Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138312e302f32342d3234203d3e20323638343133.roa
File:                     34352e3136302e3138312e302f32342d3234203d3e20323638343133.roa (raw, json)
Hash identifier:          PEPdz5zMaQP6t6K3K7FvQ7F3ebzMa+lxPyOoTs9DCD4=
Subject key identifier:   0F:AE:A4:84:87:5F:C5:BE:DB:AB:E2:FB:C4:26:47:19:F0:B2:FB:16
Certificate issuer:       /CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
Certificate serial:       0F47B4ABA78B284C0D91F25D56DEE31D647A0CED
Authority key identifier: C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138312e302f32342d3234203d3e20323638343133.roa
Signing time:             Mon 11 Dec 2023 17:22:07 +0000
ROA not before:           Mon 11 Dec 2023 17:17:07 +0000
ROA not after:            Mon 09 Dec 2024 17:22:07 +0000
asID:                     268413
IP address blocks:        45.160.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:47:b4:ab:a7:8b:28:4c:0d:91:f2:5d:56:de:e3:1d:64:7a:0c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8
        Validity
            Not Before: Dec 11 17:17:07 2023 GMT
            Not After : Dec  9 17:22:07 2024 GMT
        Subject: CN=0FAEA484875FC5BEDBABE2FBC4264719F0B2FB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:b5:f2:7a:95:aa:50:dc:84:a7:e2:19:04:
                    6e:ee:be:c7:2f:ad:ed:a3:14:10:f5:2e:70:b4:6d:
                    d5:f8:6f:21:07:67:cb:b0:f8:e3:6b:c0:c0:07:2b:
                    e6:7a:47:0e:9e:53:79:1b:8d:f5:67:4c:49:29:d0:
                    12:54:65:b1:20:19:a7:fb:0b:af:c2:78:df:f5:21:
                    ca:39:58:20:45:84:0d:e1:c5:18:87:f6:52:be:64:
                    7c:d6:d3:0d:b9:6e:18:cd:3f:0c:55:dd:b9:d6:09:
                    49:ba:f8:16:e0:f5:84:83:91:87:6a:d0:23:f1:c3:
                    c3:68:c9:ed:35:59:cc:aa:af:7e:49:9f:1f:e0:f6:
                    b0:68:16:5a:82:2e:e7:82:1c:fb:e5:23:20:9e:d3:
                    a7:c4:1d:ff:62:8d:96:ce:0b:dd:c9:87:83:30:e6:
                    15:8e:cd:22:56:d2:fc:ec:0a:2b:5c:1b:37:d2:2a:
                    cd:47:3b:7e:ab:5d:3b:f6:ee:70:0a:fd:ac:20:b8:
                    77:2a:54:bc:8c:ea:34:25:28:0a:33:94:ef:4d:23:
                    cf:56:eb:7c:3a:ba:d7:2f:21:c3:c5:77:1a:a9:c7:
                    2d:69:95:f2:b1:d8:ee:69:c1:be:1c:22:fc:87:63:
                    73:26:29:09:a0:16:42:c7:9e:58:79:23:01:90:fa:
                    e5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:A4:84:87:5F:C5:BE:DB:AB:E2:FB:C4:26:47:19:F0:B2:FB:16
            X509v3 Authority Key Identifier:
                keyid:C7:EF:6E:14:93:EA:A9:C2:D3:64:7B:EE:A8:2D:FF:84:70:2D:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7EF6E1493EAA9C2D3647BEEA82DFF84702D21C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5V5dWAvBhWLYzNcyQXgEB11fJitGCaw9xKryMVX5L81/0/34352e3136302e3138312e302f32342d3234203d3e20323638343133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:27:98:95:a5:d3:c2:b9:8f:1d:19:65:14:ee:c7:b0:62:35:
