Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa
File:                     34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa (raw, json)
Hash identifier:          5V2Ag89T2VJM44uIi22EZYIYLgYRfGdabnv1ZFp07pM=
Subject key identifier:   C5:02:5E:55:BD:4E:89:79:0F:6A:5D:C1:1A:35:4A:C2:10:81:F0:59
Certificate issuer:       /CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
Certificate serial:       58EBECD762E8BC5BED4102BEFF8CC3079F84A805
Authority key identifier: 72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa
Signing time:             Mon 11 Mar 2024 12:19:39 +0000
ROA not before:           Mon 11 Mar 2024 12:14:39 +0000
ROA not after:            Mon 10 Mar 2025 12:19:39 +0000
asID:                     268297
IP address blocks:        45.237.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:eb:ec:d7:62:e8:bc:5b:ed:41:02:be:ff:8c:c3:07:9f:84:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72BC372F46669AA2811D1520F98C72B60CCC31D4
        Validity
            Not Before: Mar 11 12:14:39 2024 GMT
            Not After : Mar 10 12:19:39 2025 GMT
        Subject: CN=C5025E55BD4E89790F6A5DC11A354AC21081F059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a4:d4:8c:12:5b:c7:6d:01:12:38:17:c3:53:
                    78:cb:b4:51:50:63:31:e1:d9:51:9b:87:8e:4b:1e:
                    7a:4c:df:7c:cf:55:4a:07:be:bb:18:f2:7c:88:64:
                    e9:c9:01:d3:81:77:2f:10:61:62:9c:fb:fb:b3:e5:
                    d1:59:4a:5d:be:10:6b:12:95:d2:0b:03:89:a4:c5:
                    50:39:62:4f:4b:f2:2a:1e:00:be:f9:25:d3:1f:13:
                    74:da:32:04:a8:fd:2a:18:ad:46:c0:e5:0a:33:92:
                    22:2b:59:79:55:45:cc:79:20:4e:ee:0d:5c:3a:0f:
                    d3:a3:78:20:a5:6e:9b:df:4c:e3:c9:b8:b2:b0:4d:
                    24:1b:5b:28:6c:e2:5d:1c:35:91:2c:89:86:af:fa:
                    6d:8e:a2:4b:d1:2a:28:53:9f:a9:f1:1c:e2:dd:4c:
                    f7:22:a4:35:da:0d:cf:b2:85:12:ee:0f:57:76:e2:
                    fd:4f:fb:92:8c:a6:31:85:ae:19:72:97:f1:f3:29:
                    6a:a7:d3:3d:ac:df:df:2a:6d:9a:a3:7e:75:54:01:
                    ec:d5:8a:cf:62:ae:63:a9:b2:23:9d:53:df:0e:7a:
                    d5:27:24:1c:aa:80:70:02:9e:16:2f:dd:58:9a:4a:
                    8a:9e:22:db:b7:41:ad:0d:1c:b5:28:36:56:2b:76:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:02:5E:55:BD:4E:89:79:0F:6A:5D:C1:1A:35:4A:C2:10:81:F0:59
            X509v3 Authority Key Identifier:
                keyid:72:BC:37:2F:46:66:9A:A2:81:1D:15:20:F9:8C:72:B6:0C:CC:31:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/72BC372F46669AA2811D1520F98C72B60CCC31D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/34352e3233372e3234382e302f32342d3234203d3e20323638323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:ae:b2:0d:5f:8d:fb:43:a4:b0:2d:19:c6:50:d6:4e:41:db:
