:34:29:19:fb:
         2d:05:13:2c:0a:77:cf:bd:f5:f5:a8:0f:cf:e3:cc:1d:cb:44:
         9b:9e:a8:83:30:71:41:9b:40:77:23:30:98:63:c1:16:64:31:
         95:45:0d:f0:5f:5e:e0:3f:2a:e1:d0:d5:f8:23:0f:c0:5e:31:
         d3:73:09:fe
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCAVUoiYQcxeumtzIwpWUdSJV13AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCQzM3MkY0NjY2OUFBMjgxMUQxNTIwRjk4QzcyQjYw
Q0NDMzFENDAeFw0yNDAzMTExMjE0NDBaFw0yNTAzMTAxMjE5NDBaMDMxMTAvBgNV
BAMTKEM4RjA0MUQxRkRERDQzQTY4QkVFNUU0QkUxNkY5Mzc2ODNDRUQ2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChQcgjjbQjDYrk9Y0mO15toOwD
0YefryyPX9qBDlHMZFQyKtsa9Fn/Kb78V5LOd0M4uTtEMGRrZEVWW/07aJc3wJrq
IRiskNkk3j/dqmyohFunC4fZENncdHylUgrrFs1Zdg7XbxZNjCkkjOfHRlAjW6wG
wdqHfa+Uy0d0luHpqzuIti7m0GoWLnBOsDizcuAwiiMo4QUBeSIDZq127/TbSv9/
4zTuvYWOJuaWdLDXbmRyM0UMm+7rVTnlYVJS4b+8b2qTta/H+IDQ51Q2Wfg8qUMi
yA3Sntha/R4WHY9iHXAiJSsCff48SBYbw5thwUEvChJrofGX12BcSZeNZhWjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUyPBB0f3dQ6aL7l5L4W+TdoPO1v4wHwYDVR0j
BBgwFoAUcrw3L0ZmmqKBHRUg+YxytgzMMdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2
dFYvMC83MkJDMzcyRjQ2NjY5QUEyODExRDE1MjBGOThDNzJCNjBDQ0MzMUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyQkMzNzJGNDY2NjlBQTI4
MTFEMTUyMEY5OEM3MkI2MENDQzMxRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7fgwDQYJKoZIhvcNAQELBQADggEBAJW2aJ/n
7FNAe3AuGrbfBrlblofXNsrSXHYgAWM2199QxWSfO4ORKAOCNpUSfkT1jhhZzOvk
prjL8uSJaGhUUu7NmXZnOvQmknb6ewghW2vJYDE1MXj8QZO1hUwSR7StOWeJCwGG
Ieh5C94gwVpaq4KvbFObqxrQsXjRiuKrXuf2Q19uVWvs91ZNhxFE4/EVJwwC10Rw
GhNzI0/7rbu2z/HFm6C0tWvyrgBoa12GAP0Uyu3LzXu4oqZA3qQCJaQMEajINCkZ
+y0FEywKd8+99fWoD8/jzB3LRJueqIMwcUGbQHcjMJhjwRZkMZVFDfBfXuA/KuHQ
1fgjD8BeMdNzCf4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org