         5e:dd:7c:db:07:2e:49:10:40:a8:b8:97:c5:f3:2a:f5:98:a0:
         a2:36:f4:e1:37:93:b3:e7:65:d5:a6:30:0f:a1:92:da:c6:d6:
         40:66:e1:5c:ac:8f:84:bd:5b:97:ab:af:24:d5:2e:c0:fc:d1:
         4d:7d:7b:af:e2:bd:3e:89:90:2d:7c:fd:4b:95:08:9b:2e:d6:
         93:f1:74:bb:bd:42:7d:08:ee:83:3a:0b:64:53:2d:2d:46:97:
         e4:ec:c2:48:37:c2:1d:66:bc:c8:98:bd:5a:a5:01:de:ba:c0:
         9f:e9:38:a5:80:9a:6a:c9:1a:6a:24:b6:71:1f:11:3b:fd:73:
         19:fc:a9:c1:2f:a4:8d:d4:33:6a:b8:ef:f6:ff:45:43:53:5f:
         2c:10:48:e1:c4:bd:d3:49:27:06:78:ae:b1:9b:e0:d2:aa:54:
         a6:e3:91:ec:64:9e:33:c2:93:b7:07:84:2e:84:c2:b1:95:fb:
         02:4e:05:30:33:66:88:c6:cf:ef:a5:cc:3e:d6:4c:b6:e1:33:
         81:1b:b8:b4:3c:76:c6:08:c6:9a:3b:8e:01:2c:77:8a:bb:33:
         15:03:2b:09:2d:b9:cf:a6:bc:87:43:8b:0e:16:e5:a3:9e:28:
         17:a6:ca:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUD0e0q6eLKEwNkfJdVt7jHWR6DO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdFRjZFMTQ5M0VBQTlDMkQzNjQ3QkVFQTgyREZGODQ3
MDJEMjFDODAeFw0yMzEyMTExNzE3MDdaFw0yNDEyMDkxNzIyMDdaMDMxMTAvBgNV
BAMTKDBGQUVBNDg0ODc1RkM1QkVEQkFCRTJGQkM0MjY0NzE5RjBCMkZCMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9TLXyepWqUNyEp+IZBG7uvscv
re2jFBD1LnC0bdX4byEHZ8uw+ONrwMAHK+Z6Rw6eU3kbjfVnTEkp0BJUZbEgGaf7
C6/CeN/1Ico5WCBFhA3hxRiH9lK+ZHzW0w25bhjNPwxV3bnWCUm6+Bbg9YSDkYdq
0CPxw8Noye01Wcyqr35Jnx/g9rBoFlqCLueCHPvlIyCe06fEHf9ijZbOC93Jh4Mw
5hWOzSJW0vzsCitcGzfSKs1HO36rXTv27nAK/awguHcqVLyM6jQlKAozlO9NI89W
63w6utcvIcPFdxqpxy1plfKx2O5pwb4cIvyHY3MmKQmgFkLHnlh5IwGQ+uXFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUD66khIdfxb7bq+L7xCZHGfCy+xYwHwYDVR0j
BBgwFoAUx+9uFJPqqcLTZHvuqC3/hHAtIcgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDVWNWRXQXZCaFdMWXpOY3lRWGdFQjExZkppdEdDYXc5eEtyeU1WWDVM
ODEvMC9DN0VGNkUxNDkzRUFBOUMyRDM2NDdCRUVBODJERkY4NDcwMkQyMUM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M3RUY2RTE0OTNFQUE5QzJE
MzY0N0JFRUE4MkRGRjg0NzAyRDIxQzguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q1VjVkV0F2QmhXTFl6TmN5UVhnRUIxMWZKaXRHQ2F3OXhLcnlNVlg1TDgxLzAv
MzQzNTJlMzEzNjMwMmUzMTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNDMxMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtoLUwDQYJKoZIhvcNAQELBQADggEBAJEnmJWl
08K5jx0ZZRTux7BiNV7dfNsHLkkQQKi4l8XzKvWYoKI29OE3k7PnZdWmMA+hktrG
1kBm4Vysj4S9W5erryTVLsD80U19e6/ivT6JkC18/UuVCJsu1pPxdLu9Qn0I7oM6
C2RTLS1Gl+Tswkg3wh1mvMiYvVqlAd66wJ/pOKWAmmrJGmoktnEfETv9cxn8qcEv
pI3UM2q47/b/RUNTXywQSOHEvdNJJwZ4rrGb4NKqVKbjkexknjPCk7cHhC6EwrGV
+wJOBTAzZojGz++lzD7WTLbhM4EbuLQ8dsYIxpo7jgEsd4q7MxUDKwktuc+mvIdD
iw4W5aOeKBemypI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:23 2024 by rpki-client on console-ams.rpki-client.org