         19:5b:a5:83:8c:e7:fe:75:18:e6:14:05:a2:1f:9f:10:73:01:
         d8:45:fa:62:08:78:84:1a:e2:98:02:de:f7:44:fd:5e:ce:fd:
         6a:a0:8f:5a:ed:d0:89:73:30:b0:a0:32:00:1e:ba:c4:4f:c7:
         c6:3f:d8:d2:ee:9e:d2:9f:80:c9:1f:b5:1a:2a:cd:23:ae:09:
         25:07:18:ad:0b:15:f2:79:e0:ac:56:08:01:86:b4:b5:6d:1c:
         f4:13:01:2a:8a:dc:0a:f5:a9:c4:f9:be:e4:2b:79:79:70:51:
         2f:d7:3b:b7:5e:68:13:cf:a9:11:ab:e9:45:ed:e1:96:0a:20:
         c7:b7:b7:81:ee:36:ec:6e:65:7b:f2:95:be:77:63:a4:79:79:
         44:71:e0:31:b5:83:af:9c:48:37:1b:2a:bd:9b:bc:b5:f7:53:
         21:3a:ca:18:2a:21:42:39:75:9e:54:5f:50:67:3e:0d:da:ed:
         7b:ed:58:0e:b4:b5:29:f0:35:3c:61:91:23:e3:a2:84:cf:8d:
         9a:41:c6:e2:9d:25:3a:36:96:32:ee:8c:eb:02:76:fe:0e:dd:
         76:46:e1:9d:49:d4:2e:de:bc:9c:e0:97:87:e0:ba:a4:76:33:
         eb:27:c6:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWOvs12LovFvtQQK+/4zDB5+EqAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCQzM3MkY0NjY2OUFBMjgxMUQxNTIwRjk4QzcyQjYw
Q0NDMzFENDAeFw0yNDAzMTExMjE0MzlaFw0yNTAzMTAxMjE5MzlaMDMxMTAvBgNV
BAMTKEM1MDI1RTU1QkQ0RTg5NzkwRjZBNURDMTFBMzU0QUMyMTA4MUYwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRpNSMElvHbQESOBfDU3jLtFFQ
YzHh2VGbh45LHnpM33zPVUoHvrsY8nyIZOnJAdOBdy8QYWKc+/uz5dFZSl2+EGsS
ldILA4mkxVA5Yk9L8ioeAL75JdMfE3TaMgSo/SoYrUbA5QozkiIrWXlVRcx5IE7u
DVw6D9OjeCClbpvfTOPJuLKwTSQbWyhs4l0cNZEsiYav+m2OokvRKihTn6nxHOLd
TPcipDXaDc+yhRLuD1d24v1P+5KMpjGFrhlyl/HzKWqn0z2s398qbZqjfnVUAezV
is9irmOpsiOdU98OetUnJByqgHACnhYv3ViaSoqeItu3Qa0NHLUoNlYrdidNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxQJeVb1OiXkPal3BGjVKwhCB8FkwHwYDVR0j
BBgwFoAUcrw3L0ZmmqKBHRUg+YxytgzMMdQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDN0dENUMW9YWDRrWUNvdGFzenh1a3VydUwxTjNZTk1DNFhzcjhvRHY2
dFYvMC83MkJDMzcyRjQ2NjY5QUEyODExRDE1MjBGOThDNzJCNjBDQ0MzMUQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcyQkMzNzJGNDY2NjlBQTI4
MTFEMTUyMEY5OEM3MkI2MENDQzMxRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzdHRDVDFvWFg0a1lDb3Rhc3p4dWt1cnVMMU4zWU5NQzRYc3I4b0R2NnRWLzAv
MzQzNTJlMzIzMzM3MmUzMjM0MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7fgwDQYJKoZIhvcNAQELBQADggEBAN6usg1f
jftDpLAtGcZQ1k5B2xlbpYOM5/51GOYUBaIfnxBzAdhF+mIIeIQa4pgC3vdE/V7O
/Wqgj1rt0IlzMLCgMgAeusRPx8Y/2NLuntKfgMkftRoqzSOuCSUHGK0LFfJ54KxW
CAGGtLVtHPQTASqK3Ar1qcT5vuQreXlwUS/XO7deaBPPqRGr6UXt4ZYKIMe3t4Hu
NuxuZXvylb53Y6R5eURx4DG1g6+cSDcbKr2bvLX3UyE6yhgqIUI5dZ5UX1BnPg3a
7XvtWA60tSnwNTxhkSPjooTPjZpBxuKdJTo2ljLujOsCdv4O3XZG4Z1J1C7evJzg
l4fguqR2M+snxuw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org