Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa
File:                     34352e3233332e35362e302f32322d3234203d3e20323637323839.roa (raw, json)
Hash identifier:          9C1Uu2PzMzk8Ltp9wYyjP6mnUG1DbtRE5LBcrD32SzQ=
Subject key identifier:   AA:68:E3:4C:1A:23:70:65:34:4C:DB:53:9B:2A:65:98:4A:09:FA:7D
Certificate issuer:       /CN=F649306BCCA3ACC5DB62AB4CF738EBA2DAB310DF
Certificate serial:       2A64F195DAEE4C222CD200FE721B1250C9EF4CD8
Authority key identifier: F6:49:30:6B:CC:A3:AC:C5:DB:62:AB:4C:F7:38:EB:A2:DA:B3:10:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F649306BCCA3ACC5DB62AB4CF738EBA2DAB310DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa
Signing time:             Mon 27 May 2024 13:57:31 +0000
ROA not before:           Mon 27 May 2024 13:52:31 +0000
ROA not after:            Mon 26 May 2025 13:57:31 +0000
asID:                     267289
IP address blocks:        45.233.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:64:f1:95:da:ee:4c:22:2c:d2:00:fe:72:1b:12:50:c9:ef:4c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F649306BCCA3ACC5DB62AB4CF738EBA2DAB310DF
        Validity
            Not Before: May 27 13:52:31 2024 GMT
            Not After : May 26 13:57:31 2025 GMT
        Subject: CN=AA68E34C1A237065344CDB539B2A65984A09FA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:17:da:5d:c2:b7:ec:cf:45:66:48:9e:0f:
                    9c:1e:f3:60:20:58:b8:4f:71:14:73:ed:05:8d:d1:
                    06:3d:5d:d0:83:b1:41:d6:ea:1d:d0:e3:83:ea:c4:
                    3a:41:53:e0:c9:09:84:1b:1d:99:6e:96:2c:60:f4:
                    2d:85:08:44:f0:70:3f:9a:d7:e2:68:ae:18:cb:48:
                    65:f8:11:b5:53:a2:25:89:db:dc:82:ff:9d:24:a7:
                    77:8f:44:0b:20:c2:ca:19:96:ca:cb:3c:d9:a8:ec:
                    a6:c2:16:45:dc:ee:06:8b:14:d7:22:ff:9b:99:49:
                    9f:e9:d4:65:2d:84:81:71:2d:21:b5:e6:80:82:45:
                    61:9f:4a:ec:89:1d:d8:7b:c4:5e:ce:ec:6b:fb:8d:
                    cb:95:c4:c7:09:cd:93:8a:30:8f:a7:49:f8:7c:fd:
                    e2:aa:07:f8:fb:26:45:c4:af:62:83:1f:2d:45:a8:
                    c0:2a:c2:b9:a6:f3:c6:c1:d4:6b:74:83:67:10:14:
                    f1:dc:6c:38:dc:26:ad:fd:6b:bc:22:7b:d9:fe:03:
                    c2:50:38:90:15:24:ea:b4:60:0f:73:1e:09:48:cb:
                    8a:25:b8:6b:51:13:31:ba:d5:1a:79:b7:0a:c5:1d:
                    7b:64:3e:59:b9:d8:9f:46:a0:0b:e7:45:f7:c5:bc:
                    92:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:68:E3:4C:1A:23:70:65:34:4C:DB:53:9B:2A:65:98:4A:09:FA:7D
            X509v3 Authority Key Identifier:
                keyid:F6:49:30:6B:CC:A3:AC:C5:DB:62:AB:4C:F7:38:EB:A2:DA:B3:10:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/F649306BCCA3ACC5DB62AB4CF738EBA2DAB310DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F649306BCCA3ACC5DB62AB4CF738EBA2DAB310DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAMSWocuPcqYaidaF4fb1Agcx7zsuy9zc7PC16VSuxyR/0/34352e3233332e35362e302f32322d3234203d3e20323637323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:f8:83:92:39:da:6c:84:b6:04:61:25:43:f6:47:42:6e:2f:
         7f:67:06:5d:1d:f3:6c:44:5f:9f:3a:99:0a:b5:2a:8f:6f:90:
         d4:90:f0:2f:7c:5b:4c:bc:77:0b:39:30:6d:37:22:67:25:7a:
         28:f8:0c:29:23:d4:99:12:43:cb:1f:b1:6d:eb:0b:3b:42:ab:
         06:8d:8f:77:08:19:a5:a2:0f:2c:ae:09:60:37:c1:ab:47:d6:
         f8:25:72:69:e6:2e:c8:6d:7e:e4:92:a1:04:61:25:69:b9:6f:
         ec:19:d5:91:1f:63:ef:70:07:5f:e3:6b:48:98:96:62:c5:b2:
         14:02:34:8e:12:68:b2:14:96:93:4e:4e:65:68:51:81:63:fa:
         a4:51:f6:e1:d9:eb:a8:b8:18:bf:d3:c1:21:bf:97:cd:8b:3e:
         ad:09:58:07:16:53:36:8f:29:69:02:f5:c3:5d:b5:56:15:d5:
         ec:73:55:de:dc:60:17:e1:4b:6d:5b:6f:99:bf:fd:10:b5:a6:
         92:3e:2a:2f:c0:5d:b9:17:70:a8:86:71:e7:05:eb:85:bb:74:
         4a:ad:7a:0a:2c:47:c6:60:74:77:00:0d:d2:bd:de:ff:b5:ba:
         9a:9d:10:56:86:10:f7:da:f9:08:3e:67:47:ca:cd:24:f8:76:
         52:86:a5:78
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKmTxldruTCIs0gD+chsSUMnvTNgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY0OTMwNkJDQ0EzQUNDNURCNjJBQjRDRjczOEVCQTJE
QUIzMTBERjAeFw0yNDA1MjcxMzUyMzFaFw0yNTA1MjYxMzU3MzFaMDMxMTAvBgNV
BAMTKEFBNjhFMzRDMUEyMzcwNjUzNDRDREI1MzlCMkE2NTk4NEEwOUZBN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YBfaXcK37M9FZkieD5we82Ag
WLhPcRRz7QWN0QY9XdCDsUHW6h3Q44PqxDpBU+DJCYQbHZlulixg9C2FCETwcD+a
1+JorhjLSGX4EbVToiWJ29yC/50kp3ePRAsgwsoZlsrLPNmo7KbCFkXc7gaLFNci
/5uZSZ/p1GUthIFxLSG15oCCRWGfSuyJHdh7xF7O7Gv7jcuVxMcJzZOKMI+nSfh8
/eKqB/j7JkXEr2KDHy1FqMAqwrmm88bB1Gt0g2cQFPHcbDjcJq39a7wie9n+A8JQ
OJAVJOq0YA9zHglIy4oluGtREzG61Rp5twrFHXtkPlm52J9GoAvnRffFvJIDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqmjjTBojcGU0TNtTmyplmEoJ+n0wHwYDVR0j
BBgwFoAU9kkwa8yjrMXbYqtM9zjrotqzEN8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREFNU1dvY3VQY3FZYWlkYUY0ZmIxQWdjeDd6c3V5OXpjN1BDMTZWU3V4
eVIvMC9GNjQ5MzA2QkNDQTNBQ0M1REI2MkFCNENGNzM4RUJBMkRBQjMxMERGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y2NDkzMDZCQ0NBM0FDQzVE
QjYyQUI0Q0Y3MzhFQkEyREFCMzEwREYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RBTVNXb2N1UGNxWWFpZGFGNGZiMUFnY3g3enN1eTl6YzdQQzE2VlN1eHlSLzAv
MzQzNTJlMzIzMzMzMmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLek4MA0GCSqGSIb3DQEBCwUAA4IBAQBn+IOSOdps
hLYEYSVD9kdCbi9/ZwZdHfNsRF+fOpkKtSqPb5DUkPAvfFtMvHcLOTBtNyJnJXoo
+AwpI9SZEkPLH7Ft6ws7QqsGjY93CBmlog8srglgN8GrR9b4JXJp5i7IbX7kkqEE
YSVpuW/sGdWRH2PvcAdf42tImJZixbIUAjSOEmiyFJaTTk5laFGBY/qkUfbh2euo
uBi/08Ehv5fNiz6tCVgHFlM2jylpAvXDXbVWFdXsc1Xe3GAX4UttW2+Zv/0QtaaS
PiovwF25F3CohnHnBeuFu3RKrXoKLEfGYHR3AA3Svd7/tbqanRBWhhD32vkIPmdH
ys0k+HZShqV4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org